Edit tour

Windows Analysis Report
https://aka.ms/AAb9ysg

Overview

General Information

Sample URL:	https://aka.ms/AAb9ysg
Analysis ID:	1428787
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,13674355344551972,16030558035244465753,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/AAb9ysg" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5x	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d2b5e41e0-2876-ce7d-04eb-ed9b5556ab0e%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d2b5e41e0-2876-ce7d-04eb-ed9b5556ab0e%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=vvy75smw70si	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=f961bah4qz68	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=3a6l25apk2qh	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49755 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:50174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50291 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50294 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50299 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50300 version: TLS 1.2

Source:	Binary string: this.ha="rtl"===document.documentElement.dir;(this.O=a.soy.ui)\|\|_.ba(Error("Ae"));this.na=null!=this.O;this.H=this.Va("K9a4Re").Zb();this.Ub=a.service.Ub;const b=new _.Imb(()=>{WDb(this);const e=Math.abs(this.H.scrollLeft),f=this.H.scrollWidth-this.H.offsetWidth;this.Wa(_.oDb,e);this.Wa(_.pDb,Math.abs(f-e))},500,this);_.$e(this,b);const c=_.hn(_.jn(this,_.UQ).Nb(()=>{b.H()}));a=new _.VQ(this.H);a.O(c);_.$e(this,a);const d=new _.UDb(VDb(()=>{c()}));_.TDb(d,this.oa().el());_.Ze(this,()=>{d.H.disconnect()}); source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr
Source:	Binary string: _.nDb=_.wk("McwVAe");_.oDb=_.wk("nGw9D");_.pDb=_.wk("ocQAhc"); source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49755 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.12
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152

Source: global traffic	HTTP traffic detected: GET /AAb9ysg HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /krs?id=lxDNVZKK HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect?id=lxDNVZKK HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/styles.css HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://krs.microsoft.com/redirect?id=lxDNVZKKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/GooglePlayStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=lxDNVZKKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/AppleAppStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=lxDNVZKKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/GooglePlayStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/AppleAppStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /completeRedirect/lxDNVZKK?correlationId=0eb9bac7b89eba1d42ca7d0628a379db&platformSelected=Android HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d7a2d2814-5fbb-eade-40c2-b208f1a4ddad%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK HTTP/1.1Host: play.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5x HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&_u=YEBAAEAAAAAAACgDI~&z=1595821917 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&gjid=1062576857&_gid=2128404613.1713535574&_u=YEBAAEAAAAAAACgDI~&z=1324626100 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&_u=YEBAAEAAAAAAACgDI~&z=1595821917 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /completeRedirect/lxDNVZKK?correlationId=0eb9bac7b89eba1d42ca7d0628a379db&platformSelected=iOS HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOajOHZZBN-hHGcVN016Y57cTwWF_qpyxc1mk6RBbKmxlLUWNI0wCWDpKHz9Rv1Nwz1OE7yQdwZAeixXMhts; NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /store/games HTTP/1.1Host: play.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.0.1713535576.0.0.0; OTZ=7520526_48_52_123900_48_436380
Source: global traffic	HTTP traffic detected: GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=vvy75smw70si HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOajOHZZBN-hHGcVN016Y57cTwWF_qpyxc1mk6RBbKmxlLUWNI0wCWDpKHz9Rv1Nwz1OE7yQdwZAeixXMhts; NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/apps/dev?id=6720847872553662727 HTTP/1.1Host: play.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535604.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOajABR0g7qZbFFvXxLIiuS-icYJuX6T4xVv4ULlkW1w9yiOimHyDQuaZ9wp8isGwIugD4sElugfyCfJpI2Q; NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
Source: global traffic	HTTP traffic detected: GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=f961bah4qz68 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOajABR0g7qZbFFvXxLIiuS-icYJuX6T4xVv4ULlkW1w9yiOimHyDQuaZ9wp8isGwIugD4sElugfyCfJpI2Q; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
Source: global traffic	HTTP traffic detected: GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahQjhgtqGjilS4ufRwoRKvfYBGNt9kD399GwGFmwPnaNTM7QZnKPtVvsqIG8ITSC3HfL-7686rnNg2vGfg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
Source: global traffic	HTTP traffic detected: GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/apps/category/PRODUCTIVITY HTTP/1.1Host: play.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535613.0.0.0
Source: global traffic	HTTP traffic detected: GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
Source: global traffic	HTTP traffic detected: GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=3a6l25apk2qh HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahQjhgtqGjilS4ufRwoRKvfYBGNt9kD399GwGFmwPnaNTM7QZnKPtVvsqIG8ITSC3HfL-7686rnNg2vGfg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
Source: global traffic	HTTP traffic detected: GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOajQ8yTbYmfNthCqeCUXSA62-OZxgYCryckT7TvnHeCrYgvj_ZEKKw3MoqyxiyWewig5FlXNz8xdPD8vxvg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
Source: global traffic	HTTP traffic detected: GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qW1OCeXIVPbBFRtmiUSYhzRfhwEV1CwJa5367zJjBwHktdp1l_tXG1zHWC5Xn4wJYQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Kd17zb0wMFSZ_yCf0CSUCZe5vVQOTVrnTEwz9kYDAKchgH4YiFo6Q5NlaCei92b-DnE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UnKazEvT-iNEgftYniQK4JOaQ3Bqm3rE-fWo6dRh4inWUGYpSkEgLSGYZxdv-0sfI3M=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YPvG90WiRFcg7A45HZ0bPwKe6h_I7lcfy6jMWjQYq3ryi65iCR7UQ-r7WFQDpLkSBQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WohXKjCe_QuVrxL3ksS8lODC17sMd-U4kYALcaYabasjh0mm-quhTCfc2xwuZbA9_HU=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OaJ9ioyoRept6HWOMXjGkA8IMkfh1st9JEdIOyvpemFmFNFI50frodVswWNcAgFxzg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S4wylkvt2jz16hnG9IG0pAZosbB82nWWy8P-rQkb54uH-SCVd5L2j7z7x1Vz5pZvIRc=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NntMALIH4odanPPYSqUOXsX8zy_giiK2olJiqkcxwFIOOspVrhMi9Miv6LYdRnKIg-3R=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rYYXBg1-E5-3Tesa9TW8DSEURcSNbXd1yrt4WDGTV-CA5aPGBH-h4uCpoFIV_w4za2M=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j0W5FC6v_GeR-8Z-YnXqrhR3Rw2LDLJQ6yQ6HpnzzRdSrz9Wcl3bylBnjpRnrEQzBQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Rv_Fumphjg7BH6I8_sA7PPA2R4Vyq2twJ7ijutwLd54zbDD-d_tDWk9miKA6Kp6cWCM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Kd17zb0wMFSZ_yCf0CSUCZe5vVQOTVrnTEwz9kYDAKchgH4YiFo6Q5NlaCei92b-DnE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UnKazEvT-iNEgftYniQK4JOaQ3Bqm3rE-fWo6dRh4inWUGYpSkEgLSGYZxdv-0sfI3M=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qW1OCeXIVPbBFRtmiUSYhzRfhwEV1CwJa5367zJjBwHktdp1l_tXG1zHWC5Xn4wJYQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YPvG90WiRFcg7A45HZ0bPwKe6h_I7lcfy6jMWjQYq3ryi65iCR7UQ-r7WFQDpLkSBQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WohXKjCe_QuVrxL3ksS8lODC17sMd-U4kYALcaYabasjh0mm-quhTCfc2xwuZbA9_HU=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahUPZFLW2tOAgWgNQd38O7nHUXDtmo2QnNUzY9nfF_LfZbZSMtJVBD614aBH9-1TdRRLN-nkhqP3CSdQIA; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
Source: global traffic	HTTP traffic detected: GET /xYnq3zRONE2rpRksqySiqBC8G3UvXJufCV2If7Ck8cPELE8OY1PcVbmGof8CxjXlIyY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gk-WYYED1OJNr0G28ucBPUTPric5QCLwW2q_rNcYg-XTQCbPkhcp3CqVJ-1dHiBql10=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W6pBP57UU3sGnhrVO_SWywKMb5YwKcDoQW3hBxW3L0pV4UyzS7IDbxaqD_vK6qHg4i4=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZXHmAeEubL_FFSux8ufdc3kWESm6l3Qps0cC-pt8uNWM74A4iElX7CbcQIgyXli9eQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZrNeuKthBirZN7rrXPN1JmUbaG8ICy3kZSHt-WgSnREsJzo2txzCzjIoChlevMIQEA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S4wylkvt2jz16hnG9IG0pAZosbB82nWWy8P-rQkb54uH-SCVd5L2j7z7x1Vz5pZvIRc=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OaJ9ioyoRept6HWOMXjGkA8IMkfh1st9JEdIOyvpemFmFNFI50frodVswWNcAgFxzg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NntMALIH4odanPPYSqUOXsX8zy_giiK2olJiqkcxwFIOOspVrhMi9Miv6LYdRnKIg-3R=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rYYXBg1-E5-3Tesa9TW8DSEURcSNbXd1yrt4WDGTV-CA5aPGBH-h4uCpoFIV_w4za2M=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j0W5FC6v_GeR-8Z-YnXqrhR3Rw2LDLJQ6yQ6HpnzzRdSrz9Wcl3bylBnjpRnrEQzBQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Rv_Fumphjg7BH6I8_sA7PPA2R4Vyq2twJ7ijutwLd54zbDD-d_tDWk9miKA6Kp6cWCM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p23hsdqcrm5D0cLJxdVpLWPkNeNNY5NToUhMea5rNk1CL8xF8lsKo7xVZ1piykfztZE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mhjx0LuEJrAw4rY3p9ymDfFJIh9PkyKxJAlx6lFy4FWaRFP3TyAZYFMrLuIDz6l1jqg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IbuKSWXQKCu1b4KABVBvEtr-L2MZfPyxXrL3AmkEY7CA-ffl2FkXVFmRRYdf_lEdfH8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZJFuUMqXnSgiDGoJfAXuycSmFFXpkPf_ywUswZAtbhK2MYEOg5_7CR3FYcTHulkv09s=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XOXJBp4fVtiRE1acOVPBNTcHkSkJl0ly6RTdKvmEPj7EhoR1ZNOalw7n_lGjFy_f_2o=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BdoYxc0T4Tdh6w-MHTPk9qGpoLKuYIa5x11xysND-TYlQohJgIITN6bYrlgIYYd96E4=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gk-WYYED1OJNr0G28ucBPUTPric5QCLwW2q_rNcYg-XTQCbPkhcp3CqVJ-1dHiBql10=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xYnq3zRONE2rpRksqySiqBC8G3UvXJufCV2If7Ck8cPELE8OY1PcVbmGof8CxjXlIyY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W6pBP57UU3sGnhrVO_SWywKMb5YwKcDoQW3hBxW3L0pV4UyzS7IDbxaqD_vK6qHg4i4=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZrNeuKthBirZN7rrXPN1JmUbaG8ICy3kZSHt-WgSnREsJzo2txzCzjIoChlevMIQEA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZXHmAeEubL_FFSux8ufdc3kWESm6l3Qps0cC-pt8uNWM74A4iElX7CbcQIgyXli9eQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /I3Qvi0pFixZAlWO3NuIeaoKe0tD3lAJgxkoYh7B8-i442e2Y_DVkPgl8YnbBNTDkKcQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SUFtSwDL7N33qHh-o0lRr7Gy4QPeMQwWafVAKyeIyWrl7O1gTl5E5YQ8TyExGUatUbdW=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZvOdCQjZm7PU-1Qrdn_m9ksg7RAAbXL4iW6QSCoYmkHcl4lopAjeOMYiESyXCQFfRjN5f1mRb1un=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjXkGwFtGTUp7J-chzmsBuXw50nlfEPLzblqnxyaMBHTyJKBxPsC=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DHBlQKvUNbopIS-VjQb3fUKQ_QH0Em-Q66AwG6LwD1Sach3lUvEWDb6hh8xNvKGmctU=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GCsSBgR93cedwf2weP7s6VPsBitwir9ioOO0DYjLydIjdCkfQEv0GQzK34ky96L6XMc=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p23hsdqcrm5D0cLJxdVpLWPkNeNNY5NToUhMea5rNk1CL8xF8lsKo7xVZ1piykfztZE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mhjx0LuEJrAw4rY3p9ymDfFJIh9PkyKxJAlx6lFy4FWaRFP3TyAZYFMrLuIDz6l1jqg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IbuKSWXQKCu1b4KABVBvEtr-L2MZfPyxXrL3AmkEY7CA-ffl2FkXVFmRRYdf_lEdfH8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZJFuUMqXnSgiDGoJfAXuycSmFFXpkPf_ywUswZAtbhK2MYEOg5_7CR3FYcTHulkv09s=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XOXJBp4fVtiRE1acOVPBNTcHkSkJl0ly6RTdKvmEPj7EhoR1ZNOalw7n_lGjFy_f_2o=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BdoYxc0T4Tdh6w-MHTPk9qGpoLKuYIa5x11xysND-TYlQohJgIITN6bYrlgIYYd96E4=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IDOtRhsZLSG3EFxWxmWREMPa42_SNQvl9-x4FBu5dn9aJMjpVtMx_GoNdnQwEIp_7gsV=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QJObxznpklAxDNp0OVe3kAP5ZfUouIvRDO0kPj-V3MRjoRYKwj9RVTxOwG9yrlY-bgG3=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZX8lWMl7wuPv8mi-Gtab8pzGKXm3GKa-k8z51K6XxGOGfR7auS6Xre3041LbVEMCCg=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /I3Qvi0pFixZAlWO3NuIeaoKe0tD3lAJgxkoYh7B8-i442e2Y_DVkPgl8YnbBNTDkKcQ=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SUFtSwDL7N33qHh-o0lRr7Gy4QPeMQwWafVAKyeIyWrl7O1gTl5E5YQ8TyExGUatUbdW=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZvOdCQjZm7PU-1Qrdn_m9ksg7RAAbXL4iW6QSCoYmkHcl4lopAjeOMYiESyXCQFfRjN5f1mRb1un=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjXkGwFtGTUp7J-chzmsBuXw50nlfEPLzblqnxyaMBHTyJKBxPsC=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DHBlQKvUNbopIS-VjQb3fUKQ_QH0Em-Q66AwG6LwD1Sach3lUvEWDb6hh8xNvKGmctU=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GCsSBgR93cedwf2weP7s6VPsBitwir9ioOO0DYjLydIjdCkfQEv0GQzK34ky96L6XMc=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IDOtRhsZLSG3EFxWxmWREMPa42_SNQvl9-x4FBu5dn9aJMjpVtMx_GoNdnQwEIp_7gsV=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QJObxznpklAxDNp0OVe3kAP5ZfUouIvRDO0kPj-V3MRjoRYKwj9RVTxOwG9yrlY-bgG3=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZX8lWMl7wuPv8mi-Gtab8pzGKXm3GKa-k8z51K6XxGOGfR7auS6Xre3041LbVEMCCg=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_329.2.dr	String found in binary or memory: "https://www.facebook.com/AppStore/" equals www.facebook.com (Facebook)
Source: chromecache_329.2.dr	String found in binary or memory: <p dir="false" data-test-bidi>Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.<br /><br />Here's what you'll love about Outlook for iOS:<br /><br />- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.<br /><br />- Swipe to quickly schedule, delete and archive messages.<br /><br />- Share your meeting availability with just a tap and easily find times to meet with others.<br /><br />- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.<br /><br />- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.<br /><br />- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.<br /><br />--<br /><br />Outlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.<br /><br />--<br /><br />To make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.<br /><br />Microsoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.<br /><br />Privacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839<br />Terms of Use: http://go.microsoft.com/fwlink/?LinkID=530144<br />Contract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary</p> equals www.hotmail.com (Hotmail)
Source: chromecache_329.2.dr	String found in binary or memory: <p dir="false" data-test-bidi>Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.<br /><br />Here's what you'll love about Outlook for iOS:<br /><br />- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.<br /><br />- Swipe to quickly schedule, delete and archive messages.<br /><br />- Share your meeting availability with just a tap and easily find times to meet with others.<br /><br />- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.<br /><br />- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.<br /><br />- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.<br /><br />--<br /><br />Outlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.<br /><br />--<br /><br />To make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.<br /><br />Microsoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.<br /><br />Privacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839<br />Terms of Use: http://go.microsoft.com/fwlink/?LinkID=530144<br />Contract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary</p> equals www.yahoo.com (Yahoo)
Source: chromecache_329.2.dr	String found in binary or memory: 2024 Microsoft Corporation. All rights reserved.\",\"description\":{\"standard\":\"Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.\\n\\nHere's what you'll love about Outlook for iOS:\\n\\n- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.\\n\\n- Swipe to quickly schedule, delete and archive messages.\\n\\n- Share your meeting availability with just a tap and easily find times to meet with others.\\n\\n- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.\\n\\n- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.\\n\\n- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.\\n\\n--\\n\\nOutlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.\\n\\n--\\n\\nTo make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.\\n\\nMicrosoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.\\n\\nPrivacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839\\nTerms of Use: http://go.microsoft.com/fwlink/?LinkID=530144\\nContract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary\"},\"isStandaloneWithCompanionForWatchOS\":false,\"isAppleWatchSupported\":true,\"is32bitOnly\":false,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"websiteUrl\":\"https://outlook.live.com\",\"versionHistory\":[{\"versionDisplay\":\"4.2414.0\",\"releaseNotes\":\"This update includes performance improvements and bug fixes to make Outlook better for you.\\n\\nFeel free to send us any comments or questions by going to Settings \u003e Help \u0026 Feedback equals www.hotmail.com (Hotm
Source: chromecache_329.2.dr	String found in binary or memory: 2024 Microsoft Corporation. All rights reserved.\",\"description\":{\"standard\":\"Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.\\n\\nHere's what you'll love about Outlook for iOS:\\n\\n- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.\\n\\n- Swipe to quickly schedule, delete and archive messages.\\n\\n- Share your meeting availability with just a tap and easily find times to meet with others.\\n\\n- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.\\n\\n- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.\\n\\n- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.\\n\\n--\\n\\nOutlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.\\n\\n--\\n\\nTo make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.\\n\\nMicrosoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.\\n\\nPrivacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839\\nTerms of Use: http://go.microsoft.com/fwlink/?LinkID=530144\\nContract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary\"},\"isStandaloneWithCompanionForWatchOS\":false,\"isAppleWatchSupported\":true,\"is32bitOnly\":false,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"websiteUrl\":\"https://outlook.live.com\",\"versionHistory\":[{\"versionDisplay\":\"4.2414.0\",\"releaseNotes\":\"This update includes performance improvements and bug fixes to make Outlook better for you.\\n\\nFeel free to send us any comments or questions by going to Settings \u003e Help \u0026 Feedback equals www.yahoo.com (Yahoo)
Source: chromecache_329.2.dr	String found in binary or memory: expertise, research, and best practices.\\n\\nSecurity is our top priority:\\nWhether you use myMail on a public or private Wi-Fi network, your data is always encrypted to protect all your email communications and information. myMail uses advanced security protocols and practices to ensure data integrity, security, and privacy.\\n\\nmyMail uses AdChoices. More information can be found here https://m.facebook.com/ads/ad_choices \\n\\nFollow us on social media:\\nFacebook: www.facebook.com/mymail.official\"},\"isStandaloneWithCompanionForWatchOS\":false,\"isAppleWatchSupported\":false,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"websiteUrl\":\"http://mymail.my.com\",\"versionHistory\":[{\"versionDisplay\":\"14.78.1\",\"releaseNotes\":\"We fixed bugs. Now you'll encounter even fewer of them.\",\"releaseDate\":\"2024-04-18\",\"releaseTimestamp\":\"2024-04-18T16:56:33Z\"},{\"versionDisplay\":\"14.78\",\"releaseNotes\":\"Fewer bugs means better karma. That's why we fixed some bugs in the new version.\",\"releaseDate\":\"2024-04-16\",\"releaseTimestamp\":\"2024-04-16T11:14:10Z\"},{\"versionDisplay\":\"14.77\",\"releaseNotes\":\"Some cosmetic changes before a major update.\",\"releaseDate\":\"2024-04-09\",\"releaseTimestamp\":\"2024-04-09T07:33:56Z\"},{\"versionDisplay\":\"14.76\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-04-03\",\"releaseTimestamp\":\"2024-04-03T07:21:02Z\"},{\"versionDisplay\":\"14.75.0\",\"releaseNotes\":\"We always listen to your feedback and fix the problems you report. That's just what we've done in this version.\",\"releaseDate\":\"2024-03-27\",\"releaseTimestamp\":\"2024-03-27T07:09:57Z\"},{\"versionDisplay\":\"14.74\",\"releaseNotes\":\"Fewer bugs means better karma. That's why we fixed some bugs in the new version.\",\"releaseDate\":\"2024-03-20\",\"releaseTimestamp\":\"2024-03-20T10:42:22Z\"},{\"versionDisplay\":\"14.71.0\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-02-27\",\"releaseTimestamp\":\"2024-02-27T08:03:39Z\"},{\"versionDisplay\":\"14.70\",\"releaseNotes\":\"We want to make Mail even more convenient and we never stop improving things. We believe that the new version has been a success. Update to check it out!\",\"releaseDate\":\"2024-02-21\",\"releaseTimestamp\":\"2024-02-21T09:47:59Z\"},{\"versionDisplay\":\"14.69\",\"releaseNotes\":\"Some cosmetic changes before a major update.\",\"releaseDate\":\"2024-02-14\",\"releaseTimestamp\":\"2024-02-14T07:17:02Z\"},{\"versionDisplay\":\"14.68\",\"releaseNotes\":\"We fixed bugs. Now you'll encounter even fewer of them.\",\"releaseDate\":\"2024-02-07\",\"releaseTimestamp\":\"2024-02-07T08:05:04Z\"},{\"versionDisplay\":\"14.67.0\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-01-31\",\"releaseTimestamp\":\"2024-01-31T11:10:39Z\"},{\"versionDisplay\":\"14.66.1\",\"releaseNotes\":\"A little fas
Source: chromecache_513.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_513.2.dr	String found in binary or memory: c(S[ka],E.xe)){mI("https://www.youtube.com/iframe_api");t=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Z.__ytl=u;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1;Z.__ytl.runInSiloedMode=!1})(function(u){u.vtp_triggerStartOption?n(u):ww(function(){n(u)})})}(); equals www.youtube.com (Youtube)
Source: chromecache_489.2.dr	String found in binary or memory: gf=u(["https://sandbox.google.com/tools/feedback/"]),hf=u(["https://www.google.cn/tools/feedback/"]),jf=u(["https://help.youtube.com/tools/feedback/"]),kf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),lf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),mf=u(["https://localhost.corp.google.com/inapp/"]),nf=u(["https://localhost.proxy.googlers.com/inapp/"]),of=S(Qe),pf=[S(Re),S(Se)],qf=[S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf)],rf=[S(cf),S(df)],sf= equals www.youtube.com (Youtube)
Source: chromecache_237.2.dr	String found in binary or memory: return a=n===l.CARD_DISPLAY_STYLES.appOfTheDay?_:n===l.CARD_DISPLAY_STYLES.gameOfTheDay?P:n===l.CARD_DISPLAY_STYLES.inAppPurchase?O:this.getTitleKey(e),this.i18n.t(a,{appName:r,storyTitle:i,_disableSafeString:!0})}getOGType(){return i.default.meta.og.type.story}getTwitterSite(){return this.appViewState.isMacAppStoreView?this.i18n.t("WEA.EditorialItemProductPages.Twitter.site.macOs",{_disableSafeString:!0}):super.getTwitterSite(...arguments)}getTwitterTitle(){return this.getOGTitle(...arguments)}getSchemaTags(e){const{product:t}=e.viewModel,r=E(t),[i]=r,n=(0,l.hasShelfDisplay)(i,"collectionLockup"),{lastPublishedDate:a}=t,o={"@type":"Organization",name:"Apple Inc",url:"http://www.apple.com",logo:{"@type":"ImageObject",url:"https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png"}},s=this.getOGImageTags(e).find((e=>"og:image"===e.name))\|\|{},p={"@context":"http://schema.org",name:this.getSeoTitle(e)??this.getTitle(e),description:this.getSeoDescription(e)??this.getDescription(e),image:s.content,author:o,publisher:o,headline:this.getOGTitle(e),dateModified:a,datePublished:a} equals www.twitter.com (Twitter)
Source: chromecache_297.2.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_372.2.dr	String found in binary or memory: var AJb=function(a){return _.sb(null===a?"null":void 0===a?"undefined":a)},BJb=function(a){const b=new _.An(a);return"www.youtube.com"===b.ha&&"/watch"===b.H?(a=_.Nn(b,"v"),`https://www.youtube.com/embed/${encodeURIComponent(a)}`):a},CJb=function(a,b){0===a.H.size&&a.O.addEventListener("message",d=>{if(/\.google\.com$/.test(d.origin)&&d.data){var e=a.H.get(d.data.type);e&&e.ai().forEach(f=>{f.call(d)})}});var c=a.H.get("CLOSE_DIALOG");c?c.add(b):(c=new _.uM,c.add(b),a.H.set("CLOSE_DIALOG",c))},DJb= equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: aka.ms

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: chromecache_514.2.dr, chromecache_368.2.dr, chromecache_423.2.dr	String found in binary or memory: http://127.0.0.1:$
Source: chromecache_329.2.dr	String found in binary or memory: http://aka.ms/outlookFAQ
Source: chromecache_329.2.dr	String found in binary or memory: http://box.com/static/html/terms.html
Source: chromecache_577.2.dr	String found in binary or memory: http://git.io/yBU2rg
Source: chromecache_372.2.dr	String found in binary or memory: http://itunes.apple.com/us/app/id746894884
Source: chromecache_441.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_489.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_329.2.dr	String found in binary or memory: http://mail.edison.tech
Source: chromecache_237.2.dr	String found in binary or memory: http://reportaproblem.apple.com
Source: chromecache_237.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_237.2.dr	String found in binary or memory: http://schema.org/ItemListOrderAscending
Source: chromecache_329.2.dr	String found in binary or memory: http://sparkmailapp.com
Source: chromecache_560.2.dr, chromecache_296.2.dr	String found in binary or memory: http://support.google.com/googleplay?p=report_review_computer
Source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_237.2.dr	String found in binary or memory: http://www.apple.com
Source: chromecache_329.2.dr	String found in binary or memory: http://www.apple.com/itunes/download/
Source: chromecache_329.2.dr	String found in binary or memory: http://www.appxy.com/famcalprivacy/
Source: chromecache_329.2.dr	String found in binary or memory: http://www.appxy.com/termsofuse/
Source: chromecache_329.2.dr	String found in binary or memory: http://www.box.com/static/html/privacy.html
Source: chromecache_372.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_226.2.dr, chromecache_454.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_513.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_513.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_297.2.dr, chromecache_513.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_297.2.dr, chromecache_513.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_329.2.dr	String found in binary or memory: https://aka.ms/onenote-ios-suggest
Source: chromecache_329.2.dr	String found in binary or memory: https://aka.ms/onenotefeedback
Source: chromecache_329.2.dr	String found in binary or memory: https://amp-api-edge.apps.apple.com
Source: chromecache_237.2.dr	String found in binary or memory: https://amp-api.books.apple.com/
Source: chromecache_237.2.dr	String found in binary or memory: https://amp.apple.com
Source: chromecache_605.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_237.2.dr	String found in binary or memory: https://api.books.apple.com/
Source: chromecache_596.2.dr, chromecache_556.2.dr, chromecache_593.2.dr, chromecache_247.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_489.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/#organization
Source: chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com/$
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/assets/images/knowledge-graph/apps.png
Source: chromecache_329.2.dr, chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com/story/id1538632801
Source: chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com/story/id1539235847
Source: chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com/story/id1604959672
Source: chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com/us/app/apple-podcasts/id525463029
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/box-the-content-cloud/id290853822
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/box-the-content-cloud/id290853822"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/email-edison-mail/id922793622
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/email-edison-mail/id922793622"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-app-for-outlook/id1544804494
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-app-for-outlook/id1544804494"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-authenticator/id983156458
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-authenticator/id983156458"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-excel/id586683407
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-excel/id586683407"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-onedrive/id477537958
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-onedrive/id477537958"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-outlook/id951937596
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-teams/id1113153706
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-teams/id1113153706"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-word/id586447913
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-word/id586447913"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mymail-box-email-client-app/id722120997
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mymail-box-email-client-app/id722120997"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/spark-mail-ai-email-inbox/id997102246
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/spark-mail-ai-email-inbox/id997102246"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/xbox/id736179781
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/xbox/id736179781"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/zoho-mail-email-and-calendar/id909262651
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/app/zoho-mail-email-and-calendar/id909262651"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/productivity-apps/6007
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/productivity-apps/6007"
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/microsoft-corporation/id298856275
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/microsoft-corporation/id298856275"
Source: chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1436214772
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1455416618
Source: chromecache_329.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1455416618"
Source: chromecache_237.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1699686830
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_329.2.dr	String found in binary or memory: https://bit.ly/outlookprivacy
Source: chromecache_375.2.dr	String found in binary or memory: https://buy.music.apple.com/account/v1/affiliation/association
Source: chromecache_375.2.dr	String found in binary or memory: https://buy.tv.apple.com/account/v1/affiliation/association
Source: chromecache_297.2.dr, chromecache_513.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_643.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_643.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_577.2.dr	String found in binary or memory: https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.
Source: chromecache_643.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_643.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_643.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_489.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_489.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_489.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_489.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_489.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_489.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_489.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_375.2.dr	String found in binary or memory: https://git.io/fjule
Source: chromecache_375.2.dr	String found in binary or memory: https://git.io/fxCyr
Source: chromecache_513.2.dr	String found in binary or memory: https://google.com
Source: chromecache_513.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_489.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_489.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/48/c2/f4/48c2f437-f725-e227-59ad-8c075e2907f
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/8d/fb/f3/8dfbf394-7c38-8a86-f229-b5ca04f249f
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/1c/2b/7c/1c2b7cc6-e029-9bf9-f26f-4b5f533ee2f
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/6e/e2/e7/6ee2e7db-bf98-0d30-7adf-15aa80debeb
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/09/15/89/091589bc-f33b-2d71-9e77-2ef3729cd95
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features3/v4/96/18/e7/9618e7f9-abcd-beae-1698-c48249a8ae5e/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features3/v4/ea/2c/e5/ea2ce53d-eef4-088e-15b2-5280d1be13ca/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features41/v4/ed/2c/45/ed2c45db-7f5c-07c6-0f33-315f176121a0
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple115/v4/48/03/51/480351fd-99d5-2df1-d1df-257bafdacfbb/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/3d/bf/7e/3dbf7e7f-4e8f-00b6-6456-46557866aa1d/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/1a/29/0e/1a290eaf-858a-5646-dc8d-2ac276722ed2/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/20/3e/23/203e235f-857d-c3ab-3fac-52f72f3a697a/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/69/fe/e5/69fee50b-8d9d-9ec5-3ecb-0ecb34d97416/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/95/17/3c/95173cba-ae5f-bf73-f31b-f2206e46539a/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/18/6b/12/186b1254-9830-57a1-bb41-5223f073693a/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/1b/fd/01/1bfd0112-a692-6e6c-f88a-ce38d4e063ec/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/27/7d/0c/277d0c2d-59bc-5040-a1d1-48ebbae136d6/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/33/28/4a/33284a8b-0258-3452-9409-1e255c92896f/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/54/3d/89/543d8963-7d8d-f64c-0617-6df5c8a5f720/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/7a/09/1b/7a091bfa-5da0-10d1-28d2-e1d0b4ec2dd7/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/cb/8b/b3/cb8bb389-7741-a407-c29a-78c34ff23b06/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/d4/0b/b1/d40bb1d1-2715-3a91-6c04-0dc68dcb3212/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/e2/25/71/e22571b0-9d40-748e-6788-1534d37bf075/
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/3c/b3/45/3cb34544-49ad-f5a7-cf96-bae0e5b
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e33
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/c1/9d/53/c19d53e6-c08b-ec12-9dec-ab6dd48
Source: chromecache_329.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/d0/99/00/d099001a-0f42-0414-f655-2b81dff
Source: chromecache_329.2.dr	String found in binary or memory: https://is2-ssl.mzstatic.com
Source: chromecache_329.2.dr	String found in binary or memory: https://is3-ssl.mzstatic.com
Source: chromecache_329.2.dr	String found in binary or memory: https://is4-ssl.mzstatic.com
Source: chromecache_329.2.dr	String found in binary or memory: https://is5-ssl.mzstatic.com
Source: chromecache_237.2.dr	String found in binary or memory: https://itunes.apple.com$
Source: chromecache_237.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewFeature?id=1476734846&mt=11
Source: chromecache_237.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?cc=
Source: chromecache_237.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?genreId=38&mt=11
Source: chromecache_375.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStoreServices.woa/wa/processRedirectUrl
Source: chromecache_329.2.dr	String found in binary or memory: https://itunes.apple.com/subscribe?app=music
Source: chromecache_329.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6007
Source: chromecache_329.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6007"
Source: chromecache_329.2.dr	String found in binary or memory: https://js-cdn.music.apple.com
Source: chromecache_631.2.dr, chromecache_283.2.dr, chromecache_291.2.dr, chromecache_250.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt
Source: chromecache_329.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1713369093418
Source: chromecache_329.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components/
Source: chromecache_329.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.j
Source: chromecache_329.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.js?t=
Source: chromecache_375.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/media-api
Source: chromecache_489.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_329.2.dr	String found in binary or memory: https://locate.apple.com/
Source: chromecache_560.2.dr, chromecache_296.2.dr, chromecache_305.2.dr, chromecache_647.2.dr	String found in binary or memory: https://maps.google.com/?q=
Source: chromecache_573.2.dr, chromecache_601.2.dr, chromecache_622.2.dr, chromecache_235.2.dr	String found in binary or memory: https://myaccount.google.com/termsofservice
Source: chromecache_329.2.dr	String found in binary or memory: https://outlook.live.com
Source: chromecache_513.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_297.2.dr, chromecache_513.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_514.2.dr, chromecache_368.2.dr, chromecache_423.2.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_514.2.dr, chromecache_368.2.dr, chromecache_423.2.dr	String found in binary or memory: https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_641.2.dr	String found in binary or memory: https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZb
Source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_372.2.dr, chromecache_514.2.dr, chromecache_262.2.dr, chromecache_423.2.dr	String found in binary or memory: https://play.google.com/
Source: chromecache_560.2.dr, chromecache_517.2.dr, chromecache_296.2.dr, chromecache_647.2.dr	String found in binary or memory: https://play.google.com/about/comment-posting-policy?hl=
Source: chromecache_372.2.dr, chromecache_249.2.dr, chromecache_657.2.dr	String found in binary or memory: https://play.google.com/about/play-terms/index.html
Source: chromecache_647.2.dr	String found in binary or memory: https://play.google.com/about/play-terms/index.html;target;_blank;class;cOP9Jc
Source: chromecache_249.2.dr, chromecache_657.2.dr, chromecache_305.2.dr, chromecache_647.2.dr	String found in binary or memory: https://play.google.com/googleplaygames
Source: chromecache_647.2.dr	String found in binary or memory: https://play.google.com/googleplaygames;target;_blank;class;cOP9Jc
Source: chromecache_249.2.dr, chromecache_657.2.dr, chromecache_517.2.dr, chromecache_647.2.dr	String found in binary or memory: https://play.google.com/intl/all_
Source: chromecache_379.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_237.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$
Source: chromecache_372.2.dr, chromecache_249.2.dr, chromecache_657.2.dr, chromecache_573.2.dr, chromecache_517.2.dr, chromecache_601.2.dr, chromecache_622.2.dr, chromecache_235.2.dr, chromecache_647.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_372.2.dr, chromecache_249.2.dr, chromecache_657.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_647.2.dr	String found in binary or memory: https://policies.google.com/terms;target;_blank;class;cOP9Jc
Source: chromecache_441.2.dr	String found in binary or memory: https://preactjs.com
Source: chromecache_329.2.dr	String found in binary or memory: https://products.office.com/mobile/office
Source: chromecache_577.2.dr	String found in binary or memory: https://raw.github.com/emberjs/ember.js/master/LICENSE
Source: chromecache_643.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_489.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_489.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_329.2.dr, chromecache_305.2.dr, chromecache_647.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_305.2.dr, chromecache_647.2.dr	String found in binary or memory: https://schema.org/InStock
Source: chromecache_249.2.dr, chromecache_657.2.dr, chromecache_560.2.dr, chromecache_517.2.dr, chromecache_555.2.dr, chromecache_320.2.dr, chromecache_647.2.dr	String found in binary or memory: https://schema.org/Offer
Source: chromecache_305.2.dr, chromecache_647.2.dr	String found in binary or memory: https://schema.org/PreOrder
Source: chromecache_489.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_329.2.dr	String found in binary or memory: https://sparkmailapp.com/legal/privacy-app
Source: chromecache_329.2.dr	String found in binary or memory: https://sparkmailapp.com/legal/terms
Source: chromecache_519.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/
Source: chromecache_546.2.dr, chromecache_461.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/1712908896069/operatordeferred_bin_base.js
Source: chromecache_489.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_297.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_297.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_605.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_329.2.dr	String found in binary or memory: https://support.apple.com
Source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_489.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_514.2.dr, chromecache_368.2.dr, chromecache_423.2.dr	String found in binary or memory: https://support.google.com/googleplay/?p=remote_install_error
Source: chromecache_249.2.dr, chromecache_305.2.dr, chromecache_647.2.dr	String found in binary or memory: https://support.google.com/googleplay/?p=report_content
Source: chromecache_249.2.dr, chromecache_657.2.dr, chromecache_560.2.dr, chromecache_517.2.dr, chromecache_296.2.dr, chromecache_647.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/10066529
Source: chromecache_368.2.dr, chromecache_423.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/6014972
Source: chromecache_517.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/6209531
Source: chromecache_305.2.dr, chromecache_647.2.dr	String found in binary or memory: https://support.google.com/googleplay?p=eligibility_requirements
Source: chromecache_489.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_489.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_643.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_643.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_643.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_643.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_329.2.dr	String found in binary or memory: https://support.xbox.com/help/subscriptions-billing/manage-subscriptions/microsoft-software-license-
Source: chromecache_605.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_297.2.dr, chromecache_513.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_489.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_514.2.dr, chromecache_368.2.dr, chromecache_423.2.dr	String found in binary or memory: https://tokenized.play.google.com
Source: chromecache_237.2.dr	String found in binary or memory: https://tv.apple.com/search?q=
Source: chromecache_329.2.dr	String found in binary or memory: https://twitter.com/AppStore
Source: chromecache_596.2.dr, chromecache_556.2.dr, chromecache_593.2.dr, chromecache_247.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_329.2.dr	String found in binary or memory: https://www.OneNote.com
Source: chromecache_329.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.apple.com
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/#organization
Source: chromecache_237.2.dr	String found in binary or memory: https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/airpods/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/apple-arcade/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.apple.com/apple-books/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.apple.com/apple-vision-pro/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/choose-country-region/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/entertainment/
Source: chromecache_329.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.apple.com/ios/app-store/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/ipad/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/iphone/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/itunes/download/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/legal/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/legal/internet-services/terms/site.html
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/legal/privacy/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/mac/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/macos/mojave-preview/#mac-app-store
Source: chromecache_237.2.dr	String found in binary or memory: https://www.apple.com/osx/apps/app-store/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/retail/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/sitemap/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/tv-home/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/buy_accessories
Source: chromecache_329.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/help/sales_refunds
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/store
Source: chromecache_329.2.dr	String found in binary or memory: https://www.apple.com/watch/
Source: chromecache_329.2.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_329.2.dr	String found in binary or memory: https://www.dropbox.com/privacy
Source: chromecache_329.2.dr	String found in binary or memory: https://www.dropbox.com/terms
Source: chromecache_329.2.dr	String found in binary or memory: https://www.dropboxforum.com
Source: chromecache_447.2.dr	String found in binary or memory: https://www.ftc.go.kr/selectBizOvrCommPop.do?apvPermMgtNo=2022%EA%B3%B5%EC%A0%950001
Source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_605.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_605.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_605.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_489.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_513.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_605.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_596.2.dr, chromecache_556.2.dr, chromecache_593.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$
Source: chromecache_406.2.dr, chromecache_643.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_489.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_489.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_513.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_297.2.dr, chromecache_513.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_513.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_605.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_643.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_372.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/battlestar_signed_up-275d9e87.png
Source: chromecache_368.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/reviews_not_found.png
Source: chromecache_372.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/sign_up.png
Source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_517.2.dr	String found in binary or memory: https://www.gstatic.com/play/kids/header/kids_tab_header_v3.json
Source: chromecache_483.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Source: chromecache_489.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_489.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_297.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_329.2.dr	String found in binary or memory: https://www.wikidata.org/wiki/Q368215
Source: chromecache_372.2.dr	String found in binary or memory: https://www.youtube.com/embed/$
Source: chromecache_513.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_386.2.dr	String found in binary or memory: https://xp-qa.apple.com
Source: chromecache_329.2.dr, chromecache_386.2.dr	String found in binary or memory: https://xp.apple.com
Source: chromecache_637.2.dr	String found in binary or memory: https://xp.apple.com/config/1/report
Source: chromecache_375.2.dr	String found in binary or memory: https://xp.apple.com/register
Source: chromecache_396.2.dr, chromecache_637.2.dr, chromecache_434.2.dr, chromecache_363.2.dr, chromecache_405.2.dr	String found in binary or memory: https://xp.apple.com/report

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.5:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.5:50174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50291 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50294 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50299 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.127.243:443 -> 192.168.2.5:50300 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@25/730@48/17

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,13674355344551972,16030558035244465753,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/AAb9ysg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,13674355344551972,16030558035244465753,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: this.ha="rtl"===document.documentElement.dir;(this.O=a.soy.ui)\|\|_.ba(Error("Ae"));this.na=null!=this.O;this.H=this.Va("K9a4Re").Zb();this.Ub=a.service.Ub;const b=new _.Imb(()=>{WDb(this);const e=Math.abs(this.H.scrollLeft),f=this.H.scrollWidth-this.H.offsetWidth;this.Wa(_.oDb,e);this.Wa(_.pDb,Math.abs(f-e))},500,this);_.$e(this,b);const c=_.hn(_.jn(this,_.UQ).Nb(()=>{b.H()}));a=new _.VQ(this.H);a.O(c);_.$e(this,a);const d=new _.UDb(VDb(()=>{c()}));_.TDb(d,this.oa().el());_.Ze(this,()=>{d.H.disconnect()}); source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr
Source:	Binary string: _.nDb=_.wk("McwVAe");_.oDb=_.wk("nGw9D");_.pDb=_.wk("ocQAhc"); source: chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
play.google.com	64.233.185.113	true	false	high
i.ytimg.com	108.177.122.119	true	false	high
play-lh.googleusercontent.com	64.233.185.119	true	false	high
www.google.com	173.194.219.147	true	false	high
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	unknown
aka.ms	23.54.202.151	true	false	high
stats.g.doubleclick.net	74.125.136.154	true	false	high
is2-ssl.mzstatic.com	unknown	unknown	false	high
c.s-microsoft.com	unknown	unknown	false	high
is3-ssl.mzstatic.com	unknown	unknown	false	high
is1-ssl.mzstatic.com	unknown	unknown	false	high
is5-ssl.mzstatic.com	unknown	unknown	false	high
is4-ssl.mzstatic.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw	false	high
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=-3106867419827377814&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=158010&rt=j	false	high
https://play-lh.googleusercontent.com/BdoYxc0T4Tdh6w-MHTPk9qGpoLKuYIa5x11xysND-TYlQohJgIITN6bYrlgIYYd96E4=w526-h296-rw	false	high
https://i.ytimg.com/vi/C4uzmiVn8Og/hqdefault.jpg	false	high
https://play-lh.googleusercontent.com/z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw	false	high
https://play-lh.googleusercontent.com/pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw	false	high
https://play.google.com/_/PlayStoreUi/data/batchexecute?rpcids=CLXjtf%2CA6yuRe%2CWs7gDc%2Cag2B9c%2CoCPfdb&source-path=%2Fstore%2Fapps%2Fdetails&f.sid=-8008743000736633856&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=358021&rt=c	false	high
https://play-lh.googleusercontent.com/pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw	false	high
about:blank	false	low
https://play-lh.googleusercontent.com/6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw	false	high
https://play-lh.googleusercontent.com/u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw	false	high
https://play-lh.googleusercontent.com/U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw	false	high
https://play-lh.googleusercontent.com/b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw	false	high
https://play-lh.googleusercontent.com/vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw	false	high
https://play-lh.googleusercontent.com/NntMALIH4odanPPYSqUOXsX8zy_giiK2olJiqkcxwFIOOspVrhMi9Miv6LYdRnKIg-3R=s64-rw	false	high
https://play-lh.googleusercontent.com/WohXKjCe_QuVrxL3ksS8lODC17sMd-U4kYALcaYabasjh0mm-quhTCfc2xwuZbA9_HU=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw	false	high
https://play-lh.googleusercontent.com/GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	false	high
https://play-lh.googleusercontent.com/csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw	false	high
https://play-lh.googleusercontent.com/Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw	false	high
https://play-lh.googleusercontent.com/7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw	false	high
https://play-lh.googleusercontent.com/NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw	false	high
https://play.google.com/_/PlayStoreUi/data/batchexecute?rpcids=qnKhOb&source-path=%2Fstore%2Fapps%2Fdev&f.sid=-3106867419827377814&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58010&rt=c	false	high
https://play-lh.googleusercontent.com/D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw	false	high
https://play.google.com/store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d7a2d2814-5fbb-eade-40c2-b208f1a4ddad%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=3a6l25apk2qh	false	high
https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw	false	high
https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=f961bah4qz68	false	high
https://play-lh.googleusercontent.com/I3Qvi0pFixZAlWO3NuIeaoKe0tD3lAJgxkoYh7B8-i442e2Y_DVkPgl8YnbBNTDkKcQ=w526-h296-rw	false	high
https://play.google.com/_/PlayStoreUi/data/batchexecute?rpcids=w3QCWb&source-path=%2Fstore%2Fapps%2Fcategory%2FPRODUCTIVITY&f.sid=-8008743000736633856&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58021&rt=c	false	high
https://play-lh.googleusercontent.com/W6pBP57UU3sGnhrVO_SWywKMb5YwKcDoQW3hBxW3L0pV4UyzS7IDbxaqD_vK6qHg4i4=w526-h296-rw	false	high
https://play.google.com/store/apps/dev?id=6720847872553662727	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=vvy75smw70si	false	high
https://play-lh.googleusercontent.com/B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw	false	high
https://play-lh.googleusercontent.com/6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw	false	high
https://play-lh.googleusercontent.com/gk-WYYED1OJNr0G28ucBPUTPric5QCLwW2q_rNcYg-XTQCbPkhcp3CqVJ-1dHiBql10=s64-rw	false	high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&gjid=1062576857&_gid=2128404613.1713535574&_u=YEBAAEAAAAAAACgDI~&z=1324626100	false	high
https://play-lh.googleusercontent.com/vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw	false	high
https://play-lh.googleusercontent.com/rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw	false	high
https://play-lh.googleusercontent.com/9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw	false	high
https://play-lh.googleusercontent.com/ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw	false	high
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=3039460499094154015&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=57976&rt=j	false	high
https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw	false	high
https://play-lh.googleusercontent.com/1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw	false	high
https://play-lh.googleusercontent.com/keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw	false	high
https://play-lh.googleusercontent.com/xYnq3zRONE2rpRksqySiqBC8G3UvXJufCV2If7Ck8cPELE8OY1PcVbmGof8CxjXlIyY=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw	false	high
https://play-lh.googleusercontent.com/DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_297.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_489.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4	chromecache_329.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_643.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_489.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/20/3e/23/203e235f-857d-c3ab-3fac-52f72f3a697a/	chromecache_329.2.dr	false		high
https://support.google.com	chromecache_572.2.dr, chromecache_227.2.dr, chromecache_560.2.dr, chromecache_379.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_489.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_489.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_605.2.dr	false		high
https://www.OneNote.com	chromecache_329.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/48/c2/f4/48c2f437-f725-e227-59ad-8c075e2907f	chromecache_329.2.dr	false		high
https://aka.ms/onenote-ios-suggest	chromecache_329.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_643.2.dr	false		high
https://policies.google.com/terms;target;_blank;class;cOP9Jc	chromecache_647.2.dr	false		high
https://www.dropbox.com/privacy	chromecache_329.2.dr	false		high
http://www.appxy.com/famcalprivacy/	chromecache_329.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_489.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_605.2.dr	false		high
https://support.google.com/googleplay/?p=report_content	chromecache_249.2.dr, chromecache_305.2.dr, chromecache_647.2.dr	false		high
http://mail.edison.tech	chromecache_329.2.dr	false		high
https://support.google.com/recaptcha	chromecache_643.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_489.2.dr	false		high
https://git.io/fjule	chromecache_375.2.dr	false		unknown
https://www.dropbox.com	chromecache_329.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_489.2.dr	false		high
http://box.com/static/html/terms.html	chromecache_329.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/8d/fb/f3/8dfbf394-7c38-8a86-f229-b5ca04f249f	chromecache_329.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_596.2.dr, chromecache_556.2.dr, chromecache_593.2.dr, chromecache_247.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_489.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/95/17/3c/95173cba-ae5f-bf73-f31b-f2206e46539a/	chromecache_329.2.dr	false		high
https://schema.org	chromecache_329.2.dr, chromecache_305.2.dr, chromecache_647.2.dr	false		high
https://support.xbox.com/help/subscriptions-billing/manage-subscriptions/microsoft-software-license-	chromecache_329.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_489.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_643.2.dr	false		high
https://is5-ssl.mzstatic.com	chromecache_329.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_489.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_489.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_489.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/54/3d/89/543d8963-7d8d-f64c-0617-6df5c8a5f720/	chromecache_329.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_489.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_297.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/3d/bf/7e/3dbf7e7f-4e8f-00b6-6456-46557866aa1d/	chromecache_329.2.dr	false		high
https://policies.google.com/privacy	chromecache_372.2.dr, chromecache_249.2.dr, chromecache_657.2.dr, chromecache_573.2.dr, chromecache_517.2.dr, chromecache_601.2.dr, chromecache_622.2.dr, chromecache_235.2.dr, chromecache_647.2.dr	false		high
https://bit.ly/outlookprivacy	chromecache_329.2.dr	false		high
https://www.ftc.go.kr/selectBizOvrCommPop.do?apvPermMgtNo=2022%EA%B3%B5%EC%A0%950001	chromecache_447.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e33	chromecache_329.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.125.136.104	unknown	United States	15169	GOOGLEUS	false
142.250.105.155	unknown	United States	15169	GOOGLEUS	false
23.54.202.151	aka.ms	United States	16625	AKAMAI-ASUS	false
64.233.177.119	unknown	United States	15169	GOOGLEUS	false
64.233.185.113	play.google.com	United States	15169	GOOGLEUS	false
108.177.122.119	i.ytimg.com	United States	15169	GOOGLEUS	false
64.233.185.119	play-lh.googleusercontent.com	United States	15169	GOOGLEUS	false
172.253.124.119	unknown	United States	15169	GOOGLEUS	false
173.194.219.147	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
173.194.219.119	unknown	United States	15169	GOOGLEUS	false
74.125.136.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5
192.168.2.10

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428787
Start date and time:	2024-04-19 16:04:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aka.ms/AAb9ysg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@25/730@48/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://krs.microsoft.com/completeRedirect/lxDNVZKK?correlationId=0eb9bac7b89eba1d42ca7d0628a379db&platformSelected=Android Browse: https://krs.microsoft.com/completeRedirect/lxDNVZKK?correlationId=0eb9bac7b89eba1d42ca7d0628a379db&platformSelected=iOS Browse: https://play.google.com/store/games Browse: https://play.google.com/store/apps/dev?id=6720847872553662727 Browse: https://play.google.com/store/apps/category/PRODUCTIVITY

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 172.217.215.101, 172.217.215.138, 172.217.215.100, 172.217.215.113, 172.217.215.139, 172.217.215.102, 142.250.9.84, 142.250.9.94, 34.104.35.123, 23.54.201.219, 184.31.62.39, 52.165.165.26, 192.229.211.108, 20.242.39.171, 74.125.136.94, 108.177.122.94, 172.253.124.94, 142.251.15.94, 173.194.219.101, 173.194.219.100, 173.194.219.138, 173.194.219.102, 173.194.219.113, 173.194.219.139, 142.250.105.97, 172.253.124.113, 172.253.124.102, 172.253.124.139, 172.253.124.138, 172.253.124.100, 172.253.124.101, 142.250.9.95, 64.233.176.95, 64.233.177.95, 173.194.219.95, 74.125.136.95, 74.125.138.95, 172.217.215.95, 142.251.15.95, 64.233.185.95, 142.250.105.95, 172.253.124.95, 108.177.122.95, 40.127.169.103, 173.194.219.94, 184.31.52.29, 96.7.224.72, 96.7.224.59, 23.207.48.206, 23.79.51.34, 23.201.214.36, 23.216.72.196, 23.61.218.120, 199.232.214.172, 64.233.177.94, 23.47.204.82, 23.47.204.50, 23.47.204.45, 23.47.204.60, 23.47.204.54, 23.47.204.72, 23.47.204.44, 23.
Excluded domains from analysis (whitelisted): xp.itunes-apple.com.akadns.net, ssl.gstatic.com, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, e17437.dsct.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, itunes.apple.com.edgekey.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, fs.microsoft.com, content-autofill.googleapis.com, krs.microsoft.com, e6858.dscx.akamaiedge.net, amp-api-edge-cdn-lb.itunes-apple.com.akadns.net, c-s.cms.ms.akadns.net, itunes-cdn.itunes-apple.com.akadns.net, edgedl.me.gvt1.com, www.apple.com.edgekey.net, a1437.dscq.akamai.net, c.s-microsoft.com-c.edgekey.net, clients.l.google.com, www.apple.com.edgekey.net.globalredir.akadns.net, js-cdn.music.apple.com, amp-api-edge.apps.apple.com, www.apple.com, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.googletagmanager.com, xp.apple.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, a
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://aka.ms/AAb9ysg

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:05:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9769729973879566
Encrypted:	false
SSDEEP:	48:8od9Tlt8HbidAKZdA19ehwiZUklqehQy+3:8Kvc/y
MD5:	82732620231C0BA82C0E6AEA1CF56621
SHA1:	E301A3F9A2D97FE9CFCD54D5DF021A9C19D7A99C
SHA-256:	8F9B2145410ED1F2A7E3E475D662537E7148A1AA7FAFDB700AB9DA91A250C3EB
SHA-512:	19779B8A3695A999F0E3AD7BDDEA1B051A87E17057010641A114CD40F1C353B9C7F1E3ADC42E08C1E8640A956A6C663A07A962964D5343E34703EBA14E3BBF1A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:05:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9909717561074305
Encrypted:	false
SSDEEP:	48:8Ud9Tlt8HbidAKZdA1weh/iZUkAQkqehvy+2:8Gvu9QWy
MD5:	23671E3BB17E1D22674E7683FCDC87E5
SHA1:	C757E4347153DFACA0ACC8EDE10B34BF24EDA1E7
SHA-256:	DD5A57F9951B1DF5B60F5FC495FB2C238466378A0000E297DECB04F12577CBBE
SHA-512:	78A8891F03282B2A16569D4E68825BC58B14BAA80C401CB16CEF4CF6EC144E40AA27DF2C04633ABD623DD4D6DFECE15F16B59D6A25A10E1626C871E29CB144D5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003051614441991
Encrypted:	false
SSDEEP:	48:8x2d9TltsHbidAKZdA14tseh7sFiZUkmgqeh7sdy+BX:8x8vmnLy
MD5:	98664C7A4E4FF4C3DAAC1711D074ADEF
SHA1:	362C6F13284F3B7F79E87137A0A07327D549BE23
SHA-256:	76DA6429C3E3FE6ED63C98C3C6DD8C62BE720F5975C67062DCA00EC251E55618
SHA-512:	4E3566EBA3F22889DF3488CFA3A69F4F521E5FCC5208AA0B768019CB6C700620946CAC6D5D99FE818CC4679B9BC86DF3326CAAC26D470B41B218A208F344E589
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:05:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9891685153452303
Encrypted:	false
SSDEEP:	48:8Ed9Tlt8HbidAKZdA1vehDiZUkwqehjy+R:82v1Vy
MD5:	10914481E1EAE66C300FABA94CA03054
SHA1:	5C63950D9A8BC20AFC5DDD3B151A5F343CCC5D11
SHA-256:	1FAA2676C9FE341DD684D9C46D5D219463621847EA91CBB254365E543DB5ADA7
SHA-512:	623303A81915430775EF15528E9F9577930AB1238ED462428AC16996058FF8F63B4ABFE811BD2173B1F8510D7D812E8A99CAF38B2614BD218FC987AF9E1817B4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....#..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:05:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.980035936792331
Encrypted:	false
SSDEEP:	48:8Rd9Tlt8HbidAKZdA1hehBiZUk1W1qehJy+C:8xvl9py
MD5:	5CEDDCC5DD846B6AAA2DFE3CAE83CFE1
SHA1:	76998776712AE00746640164B1536881D0B07A2C
SHA-256:	0B800415471DD58F1E99FCF28DC166B7A87D383A74C9E0D474A98D57B02A736B
SHA-512:	D2B3E42FCCF3D7417C36F320157AE3B6FB9AE6B0185F21B19827881384953BB2828E1A71D87FF5AF421C7090C6CD7EA2D5E4E9718A25EEB11513FA2F54D12F17
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....].b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:05:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.98961530144571
Encrypted:	false
SSDEEP:	48:8qd9Tlt8HbidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbLy+yT+:8Av5T/TbxWOvTbLy7T
MD5:	86A7CAEE488B8D138AF3D7D31B83E6BC
SHA1:	23BB207D21A8680CFC3F14BFE1941A4E34FFDD1C
SHA-256:	7F089B0F9848D76C9C4D9B1FA15BFD4D1C22831085654D290071588B5B224696
SHA-512:	3763BDA41FCB5AD8E60D8F2B170D8D33269809EDC40E37408C96A1AC7FB2FE43127DD4A22290CDC793E7B76631BA0E83FB0CA5F118904132151FFC717274A28D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....k...b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	downloaded
Size (bytes):	7626
Entropy (8bit):	5.215559608926212
Encrypted:	false
SSDEEP:	192:OtQ0m8mBOZgS9tn0Ll9829FAeHlVPrMNW:OtFuSD4829FAeHzPAW
MD5:	33AF753815E0763128B33C38F393AF19
SHA1:	FD81C07EDD497B91F91629687D2AB6976F287E17
SHA-256:	A7A8465112A5F495E5C95139568A59BF35B3116624A5861B71472070520D699E
SHA-512:	D5981A0D80035A3E0B8EFBE12B90C5E82A53F8C2CBC100001D344DC645B07A76DB3B75D863A5BB733F54B9E13B4C0A515B63041F50DCFC9AC750C092C436DBF5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.26.d8fd25d7ba389f9fe03e.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[26],{71026:function(e,t,n){n.r(t),n.d(t,{environment:function(){return a},eventRecorder:function(){return F},immediateEventRecorder:function(){return q},logger:function(){return D},network:function(){return E},setEventQueuePostIntervalEnabled:function(){return N}}).var s=n(76588),r=n(24178),u=n(32722),o=r.SC.attachDelegate,a={setDelegate:function(e){return o(this,e)},globalScope:function(){return window}},i={AJAX:"ajax",AJAX_SYNCHRONOUS:"ajaxSynchronous",IMAGE:"image",BEACON:"beacon"},v=r.vc.metricsDisabledOrDenylistedEvent,c=r.vc.removeDenylistedFields,l={},p=["dsId","consumerId"].function f(e,t,n){var s=null.return n&&!v.call(u.Z,n.eventType,t)&&(c.call(u.Z,n,t),m(t,n),e.apply(null,Array.prototype.slice.call(arguments,1)),s=n),s}function d(e,t){l[e]=l[e]\|\|{},l[e]=t}function Q(){l={}}function m(e,t){l[e]=l[e]\|\|{},l[e].anonymous&&p.forEach((function(e){delete t[e]}))}var y=r.SC.attachDel

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	189446
Entropy (8bit):	7.988359190242352
Encrypted:	false
SSDEEP:	3072:4V2AdqOB5zIXm9CGsdgOfiZ+mSG7lkEcDlPaj3H+lzhnWRy29tMV15gaYSbE7u:xAdqYCmzs6Ofi4TGR2JPaj3eznd2nMVZ
MD5:	387547FD54C693C114FF72576C5971CE
SHA1:	A0FF8E64FD3E61DD1142EBA06F969221ABAB3039
SHA-256:	D89318D9C1653A9A475CB99CFC1CFC2E2D334D391A4DE62896C7A077BF55B60D
SHA-512:	B71A3F754321E695273B51295E8CAD5ECDCD96D239E9C143ACC43D13E056D5221FAC082DD13B7B3E1B570404EE055C97A6247B94E0BD51494945E2BC4051EA45
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.MH..6l.......?X....O.$%^%)..y(.......R.....9....G..DN....'N,9..X.h.u#m.HQ~.8I..y..q.X.gNr[.J..3.....$zK"YV...@..V,.d....).G..k.<2O.9.9..$.N.!X&7DI"1.9.dV;.Nx.-HM.e...ms..3.....N.<..F&.>J$..8$1..`K.=~B.u.}....(.....#..d..-..M... ....b..m...-I..B.}w.....q.]\|5A..<......-.M^0J{..........}.H..+..[....r...;)g+.....I.c..'v,..-..Dv...M.m....K..v[.N..K.~..$....&.dy;.,.-.os.A..u%...l.i.DY...a....8.#..l+.-Ak...-.cT..../I\|...,1......'...,&...c.+....}Y.A......g.R,@w%..m..X...-........+v.dKt...G8iA...x..7...q...<...I.\|.r.@..{....Q`..W.dI.,..@I.,Ivr-...lY...o....(0.,Z.?..k..hO.o&..pC...Y..................K.mK.$...[.gf5......9..y\|>.b(.b8...8........'I.....Zji.QZ.=._.....u..>K....RHw!...m.vc.V....N."DSS2.`f._..U.4S0i.....m.I..C..P...t....e...M.4QP.$....Y.C.FFD...$.b+.j..a...!.fl0.IFD..\d,yEh. .I.Z..M..x4..I.B.@k4...$.I..jc.H2.Eq..a.K..iB.#c#.b##.......P..TTE.l..!9...d.D.M\|U.1.6..21...:.i.r..$.V.....6KD.bbaDl0.,Ye. .A"...eY..

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1880
Entropy (8bit):	7.8878381210189445
Encrypted:	false
SSDEEP:	48:NoW9rslz80QWxB7T8SjWr9slcrQUJKv/61H:NzrslIWx5TRmAiqQH
MD5:	41DB2402073D34E7C539CDFBB7290875
SHA1:	BC2B13CBDB0D33959F4F4A8B109DAD914280DD53
SHA-256:	CA4D719D9BF9FD875E4993E15D21D645303A93A032EB7CE738035ED880E29B8D
SHA-512:	AE7A13D618D884DDB2EDABEF76ACB029A529A8F92BFBDCE384B4CC26A7637B9F0A861A97019BD812B0C02359B6D762C71AA9509760DFED0787FC679603F09BF2
Malicious:	false
Reputation:	low
Preview:	RIFFP...WEBPVP8LD.../?...M(j.H.;....'...O..lMB.....Y',XE...+:._.p..>....m..^...v....m...5NJ.._d)...%W.G.]....<.,...c..."...C..?C.S.=X\|^.m[W.m.:'W.m_.6>...V_....'.....L.L......T.Ll..N..H.....{.L"<...c..J..)..~U.3...k..f...............03+mU.L..8.....s-.z`..O?......RF...Vj3.\.....z.....Z..).......jy..V........#t%.s....:....>....F...yJ..........T........c.......<..dJ5..4t?..3..g8{S_]....8z..O..9l...(i..B.h...a....U....Y.E.=..@H...J-...LV)...%#....PU.s...U[..!.[L..l...5..F.+=..C...x........A.,..'...-.n....'5)....c...Qf.,..V.b..4...h..%.....n96.JB.....&..r{..M..I..J......V...,.._Dy.....)....c...:.......!.`.\.."=H..9Jx.G~.&>L.6.\.."c~....;6.(..~Bz._....#.pp..sw....2,H."A/R.8V.......&.....wa....{xC.e.;....tp......bON..3{x.}}.5.....XdbD\...b.I....N9).../.j.>...A.k...z... ;..+........KwX.........j.......I...h.`3QS..Cw0...2.OH..;`.$G..9IyQ....@...:2..DC#.86..#^...Fz5.z..U.Rl.W..#......."....n+..B.&........AM{.....k...z...O.@..k.?.....4

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	870
Entropy (8bit):	7.668561411611923
Encrypted:	false
SSDEEP:	12:61sFkct9I6HmEcbkItek+dW4wpMsb21T5Ivw6YQT8ti15LadIYBrIs62NzgaW3+:YsFhlHm9EvdW9L8iEti7LgIYD6MzgJO
MD5:	30EE1F61136CB2FBDA7FE3BC5B2E9A7F
SHA1:	25578E8B132C97EA88CBE6DA83AC46672E720861
SHA-256:	61D232D57F5EA6B6E89416D11F27DDD25950F5F20820D1F258D2D5FF63A76967
SHA-512:	1AAD0121C2B8C5FA3A6783170092ADF42D522797007CFA9229E9744E1A729C1964BC1F5FC4DDD5CD373DBD83AFF83D3082A909AF3FE50CCCDCFEA632C303B772
Malicious:	false
Reputation:	low
Preview:	RIFF^...WEBPVP8LR.../?.../. .$E.;.o.=0.L?.p.H.".........t.I.".......a.]..&+......#T._...I$....)JLH..j.h. @.3"T.#C.s....H../ "".F....C.)"J.Fi".j.mT-".....(..j.jO?._..6"""p... A@~..q.?..~.%.H.6...P&.lg.6.CYl.R.......V.......O...xy...6.=<\|. ..;.82A.A.OBB..._(~V.%.:.. T..!.!,.8a[..j.&.......2.!1..0........d...^l.5b'.mk^w^3/._.../.....~.....4..B.t*`zS...[m.6.....n3..\Kk...hEk.....v..hKk.oK.v..lOk.s.....Ag.U..N..M..=...T....@.....^.pz.N.Nk.}..c...5...#..S.=m..L....h~..g.......N..p.C..........B..[...[.._......j. V....8>!(g.zM.....3..@.#...D1>..h>"..PW.@..M..1.[0))..R.9..LJJ..8JH.....A..G8r.....^.Y....!U...@.....5B..p..K.(... ..Qsz..$......\.Z..~...+>]d....R.T...........JH.>)..5. @....O..W..y..exa$;?...8.je..&...e.&.F.........Q...5B.t..E:@..GrKK...N.:..c...(sn.@...bS.S%...(<...........?.%..\X.......v......_.f.B..k...lg`..v..3.gC@.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	31756
Entropy (8bit):	7.956502283816247
Encrypted:	false
SSDEEP:	768:St2kT5NDIf0gcLIpQIP+DYzwVTCAxC62NxBcGFVUKOtLDvE:St2kT5N0f0gcLIt+DWwVTxQ62NxBnFZh
MD5:	2BF44080957E5D7552E6E4F36DD55652
SHA1:	F413AF4B336B19710BD76168CD2D1F39BE0A653E
SHA-256:	8621574F773A70374D42FADE3865AD3AFA33D31C2256A9935DE61FA1EFF65F9D
SHA-512:	B47201404E19FE2A314DAD8788ED6D2E28EE79B50BFF1D0DD805356A969D4B2B7902BE73822881627698A3B8FCBFEBE733358172C23A8F225A642E1764952857
Malicious:	false
Reputation:	low
Preview:	RIFF.\|..WEBPVP8L.{../..I.M8.$5lr..@ ..,.i!...PU..U.O......VV../l.SV...\r....-+..........t._.I_...z...l`..V2..c.XF..n1]7..NG...G.....P.O..6.....xw.J...t.U.k.0..--{...s......6l..p..".}.n.rZ.@..-8..\k.F"6..v+....j..~.A.U?...o.}?.n\|..x.x....V}N..U^..p.~...B.j.q#..E..._]U...O..#D...d+..ZUy...x......f'..arX.......l.mNY.9..K..@.......O...^.$.c..".,.I\.pa.7\|..X.c.d..-7.6l..2...n5..^Z.NM.BE7...t.Y.y...R..]..E.M..mkz.]8c..u......W#...[.n.z5.RI.vv....uF...1X..~..........[YY....(.T...\]Vi....R.Vf..[Xyi...RRU.R.6..j.rZ.Z...!iY....K.UH...PYIiiU.TYNU..G......l......;.;.j^Z....0.) zl.v..37..+VL..c.......x...s.ad8.@..nn^........}E./....o.=.G?c.1.:.@..Y7..'..=...x....O{.../+..=`-....6.Y.:.@. 1...L.K.=.1.a.)....{d...+.u.....f...y._,u..i.f&...=..7.3..f.......`.i.@.N.......@.\..h....K.N......1....r....{.......Y^...0.........,..NX.N.i..m.C....#Lh..Hc=\.z.).........4...!...M......"D...R........l.9KK..I.]q..^...S......B#qO..C.1.P.vLbR...9...B.......$.v.......D.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8272
Entropy (8bit):	7.968389434121724
Encrypted:	false
SSDEEP:	192:Fz1znpvVcplikFyTtbpKc1lUmBXZSB2J4l4VAral/dHFR+s2kA:Fzb2plpyThp/1lXB8B2alOWabHFRUN
MD5:	7CEC757DD771EF4AF3FDA19C67C9E8CC
SHA1:	180FB2C1DE0DEF7B4290D74F42093433A9AD75C3
SHA-256:	B0206923AF36B8ACE9A72520F0DE806FCC6083C80F9B5E7DD295B8359B98733A
SHA-512:	A58735725FCB35726BADBDB30579ECA91AEFE42E0367C9DB56F3F397A66E1B7E48A56DBF25A52A47209FDF46F3783C067681106CF68325578BA20D1754871D24
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/rYYXBg1-E5-3Tesa9TW8DSEURcSNbXd1yrt4WDGTV-CA5aPGBH-h4uCpoFIV_w4za2M=w526-h296-rw
Preview:	RIFFH ..WEBPVP8L< ../..I....m......... ...Hc....W.....qw..N.w...m.U...w....;.n....-..9.>.....,...<H-..%,...2BX.=J...HJ...O.,d.r..6..<G...m[^.....[...[....0..[....}...mc.....I.,.6u.\.....u..r...$...Ib^Eo.T...s.-.m.R....K..;........e..Uu.E....#.;....Zj...8.p.Z"....&.....:.:h.tww.....lI.M[.>k.X.m....m{....m..3..........<.L.B.u..d.-.]..3....`.Hx.-.(.LTM`7O.$..1wW..b....n.W<+'.zS;A.>.R.Pp....Pn.F..sJ.(.V..)T.v.@.g5.....#W5..1WU15...X.).......'Wo.......1..:......%y.wLi..0..v9.9...DDF...gU...K.B..Rd".n].lNym...P.y2.'y....6.WOi...!.(:....WK...V..Tu.l.2h.''~._u...%....j..4%TO....... .....U..P.e,8..}^X.;.&lO.>sOm..M.G.D..f.q\.<^<u1....}..,..?.va......S.+c.....`...6.~.F..a.#..\R[t".H....2.Wu....r....3.Y{.h....X..]?e._t}<.[......^^.......u........a...Jd0...-.B.~.....w..cX......G[.L..k..5.Q..C........2M>.'..Rj.....'rUs.pj.7.I<.........w..&.D.......t..<......J.d...,g......Lu....GBiy.aq^^...q.k..Q....v.7.._w.(8.x\.lPh.......W....D....6.#.._H.............W....

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1124
Entropy (8bit):	7.797221913617723
Encrypted:	false
SSDEEP:	24:+qzu5YFxsottexNW/Xa3Ay+kevJYGAH81LqlgMGfsK:+qq5YF5eOwHeBYGKOCGfsK
MD5:	3D3C755E05C91266B192156B9402E6D8
SHA1:	89538A9431507569B65BE39F6ABC87A712D0049F
SHA-256:	B628CAFC5F0E7317F05A81EE4B86D157F285CEB0A470FEAEF9D9F711F7742FF2
SHA-512:	3E8A750CB86AD1C1A617BEBD2CCE83D56B1BFCBA6BEFCE3888BC6BCF9A646CF4C6838931FC6E5D666C8F20034504A395A1A53A7074EBDFF990E6D4E677AEE895
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw
Preview:	RIFF\...WEBPVP8 P........@.@.>a(.E."....@....b.., f..'....._N...U.%.'.../.o.O....;........y9x.\|..7......}....k.3.....?.?...........G.7..._b?.."....'...;..+..rz.7.<Nut.'6.......b.i$.fGr.E.._._...zW&.+f@...(..;.n.i.E...]...s.Z..........;Y..5.}..Eo.d%..D.0.g.T...h..-......\|yn0./..{k...T.zP.S.(...`.w)..:...u..p3l?.4.of.L..%....}S.j.j..x..2.......V.J....a..5.?.~....).....<.....\. D..@...xl..?.&....3.l<.M...5...R.uf.#..a...}../@.g.......".i.7;...%.L.'.....Y\.O.0i=..W.4s....S.Ou;5l..Jv$_....B.#.....=~...G.....). \|[.....p~.PR..;q.......r\......cy.K....Z.O,...@..YRRWC*...c.F.i?D.....5.....S:!.....1..1.....d.I/.K...x!..j..\|)A..E.....gT........N).a..+N:..P-M....d:+1X8h\.K.......@..8G.e<.-TW%..`.0..D.........../.X !=k).x.....[....a...[.,^..zx."D...W.....S.w.3.....T......y...V'.`.._......V..[.G..........g.z.r.7...c...Z..3.~.......j5m..9......s..\|.aN.Q-.>...C.E...3...........9..v.\1^/.....{...&g.}...j.%....S..+.Z...}....$c.%.$...HD.s0\./8..Ry.4\|..J

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	244
Entropy (8bit):	7.153897685834863
Encrypted:	false
SSDEEP:	6:c3Zulvhb4/Ep0/bXorL+jrXTvx2GCTn0LpIaoyl:c3Ql94sp0/jorUXTZ2GS09Iaoyl
MD5:	9DEA3CBD9E0F9B455FDE32DCA965B41F
SHA1:	8049A160E77BF9FDD2446113611BB8C99D1E5A53
SHA-256:	3A1344E63287114EAD7F90BE694B7FC95370BF7B215D89BE93A54F39C15011CB
SHA-512:	E559F6BC3C44DC6E793EC98832926FAEB3D2D34811041868244CA89DF67DFAEB899689723C0DDAB5A58063EB4E42539614BEBBA23E09A8697E863F20416DB594
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../....5...Fm4.W#...0D.]....J...r..l.2...6.mU....5.C.(.....'vi...R...Fm.t.......\.._..Y.....c; .........\| ....pk..b....`..........p..../.72<.........AQ.........Y..@.ErE.....d..]:..KG.^.@L.S..g..z..^.g.zg..\.JE..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9108
Entropy (8bit):	7.949328366075731
Encrypted:	false
SSDEEP:	192:tB9/jljn53/VOxAspx9xKFbpmof9Gz/bSOsq7r2ogCj:tBhZVVOxtpKb7ceOzO8
MD5:	9A062526BB5E6BF5306613F900DBF363
SHA1:	DBBEDEC1CF0BA32AA843507B779E0E35E3C65E85
SHA-256:	732BC48C537FFB075AA1A628FA19A1E2E137690D6C3350C1C301059809963C3F
SHA-512:	DFDC7BF76F735226D2E8122ABF1F5373A12C5F991D55C8466C2B6EB0A2D84A8F0C770B13E7C34D9CB0EA894C6B0BE6EF8B2C8CBEF606C3D5BC7621CFB295023E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw
Preview:	RIFF.#..WEBPVP8L.#../..?.M8.$.Q"o....[..@.#.?..N:.N......ZR..C..LdWm..C.sW...'....[.....:.U&3Se.&.2.......KkC....e. .. ./...I."Yn.u.K..$`.y.8.$......_.....3.).$GR.G..bN...{....F......'."...y..2W2....".7.u.H...w.".E..{k.[...X..\|.T...#...m...Xc}"RJt.....D)...R.\|..$6..$.0...}.B..>0...h.i..[....,:I.e..x...-..R&q..].#G72.t.3=....Q.M.8.E...b....E...xJ.....9.W..H..@...y.. .D.H.....-S}H..<w.>.H."....ya;p!.FO.....RD....xa...X.x..=@....R....g....k/.... ..u......o0l.6....k.....1..u..;..8..-R.bgG...e.r..;-.F......?.."=.:.c.+....P....%).....2.f...Ov....H.m[..lR.Z.].].].]1&.%^....9.....o..l.i...H.....S..B[...?B.R,..."I.........Z..+..$)R.../...T.m.n..}:!^.....o[...q.83a\:.efffffffffffff...aN.3.......'..q....R.._.]r9ZWbt.\...U..V.k.Vm+c.#..w...d@vD.IPvw.z...m.Z'...I.....g......fn.`.,.-....q.9..p.F..."l8.k........?..G...8..x...N...q..#............1L..........B.}f...C..C...Z............A..x....8..a.\..K..ts8V....T].j.P..sU.......T.....kp@...'.2/..U

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	962
Entropy (8bit):	7.684392242336812
Encrypted:	false
SSDEEP:	24:B9nVLbvxwOWgIeHCQsr3JGvGG64BdQfSBZeKYLRkdFQ:7TwCHJsrZq6EQ6BZeK0ObQ
MD5:	3610D7EF95052EE46DDC80B178A5F028
SHA1:	3704EBF55FC94BC7019EC8B184F05C24517B5E3B
SHA-256:	C5E8A690ED36408782988C0B1A5CFAC135A247A5C3D21E46029D93492592A7BE
SHA-512:	227A1449C06E5EAECF4AA62C69BF4E26AE6DAA2569EEE684359253DCDDFE2DBF368F26A454B030BAAFD9534FED0EAA92AF95A6FF02D2625F38FCD8D6B15BBE2C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8Lq.../?...w.1.l.J..?.....p.Y,.H.$9...Br .......H.")......g...[7GR.........K!.j5..........@"Q.$...D.(l@.D....R.r..)...BT.A.\...B.!....B.F..._!.B.Z,....P...E..wl.8\|.PG..+5q.n....:.s...y..D..7.h...Fc.1.C..7...w}.Ov.!.._..?n.R.%..3#...!..MT..!......_/..1w#j...W[R.....esG....ul9j.-.a.Q3...n.c.Y\|..2....._..E..e......6.q..."SQQ/>..].F......S.........w......n.....M3M..{...O@.B....j....Vv.n.f..V...uTcF....!.3..ShG`u.....6.h.5.\|h.-..h.%+.h..X..@.......p..;z.0.. .......7w....9kv3+.^4m..4q...v .u..q.;f..&. .y...4\|.....2\|.`.4..5p:...__..D.....Ep...5....c.@...\|}H. ..@......P ....I.."1.^.%>..9C.......b......tU.x$KN:/.......prW..8.%..-.$._2.K....x(./......;\.2E=..(U@....y....\..%./.g._..p.Uy'...y....L..H)../....\|.$'..\-7...O#.J..p%.w..k.8....k....e...L.?...f....n...k.....(....^..(4.,#3...ed..y.I.22S.&..;.1/..Z....y5........fQ..bl.sZ.U....EXIF"...II*.......1...............Picasa..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9371
Entropy (8bit):	6.775324714137017
Encrypted:	false
SSDEEP:	192:aSkVHhQQSk+tvHzKRlZfR/bwJ6b3nvIQe:aRVBaTTKRN0KIP
MD5:	96E7DA23073D7FFEB2B90FCEF2570B2C
SHA1:	6AEFAC48244653FE982489338E70C5FB0D900FC2
SHA-256:	89514515CA490C1E66E3298D91D74EAF1F760C0D4B21E4E9F18FDAF3996554F3
SHA-512:	D1D82FB43FDADD9F8A3F55AD7E7D8FBAA0B7EBB82B0742B8440121EB272E3D68E7A67A163AA095BD6DD961286B61A130DCE130FA7C308E79639A2D6DD9E6A718
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/images/GooglePlayStoreBadge.png
Preview:	.PNG........IHDR...4..........n. ....zTXtRaw profile type exif..x.mP..C!..w.........t..`.l{.'.x".\|...6.....MZ....P.8;tr.4y.)C...t]..pT....e.qa.E-..#~D.'.... :.....#.#.O.0P.Vn......w..4.xo...mzG.w.............u..B+Sc.J.3..9-..1.YO.+J~....iCCPICC profile..x.}.=H.@.._[KU*.F.q.P.."...E.P...:.\..M....G.....b...YW.WA...quqRt.....Z.xp.w..w.....T.'...e..q1._.C..........'3.Yx..{..z..Y.....J.d.O$.1..7.g7-..>...B\|N<i..........g.F6=O,..........x.8.....s.+..8..:k..0\.V2\.9....D."d.QA....j..H.~..?..S..U.#..jP!9~.?..Y..r..q .b...@h.h5l...['@....:.Z...$..."G..6pq...=.r..y.%Cr..M......7.[....... K]-.....D...=.....g.....~r.v......viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceE

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5770)
Category:	downloaded
Size (bytes):	797444
Entropy (8bit):	5.614406611994234
Encrypted:	false
SSDEEP:	24576:/LFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmt:/LFI80BM4gxA3svhhuRrBiFpAv6DbgWT
MD5:	03C0C8C6DEDC445C681608AA4E8FB04B
SHA1:	C54A3193A1EBF09C921F48EEAD75C412CA4B1226
SHA-256:	0420D35BF00799E7F4D3531175BAFCC855A74E0E10D911F27A8585FDD8389ECE
SHA-512:	AC0FBA464F8360AFF7ED4B543D1893BBB2C83139CA97F76BF3DBE81169AC9C8DDB950C1E15A0EADB355BCD5322679989653001BA9B03A2C0EEFBFB4227BAEB63
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,wW2D8b,vrGZEc,fPcQoe,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	13388
Entropy (8bit):	7.985174540557442
Encrypted:	false
SSDEEP:	384:w6RfuXN6ip0Qjdd/1StIWw9NKoG7MErzOIGB2Lx:wDN6iSQxdwtIWQDG7MEeR29
MD5:	418DE379E4609B0E8F7074A51BEEF6C3
SHA1:	97B93C7F5F40CC0906967488BD0E53595C73715C
SHA-256:	15005030242937DD784BB19074BDABEDD98A38C78DC7606F8AD90868C4E4A6FA
SHA-512:	33C9B93C1DCE225AF744D81938D37CF46FDB3244D8ED30F6906C129583BC26A279621EA407182C4C828C8CBD6399D1DA8C03F2FB396EF8A03EC7826A9A9ABC8E
Malicious:	false
Reputation:	low
Preview:	RIFFD4..WEBPVP8 84......(.(.>E .D..!....(.D..p...W......1V...t...@y.~...u..g........d.._.=.~......M.....w......U...._...?....._.z.:..5...k.._...?........~......o._..._..I...~............e.....7...(...'......./....V............?./..P_L.U...o.o._.s.y.P.......?.?..w.......K..........\|.......^:?L...+......._............o...?....c.....O.?....'...?................../.....=u~....L....YK\|........`..:0%....m.E....o...ZNP.......7.R.FP....>..1.....F.u`.........@c.JK......z......x..n.. Zj.M.\|.-iV...p%.5......,_.(....r..;.N.%/.R..Y.Nw.kK6...L........?..6.L....H.......V.......{....3m.)b.B.hz....q...7.~...^...r.H....$...%....#7.,.`.Z....k4.Y.\b%.8..t..l.-k.>T.}..m....f^L.OO5..:^.<...Kz!...+..K...o..$.;mg#._.I8.9...`.t5....B.v.....-.8H....z..Y.7..=.. ..+w.*.....N.Ws....9.k.O2q.....p\|.K..f........}....\....tz.i.....q.\|..a.0`/Ld.v..X.. S..d...... 1"].9.....CMU.=dA'....pFV.PZ=..p.i8."+..flX;..u.`c7...\D./.7.0<...0q........W..[....O.t.....7.kj..-.Q. ..{..(..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99196, version 1.0
Category:	downloaded
Size (bytes):	99196
Entropy (8bit):	7.997868398992993
Encrypted:	true
SSDEEP:	1536:SQIJfyDgC8VN2bW1ToDcINoJjl3ox2/OSTGaaLDg39z0mRGRBLfG:lgpEW1T+Hel402bxk3ymQP+
MD5:	474D73A771E0CC31B43849CD2BAD9CC4
SHA1:	1D973B9CD90543FA43E6E74F164149278B9331FD
SHA-256:	AE98C3B1ED18478144791BFA0C71056B422287CD41F9B7D35C99063B04BE58EB
SHA-512:	257279598503AA3203ADA4A1A29CFA550F0485D3F7231E815A3734405D6BA18472D3E3F248CABDF39A774BF9B752D83218244F578D2FECA2C33711AA53888C01
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_regular.woff2
Preview:	wOF2.......\|....../0...............................&..H.`H...>...,..c.6.$..$..(.. ?meta....@. 8.t[;5..Cng....5.P........-..3.j......1.c..6@..;.......FI}..#.........a.....{0.w.. .fd.i.K.+..p.cL.b]YJ.%..+...c.HF4.ett....=...N......."F......../p,1Z...V$...)^.M..-M%..y/\|.^I......;..>..%...Jl....4.L%....<.l.,.:..u.Wy......:W.F.....}j,. V......-.U.F...8Q..Z}^t{x7......j.]-..V.]..7.).....Zqt..kD...~.......dG.U..b.V1S..8......Q...D7.]....n.9b'....="........&...OtG..R......S._.D$.1d..&...9..=.l..yQ.._J.5.{.T.6TX...\..NX.....#.tqR8L.iDuRkW..2hUa)..7.+........Y...!.........z.J.5U6..C......R..;CN....=..\...j......o...[..P.....{@.L........Y....B..?..;.f..Y...j.]...`..$.iW0=.9Yue.xH7....5F.o6.._[......K.,...-..J[.f!w...VaT.r..\..^TXq....S..G..6...n]l..TA0..0A,D1....R.\|...S?..v...!1Z.lR.......5.LF.....H=..X......`$....`0....F]..m..1...i.S.x..Vc.v?..DQ_&..(.(.......3.........K....`.....E.......n.?..5L...5P.c.( .*..EAQ.....c.F.+.l.s.3..J.k:....+...}v..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (878)
Category:	downloaded
Size (bytes):	1441
Entropy (8bit):	4.923625217494772
Encrypted:	false
SSDEEP:	24:ildT+lZadfID4P9Gpl3fBzR1SQLA2RAMRMT6XFKg/7/GpSw8G9bFw4YZn:ild2ZbI9GpvRQQ82OUugFKg/7/Gpj8Gw
MD5:	188415311B33E9DFC79C3CC6147ED47D
SHA1:	486B072C15EA89B3D39F607F92327F1A338254B0
SHA-256:	8B3DA2AC016CE7C6F38F10052C50C7958935276BD5885009716FEC7B3D8ED681
SHA-512:	DD95C297899B58507824F3A3129E060BBA8A9F7D2045526DC66DAB584D19571069D84EB2591B7FBE71A0FBA96DD1BE1A32995184D37FCA9A1F699FC71739644B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.356.4d5c8581cf04321d0a9b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[356],{84356:function(t){var o="touch".function s(t,o){this._target=t\|\|document.body,this._attr=o\|\|"data-focus-method",this._focusMethod=this._lastFocusMethod=!1,this._onKeyDown=this._onKeyDown.bind(this),this._onMouseDown=this._onMouseDown.bind(this),this._onTouchStart=this._onTouchStart.bind(this),this._onFocus=this._onFocus.bind(this),this._onBlur=this._onBlur.bind(this),this._onWindowBlur=this._onWindowBlur.bind(this),this._bindEvents()}var n=s.prototype.n._bindEvents=function(){this._target.addEventListener("keydown",this._onKeyDown,!0),this._target.addEventListener("mousedown",this._onMouseDown,!0),this._target.addEventListener("touchstart",this._onTouchStart,!0),this._target.addEventListener("focus",this._onFocus,!0),this._target.addEventListener("blur",this._onBlur,!0),window.addEventListener("blur",this._onWindowBlur)},n._onKeyDown=function(t){this._focusMethod="key"},n._onMouseD

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	8956
Entropy (8bit):	7.972053517151453
Encrypted:	false
SSDEEP:	192:UlbCKATseTe8r8oy/zF7Ntufqluv4rPoxSYlOK5cbFBOmAq:UlbCKk3rg7haylKxSAOwcbFhl
MD5:	377CF0E1FE167DE18CBDAB4B67D2E326
SHA1:	ECA8A9C29E2AE14A1DED33160286057C424ABE70
SHA-256:	24566A4C7B24A46CB1B156E593AB4C98E40791CC5E4A49A410A2AC5860509A22
SHA-512:	A86583215D6A29E00068FEFA905B94FCCF8C53F95409849D23F88EEF0DAC463D2F130684ECA77917BFC27DA1D8336FDE7C817C825B4A228BE1835DC981F8D9CF
Malicious:	false
Reputation:	low
Preview:	RIFF."..WEBPVP8 ."..P....(.(.>A .D..!.i5.(....p....C....}+....w..3...?`."..?r?C....._..a......~......{.........P.......I...............~@?......k...^.....1........./....p.R.V..v.....?.>C...../.O.<.t...D?.}..........x...]./..}A...[........(....../.?.?.}......C../........_.].......>>.j.......w......~......{..._........7.#.....................3.......bOk.G.m.G...k...vg..>.8...+.k.y...9...........\|?&........^x.."w.w...T.Y............"At..r.b.a...vr!.K.nFQK4.W,....Yc/#.c.R.....;1P.+"..>.3......'....A.......O.7...r.Ou..36,.o?IrE8.g.V......#1X.X.D....f%...O._....V..DMi...".n.L...ee...r..HW...R.....&..\|..{..U....p..,.rK..D....f....N8..n...c..v/....l.H#..mT..N..0&WG!.......~\.I.)P:.u...{#.Y.......I...#.J.2D.0..bD=`#UnZPgd..>w.?.....O.......#.t(f..Qs>[....[.L.W\..D..9-....H..W.U.%.....O9K...M..6.T*'PJ.C..9...;+5G..O.ITE%+.p....~..W..2.Z...7..F!.......s6.[<.p.`6..s.X.!...x..({.. ...L.m"..o.a..a....W..<.t.....c........E....K.P\|P.v2!GZ......S..U..N..(

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	21244
Entropy (8bit):	7.98833258384387
Encrypted:	false
SSDEEP:	384:APzfxTOmFE4w5KxW2ALrGTGa352Rbag9F4gKBo6834AqAj:gFE4xNALrGkR2g9F4gKi683rqQ
MD5:	03B1DC5DEF3A03B3B513FDD42B8F44E3
SHA1:	DA9BE9F8AA07196AB9D43BC9F86EEC8D4D2CDF03
SHA-256:	1D34D1F432B486C70B71E5ED7A74C054BF2EE85F74CE00C5C2954204C340C82C
SHA-512:	60CC6D3D5D953968BC01A503CD5E28D4D6BE32B3B55D5D1EA19F55DE9DC163CE2DE98E6836A04F3618918C7A48F8866C35B09B7704470256394A96DB3935D01B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw
Preview:	RIFF.R..WEBPVP8 .R...B.....l.>A..D.....D.(.....H..l..#......o...K.....?.Y-.6/6.s...?..?........w..j?.?.{........#..........{~....f...g.../._._-..?g...t.].............}.......?....u.......O..H.......U.....w...?..?.@?........./1?a.q..O..#.7._2.\|......K....?..E.O.....g...{..?...}.?.................,...c...q.....o..._+.....M......_......8...[.?..}....o........$ q..ZUU..n-..q7..Uj...J..\M.UZ.&...T....t.b...q7..Uj...J..FV..B..O.P..x..J.M/....CO.X.:[~Y.SHm...6...i....Q&.\|.UW........~...5.....m.f..U......f.K9.;j..f.Y`O..Mr?..O.I..^MliiFI).>...o._$..m....v...I...Fk3...-s.$.....T.v........H....O.yh......V;....sEd.F....$.vf.L..T....1.W~.[j5....Ut..:.....0....A.:iV.S.p....5..n?.x..,.Z.Y.M..P........5...{5b...:\|...$...}\|,3Q...{....n..p.....fEz...1.....h+..R.....l.{.z.@.m.z..`M...,..ay...m;N_...7...;...!&M.]......qiR......b.....$L....pr...^..s..;Q.....j.h.z..u0.PB...N..;.i..^9...5R...m..`j.<.:q.a.PdI............I........U..{..`+a../....SL.3.8..Z.:

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7790
Entropy (8bit):	7.974520079977317
Encrypted:	false
SSDEEP:	192:aMGxVR9zg0KP5Par7yq/Zv4r+ehel0Iwty6wU7GPPp84l:CRW0+ta/lghdM6N7UPp8o
MD5:	55E72B3934580C60001803FE316CDA23
SHA1:	14BDEE46669FE7B4A12557094ECA0FCCC5915D89
SHA-256:	729168129821581852178119790231C75653F81C4BFA6281D7C20E16F33BAC38
SHA-512:	D5A3BA0EA6C7694A3EED9E6CD57DD3F21796129ADC466D2E92CC24E2B6D4C36E05BDF47CBE9947C2E7045FAF2E85666F5CC02A0E862F1901D55A26883A8AE6CC
Malicious:	false
Reputation:	low
Preview:	RIFFf...WEBPVP8LZ.../..I....m.i....#b.8...tV"..rU..9XG..f~.;...Z..i.......i...!.auwwww..E....5.q..uwwwC...g.I.......f.f..J.L.....f.!....d)iSf.CN..v...}.(.H.............{.?..#IR$[.5.>3.............s_.y..Y.=........^6.m.F.6..m..j#.m.M..{:y>'{2..l.m.5}!..R...,....V..:...m.$...H..}.c.3w..}l{.......i.mZ..k.}.}....7.mW]DD.............w.6.".vj.......^.....G.....O~.=T..P..>.pO.._..b.G.fe>X<.\.=C..E.V....~2........(0^T....&.cD..8\.....T..F.BA.q)...G. 2NT. ....H#...#~:.......t..-.Lf.-..3.H...-.Yj..r.....k...~@[..G../....ZX.G.F.j......}..6.PqW..BY.I...."...um.T..~\|..m.m.@.OSTp.............MP>7z.m.f.........R.;)g4D.]0P.....r.,...A"4G..#....X)....u.B..k.:@g....E.W............z.i..Tuqn..D....MAoxB.... pL.'...fv.......#.b-W17.j..G...Ja..N..p8..........^.k...y..Z.j.m.....&..K....m.m3.+E.:.5j.wy...'.(.j.d.X.u=.....K........r.!.Y..._.0.6......"...s....8.A.n.7ugk?...w........OY\]...Z..GxN.>.7.}......+..NY..nj....\..=$l.i..."..q...^...2......KV.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3857)
Category:	downloaded
Size (bytes):	1093131
Entropy (8bit):	5.4455993131301
Encrypted:	false
SSDEEP:	12288:1zXssN8xoKol+C8OGMVi7i1QEyOb+p9hq:hhlqac9I
MD5:	600E6F5357E53E70107DB38ECCB385E2
SHA1:	3E2FEDFCA9389F5F2BA3A3CD7F7058B0F88EB6F1
SHA-256:	FFB081E6249F8964F9C42AA5BF60A20CABDB8A7CF00A11FC840D6DA52A096546
SHA-512:	17D8BF30CB438DEA7AD42B42200EE433E6733AF13821901DFDAFC1156A86885B841797C503E549FF5536DC65C5316B581BF740DD6ECFFA8CD490F1599AAE243F
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-15e080138b0af73416de20b7ca4c63c3.modern.js
Preview:	/! See /acknowledgements.txt for open-source licenses /."use strict".define("web-experience-app/app",["exports","@ember/application","@ember/debug","@amp/web-apps-featurekit","web-experience-app/resolver","ember-load-initializers","web-experience-app/config/environment","web-experience-app/utils/config","web-experience-app/utils/consts"],(function(e,t,r,i,n,a,o,l,s){function p(e,t,r){var i.return(t="symbol"==typeof(i=function(e,t){if("object"!=typeof e\|\|!e)return e.var r=e[Symbol.toPrimitive].if(void 0!==r){var i=r.call(e,t\|\|"default").if("object"!=typeof i)return i.throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(t,"string"))?i:String(i))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,"undefined"==typeof global&&"undefined"!=typeof window&&(window.global=window).class c extends t.default{constructor(...e){super(...e)

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1552
Entropy (8bit):	7.8594540212727475
Encrypted:	false
SSDEEP:	24:zjF9cfYoaifnCIxqtKYTetGYbh/wcww8o6h547DtgUBS+Z+sjTt4ctVZDEkoPWmF:fmYo3ytKYTyGOwv3h5it3Tt9SPPW0VYW
MD5:	AC47B4C1D3EDF0FF4DB738F9DB8DFD2D
SHA1:	6EDA933BBC8FF4ED73A94A5F77BA09C7C6E82E2B
SHA-256:	CAB22C287FDBF0E475222226DC89AA41E4E44BA751EF7B1DE60BBB677DDD6C78
SHA-512:	6C4CD51225B1724F17A032DCC00DB2AF2820BBEB7970C5C7DB5F2B279460B0AF257157DE7F9A676F681C6BB647D5D01C62B60F469D0F558505F64D73C655F21E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....m.0...w........1\|T..e.DD3......x......Aq.6n.i.^..m$........;.W.....w.s..M.M..........?.t..O.]..........;.......J..y..W`ff..\|..gg'p....\}..l...ye.6.....T.......$..d.z6.:.....m..m..m.m.oc G..H..9f\|...-.1.\eL.......m..m..8............3....W......(i....z..{....\|....`@.t...j.P+.....V......+.........M.g.Up`..Y......Z.F...#.....B~..\|8m?...H....!....6...H3.H4.,....1`1X.".3h........w....O..h....b....).\|]^.(....t.u....=..E7..\|a......b..(.Ad.d.3....0..n..A.......Q5.'<....Z#...<..?.q..o.$.....(..}.<.rj~..(..?...9.....w.B.a..Vt../L.......5`..2p4&/t.P...+....w;/..z..A.B.;v.+@.....C.9}..>$.&H..AY.....B..A...5x .....z...$ljLmd.....k._..~.56....}u..5.;...S.%4....AM.]...N.51..8...-.E....f'....J...a.RB..S..yxj..g..\;.W-d.g........{...M...\|_...3p.v!.~.......[c.....0.v....?*7u.W.O.0.....2.[.w...a...,..4:.../.eCW...... Ero(..:.c1...-....w...Q.......H5.p..Gj.}.^.?^.f6.WGG>...........AH...)B.A.....\?-/.e...C..:[N..9..

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2226
Entropy (8bit):	7.870795894442838
Encrypted:	false
SSDEEP:	48:2cX6HWbqDf9knZSFNHBNcw1E3D/nrCpJ01HMFaIuIpAkv0b+ZuJQ:2wO9gSFBWT/nrCpu+8wAkvo+Zum
MD5:	3BD45DA96F49C51F07255F200C9A5F2A
SHA1:	5F2651E7D417F69F7AA8D108A965BECF8ABE69D3
SHA-256:	EED9EB96DAAD84ECD65C7218FCE4C4C4501B9DF4A205CC7BEC0CE7030DFD88D1
SHA-512:	971C6BBBB557504AB46FE52E551D88AE6469A073A2FA055C2CBBB86A40DCC2DB6DDAE6E55AB10558000B8065B9BA2380B5965404353EBE4C89BB920F44672AFE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M0h$IQ..............J...@...X;z..s..m#G.....K.......5..$.I.[oi........F..h...G.&.ZK...F..:...._..).......\|(?e..l....NL.`."q}lj.}?....{V.Ym...%.....?.{z<..m...m{o.m....y..+.3.=.w.E.[....CE...^..&2vOO.{....<...I.....~.....gv...g~.m...m.Q...(..HR...(kww..-...;p...F.u...Swww...xc.8@.......a....c.....;.(5...G..Mi......&m_.m.....}.X:&..oq.......v'D.r.eP.6..k..g.k._Sg.E.k....G.^C..OP.2.....l."..dw}....Ft...>.o.I.......fU..m........S..^t&O.C..jhq..Q.6Jx.J.`..........5.../UU..T.....F.../.....PR1$..Ip".o.....a...]q.....Z..3HC"..MI.58..H.U.1D....y.t...3...]dq..E.d.Lh..........J.......%.9.cS..1..jnu&...ic\|&1.ZBj..b.V?.....BM...JLNA...R1..6>..h.5..$.. ..K..2...fb....L.A0..ic....@.p.(......@ .....i.Y.nU..t.../M.A.Zs....H.M..`.`.f...^._..e.........9....#.1..,.`.&a.O...D...,..Gk..cQ.U.H/..e.3.4D"..\.va....5...m5_Zyu'...0...2.J.p......!.-E.J...eLz..!..u.N...m.....5...fg..b..T.+$G}.....8M.#AP.....W.Yyr..k....xb[S.P5.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	7.358546821442648
Encrypted:	false
SSDEEP:	6:PZVS4Q+recdKlUVHiRQtvCoqYlbJq0AxtC0U8vAzIp9JtOOZkeWbCgfpH:D9Q+recdKlcHiRmC+bJqlAzIpTtOOZTM
MD5:	2F640AA73D5757BA0FE67B74E5D9F41E
SHA1:	A4D29ADF1BA739285BA35AFBD94D51734425429D
SHA-256:	469C936814B431210209150CA7F39A314A333269C07A5C83483D0C3EE0D772D4
SHA-512:	EB2C59AC81D5C2D8DFC90C5A06B283651225A3836A514B47E46009DBE9A9E2AB72EBC77558CD3CD4B3470844D417DE6958A7BFE1AF5BE16C2D7A2F9C314FA58D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw
Preview:	RIFFD...WEBPVP8L7.../.......m..s..c...m..[H.....X.q.\|..c[..*.m.#.Jw.E:.uro....z..m[....J..l.l.XNH...D<$A"X.k)......y..W..7T}........V.G..v4.d....%.Z....y)o.......]~.0jS/........$..\|.K......8M...=..I.q....[.9s.../.F:.j...{n..2..d.#A<.T.A.i.../..6.)..9.}. ..%.l..e_..=p.H......z.n.(^..}/.CJ..:;.G..3.q....ZG.ZF..&.b..;..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.8686931658333075
Encrypted:	false
SSDEEP:	48:V2aRqmpBIf+hVY/OTAjZOFbIPvWnEsluViRF68tU:gBfBQovWE3VM4r
MD5:	12DA10D9CC422A583E8809CAAE6171F7
SHA1:	CFA6A1A5369C69D86232267DD887F58809EA2F4B
SHA-256:	A7E96A2C96F56C0F4BD44A1EF8466C697A90D773B8B0B7612B3653BB4D205CA2
SHA-512:	0B6BE79311C3433AE242CB4CC3D818F0408DD3092BB2D1E28D8EEA6605E7D98D7CDE0980620A345BF337BCAC10F90175BF14F18E4C0FB981F79E131ED5EECB0C
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8L..../..?..=...m>.%..{..w.......j.N.le..u..xr.Z=..>....F... .....r.%.j...%....~..nG...../._M..........k.tG....3q.`.....:....i#......v...-..1.._...@..U..Jn....w9@..Sq...F..}...y.Tc.0?{...W9/.....J%7..c..+..u...1./."....A);............e.8u\yg.11...........N^)..}A..L.h...:,...c.H.Y.?.a,9_X".g....e.b..7..#}.JM...@..}..>.7...\.L..Y..,.}... b\|&[Z!Y.=..kQ~%!.9......2q9i....l..X....1]...Srak."..rr..Vg.......?.uZ.x..H.Gt.....\|.@..A."#.e.Gt.%.d.`A..5...-vY..1...@...x...-.....$...........@/l.t-...0.\..(b`..K.C.g..X..Y..1...t.......^=....q....}..]....j..\".........#...}.....E.y7t\.........dVr.d.q.w...o.......\|>.M....v..}..a^...../..um?X.Wm...c.N.f.W..V}..K....1.-TI..]p8=..b.H.5.....u.o.1f..%..\|.......b8.L.&.6. .iu....pb6s.Z'.g.{F..o.1b.e.5b8.......m#.d.g.{).{Z...e0K.t2.8..k..Q..C..<N.X... 4.z..#G.-....Z.'....`...}A...B..6h......!).. \|..w..&%.......7m.fI.v..[.7...+G...@....{?.:.S.&Pn..\|..P..E.Q].....3............nt.DX..\dA...N^.,j.[.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6842
Entropy (8bit):	7.96906227819572
Encrypted:	false
SSDEEP:	192:MjLzPB23UOO2Ikw6BsZyxwBFZJ2lSvVDc:MF231O2I2BsZyKBFHEEDc
MD5:	61AE66FDFE5C513A0E5619C9E5C91833
SHA1:	8425E423007C0CD4F5F3D4ECCF5BDB1F6AB72CB6
SHA-256:	87E46B14757FBDC8031EC5BBD0E7D65DC0B56C70FECCE186C53BFC6515D3C3C4
SHA-512:	1159C179236105701DAB66E1FC562D2B9F60A7E7078155FECB2364699EAF50898C5A2C6F254B8388A2614AA5D0BAD913F03154C2A04A6C177F7D3384DAFA1EBD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw
Preview:	RIFF....WEBPVP8 .....n...*(.(.>=..D.!..... ...w0h..e........!....;?.......O....C.'.......9....?A..}..W.?......y.n.E.?._.%>....?.....w./.~.s./..._..Z...A...[.K....r~........+...G..........[.?......b.....;.-......._......W.........6...............".u.c.o....................W.......i..pM0.......4....e'.M.v{......<8.j..LPi.Y.G..<.`H.i.o..Bl.GW"Ot.9j}H{.w+..1.%......\>s.....%gR......j.M.Z9.h..FJ+@N..A.....6o.K.yL_..c..L6.I.%-n...l..s)........!.tM0.......A._.'&}..../...ol,Al.oQt.s....76_...$.t.Z.{v.........X.N.&M^'..j./{..5L ..Q..W..2...N.,.^%...B..F...4.....\_.....&6d7..2..R.....K...... <.a..G.6..........<...(.S..O.....3.w.6...C.n.......(....C...~...TW%d...u`....\|..x...A}$Yx\|.Dx.....>5.1B..B....{~.........W.89-.Ns.f0Y....%_6.w..2\.K..9hZ...l...%S.x..8.{S.R....;.......#z.\|KR.\|.I.l.Z.....0vbr=..J..l9vn\|..,.w.&z.Nm..:.H..$b6...<.....G..NnJ^.u<...[....k.p6"..;...........H.......l...x.."(.Y.[.x.YM...7#...Q(..!.....0dy....e\.$.......]...4...y5../..>.D./.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2940
Entropy (8bit):	7.9144179696915335
Encrypted:	false
SSDEEP:	48:Kg7R8Yyn/yILvfcj06+Ic4QTniAdupEI6vy0zlVd9fl06vhfa3ka0qkW9Y2gHCtK:KkRpyn9LvfcIzT4QDdupDXqlNfl065Cy
MD5:	997EB9AF458C6DF564C09301CF9260A6
SHA1:	AD7A6F1F6A235512E4A3CCDFE677F253F699CE74
SHA-256:	F66958CF576D87CB419F45B2E9D066630099D117E44BE80558F152D9F1F4D811
SHA-512:	130EB98B02A2AAFC1C49A7FBF2ADC82D4098C0D9B50C677A659529388B2E90C6B78CFF3C6B1F0B7B909C3DCDCEAAB48B53E82E1641D38397A19120F78523F607
Malicious:	false
Reputation:	low
Preview:	RIFFt...WEBPVP8Lh.../..?..{...m#=..S........nJav..&.W3?..{L.r.y..9..k.a....\|.e^....+..m.Nm;....m.m.Fl.m.v../.m$G..u&.......(..1.....O..8a...e%q=v).H....Im..5G"..FR.S................1J......M...FV.dA..v.&.^..\|.............E.0.I.m..%s..6....;..._r#.i.o.US...9Q.yk(!Y.1$......-vTxJBl!..&......l.~1..m...c..v..O?o+..]...J..c.R2..@..@.....d.j....).....^....VzVn......//dO..o..........>F.x...D...)....a,.....x.#R....%.Q1Y.....^.D...w...k...B....v.O+...5D.d...^j....T..~........1..K.MG8bI(._r.fFM.\8Q...j!G.B.!..o..n9...m."G.h.%....]....k..r.Z.zdo...kV.i....@..p...7.%.j0...F..)Bn.Hv.i.K.....(..6o.*<`...1(.W..M._S.......:..o.........6.[......o.:~(.;..C)..\|...NU...lC...`"...2AX.......-rk.]..._.H...0.........C.t..."..,Km.1..a..8gG....H`.].....W0:...........,[Ak.a..0...)...e.2..U.........6U....d..P[&..!....u.#i..x@...Z....~..g#..?......a.......AS"..e...sV($.'`k..W...n1.......@e....6.p.....V.>.g.8.E..Xt........w..1Sfh,:r....r[...[....8C..Ft..a.La....m.%v.k..?q7#m...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	882
Entropy (8bit):	7.658141913900172
Encrypted:	false
SSDEEP:	12:HoZGB9VdmJpBD9WieID/t1x+doVca7zjv7i5oBh/CViWyF08ldhOstIVHUPh3rS3:wGfVdmJDj/fx+doqk7i2vcifhLtauDS
MD5:	D6CFDAA52D298F60B063EFA3440B0E9A
SHA1:	94089B79C966E1576FAB459EEB583AC4DB65C28E
SHA-256:	C91EDA2A2AEADCFF53A9642F39246C27CBF11FD435018C47A28073CBAB5CEB8C
SHA-512:	5F73EA48897B6BEFC19A4225333607D44B2B74687546334FB4948550873055881E2DC2129AF3346E8FFFE2F20EA668FE0169B22FF1EB6D46C7DA928233E5D8DA
Malicious:	false
Reputation:	low
Preview:	RIFFj...WEBPVP8L].../..?....$.c..\0.....@.6qp.^..M#I....{.......$.I.D.B.d..M.o..K.+$........E...D.D.B._<....P...)<...0....@.D.y,..0D......<.b....6...~..........DH3...F..%..l[R$Es..}....,...!...n................G.x...=...5..Uu.......j..._..\.f_.1....k!a.O..]+.Sozf[J.z.um%L..U..S/z.f.....0. .ZM...k9aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&P>.I..'H4K......EY...D.....x.hg}q..nl...G.w...w............CT][1?\|.z.............A.Mq9i.?/.).L...Kqn...A......c....I.k.>....M..<.q9...G~j.?.......0......E...^.E.NO#...i.z$..&h.D.....j.....a......&(..42.J.SM...b.f....Q!Q.4a.D.8j..H..MP.....4:(...K,...nz,4.......8.....+i-E.....-..V.).V...s.hp...d2.c..eg..E..ih.`..J.....Fs;W.......[.A....2......b..B.M...x4......C...t..l.=..f.w..{.}o..U.M.........8......y.uW.n....{#}..}.E....8..j.X./.Fz.....mw.{.......C..?".

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	33182
Entropy (8bit):	7.980229814891373
Encrypted:	false
SSDEEP:	384:T4HjEABUqB4qR7nUC8i3B8mI8DW15t6XU7CW7n77adukVhmhTSt+ahDCaOoYPYnx:sQiUqmgaie7tAbW777itVYhrM8YnTN
MD5:	7B21D33BBB82B09ABD66A9AC59243B23
SHA1:	CE2DC4188AB4B25A12C8BF1141E13059A4EC43CA
SHA-256:	72A95B515F81A9102D1D290331505706B769572A309A1BD847DD02E394ED1B7E
SHA-512:	3DDFEC020A604ABBF4042B4D78E4A16DEC8B2702F4BEEA407043D64698CDC0FF517CB825F36ABE276499F3BE2A5AC563E7F6CCB26EDD0C8B39D98D5E20E893D5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?......m....d......".?.c. .y...I...)..R.n.On.nJ...e...Y..Xo..O.J.w...0.M9...O..`..._d...K.Q....l'.TIRU.p. u...T..n...AzFJ..\.$.S..e4.\|.7.O.{f..$...%..........I..84%5.,nI..I=#...^....Hs(._..;C...{......\`..{f...........S?......z...3._."a.4...^/<._d......$.CS...d&#..H.J..%?S.43..........3.].B.[,.U........1p.T....5.e.)-...........w..p.x..y&.{4"g.I...H..5.=3...0.H-.$I.......=.\2DXr..i..#...i#I..Z40M(....... H..Z...w.wh..........[.yB@U...`g....%WJ..$6.9..X@...R.a..6 .Y........o/.@..BpR..&..l...BD"......J@).l6x.F.8. ...BA@(.&...."....X.NJ#.c.a...........B... ".......B6...e..(.....X..."..Jn...6.CDd.A.....6.......b..8.... "..Y.;....7..B.e..l.....E.\p.@.a...a....3EF.!.2.....V.XD....c......W@..6....pD.4.X,c.xyy\|...N..e......&.@,..."........5\|\|....!.4..>4..Z?...._.....9.Z.Z.V+...9Ic..)....9J.Vk.c...F.D..0..l........@.>=.f."".\....n...L.....2.P..;9...68............"B....".,c..Y...".....n....l0.0l......>..F....0.P..6..Ir$...=w.O

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2620
Entropy (8bit):	7.907739599114583
Encrypted:	false
SSDEEP:	48:VvjWsYJqgQQ1DZsFI3v+a83wLw+umPOFXwrl6ipckhwH1VtCWjgg8Ofslf/zouhD:gsYolQdZ8KhjPqXNtkm1VtCWjgg8QY/p
MD5:	52025B894AEFE69D60C3062A654A9BCC
SHA1:	C6CEC5F7B2DB19A21339B974108DEE6B7190CF8F
SHA-256:	E838FE70129812268D3FBFAC662E7CC766EC430823187A64459F32C10DDEEFB4
SHA-512:	94A5924201EDE700FE74BCE864D96281771722B02AD1801EDE0F9747952CC5847494595B4656DAAAFCADFF48353C6591D6C273F24D1D8FC7AF1168FE9F89835D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw
Preview:	RIFF4...WEBPVP8L(.../?.....m.9...,..?0D....f[6h4....Z.Z.;....[h,.m.......P.6.c...B....II#IR9X...u#.....".I.O.... B.@....A....P........`.....M.l'........333K.3[.........Q...U=gV..b..h.LY.LL.W.K.u...0\|"Sf....&J..6%-bV"G.d.m...m..g./..l..m.m...?X.l.6.g.{........m.nF...m'u.{v8p.I........0...7....b..)8X........#K..bj.....G}...$.@$b2Y...A...1.@....I$.N $.@A...T.b "@].....5.2Sg.x...V.....%.Z2K.XN.)..X....4Q.Q.. .5.....\|.&f..%.\|.(Q.l....."c`..b.(....].LN....(%.}...S7Y.4EQ0!.A%.3zU.LD.......Z.e..s. +..........<._g.4 .lYv.F...:.....M.....!.cy......!Dz..D!...B..^...b/D>..Oe..PmW.o./...V..m,v6...lz..$.`..1.].fM.M.h.b.c..U.L...c.S..u}..2.O.....>..\..a..X._...[D.}Z..C=.b.R.a..cx.....5..Xqj2...4\bO.O%#c.zX..8.O.B..+...fG...Y...,3E...9.y..6l.b....I...G..R.\|.{U..#.M...qvk...p...'..4....-'..<.nO..^....>..Y.:......u.&\a....8...%c h.V.#~....<.n.X......<.\~5..{1...v.D.@.U../s.m.\...k.m.s........b?.a.}.....6v..g.......-.r"..)$..........d........).

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,appdetailsview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1810
Entropy (8bit):	7.782742801601338
Encrypted:	false
SSDEEP:	24:vCHQHJSYqzcZJaiJtanUsHxDKoDab/rGhdFBfXfjbaFdAm32bBeDGiYyu+7Be7Z9:E3FwtAjwoD+Kh5fPP1sDYR+CgtFv8v
MD5:	DBE7058FAB53AAADBA3E8A64731F7200
SHA1:	CE2E430957319BD9F9F33F4014DCCA9382D0A374
SHA-256:	8FA2D4CC29157073058624A5A6BB5866DDC4C7E8731D020A904C0929ECA595BB
SHA-512:	0F8FD53E6C69F5FA65530D5ADE1B6FF2350E30588F9A216F5E7897C772D2CE4F55BC408FDC7989C9A3C1AF8C6AAAB82F1328688E390A4705FB0742F79A8115FB
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/cb/8b/b3/cb8bb389-7741-a407-c29a-78c34ff23b06/AppIcon-outlook.prod-0-0-1x_U007emarketing-0-7-0-0-85-220.png/230x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 ...../.......>.J.I."....z.....n.q0....{.......9C..?..p..N..`?l.b=......n.m.3...w....\|.Mg....kl\|..a..eG#....S..r....`.VWX..Pe...K.....&m.<.._R.......aI................O.....\....`H..w..4O}wD.....hF....K.........&....y....<..3.*B=F.4uR.gI#.p.3..f........9.......y\|.O.A.....K..I,}\|.j..Q.@.0xCwn.y..]V...IT.RP...D...'.c....j1.FR .... H{.....7t.].#ym..P?k.D50..r.2..\|..B.A........:.._-...8..TC;...\.Z....}...Y..H.....,....,"@.r.._ <3..+.....6.H-.~w\..3.7D...\|o. ...hm.[}=.....#........LD....(.6....y4.......l[.X.......s$.....&,U.x...fw.\........(.1..#.Q..E\|..7.E..:.%1.)9..+....eA=.....C..^&suv.{.C...Q.k..S.Ho..o.<A3... . B..D.E[iB.PVS2..j.T..~..@{.z;........3.@fk.Q...m6....}.m.h.8.;.......F_.x..$Q...B....'Z32.>'.P.eD......Q..1.8...4...4..>..8.J..^s..J4..Q8..............$r.c]+Igq.~..a....j..q.5.b..Z)..s.[I.\#...S..........Q"I..E{.....qG..].7.hs.....+Si...O._..'s..swa..e...."."..f.Fe.`U..^..b.I.Z..~.."7...

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1219)
Category:	downloaded
Size (bytes):	128582
Entropy (8bit):	5.698594398983365
Encrypted:	false
SSDEEP:	3072:D5JacBqhUdU/kQmkZPLrCuvZcRl3p66/xzWF:ZohUdUgk9rgHm
MD5:	3AA4EE3AF6BAC01F887726060886FE49
SHA1:	ADEDD9D5F009C80CF1FE6D6F45ECAEA38328AED5
SHA-256:	8C2DBE77EC762E60B9B01CC8FEB6A86D776583F5A4B817468528BF43F988C274
SHA-512:	A4C748D75F82BE05EE86683CC9269A358DE60C0FF3FDAEF2211BA4DF61365F2700EF07F9762ACA333E7B609968A9CB02F6A4739924CED2507A354C6370B03C34
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,tucRse"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var ypa;_.ln=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");-1===c&&(c=a.length);const d="-"===a[0]?"-":"";d&&(a=a.substring(1));return d+(0,_.Qf)("0",Math.max(0,b-c))+a};.ypa={eO:["BC","AD"],eU:["Before Christ","Anno Domini"],AU:"JFMAMJJASOND".split(""),TU:"JFMAMJJASOND".split(""),vO:"January February March April May June July August September October November December".split(" "),IO:"January February March April May June July August September October November December".split(" "),FO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),JO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),PO:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),.WU:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),HO:"Sun Mon Tue Wed Thu Fri Sat".split(" "),VU:"Sun Mon Tue Wed Thu Fri Sat".split(" "),BU:"SMTW

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9869)
Category:	downloaded
Size (bytes):	10413
Entropy (8bit):	5.257533978847801
Encrypted:	false
SSDEEP:	192:8nla2OCNzv/zCPfx1WY6Q8X4tYPNF9cxi3/lpemo+AW4mr+oaq5:8nl3OCRvbIfxkgUPRcxw/lpemoPW4mrb
MD5:	1B5686244F6C6516B3C0CB73B85DEB30
SHA1:	207E5F9CC6C80B1B84C18CDFA732A5C3CC43AE2B
SHA-256:	3A91FF301DBC45B9035E65C7CACB68C5C06105196AB82BDE6AD6970348F2D819
SHA-512:	73AC415260CAA2291E3F2A24393B226E1275A1981775E3AA4183B2ECC941872AEB3F1024756479FD56E26F3E27976607E576A835864892F547E17DA17A3B6A32
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.js?t=1713369093418
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.import{d as e,N as a,w as i,p as t,b as o}from"./p-1ec6e574.js";import{g as l}from"./p-42d04e97.js";(()=>{const o=Array.from(e.querySelectorAll("script")).find((e=>new RegExp(`/${a}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===a)),l={};return"onbeforeload"in o&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(o.getAttribute("data-resources-url")\|\|o.src,i.location.href)).href,t(l))})().then((e

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	622
Entropy (8bit):	7.360018227574988
Encrypted:	false
SSDEEP:	12:goW+rA6Sj2Ze0Yppr3DljryW50FHT11msWzPIySoDVWD5TlTta/:gobmAeX3r3DkWQ5wsm3So0T8/
MD5:	39FF7552BB2F31BEE791376CDB4B9B2B
SHA1:	0A7891E5B13762CC013F47F52A16563A52298662
SHA-256:	B208F90A1EC3DF08DC635AF32F0E2D735B2442869D7A20E67CCBD625431763EB
SHA-512:	DFFE5114FC190FBD065E3F2C8D785D7F10A6CC9C2547E591C00644954ADD878205571808C2878D50C7960DB713C780C61A8E6C1894D994E5ADB78BB14CADC13A
Malicious:	false
Reputation:	low
Preview:	RIFFf...WEBPVP8X..............VP8 .........* . .>m.F."..7.....l..2.~'..D.e.&.q(.2G........>..X.....Y..F...X/...F....:.p.@.....5'.}...9.....6...Y)......7.t..d.W..].g.[7....d....lF..>.0..7P.Sh8...k?X..7..9=......('5.tQ..~..d....y.i.#8..B?...~8.g4......;.cd.t.....Y<.....9<..6.7g.v..>.g.1.......d..-.)....Q@.?x...Y.........z.....j.e+..K.../..Zz...2_..............-.....+.1{@...D..vE.J."..T....F.3.....U5z.._.IE.l...W/.....?..D.l..V.....`..O...].}..2...<A.e......... ..E&.5....g.<...].D<....io9...EQc4..uH...i.....r...=.].5......Kp(K.'.........o..4_.....EXIF"...II.......1...............Google..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	17977
Entropy (8bit):	5.172440917667389
Encrypted:	false
SSDEEP:	384:xV1W44hioeBevmrjGRp1AFjga2dCjrI7KV0t:s44hioeBA7AFjgaU7KV0
MD5:	E62FEA2030907AF7E89AE14B53FFA550
SHA1:	7B4F41FC31DA2F829A183DFF72CDD708EA76665D
SHA-256:	F66B859A3A06C27EF58D1CC069E5BA8A9A47B3C7AEAF448EADF1F589582C360B
SHA-512:	1CDD5DCFCA7F6EFB33854F4ED6BA0D535CC0D444A78499240DAFBBCA2ABE9772E14A5D0E7A34CDE9A9716E068CE5FD6F5EB3271BC549BF17DE075F18E31661CA
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.359.1a547c0d896fa5233fdb.js
Preview:	/! For license information please see chunk.359.1a547c0d896fa5233fdb.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[359],{65359:function(t,e,n){t=n.nmd(t),function(e){"use strict".var n=function(){return(n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function r(t){var e="function"==typeof Symbol&&Symbol.iterator,n=e&&t[e],r=0.if(n)return n.call(t).if(t&&"number"==typeof t.length)return{next:function(){return t&&r>=t.length&&(t=void 0),{value:t&&t[r++],done:!t}}}.throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}function o(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0.default:return s(t,Error)}}function i(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function a(t)

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	238
Entropy (8bit):	7.045749695935627
Encrypted:	false
SSDEEP:	6:Wd1ZoKwloGmpau12N9IUPNSZjSwiNRoBKc9:A1Lbx12VPNOjSwiroB39
MD5:	E37D455FEB14AA6D50B64F3865CE5545
SHA1:	BB67EF4AB3A9EF7BE3ECB0D2B7D73AD8D0CBEB42
SHA-256:	30B1646061F9307FB17A1E2A0393EE80DB4D85BF3C05E5800526771F06B141FA
SHA-512:	57DD9B395F55C2F1CD6DDE8E3B3CBC21AA138E97A6C3E12BEDC72F5ECD3BBAB21C3FD390424CCF8B53F4EF161873E3D016F40403DD7E2A8B80CEC60C739DBA52
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....(..g.o......C.6.2.$U.fEN.,....m........1.6RO.....?.O_3g..t`...B.........<....q$.i.,....}Z._..g.m$..}.8.....+y.h.\|....@%...pd.v.G....q..8.r.i5...G..U.. .."@u.I......%.nB./+B....C_......G.v...[+..`..$.X.V...~..

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9500
Entropy (8bit):	7.974636452836951
Encrypted:	false
SSDEEP:	192:nbJLKWHt8uf4XKv+hHNyh3Wc8r0yvuBSR6wuTtJ4Pkv4ohBG:bJLK6vf4jhtO3n8JR6RTtJ4Y4n
MD5:	3385C142145C50BB60FE82FC8E32EB34
SHA1:	4CA0A235710D2750A417AD54CD15748835DF4A0C
SHA-256:	B9C5762E995382F1E8E129E0AE97BDD8DBD37E8D444E21601E1152983E82747D
SHA-512:	6F2CF1032CF359E1E18FA63FECB15040AD8587B25F8E7EBA4A7DC5044A796BB330B8692141A39C9D32603DB77B091774A38D545C5B071123911BAD5FA937B35E
Malicious:	false
Reputation:	low
Preview:	RIFF.%..WEBPVP8L.%../'.I....F..M..6p........q/..j...P9..O..3..G'..>...W........#`...0......{.....+..5.Z..5......{..y.=.9....;.!.q!L.a1.w...r.......$F.,.r._...+.UD....>K.3.m.R.+..3.\|C...9./...X..]...j..v.W4...$.........I.......3.....P...........m.m........t.Q.....v..+.u._..s...U..6j..:......2.'..v.Y1l.6.m)....b$.q........8\.'.....6.....}b...h...1i..y....v.d]:A.IX...1.MzE...3........:t.p.."..bx.{F...(..A2....\...M.....3.F.IAH...ep..[.}........ai.4v.4LH..k.GFgj.l.u.--.P\CG.M..;....@{............... ..RO......U.aJ.....tA..?jV......+.)3"..7t....K..B.a..\|........m>;..^..Y.........Y...gE..E..#.y.0h...`.w`.t..7'-p^s........ZItN.\.E.d4.C..y:J.+..6.{]Q.I.\E..B.t4.;.. w.".x..^..qqy.@I..i9.2;i.......^a../..}.mq...m2#..-M...p._....yGB].+......OG"..s.....z.k...X.l...o....5.W..2.oAj\|..$...ffU.<J.O..............O9G.@..h..../.K............{..5...<..?....d:..f#..@._C.....}..&..p.......g.}.....9.J..02E...o.....X..........$.&.<\|.3....[.../~.......E

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5880
Entropy (8bit):	7.9365576331910175
Encrypted:	false
SSDEEP:	96:p7+1iZWw3sbwxQ0X1DTNmd09eKWVCv2OFrn9i8Pa3K6sPfzKCqGT7M2j3VVATk3N:8cZbxD1/ACv2yi8P9fGCqGHTjlVAKY1C
MD5:	0411486320B9D5207FAE3AAC547CE8FD
SHA1:	39CB303F18AB006F845120EED8D840FD51ABDF20
SHA-256:	63A7B7220C070D94281F67E886ABFB277BDDBD22392D4057B8BD04F438B0AE78
SHA-512:	51E964BC037229FCD3005EC272C72CB7DD5D87C214CC2A75A4BF072EFA7122F5FFDB14331D125063012A8C6FE507D5B3FBC396EA4C70F5A80E222F6143E6AF0A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw
Preview:	RIFF....WEBPVP8X..............VP8L..../..?..Gn.H..BPH.....>.5....?......h.....%E..[f.. @@.33".hLG...Hfn.^.....Jy..$...rf...%a.$.`..>.k/......o..#.j....D......M..x.D.$!.@!K"[..W!Q.....$.J._ .H`,l..0.?....-C..]...`u./..k........`0.H........... h.1.2.7..\|..`X.0."-...~...A...?$^..... .......Z).B.ZWR.T.... .(...........9dY..5.=4.....$IV.Yw..f.oDL@.e.;....A....:..C.#h.NQ.K.c.}..Psv.r6...T."a.Y....\S........]kzm+7.D.\|..'.s..-r...`c\|+3....I...... ~.bm....f@kN...o....v......m[J63.......)..(.......m$IQ.Z....o}.h.....m.....!23...N.Sfv.R...333......V..h..n4i.J.L+......;p..g..:....z.l.uy.^.P...UmY....ww..........6@.D.jDH...\|...#I.m.Vj.{....7......i..........w.....Z.3INU..........3UF.9._..\|x@.EP.j.....\|...:.EyO..?../..lP3.9iP3..t....H..O...{.y.A.I.T....{,..b...x....x...../...._~._Y.)...U..._...W.=:)2K'_!.-......z.zCl.E......sNv.]..<..c.......tRA.J..1...66(A..w..Q..CPB.%..1..oy.kN8...$5.]q.......y.(A....E..D......S!.@.%....b)l......I..Q..9..(.#..XJPA....5..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8594
Entropy (8bit):	7.972041832412324
Encrypted:	false
SSDEEP:	192:zuNHCSZCF6C102YYaCWGBO2YAHsC5T3lfw+f5loPIU/MzBFbSta1v:Sk0C102YOW52YN+tdkIU/MzBF2Cv
MD5:	DB88717E6607B032D9690E1F2A1C8447
SHA1:	6B5CD217FB06FC4A7EC49581D2F8E3F46CA83483
SHA-256:	A702B4D7912E5E8E771907FA22E3D336906788A3094FA42EE0AF381F907612DE
SHA-512:	84194254A8B42A71EF76531E02B0D20A25F3398A9755A896C1372B3F7A151BFFC60FEC40A645934265B8397A91F911790C58004F6E6B8554E51F1C8850DAD6ED
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e338d943/36e9f782-1b90-4078-8114-f720e385d781_APP_IPHONE_65-4.jpg/230x0w.webp
Preview:	RIFF.!..WEBPVP8X..............VP8 .!...........>.H.I#"#...j.x...n.MM..h......n..~.t.x.....s...a._.'......2.........R.f.....C......{......6.w.A.O..}5....=..gh........._.>'........>w.G....z..~...?.z..W..`....>....v.....o........c..._.....}g?z....?D8@..m.0....S.=......R.7.&........U.S.b..!.Zr V..up...&-......D8@w.l@i...+HL@/.....(...3..f....5....h..Hi.R...>.B\|...'Pw.t....&.`.G.).PE....x^...g4R..-..a.(.... ...:....Ys......^7.Y.<M..n.WA.....Ft...H...$Jz...Q.K.F....\.O.s...;....!A_.%....y~.1.,2L...W..>...SM..L......]..`u.~9Sp~........+....-h/O/..u"...I..'b....ONr.R.>..F.....}.{3.)f.....SK S.0A.F~....!.P.#1=n]%re...W.j..8....G.L.@..U7..._.QG..<.~...a..u.u....I ..=@...v...3&.....n=.0....O.FU..0.J.h...q..O3b..T...6..K....8.vA..Y+x.W:-~.E.Z.be6.6\....=.....J..K.t..ET.....P9..rq.y0../....:..I.]K).#w.L...%#.......t....C.....jC..\|...h/+..>;.gh..S..^`L^..H\|...$..3.....G.J7n.G.[`..@.Wz8..h=..E'0w.=../.H.....7A.?..H.....+.+n.4.~m.[9+.9p{..0.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1670
Entropy (8bit):	7.8767527471024845
Encrypted:	false
SSDEEP:	24:ph192w/y3IssGoCogO+MaZfU9LHAPwUtxrRiEEe/i0GI9E0cApv7R:/FEIsMaVogYsRiEEYGI9EzAx9
MD5:	4261C35A4740D97B2EA62DC1E730DE55
SHA1:	220A025A6B18C577508B7374741A9A58C2240022
SHA-256:	604C0FD6A3EA399AA08158490E254D25C68B0A89D2944C8E7BB9E00F4AC389FD
SHA-512:	5F7A46303F14AB9AD32353BE06DA9147EDFF298F09E02FD24F52322586383EDB8A42BDC821F603F11401FCE48778E492B4D04231260AD6B735F63E62A3A2867A
Malicious:	false
Reputation:	low
Preview:	RIFF~...WEBPVP8Lq.../?....Em.1..].?.E!....3...0v..\|...H...q./..."....AI#IR...0...=.Q$I.s.`......0..T.......@..j.P....{.....J.$..xx....<..\|.-.#........hv......;..\|.G...13333..Z..U...8.I..z..E..#..^.P)..l9....J.;.Ft.3;..wX.rh.6.g....m....6+;UR.m.Ie.......m[.........d..BF...p...H.]...=;..m.IJ....u..#..{...... .]..~...x.x.S..T...\@..Ep..Yr.J9\|..C:..0..[_....g.... .4X..~xd.z.K1V..65...!hs@....`....i;O=.U.Q.......q..V[u..6R..XM.....t:.5...hE....fX=......r.`....UN- .Y...U!....N.......3_z^...!.....(.J..................\.^.p.T/f....4...Y3.(.x9.s.+=.B..}...&z.-&..FQ........:.i.@.B.0z.=;.=..[.s_..St.(.+.....H....%....wF..&..C>.9..J..(l..E.I3.......B.<..+."~).....#.3Zn.%..J=P..hM...........q....NP.u.t.vo.{.Tg...`...v.A..j&E........f.^H.R...xRX..lB...CK....Fi[9.8w\|.".E.:T.E..`.........b.......jX.F^@.N.........z.4#...X..%..!...K.bc..,.(.2 ...)..U..XI.o...H=i&..+#.SF......F....`..%.!.[.....x].....a(.A.S.N.uRg:._.@.Z..>.n..N..BR'..$/...`TF...

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7464
Entropy (8bit):	7.9682966063662946
Encrypted:	false
SSDEEP:	192:rODHsjH90y69hTy9xDf9aiElSYdSyrz5zWfr2/D:rJ0rSXEk+
MD5:	EEAA0D484C86FE8CD50F90F0122DA905
SHA1:	B46DAD7EFA1FEAEE22106625453DC920F76782C1
SHA-256:	D9FD4EF4F1745A2E14849B0FF0E796BFDE82FA490F6F3AFC52F455F2BE89F792
SHA-512:	E490CBA66F680EE461147F1811254FFE3ADAF50313C35D15D134EBDFB90A855CC7222AD41E30B65A97A06C2ED39E8A191588B6015E5B36A003A401CAE2A6815F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ZJFuUMqXnSgiDGoJfAXuycSmFFXpkPf_ywUswZAtbhK2MYEOg5_7CR3FYcTHulkv09s=w526-h296-rw
Preview:	RIFF ...WEBPVP8L..../'.I.5..m.....)"..(... F..9.M)..........%..Qs....X.m.m.m..f...==...:...[.{...f.....~bc....Z........m..s.....q.. ^..S...m;.\|...6c....9.........==..9..-... ...._...a$.a#.I.....!A.%A.$.M.t@..Y...;./.l...]'.CsI...................K..V ..4.j3..Zm...8.\|7`...H...$.........'...#0.kg.6 ._BD.....H.2....2d..!..Tim...P.U....gt.2.>.....4/...(...0r..rLT.p....._.".J.#..~.....j.7.\.?2&`k..D{.6.C.g...^`2...%..m.c../....}.-...JK.//G....f1 .Y.2=aS.6u (.<<.[.8..!#.d.....Y...+J.de.y..=......E.'.%V.a0y....I......Eroo......xM.U ............V.;.._.Wl<{.uM.q.a..p+......'.".>....I...bC.s..<.`..h....X6...$K....U....TG...`..w..P.l.. ..@}.,./`C.xH>W\|..t..B.....-T.s...y.@ur.E.?g.)....O..Tm....D.......7.es.q.zM3..T.....A..k.D...q.i...r..S...\|..x.....E.cN.D.9=.c"...~.J..A#.D....]L{.yJ*S..Y?..v.M......a.........@.0Z..1.=.p8...z`Y.&E...5.....7..1.K...F&L&..?..9..[#. .6d.M&.m(..3.T..I....H...=..e2..........C.}3. ..`.[1'.fo......<.`..gp.~.Y.&Ya?

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7606
Entropy (8bit):	7.968834443085747
Encrypted:	false
SSDEEP:	192:eOB8RrBODxvJ+HYUF6JL+eH+NWVBAFZtlLs9kE:eOSOA8JLwNaB0ZtlLsl
MD5:	3CC42A65872643FB9592A1E22E70A726
SHA1:	47CB8E7D51A5D512EF434345BDFFCE4FADEA1551
SHA-256:	843993BCB6577347FF1B60DA450DF22DEF3CD3D08EA7AF14EBFDF6473C8921EE
SHA-512:	2F6E0ABFBDF076AE490E7AD0324B4868818A32060B541A7932C89F71533D91B03F7A5A249311DC03F50F9E5B78F91DF818835EFA64C5EAC033125153CA84F802
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/W6pBP57UU3sGnhrVO_SWywKMb5YwKcDoQW3hBxW3L0pV4UyzS7IDbxaqD_vK6qHg4i4=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I...........?"&.G.....E.^.>.%Z......]s.#.\.g......2.F.....m..FJ91..a.237.fff.)33..afff.23.....;?x.......f)N6P.(..b.....3..&....HN....A9.d3..0.=.'Y......a.x...u7.).t..]w(..Ir$E.Cx..?.?.o.(G...V....5..2..a.....X....$..W...g.m.m...=.m.....=8'..5+.8Y.6....Y.ve.s.dm..'N.vg..=..-.U..J13W........6T..,....e.Mk..sm.}..z.......m..]..!~..RM...../.rN.Q.E..}.c...^}.........9.R..2B.x.g..v'..^ ...Z._xx..aD%..,n.'....h%.A..(3R.1Bz.N.B]...._w....B.^$.4..#.L"H.. `D=bPU..q =h;..=.;.y1..%VpO......YbB.3.bkI.x...R!#..2!.\J.......Bj..A......T....6.....1....H..M.Qu...U...$.....H...0=..{....Z.1...@..[+-C...x....;.Qui.H..f........?..?Q.y.u..=&...F..J8bp..F".a..Qcmc..[.8.}..@\.w..>r....d............}.X.gbL..@.T0.1.>...3...._z.....o.t.Tk.].....-..O.k....v....QH...D.@.IV.D*...TS...G..Z...hw..%.Tyk...o\.. ......R...x....<....H]%...P{-)....a.l...k...Co.....?.c..J..0\|_..j.g."nc.....(..s..W...OUU./.+.N3.T.....o.IcFo.{...1z8...`)....d...

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1402)
Category:	downloaded
Size (bytes):	143342
Entropy (8bit):	5.682920514745406
Encrypted:	false
SSDEEP:	3072:cPZKmtm7F33g5L5Yd5Ddo+g5EV+V4WonkjTcvlZAAdkNFxvQw07IiAM/sCp/kiqT:cPZKmtm7F33g5L5Yd5Ddo+g5EV+V4Woy
MD5:	764818032AB704B8CAF732702E3B1E96
SHA1:	0BE39301030C452081C201FD23E50844B9B48395
SHA-256:	31D38A3C950B05A896E4E1E2A232CC72FBAC5C0ADA04276897814B988963E438
SHA-512:	D2CA6191F9041BE58838DC723C6356E2BE9661A7C6906435F93E3798D4887CEED333758A9AA828F5BE6A714BE8D3DC9EA8D0F7023A08520657AA85E2863FEE4C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,IgeFAf,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,wW2D8b,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,PH175e,jZ2Ncd,tKHFxf,fdeHmf,rpbmN"
Preview:	"use strict";_F_installCss("@media (max-height:732px){.vFondc .VfPpkd-P5QLlc{max-height:calc(100% - 32px)}}@media (min-height:732px){.vFondc .VfPpkd-P5QLlc{max-height:700px}}@media (-ms-high-contrast:active) and (min-height:732px),(-ms-high-contrast:none) and (min-height:732px){.vFondc .VfPpkd-wzTsW{align-items:stretch;height:auto}}.xoKNSc{margin:0 -24px;padding:0 40px}.Ud1OW{background-color:#e9f0fe}sentinel{}");.this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.mCa=_.A("vNKqzc",[_.Oj]);._.u("vNKqzc");.var T6b=class extends _.Eq{static Ja(){return{service:{view:_.tL}}}constructor(a){super(a.wa);this.re=a.service.view}H(a){(a=a.event.target)&&(a=a.getAttribute("href"))&&_.rL(this.re,a)}};_.V(T6b.prototype,"fAsfBd",function(){return this.H});_.rs(_.mCa,T6b);._.w();._.u("r0aiGd");._.sAb=_.wk("efhmcb");._.w();._.YKa=_.A("sJhETb",[]);._.aLa=_.A("fI4Vwc",[]);._.pN=function(a){a.getData("enableSkip").H(!1)&&_.be(a.el(),()=>!0)};._.u("fI4Vwc");.var vAb

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	34150
Entropy (8bit):	7.9605429516569455
Encrypted:	false
SSDEEP:	768:1u9/IEI2Y8ovLDIm5VvC+TSPI05kE9xX0r+Xv4NdqnzYl:O/7Uh/ZeW0qqxEr+wNkUl
MD5:	4DF004D4F2D2F7921EE1AB1E16EEC7B7
SHA1:	39489B65493B9FE9883F359E5FAB5170C9D9E1F2
SHA-256:	ECF16BA0EBF68546464B4D0E8E47A95B961423E47413C25E5A5BA73DDED2FFD2
SHA-512:	09563045BAE58061067227F649EBFA4A334659B1A4BDB9164377B2D6BB85274AFB57D260609528E089533BFCB9FFDE4EBE8E945323D77EBDA5662E7CF7ACB83C
Malicious:	false
Reputation:	low
Preview:	RIFF^...WEBPVP8LR.../..I.M8l.F."gn/Y.._.<.BD.'.....n.....z..w../$uI..[]..9m[............f,......^...............C.....H83.3..0R.X.609/_[......$..\<-...tK...X..cl~...A.7."".....%..."-..!I..H.c..&.@K.L...I..h.~....F....\.>'...v..c.)"l.6qT......-...Hz.....{..Tko....."..5_...zo/A.!.!.J. I.-Gr.\|.\...j../AC/....."(..t."I.$E.Lf.fy....#.34Dyxf.t........u......A..H.RbL..0>..f.._d-.8j...e.....,.K..\.L..R..,J....gN.K{.$}.dQ"..Q.z.EO..I.....zk"c\|j.nm...t.WeHII.....gjW...J{...I.l.....z.SOii)M..3.K.Tm.:=..H.%.m.n.K.."......<$5.(.2.L.ti.....).!.E8Qyr.f..mW)...ZO..$$3-.....Xg.d/u..i...~c..Y.....x6.>..!.&t..(.h.]......3fg......{t.A ..p..u.a. [a......?.,.a.~......?.{u.Zn/..PQM..k^~.m.Q2...}..........#V.V..~w......L.a......wm.5wl.P.a1.P......./w......./........).~..Y.F.6........Q'o{w...f.K.j...a5...1.N.D.,l^...X0....r....,.\|...@...43X..u......g...~..J....'...Y..%....Nm..D.w.^....e.Rw....H.F.......3..N"..ok.0H}.Pv..E.....f...r...S...q....e..$........,X.......x

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1118
Entropy (8bit):	7.780736815470668
Encrypted:	false
SSDEEP:	24:Xm6cauzAfw9y4TZFmIfNBNLv3fa/d6cQczgfxXJy1b6NEs6:TuzyEBFmIfNzrfa/kcQczgfxZLEr
MD5:	CBCBE041E4A72D5F8B5582E94537B3F8
SHA1:	652A345E7B367ED3097F46FF9F70805E329FC370
SHA-256:	9583879CA91737DB30C7A5255AE3923A4DFD30E02EA66DA251D61E6F871454AB
SHA-512:	6F3474A00648C35E94C72A0AF0B29BB6337FA59636F9F22AD3E9E2A5945D88E88C96C360FE89DA856B817BD72883682D17678862389C6AF12064BC9DACFAA225
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8LJ.../..;...(.dY..6..D#.......m.....s>.@h$...:. ....3..8.mU.'.e'....T4....`...rG..(.0.....T..(P....*.j...5..5E5....q..!..4..R..BD....>....j.!...Q........;..?.._.........@ ..!b..?..+\|......0..&......$...1....-.....!.?<J....AF..X.....y/.d.....!..N.....~..M......8..M....BDL@..bp.?.m.N#...+.:..../PeU'...%.Q.s".?..%IVm.i].......zqw..f.....g.G..1..;...0.._.........S.P....DE..QQ@AT.>...o.s.9.5F._..6r..x.n..s+9....vrng9..-v.s.li.Q..E.[C,Cs07.oD..g.E.f`^.....QD..27....,.f.X.E.l..l..l...".."v."j..%[D.....Q.E.l..l.5[.-.f..e..f.8........Q.E,."j..M..../.0c.....@?.....4......B.HR.W...u.W_.L.N._..2g.P.nx...5.3.]=.....h...O....d.....C..g.H.?..Gq.pS(.1.+.Z.......V.@V..]. .....;;!]..W......z0..R..1.1:@...S.~.......y..)..hT..k...z:.6..'...._........;.w.z..h..x....#..w.x....)mG.Cc.4M..m.......h7.z.g`Mm..t7....T=H..~.;.v....Fq....P............ o.a,...L.&#.n.n`z4........3K.~..+......3(....m...f.. ...E.Q.H..!MAq....i.w.%.B.[>.]....n..K.x..>.K....t....

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	7.360018227574988
Encrypted:	false
SSDEEP:	12:goW+rA6Sj2Ze0Yppr3DljryW50FHT11msWzPIySoDVWD5TlTta/:gobmAeX3r3DkWQ5wsm3So0T8/
MD5:	39FF7552BB2F31BEE791376CDB4B9B2B
SHA1:	0A7891E5B13762CC013F47F52A16563A52298662
SHA-256:	B208F90A1EC3DF08DC635AF32F0E2D735B2442869D7A20E67CCBD625431763EB
SHA-512:	DFFE5114FC190FBD065E3F2C8D785D7F10A6CC9C2547E591C00644954ADD878205571808C2878D50C7960DB713C780C61A8E6C1894D994E5ADB78BB14CADC13A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw
Preview:	RIFFf...WEBPVP8X..............VP8 .........* . .>m.F."..7.....l..2.~'..D.e.&.q(.2G........>..X.....Y..F...X/...F....:.p.@.....5'.}...9.....6...Y)......7.t..d.W..].g.[7....d....lF..>.0..7P.Sh8...k?X..7..9=......('5.tQ..~..d....y.i.#8..B?...~8.g4......;.cd.t.....Y<.....9<..6.7g.v..>.g.1.......d..-.)....Q@.?x...Y.........z.....j.e+..K.../..Zz...2_..............-.....+.1{@...D..vE.J."..T....F.3.....U5z.._.IE.l...W/.....?..D.l..V.....`..O...].}..2...<A.e......... ..E&.5....g.<...].D<....io9...EQc4..uH...i.....r...=.].5......Kp(K.'.........o..4_.....EXIF"...II.......1...............Google..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	962
Entropy (8bit):	7.684392242336812
Encrypted:	false
SSDEEP:	24:B9nVLbvxwOWgIeHCQsr3JGvGG64BdQfSBZeKYLRkdFQ:7TwCHJsrZq6EQ6BZeK0ObQ
MD5:	3610D7EF95052EE46DDC80B178A5F028
SHA1:	3704EBF55FC94BC7019EC8B184F05C24517B5E3B
SHA-256:	C5E8A690ED36408782988C0B1A5CFAC135A247A5C3D21E46029D93492592A7BE
SHA-512:	227A1449C06E5EAECF4AA62C69BF4E26AE6DAA2569EEE684359253DCDDFE2DBF368F26A454B030BAAFD9534FED0EAA92AF95A6FF02D2625F38FCD8D6B15BBE2C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8Lq.../?...w.1.l.J..?.....p.Y,.H.$9...Br .......H.")......g...[7GR.........K!.j5..........@"Q.$...D.(l@.D....R.r..)...BT.A.\...B.!....B.F..._!.B.Z,....P...E..wl.8\|.PG..+5q.n....:.s...y..D..7.h...Fc.1.C..7...w}.Ov.!.._..?n.R.%..3#...!..MT..!......_/..1w#j...W[R.....esG....ul9j.-.a.Q3...n.c.Y\|..2....._..E..e......6.q..."SQQ/>..].F......S.........w......n.....M3M..{...O@.B....j....Vv.n.f..V...uTcF....!.3..ShG`u.....6.h.5.\|h.-..h.%+.h..X..@.......p..;z.0.. .......7w....9kv3+.^4m..4q...v .u..q.;f..&. .y...4\|.....2\|.`.4..5p:...__..D.....Ep...5....c.@...\|}H. ..@......P ....I.."1.^.%>..9C.......b......tU.x$KN:/.......prW..8.%..-.$._2.K....x(./......;\.2E=..(U@....y....\..%./.g._..p.Uy'...y....L..H)../....\|.$'..\-7...O#.J..p%.w..k.8....k....e...L.?...f....n...k.....(....^..(4.,#3...ed..y.I.22S.&..;.1/..Z....y5........fQ..bl.sZ.U....EXIF"...II*.......1...............Picasa..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8990
Entropy (8bit):	7.959388167722879
Encrypted:	false
SSDEEP:	192:qL+8F5flrsw2TNllSoGp5DRBcFOC41pMvNjC1O4BCJXn5tzmgb:K+83flr7BRBcFO9SCwjzzt
MD5:	7367103A0E06381FB02DE1C6E95DD998
SHA1:	C2A6FF6A9EC8AD29584C6E2D01B15C17658664AB
SHA-256:	162FAB3FA3AE06EAFE7E688D8628A6896E99139D18B34EEEEADCAB541565A8AF
SHA-512:	C45351B6AB639FD72D3A7CDB34D2F95CC4DC82BC46ACD029F2388FF091E48FCA84E66F698D419F8E6CC2537EE706ECD199F52D94DE69AD900E41706F43EC9B8E
Malicious:	false
Reputation:	low
Preview:	RIFF.#..WEBPVP8L.#../?...M0h.H.&.........$.)..v._.0J.ki..[t.$E.e...o.1....$+../.......E..$..<...p,..5.?^.B&"".I...."<(.d.S....$......N....t..........8.....0.....+...g..^..@..._F.>........:y3........?...XrNN<.B..wj......2.^..sw}....5www..`.. q;..{........}..N...`.m.m.m{..{.$....=Q{.W...}0..............1(.......Zf9:.M.RB.[.....$.....G..P...L.'..S<wHr0e...8X..i%R;....Z..s{.Y..@(...ze9;......4.$.......J..iAN...r.Osh......!.4o.w..xs..u.....z.?.}.r._:..gw...3.rddc.......^..Z...k..N`_.I....H...........'.z..<L..`>.......7....w..aS...;..W..$.\.p~...../.P..H......k.,=..9=..^.'.(...t_..N.W6#.+....e.<...(...8s.^.X{.QE~9...........]..p;........`...........P"6P?..p..Z.N.."(j...@.R.s.o.S.x.c".!.xxs.`z.....^..x...Ll..`........{..1P...~..#J...R.....[....}...Bd..{"M..g(..G..a.c..kz?y.l.D....0A.......l.......q.@..H.i(R..o6..!.X.y...i'..Z....%..~..?,../ck.)...c.......E...o....~$........Cz...T.............3.C<N.I.....i4M...........*=).p./$...........

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22904, version 0.0
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.9904849358693575
Encrypted:	true
SSDEEP:	384:evl4zAZ+ssqWqPRSKLA4kM0aQfBn9M2+iW50SIPzp6+NPf72UReN2CtbvejX7Ij:YqW+7qHP8n4L0aYn9jFDSmzp6w72Uyvv
MD5:	C654A623AD90BB3DCD769DBBAC34D863
SHA1:	8719DE38F17D8E4D73E2A5E4E867D63DD3965BAA
SHA-256:	DEEC787CCA1B9436E080478742A0299E0DB1A9712543A72D2CDC8373FC45A432
SHA-512:	B7440CEC44B71BCDBEFCD878A860EE3CC0163DC0905DC688EBCBCD7C6F5CFDFC187EA0C2B6247A362AD462450C34020933DF7825CF6CEAEB3138D65EB944ABAD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2
Preview:	wOF2......Yx.......8..Y..........................`..`..8...Y........a.6.$..X..n.. ..[. ..S...u..l.....!......I=...ubpS5 ...o.........c.7<.y...Q..i.n..T`R.......\|h'..f.=4..G..xI&.V1...6...jf....%.y.!.).../Cj....].W%5VIj...(.........'Q.}.+.Jg.L0..$q.......#..d&...tV.".d..,.(!...p.).. ..d[........hdg.....!=..H..y.\..p.Q.O.........`e#.X..`#F..T....p.@.)UO.;85..y..@..)...!..........GNT.W...VV..j...-=+G%.yuK...u.........%c.Z......8%. ...V..P.^t....g.x.Tkw.g.....H..._R._{...u.....\%.L+...S...+).......Y&,......3......... c...v.S.LI6...X..A.....S...f-.f....X.....F.Zfwe<#c#...S......bk.HA...K.{.YG...9..24;._+ad.md..c..%..uo...6.5....../..tv.(.l.6.>.V..Q.[..Mr.O...,.......B.......TI.7..X.V...O_._3~.5..0..".$.(.j.....b.....W.O.F....$.H.I$.L.)..J.i....N..d..c.......".l..!.\r.#.\|.)..B.)..b...$D..J(..2.(...........j...:....h..&.h...Zh..l....i...:.....z.>.....d.!..f..F.e.1..g..&.d.)..f..f.e.....9.g...Xd.%.Xf..VXe.5.X.z6...ld....f....le....vv....d..

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2572
Entropy (8bit):	7.831256232573757
Encrypted:	false
SSDEEP:	48:lmN0E3OQ82yrWJ7xyxUQuAFo8nNr8eWzhza/5lMihyzoPLB5kXgDB4ChWc43ljp8:MN0CXVyxd3jo1aLthJV5kXgDzhWc41F8
MD5:	E4ADDD3705A5E68E582D901877DC6075
SHA1:	4BDED5CF4FA4C5FFACAF5DD12636085C6B9E73BA
SHA-256:	0521D8CBFCCEEC71D4CE0F2D24647BC79655060B6B69E5759A4FDD9D3E778E2A
SHA-512:	66AAC972EBE3E56100F9C717398C960CC800BE35A3D8D6EFCA2C34E7F4CD067DD4B69C99C5242A7EB3D97E5F0A34E2A18677F663E0EE0EAC0AF9038A146284BC
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M.D....D.?....m..e...0.l.F..Ly....7...d.(..:.....3..5.KUJ].Hq..b..D.,....#.#. Z..\|.@.<...S$.NV..e...~....033.{.k.9...f..!....W..).....:R..r7...L%....UK-Aj$I.d....-....!;.$E.<..1.>.UxR1.Z'.l.T.9...q...r.\.KXCW.b.F...?.8......7............3{....\|_v...79.o...5..3....].bG.O.q.~]O...G...g'y..}.Y.V...t&7.ua.y%.q&.Ru.^.e.......[R.,..<.....O.D.N...Z.e.P.t..c..'.._...Wf......p....h.F%........M.H...~V....^.~.._._....#).'..v...`.......6..p...1....s....U.,.w[.....s...u#..-l....1...i.C.e.....\|..........SR[...8..X....-G<..0.n...._.....:.......r..q.T\|J...`.D!..c....l0.X...........Z..........e...q.%..C.Z.3(J..q.]<..;'}..H..\|...^../^.r..qs.J.\.a."'..R..C\..=\|>......i...r..2p...........M...9k......6.]..v.wB\|..9...K.......n.....w..s..8.,.....'K....7.P.~.pv%..V*".A2.5.K...v4.,p......\|..%.\n..8...Dr...Wj$l.~].......p.9.G..0Ev.Dc^......&.U......'j....\3.D.hM@....._'Y6..........B..y..r....X2{...i....;.F>]....s....s..;...Gw

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003)
Category:	downloaded
Size (bytes):	18440
Entropy (8bit):	5.255534167782927
Encrypted:	false
SSDEEP:	384:kz8E0CXVpU4y7FeTEkrHfcBkoNiIvYcaSRCF+q4nAHY+6dDlqW1hCSallZsWY:kz8E0CXVpU4y7ZkrHfcBkSiIvYc/Re+J
MD5:	5F765A4A59A407D5DAA33CC0B48F2A35
SHA1:	44E29FDCCC78BAD49465D30F2AD9D5DE816AE150
SHA-256:	5C98E1CF88ADBADBE52321041E084AA2D5BC4DAAFFBF8EC6C45A438E8D393202
SHA-512:	ABD01A44A94A0BE2B000DB5BB60A439AFDA8948B32B3F0685AC9AFE175EC9E3701C3747457BE42032C1EA0707AF02109D46187FCA39F2815BD8AEDBBD365F38C
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.934.167974858ffab5c06580.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[934],{7934:function(e,t,r){r.r(t),r.d(t,{default:function(){return W}}).var n,o,a=r(32722),i=r(24178).function s(){return o\|\|(o=["app","appVersion","hardwareFamily","hardwareModel","os","osBuildNumber","osLanguages","osVersion","resourceRevNum","screenHeight","screenWidth","userAgent"].concat(["delegateApp","hardwareBrand","storeFrontCountryCode","storeFrontHeader"])),o}var p,c=i.SC.attachDelegate,u=i.Z_.cryptoRandomBase62String,l=i.Z_.exceptionString.function m(e){this.setDelegate({topic:e}),p\|\|(p=!0,s().forEach((function(e){m.prototype[e]=function(t){return t&&t.hasOwnProperty(e)?t[e]:this.environment()[e]()}})))}m._className="eventHandlers.base",m.prototype.setDelegate=function(e){return c(this,e)},m.prototype.topic=function(){throw l(m._className,"topic")},m.prototype.environment=function(){throw l(m._className,"environment")},m.prototype.eventRecorder=function(){throw l(m._className

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13280
Entropy (8bit):	7.960449800390654
Encrypted:	false
SSDEEP:	192:EXA78faBIIgC0Wtr1JbQhrs1WBxqlrX0w0OTqqBIZu1LwxLl1gRw4fDcGtu0uglT:L8fuIzClJbQh9qqqBAuN+h1kw4YIuFkT
MD5:	042D45E1ACC2A111B98DDEB55D0C3E66
SHA1:	C7D0BAC045E8A06FBE5A3FB010822C85DA42747A
SHA-256:	155ED1C06A9D1253C2783AF6BB6C434B76875264C1E26CAE948E671EA6629EE6
SHA-512:	75897D37198E76DFB4CE0C14B0854257C2B4E70759D1A7BC52EEB0B4CF8F3BB9B97823E8F0AED9CFC9FC7A4EC815BA5456B5C71B74DE2A3CCCE3A63EB5603B52
Malicious:	false
Reputation:	low
Preview:	RIFF.3..WEBPVP8L.3../..?..H.$.m.0..C....$..9.........K.k.~...ww.x..]..Z.s......~d.[m....d..S@..a...A.T.W-............#....Bv_.$eg.C...$i.I..........e..]...e'8....Ux..WedEde...6.aWp....%....._...$...H.)..B.+U..o.._Y...0...H..).G.....^df.7.$9R.......W...yG.'@.\|$.i.KA-....XvZ8..,..^z}..#=t.N..j.h.':@.I.....C......x.Y..z....N....!.@...).....W0.s.FC........iBq66.\|..@....{..k..P@An.E.......B.8.Cj.@.....s.R. I........_........"...v;....[^e..f..<...Q.$y..my..T..<....$ .yM$.u..` ...B.`..R....R.j.L....7i...b....gUQ............=...B....8..m.H.....1..m.[....-c..T.l.b...... .3dB....a.2(...$w.1..1...H...H,.f.fZ633333.}eff.23.@.v.L.4cq%E.z.YU.Q.....z.;...U.Ka.VfvKiJi....Q...4...].0J=c_.{JS...Z23,.F..m..6..7_.....m{.o.m.m[...n."i.....m.]I...km`.g..9.9.z....D.`..T......s...=....m+k.}..>.{..y..R..@J.HI.mN....{....s.sp...W=.J.1SC.4.S.).._..7_.P..%....D..3l........d[.2k..pw.<H....d.%........9.Zm....{.;?.B6.........{wL..8......S.{.z&.@\|j..#.U..._.LF[.QV.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35798
Entropy (8bit):	5.362239652266183
Encrypted:	false
SSDEEP:	768:xLV9hhNz5ouQq7vDsCYDHlo+yg2GsGsgo4ST5dX4+eT7Fi8mR5lfKGiLHCWtvdTZ:e
MD5:	3AB3496A7BFE9321B3FA0E2FC8668B14
SHA1:	EC704CA797F15BCDC6DE9AF8AB9F8311EB82B2A4
SHA-256:	E321803AB120C94CFFB459955214D4F783D14653749A9D9E01D5E81C5358C8D4
SHA-512:	1DDAFCEB91F8AF68ADDE9686537147615BD504D38FE24FAC13007DA412A58686D633A09A2E629B79297A826524D10374058E1A1178684C45D43795A62992E63A
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v2\|SF+Pro+Icons,v1\|SF+Pro+Rounded,v1\|New+York+Small,v1\|New+York+Medium,v1"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.eot');.../ (C) 2015 Apple Inc. All righ

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6294
Entropy (8bit):	7.954888158150672
Encrypted:	false
SSDEEP:	192:xnRvykBNBHOY65EWYJRCLDT/lrQo+IHHctEQHG/B3M:xndycf65PI4vFQoJnctxHGBM
MD5:	71FA9F5920145BEDD3FD217312A23549
SHA1:	10FDC7F1BF0F4BC6BB15BB0EB30A81FF4478A2C0
SHA-256:	19554DF472C0CBBB8DDE007BD5E0E5F62463C2C8EAACD03DFD8FC6AFEE979F1D
SHA-512:	0D3064E2F8EC3FA479AE9399702DE593B0019CBE65BEAC92686A8DB296E4ED62F23C5916B0841199621DF9F179C09D7B99B365F6CDF3FD9DC1A8DE5128BAA704
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.,....$g.afl.h.............y>.......G....3..RY.s.S.......jT..3[....Z...E..D.ed.#s.8.jT...fn.V.n@E....].].0g......Z.........J........A.QEeP....r..QA.?.....'W.......(.....l.v.c....m.m.\|~.m.m.b..I....M...,...m.j....k.h.T.......=..i...9.....!\|.6g...?.........u.......g.....eF.l.^....M..~.=+.;L..g...,.8s....~...S?..5.1t..#..9#....S.C..,.'......$qk'94k.;~..hx...B.I..8^_t.=t..f........f.z=....jl.Dg.....W..e..u...<._.........d~..?&.]..2SZKK.a...}S<Nm:h.....x.6..{.,..j.Psv..%6...l...5x..\|.....M7.l)...]v.K.p..J.......PaL.-R..W.[.Yq..t[.b.Ujv.8....a...nRc.{,..ZZ.(\.+j..3.&...."....eOe.9.G..}...=%.8N..!.u.dg.....l1g...].W..kJ......3.o.7.%..\...yi...r0C..,..[.e.~,;.<xZ.K..K.;.i..7h.k......Uky.w..B....s.%k5......U2w.(.Ll..3.u4[."..+....yk....-.,.}.....B.}...6-0".mX.....0..O..,....f..q.XJl......,Y..]'..T...0..".... .B...s.%.YA.6...,....g.gm......_..XV..e.2...j.43.8..C"...M.2o....C:..(9....@..=..A.W.54;.....={..c.D.)t..8...B"..[..o1"

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 107832, version 1.0
Category:	downloaded
Size (bytes):	107832
Entropy (8bit):	7.998208221352974
Encrypted:	true
SSDEEP:	1536:rbxyXX3FkzPtA4ze42dWs8sIQ6Y3SQnCvy7gALT4I073hT8k32wl0JvGdUB4x:rS1kUx8siYiZv+n4Ie82jBdUB4x
MD5:	2D753DE71684CC6C73161B6FE0C5A11C
SHA1:	B9B14B843008B6C9E8D6E933DDF52587CE0E32D7
SHA-256:	DC0663A7522F9A0A447DCA9A60A80275EA5906DDE2159B24CEA94A96D81DEE0C
SHA-512:	ED6FA0618E66A26107FCD828CDAE61C623C0BA6A0EF3BF6F49C1382ECB6A327D20A73A1F072E9BE6C2074DF6390D4DB17AD747FF7E7D64F66E1C25515DDD1E56
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_bold.woff2
Preview:	wOF2.......8......}................................`..H.`H...X...(....6.$..$..(.. ?meta....@. 8.t[.{.......}......R.Ju.1.u..WP...D:....:.v..{d..J:#.....T.nC@g.4.Q...........,?..{?...$.. V\.V@[.BH..2.b.!.U....9.....L....i6..9.\dYR8.......;un.5...(.."...b......pK....%9.gR..Aa.=......y._&.z.s..LnU...!_HJ..'[....x..Z.....to!.>.....c.J.....O....D..wz.K....Q)Gec..[.. ..#:..T....^6..\..ap0W./..n.(...e....^r(......~i!..\....7d..Q.x...%...RQ...]....]`...N0......G.W.Z[B...Q..8..[k...u..I..+6X...IHL.V/.o.y........s..::.9......._(-"~..Uw.Y.Q.^5...oH.O.=.F...>.W....{..~SX..d..T.k ..^..a.u..&...wH...>....xp.B./T..........K..w5.7......IX.....V.%.J.......!Y..y]...-..w..N..Z..;<p,....q..8G..}.g..].CrP..TK..QL...h.Lno..5%......4A A.-t....~...O.z+.K..?.".....qn......O...}o.]@..B.....sz.^.....#..`...C.{.....D....1=.c.,.X.......hn.H.VR..2A:..c..V."..a..F..*..E,T..(..y...?s...y.V...Q.!q(H.B..ZT..jc.~...:@u..=...D..d,.L..............O................

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8594
Entropy (8bit):	7.966296411345263
Encrypted:	false
SSDEEP:	192:uBP/bR7pJfOTI3Nqeuo+gbCHvU0gMJ6FuAaPa2ZPStvh+Yl8:aPzRqTMUTgAvU0JMwAEaDl8
MD5:	4AEA614380B998263508C1153B9DDEC6
SHA1:	6160ABF08D74CE8A9BAED61A8634935147AC1700
SHA-256:	393065BD8ACF1D886E07030B1DAE40B2387EC3AA631C46774A43FCEAAF9689D7
SHA-512:	F427D3CAC274F57F1A307C19B9A31760DF4D05F066199EAC6B7778694E53216BD214F9FA2AB139013875E64209FD55D710347FC5908FFC07A29DDB6ABDB1ED9D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw
Preview:	RIFF.!..WEBPVP8X........?..?..VP8LA!../?...M(.$.2c....$"..T5L..'L3Tf.....0..S..w8...A$I.T.._.33.O....m+9......q"B"w.;..HRT.w..X.cf....4Cq..0EG.8........{.-.2.ap...(.....i}J.".H..MMvN.... T8....~.dQ.f#Yx..A..!..pA.........!e...9...D..._.H...PY.....[jf...efffff.aff...L3.`.R.J..._....!c)c^.....2.6B&E..'3-...l.dZF..of.....!33..]\|.v<.msn;..H).2..~l.^....m.6....y.N..$G.c..m.m..I....q&.J...i_=..m>.m.m.O..m.v.T.R.y.{L......4.\|..]N.....W}.Qk..i.j.......^...:..w...P.....s...k)Am.$...91}.t...._v....4....I3..j$.H....WG..d.2f.....f...x5..N...-....utsy.m\|."Z<....@.(..7g..qd\Z..w...L..9./.B]{.9.'Ieu..l#.{g.:go..D....4S....-q..C.....&...haAC.-....\;.v.^........9...>=d'..c..........RF..N._.e.b.FVM.......\|.T..)q..u......,..0*9X.l.....6Vf..AH.........!..@.uwf.{@0%w...u..a.etU.'.N.....j .4.tN_.6.~...\|.4..+C..W.n.P..XA.........x.GN3.DJ@J...',.Z9.J.....O..0].=...k....wi\.......&....Fl.i.+..1...[...ez0.y.V>....I.4.l-..c..D......P.<4.. .0..b...`$...?m

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	21274
Entropy (8bit):	7.978534674609754
Encrypted:	false
SSDEEP:	384:Rh3sgXgspdsr+ZvTq8VyOTOsVMjlUMN8Gbtp1yeZ6MFIxBqnTaRpUYdiR8Pd:Rh3sgXgspSytTPzOWMjlUmmS6MaGnT6P
MD5:	B315200995FC9114567CE43A84654482
SHA1:	3517BCFC32E9AAD8E9F518294B315F60CE961AF1
SHA-256:	A63B0723FB846995DC71A9DEA8B184E58087B8D0488DCD270CF01671A5E8FEDB
SHA-512:	0AA5F64C8B629EF608306782CD92A3717A2C1274766A38E00481200718724469AE7B1B0DBCE699303C823595C743B635370F7028819F010A452749262EC187B5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/qW1OCeXIVPbBFRtmiUSYhzRfhwEV1CwJa5367zJjBwHktdp1l_tXG1zHWC5Xn4wJYQ=w526-h296-rw
Preview:	RIFF.S..WEBPVP8L.S../..I.M@l.H..R...?..'...O....\..Zjv.0<E.K.+..$A.a....W.5...;.Y..SH8....n....b....H..9..0....(..o....$.< @.C..3....5...q..<.l.Q'!..Q_b>.g..H.....C......_.`.C(..F..x,....Yb.A.W..^h...5.-z.}S..Uko#.L..49...........?F..lje.0..IR$..a...o.=.[...........>.y$.@... (..!S(<..u..........".`.].(..#.<...M5...PH.1:........2.J...$\...2..a.B.L...F..5+Q......>.z..........Gy.....9h.^V.{....3-....i.9...U..fu..p}f....!.l....\|-......z.%j...{'.$.[W..U.JW..G..s..V..ZN.x.T...JWVeU...^rb...+.t2.o.D...m.U....'.....<Og.JV...g....n......'Ib.byc..va..>..B.-......Z...\.f....H2.[..-].t\.ia.h/......./C./...n..k.$.^.k.0..Z..-I-...3C.....7\|g.0...N..\|.!_.....X..+>.......:.7...p../.[.....W,...o.......C...>!u...;../..`.<?.f.$.......k..g.I;.I`.@@.....m.G...+I.~#b.8.9as..L.Cv#.DC\|%.?6&k.....{7m.......m...1.f..0Y.2..{7...{o....d..!`c..o..dk...H:....q.W....UC..Ns.G....Sw...C....I.b.u88QF.m....c...u.^.l..m.VD.....c.ff./f.[.-..d..R0.13...[..$?...m.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	266
Entropy (8bit):	7.052421013235357
Encrypted:	false
SSDEEP:	6:yk5ZYChDBpEnS96WesGKsxdRM8Zj5elkndH7xLiGE6CAYdr0jSKIz/zZwE4:34CRBpEnLlD3Pb5e+LE6CACgmKIzLZwT
MD5:	0923A53B64E64DB75177B6972F016A42
SHA1:	6915D871CBEA8A3B8F4E54367DCA538DA0AC3082
SHA-256:	E0106DC1C0490A432C08671994F87FCBB982B7B25B4F9CBB640D49A03BD89CE3
SHA-512:	5054B69C1A895FEEC0CECD471FE317149D8F804E15CDC0ED51F8BA6B3FB61E092C5C78A92768D31273DBCBD189148D305BA4EB1EB210174DC6B0724615B1B1F4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........$g.......r^.E.$E.....~8...A.H....A8...%l#.Vr....b9.P......N..[n.P.........6\.w.+.....X....U'...#.}...Y....A.xdB.....$%.ww....t. ....Q\|.....,.........q...D.@!H.N.p.5.....*`...ms.~.l....\/.[/..u=..@...X...4j=.}..edi.i...%..0u~.MH..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8280
Entropy (8bit):	7.970905443162933
Encrypted:	false
SSDEEP:	192:3W6/LKCy4kvfGnp8foAS9JkMUFOf0nhUVIrBbSqTm7:3b/NyhvfsgoASnWF36V0wqC7
MD5:	5F6697A592DF3EF99C0193196039FA24
SHA1:	C60839B3B428AC500FEFC2455B5AA0267DB101D3
SHA-256:	4B38ADD4B2DFD8C746DE1488DD914E50FEFE89A0BA094B37E10F6FA3C5829A72
SHA-512:	5185CBBF90A56CD5D17E7A2B659CD974160A9EC058FA7129195247D8CB860D076C498CA98B5EFB9D9657F5977C8CD6FF9046ABB0652D59FB415C119C070D5391
Malicious:	false
Reputation:	low
Preview:	RIFFP ..WEBPVP8LC ../..I...........#b.z.y....'u.T.PAe..6aVm}..~.qpd.)............V.O?....^.C...... u.-........?.....{.#......@H....`)...$..)M.4'.......1.s&.0.v.& 7.$Ir......9.?....xp3...UI...m..D..t7.e.v2.^.........._.$.u.........H9.?5l....m...6k..m.m....m.=.~. .c...Q..m'.....M9.m.v3.!Hv.ZbfV.i.-~p`.5)...n.\{...._...L........-....8...M....n#)...{...w......6....U.....TQ.(....%.......Pa..f.d......H..?cppQ...C..2R..z..2.g.,...3A...F_.%g..e..L........9...a...Y.9.h...4....m)...j.iV.@.........?..h...\P...hi........3Yi..r..:.K.h)... }..L8...Z.p?..:..]..$..$...L0G}...N.apo.....j.)-b.q.LG.o..)..J.N....'+.?........Jw...d...J...A...../..U. K.m@..5J.=B....\...,x...f..'.B........e../.".Of.U3._N......fE(.1\0._.I\6.8...IV...W.<`.n9...._...h.oD....o.f.P..).P.%.br...g..ee....._^.l...t.2.!.W......9}u..e.....`..q..xu.l.e.....}..h...J.1.".v"..,.!....8.-}.-...h@.N..(......k.a...S.F..R......P.k..7..i....`.?D...v,..TR\...B..(...j...0G........wT.0...w..........O...-...2

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2226
Entropy (8bit):	7.870795894442838
Encrypted:	false
SSDEEP:	48:2cX6HWbqDf9knZSFNHBNcw1E3D/nrCpJ01HMFaIuIpAkv0b+ZuJQ:2wO9gSFBWT/nrCpu+8wAkvo+Zum
MD5:	3BD45DA96F49C51F07255F200C9A5F2A
SHA1:	5F2651E7D417F69F7AA8D108A965BECF8ABE69D3
SHA-256:	EED9EB96DAAD84ECD65C7218FCE4C4C4501B9DF4A205CC7BEC0CE7030DFD88D1
SHA-512:	971C6BBBB557504AB46FE52E551D88AE6469A073A2FA055C2CBBB86A40DCC2DB6DDAE6E55AB10558000B8065B9BA2380B5965404353EBE4C89BB920F44672AFE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M0h$IQ..............J...@...X;z..s..m#G.....K.......5..$.I.[oi........F..h...G.&.ZK...F..:...._..).......\|(?e..l....NL.`."q}lj.}?....{V.Ym...%.....?.{z<..m...m{o.m....y..+.3.=.w.E.[....CE...^..&2vOO.{....<...I.....~.....gv...g~.m...m.Q...(..HR...(kww..-...;p...F.u...Swww...xc.8@.......a....c.....;.(5...G..Mi......&m_.m.....}.X:&..oq.......v'D.r.eP.6..k..g.k._Sg.E.k....G.^C..OP.2.....l."..dw}....Ft...>.o.I.......fU..m........S..^t&O.C..jhq..Q.6Jx.J.`..........5.../UU..T.....F.../.....PR1$..Ip".o.....a...]q.....Z..3HC"..MI.58..H.U.1D....y.t...3...]dq..E.d.Lh..........J.......%.9.cS..1..jnu&...ic\|&1.ZBj..b.V?.....BM...JLNA...R1..6>..h.5..$.. ..K..2...fb....L.A0..ic....@.p.(......@ .....i.Y.nU..t.../M.A.Zs....H.M..`.`.f...^._..e.........9....#.1..,.`.&a.O...D...,..Gk..cQ.U.H/..e.3.4D"..\.va....5...m5_Zyu'...0...2.J.p......!.-E.J...eLz..!..u.N...m.....5...fg..b..T.+$G}.....8M.#AP.....W.Yyr..k....xb[S.P5.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1810
Entropy (8bit):	7.782742801601338
Encrypted:	false
SSDEEP:	24:vCHQHJSYqzcZJaiJtanUsHxDKoDab/rGhdFBfXfjbaFdAm32bBeDGiYyu+7Be7Z9:E3FwtAjwoD+Kh5fPP1sDYR+CgtFv8v
MD5:	DBE7058FAB53AAADBA3E8A64731F7200
SHA1:	CE2E430957319BD9F9F33F4014DCCA9382D0A374
SHA-256:	8FA2D4CC29157073058624A5A6BB5866DDC4C7E8731D020A904C0929ECA595BB
SHA-512:	0F8FD53E6C69F5FA65530D5ADE1B6FF2350E30588F9A216F5E7897C772D2CE4F55BC408FDC7989C9A3C1AF8C6AAAB82F1328688E390A4705FB0742F79A8115FB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 ...../.......>.J.I."....z.....n.q0....{.......9C..?..p..N..`?l.b=......n.m.3...w....\|.Mg....kl\|..a..eG#....S..r....`.VWX..Pe...K.....&m.<.._R.......aI................O.....\....`H..w..4O}wD.....hF....K.........&....y....<..3.*B=F.4uR.gI#.p.3..f........9.......y\|.O.A.....K..I,}\|.j..Q.@.0xCwn.y..]V...IT.RP...D...'.c....j1.FR .... H{.....7t.].#ym..P?k.D50..r.2..\|..B.A........:.._-...8..TC;...\.Z....}...Y..H.....,....,"@.r.._ <3..+.....6.H-.~w\..3.7D...\|o. ...hm.[}=.....#........LD....(.6....y4.......l[.X.......s$.....&,U.x...fw.\........(.1..#.Q..E\|..7.E..:.%1.)9..+....eA=.....C..^&suv.{.C...Q.k..S.Ho..o.<A3... . B..D.E[iB.PVS2..j.T..~..@{.z;........3.@fk.Q...m6....}.m.h.8.;.......F_.x..$Q...B....'Z32.>'.P.eD......Q..1.8...4...4..>..8.J..^s..J4..Q8..............$r.c]+Igq.~..a....j..q.5.b..Z)..s.[I.\#...S..........Q"I..E{.....qG..].7.hs.....+Si...O._..'s..swa..e...."."..f.Fe.`U..^..b.I.Z..~.."7...

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	532
Entropy (8bit):	7.283977070466249
Encrypted:	false
SSDEEP:	12:85sAWAvQ2Zb4GGt49trdImK9K9K9K9K9K9K9K9K9K9K9K9K9K9Cnt+dT5+rYI78v:86ArVZ0s9trdI99K9K9K9K9K9K9K9K9o
MD5:	22B41D7243F0BD9F96DFBE91BF838128
SHA1:	83E6CB1C51CAFB53A20C7CEFE6E731A380F98E19
SHA-256:	1BBED35B227E80E4532D92E8DA97B044311739957C2797D2B25017AC5567E849
SHA-512:	E9B94847AFC16F21E4E3D5911AF509007018E6763365BFFA23FCE253EEE0653BB3C5B3E346C37B61A380012B28D48B2B0AB1E506D601F6D429FA588598427826
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.?.*..Vs....C@x.......4...\|~:....n...c....ji.........l .....H...'>.O<~.:_...~p.%%%.H@(. p_......Y.2\...E.@.$J.......6.R.:...I.J....##.?.........o..>.r.l..c.R......n.X..9.V/c,...PK}..@..iu..D...S..5.f..".F..\...X2B-tS4B..b...O,.!....!....!....!....!....!....!....!....!....!....!....!....!....!....!....!.\....K...G......Yq..v..7.r.).r..X.mS,.yx.r.).r...r.M..aJ.....s....m.^..aJ......].......o..@...]......jw..[.^...6l..=.5K.]..okv.j..}......X..k..T....k...R.IJ..ZwM.y=.z.W..m.....\|D

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65005)
Category:	downloaded
Size (bytes):	696227
Entropy (8bit):	5.38605387106501
Encrypted:	false
SSDEEP:	6144:MGryUmPKObVMvcDMbtZNNVJKEq5f+dtaL6rHYGd/0GOCl/FQ1:TryUmiObivKMJZNTJKjp+dtaLq/FQ1
MD5:	90ED61CCFDBF59C72D9D5422BEA4C15D
SHA1:	DEC09B632108E19481F94F9CBD378E7AEB11452F
SHA-256:	6604C5A7BFA2E3F142248368D7C69135A8191D03C72D1024807150C32F4E8E55
SHA-512:	E99CFB370A8AF78ADA7252C5C28756731BBCDB28B71C7B671473C461BCF76A6147111D585A89631CEE3A0F693D45F7A9D3DC7462790EF8048631D96C457694D3
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1713369093418
Preview:	/*. IMPORTANT NOTE:. . This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. . ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. /..!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).MusicKit={})}(this,(function(e){"use strict";var n=void 0!==typeof self?self:this;function formatArtworkURL(e,n,d){return n=n\|\|e.height\|\|100,d=d\|\|e.width\|\|100,window.devicePixelRatio>=1.5&&(d=2,n*=2),e.url.replace("{h}",""+n).replace("{w}",""+d).replace("{f}","jpeg")}const

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8280
Entropy (8bit):	7.970905443162933
Encrypted:	false
SSDEEP:	192:3W6/LKCy4kvfGnp8foAS9JkMUFOf0nhUVIrBbSqTm7:3b/NyhvfsgoASnWF36V0wqC7
MD5:	5F6697A592DF3EF99C0193196039FA24
SHA1:	C60839B3B428AC500FEFC2455B5AA0267DB101D3
SHA-256:	4B38ADD4B2DFD8C746DE1488DD914E50FEFE89A0BA094B37E10F6FA3C5829A72
SHA-512:	5185CBBF90A56CD5D17E7A2B659CD974160A9EC058FA7129195247D8CB860D076C498CA98B5EFB9D9657F5977C8CD6FF9046ABB0652D59FB415C119C070D5391
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/p23hsdqcrm5D0cLJxdVpLWPkNeNNY5NToUhMea5rNk1CL8xF8lsKo7xVZ1piykfztZE=w526-h296-rw
Preview:	RIFFP ..WEBPVP8LC ../..I...........#b.z.y....'u.T.PAe..6aVm}..~.qpd.)............V.O?....^.C...... u.-........?.....{.#......@H....`)...$..)M.4'.......1.s&.0.v.& 7.$Ir......9.?....xp3...UI...m..D..t7.e.v2.^.........._.$.u.........H9.?5l....m...6k..m.m....m.=.~. .c...Q..m'.....M9.m.v3.!Hv.ZbfV.i.-~p`.5)...n.\{...._...L........-....8...M....n#)...{...w......6....U.....TQ.(....%.......Pa..f.d......H..?cppQ...C..2R..z..2.g.,...3A...F_.%g..e..L........9...a...Y.9.h...4....m)...j.iV.@.........?..h...\P...hi........3Yi..r..:.K.h)... }..L8...Z.p?..:..]..$..$...L0G}...N.apo.....j.)-b.q.LG.o..)..J.N....'+.?........Jw...d...J...A...../..U. K.m@..5J.=B....\...,x...f..'.B........e../.".Of.U3._N......fE(.1\0._.I\6.8...IV...W.<`.n9...._...h.oD....o.f.P..).P.%.br...g..ee....._^.l...t.2.!.W......9}u..e.....`..q..xu.l.e.....}..h...J.1.".v"..,.!....8.-}.-...h@.N..(......k.a...S.F..R......P.k..7..i....`.?D...v,..TR\...B..(...j...0G........wT.0...w..........O...-...2

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1782
Entropy (8bit):	7.837800517110507
Encrypted:	false
SSDEEP:	48:NRC3XiQoY2QQsMdaddhF6nrV0jlLQAuPPhMYSQ:NRwiQt1QaH68Qfb
MD5:	F6F881CA93359D91D7D729EF6AB69C42
SHA1:	E9FCE706133B25EE7C03C3F8B943B5FB8EF7ED50
SHA-256:	A030541D039AB4D9C9881999F4F3DED46179F2A33A073B86553C8761E4BA5CA2
SHA-512:	6398630B9D0D43CFF3478404F465C4291AA91544FC0A075B2A0A0F2D63C0F53652A771D52D1DE17A76D86340ABBE4B859369CAA1402010FE45B41F3700F4B6B6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DHBlQKvUNbopIS-VjQb3fUKQ_QH0Em-Q66AwG6LwD1Sach3lUvEWDb6hh8xNvKGmctU=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?....3m.(m..?.u.".?..nQ.<..$.....l"..\|tP._...H..<(n.6..y&m.....G...<.."....8T.........1..0.......\|\|"...O.5;_.f@..<.....m.$'..!1333..l...\|.<....`n..L.8<..FUu..xk.....Q..D.3."..Y%..{.#..C...oc..m.7.m...v..lc...F.v.'..c{.>....Z1......:Ng....m.......Xyp.......?q..B..A..f..6I...?...5...pWI......j.......C........84.ST.gg.3..\..:h.Y_.......f[[L.mU9..V.n1.6......l..^...J.A._.2.RT..U.D..p..heV.t...)J.wQ\..k.....K...DW..E..2...7Q.=.U./...".X.L..q........<.K......._;..{\|u..\|.;.....>.....m:.4.%%...3.Q./?.......].......)1.V.?..Y.e9.....,Hl"....<.M.CXo.q.4f.cw.....bO...O..w..h...F..)o..di...Y..x........H-.m..z{.'_..7O.............i(..f@.:..1..... .(<.n..ya..z....pnh.2<^g.x.,c..).t8..F....Oe.(.0....F..A......P..\...X.=...}@.I.^P.......a..Y.^.IStE...}d......{..k..@.B.E.B......f..K..9......]](a.)].F.}.i.lq....JK...Y-(.......>...qFBQ.e...)z.F!.IHb .>.......f..u.I..h.^P.b....l>...m./kM....=G..p.....M7..I

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9500
Entropy (8bit):	7.974636452836951
Encrypted:	false
SSDEEP:	192:nbJLKWHt8uf4XKv+hHNyh3Wc8r0yvuBSR6wuTtJ4Pkv4ohBG:bJLK6vf4jhtO3n8JR6RTtJ4Y4n
MD5:	3385C142145C50BB60FE82FC8E32EB34
SHA1:	4CA0A235710D2750A417AD54CD15748835DF4A0C
SHA-256:	B9C5762E995382F1E8E129E0AE97BDD8DBD37E8D444E21601E1152983E82747D
SHA-512:	6F2CF1032CF359E1E18FA63FECB15040AD8587B25F8E7EBA4A7DC5044A796BB330B8692141A39C9D32603DB77B091774A38D545C5B071123911BAD5FA937B35E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/I3Qvi0pFixZAlWO3NuIeaoKe0tD3lAJgxkoYh7B8-i442e2Y_DVkPgl8YnbBNTDkKcQ=w526-h296-rw
Preview:	RIFF.%..WEBPVP8L.%../'.I....F..M..6p........q/..j...P9..O..3..G'..>...W........#`...0......{.....+..5.Z..5......{..y.=.9....;.!.q!L.a1.w...r.......$F.,.r._...+.UD....>K.3.m.R.+..3.\|C...9./...X..]...j..v.W4...$.........I.......3.....P...........m.m........t.Q.....v..+.u._..s...U..6j..:......2.'..v.Y1l.6.m)....b$.q........8\.'.....6.....}b...h...1i..y....v.d]:A.IX...1.MzE...3........:t.p.."..bx.{F...(..A2....\...M.....3.F.IAH...ep..[.}........ai.4v.4LH..k.GFgj.l.u.--.P\CG.M..;....@{............... ..RO......U.aJ.....tA..?jV......+.)3"..7t....K..B.a..\|........m>;..^..Y.........Y...gE..E..#.y.0h...`.w`.t..7'-p^s........ZItN.\.E.d4.C..y:J.+..6.{]Q.I.\E..B.t4.;.. w.".x..^..qqy.@I..i9.2;i.......^a../..}.mq...m2#..-M...p._....yGB].+......OG"..s.....z.k...X.l...o....5.W..2.oAj\|..$...ffU.<J.O..............O9G.@..h..../.K............{..5...<..?....d:..f#..@._C.....}..&..p.......g.}.....9.J..02E...o.....X..........$.&.<\|.3....[.../~.......E

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	220
Entropy (8bit):	6.8821344864377085
Encrypted:	false
SSDEEP:	3:kl5Zrtlau+UONRkmruJTKlmCD+Gd8GUkOXvAjVUZP0O+14HoeHOUxvkQMJQszwyb:k3ZANGmXlmCD3d8GU2VUZsWHdxv2fHAu
MD5:	3B35CD064A94FB9744148B633A11E10C
SHA1:	7ABA068CD3B4A68482EA930C198E721F71D17204
SHA-256:	403F57F68F9AA81D349866B872206BF96892B1DA1F5BB5A45034DA1735B6184F
SHA-512:	92CBE78D115D7271D69C4362FA531443FAC3EA47AB9AC78B084BB4F5B6839AFE06B8ACF9528D26E238D794BD0CA94C03C3B2331F67CE772535E913437664A0CB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/gk-WYYED1OJNr0G28ucBPUTPric5QCLwW2q_rNcYg-XTQCbPkhcp3CqVJ-1dHiBql10=s64-rw
Preview:	RIFF....WEBPVP8L..../?...5..m.U..o.......!..4.......C....m.~Kt@.4@....#..."01...l#.V.?V....[_.Q.5....'A.\|@.?\|A(@.s.J%.g..^.=...L:ggwWg.u.~;7{Y~.......l.m8...t.U.\|.Y.".K.....,3k@.L...TJ.c....B.B..7.I.AM...D.vh....=

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4932
Entropy (8bit):	7.946928145289324
Encrypted:	false
SSDEEP:	96:MiV+u1u/FTCaDV90JQ7WOAuUM0CSY6+4vSNjAKoDhPA4SC5s:TIu1+VwvpuXSY6+MSVFotEos
MD5:	9C4D937F97530545BCCA9B4A91C2A5AD
SHA1:	2B95E133938E1066654D4A6AB0975EF32BD956ED
SHA-256:	D9B747411D8665D613DD401B4C683E8A1F2B6BD0FD14C289A9F3BFF38552A33C
SHA-512:	101ECF27F8D0DEDD3B398F1F16BC87119994ABDFC034E7F5D6BDC3F34B169D865355D04B9D3990D1757CBF119883C5ABF37152A64371576D07356035CD3E22A8
Malicious:	false
Reputation:	low
Preview:	RIFF<...WEBPVP8L0.../..?....$I.v..7.?b.2..D.....%..g.F....+...n.ip.Z........j...K4...$...N..\|k"e}.E.`....LY..-....i..m{...........F..Hy\|"?...Io...6.$E......5aM....?..>..M......CL.C{}_..h...n:...r.~.Tm...&.f.7....w.w..j..Ar]3H..Ca@.C6..D.o....y.O].A.m&DJn%DC...!!..l.........().X"?.Y...D0.....$NL...&...A..j#Q.M.:T..]d.~.f.Cq..............p.'.0<i..ci.O.v..w][q.AP.s,s......7"r.@.]N.X........:...Q.......L......I..s:.......^.:....Br.%F@.k&@w...m.N....+.0....Ac.B?...<...@.$I.U=..?....4<{_.3.B.,H..Y......$!..7...I...##2..VwA3cA.................;(....)K.z.A..4.y.Y..k[..Ac.'........<:..-...\|..._.....p.q.A.u2.t<...S.f[.+}........I..jk..sm.m.}h.m...v....J...F....x..)./..?.p$....d./e:...^.!..E..F(...$...Qw.o}..5....S.=..o.dv3U....8.}.Q..y...O...E.G..f.[.../.....x%..6..\|.y.L..+...Q?.^Ybw...B..wp\....S.3...;....8f:...@(.0.s.:......./N&."2.$.......D..!...........9O.....F{...nY]X.'{a.]g..V..^..X./m.N+mnZmoC.NI.a..*.n.=.3k..T...J.f...B..K...

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15680
Entropy (8bit):	7.975229262050888
Encrypted:	false
SSDEEP:	192:EGpTLTWWyswxMXRpRLK8XQUiilQmX9lpbkjSKG87yPvW8aPWr65j7C6K8rEbuQeo:rTLqn+RbKeJQc1kjceyXW8aPv7j/Ml
MD5:	9169BC5ECFA9CEF2AF32398DF2EED187
SHA1:	2C324F19341274410D16D12982CA94E485C14349
SHA-256:	131D7DDB7688224460AD47F0E3EAB7BE850DC9E24207951A8D8ACCD7A99ADCD8
SHA-512:	F02A2C2DE34FFFC53335CF86FD47236FF78500543E5CC944BAAE43334F6B6B1811AD1AD827FF3A83787D9E4704FA1AEE6B30F63FF466D85719F35C4A4EC6EA4C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/UnKazEvT-iNEgftYniQK4JOaQ3Bqm3rE-fWo6dRh4inWUGYpSkEgLSGYZxdv-0sfI3M=w526-h296-rw
Preview:	RIFF8=..WEBPVP8L+=../..I.M@.$..........W .......J.($>.....4..5.a..Z.#$ox....`5....Mvh.X..=...^.6..e..d.Kt...%....'Q.'PU.'vp( 4.. r.f.;y!.}.[o..V..<...<.......J...7...Q........({F.....9...+.3'.$.a.nm....\|.NHxC./.....~#.....$)...Mx..g.?X..O..Q..G.V..EqHQ.rCq.!EQ..c..;.8.......&h.#..\|......9.$(...uZ...B.Y............( ......Z;... {.PA......s...`.G.0.y.@A.../.=.{.V...j.`e. !{...ea.?................_+P....'...@.P....<...z..B...`......6t.0g...M...@^.....#.g. ..b-!..@Vt...'....`.i..>...<.\|Y%..W.B.....il..Ef...(...(MKQRB@....D!JQ.B...y..(D!...... ..N<4d"+..m#IR*.Yw.... "&.?.{........0T.&o..9)I...p.y.M?.q...W.%.O....Szl6....r..s.N....9..N,......(.\|..D..#<N.H&&..M.3....m...m.N..m.}...>g...s....{..o..'.fV0c...j5v.U..uc.......s.V.......l.]v$.....<..;-'..eQ..w..{.$I.b;....y_.Kf^3......Y.7.1....?%..m......1.m.m....m.9.}N.i....w...].n..?.....Z=..U..c....=...n...mtl[...m].nnlK..H..~..Q..9U.....L...............~.mO$...y^)"2......ff.a.a..:.1...ryx.P..

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7114
Entropy (8bit):	7.949066568760502
Encrypted:	false
SSDEEP:	192:fSsvvBv3D6GRt1wC7xRQ2N2KLb6X30dGN4gFlF9+l:fSi5v5Rrf7/QxYb6HZ4W9+l
MD5:	794D878D3F3333508C9270AF3E2EADA2
SHA1:	1AB7FAA454D5EF9A1599B106C8002B7B2B22677E
SHA-256:	669AF012E2BBC4A3665B8BBE67DFAF6C65E31C5601FAD90B78C66E297C077730
SHA-512:	7F17E2EB5975129EE51039A746D6D8EB64EECB7DDFA429B90EFC405EE1E4181488FFBEE8F52430C98B2189980135BE40D28647811E58074C526EF086E9FE5FCF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M(l..Avw.......}.w...)..E..... Y8.$Y.........`q..d..l....T....{3l#.V.pw.)... "uww....G.:-z...^~u..Z.D.~.......'h............K.V.....S....}........w...7+W'....S...-.Z2.@._y`..k^......i....!"&...O....<..H.m[..)s...,f..Z..^.X.ZI[Affc3..1..[.J..k.V$9..h....,.].ki&............k..P6.......01.E......P.m..t..o.....m.n...qDd.2.....l.m..'.m..u..\Y....q..m......C..m...8##.U..j./.m.6~.m.5....3+.q..7.M.m-.R[o]..m....m[sn.m.....^k.s...h...B..j..G....%.............<Z..d......}.P.....D.d.E.!@=;....g..t.2g...A...lq-i.4...h....L..........d....a..).&s..q................t..t.@..BG.T.Ub........l......AO.....ZO ...-....Qs..1!.=....P...]...L..XfP(.b......w.}c.?........!A).D."..*c..-..A....(!D).Rg{;'.MU...R&HO..n.....^k...<.K...H.W..W@...y..AF.$.l........{/[S.&.(-..8..........;...........&....H;.........-?=.i...(...I..w..~....3......w..~g...:.l.K......~..u{..RAr C.c.L..7.......j7....t..k.....'.8..[..@.......Z..YQg..-.......

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12513)
Category:	downloaded
Size (bytes):	13517
Entropy (8bit):	5.314863543101727
Encrypted:	false
SSDEEP:	384:8nlFipHnQ5/BRZJ/bzwT62waHKsR5ssRaREW+ou:8lF2HQ5JRjbQw9sRasROEWY
MD5:	24F387A60FE0B05A15426D721C397D47
SHA1:	012EB578C3C097193F20F123732AC646D2800096
SHA-256:	6AD8C8A703856136FEA1D1911FE8C0E09BCE87EDE20F4C8B98AB8F8961462738
SHA-512:	787E1A2BCCBCD973135E53B53FA5BC89E59AC277D95F30B0595B225667B1F0DEB6616914915200ABB6E522DDEA144E2EEF140876CA502D1317E13E86E63DA9A1
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-1ec6e574.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const e="musickit-components";let t,n,l,s=!1,o=!1,i=!1,r=!1,c=null,f=!1;const a="undefined"!=typeof window?window:{},u=a.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,l)=>e.addEventListener(t,n,l),rel:(e,t,n,l)=>e.removeEventListener(t,n,l),ce:(e,t)=>new CustomEvent(e,t)},p=e=>Promise.resolve(e),$=(()=>{try{return new CSSStyleSheet,"function"==typeof(new CSSStyleSheet).replaceSync}catch(e){}return!1})(),m=(e,t,n)

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	882
Entropy (8bit):	7.658141913900172
Encrypted:	false
SSDEEP:	12:HoZGB9VdmJpBD9WieID/t1x+doVca7zjv7i5oBh/CViWyF08ldhOstIVHUPh3rS3:wGfVdmJDj/fx+doqk7i2vcifhLtauDS
MD5:	D6CFDAA52D298F60B063EFA3440B0E9A
SHA1:	94089B79C966E1576FAB459EEB583AC4DB65C28E
SHA-256:	C91EDA2A2AEADCFF53A9642F39246C27CBF11FD435018C47A28073CBAB5CEB8C
SHA-512:	5F73EA48897B6BEFC19A4225333607D44B2B74687546334FB4948550873055881E2DC2129AF3346E8FFFE2F20EA668FE0169B22FF1EB6D46C7DA928233E5D8DA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw
Preview:	RIFFj...WEBPVP8L].../..?....$.c..\0.....@.6qp.^..M#I....{.......$.I.D.B.d..M.o..K.+$........E...D.D.B._<....P...)<...0....@.D.y,..0D......<.b....6...~..........DH3...F..%..l[R$Es..}....,...!...n................G.x...=...5..Uu.......j..._..\.f_.1....k!a.O..]+.Sozf[J.z.um%L..U..S/z.f.....0. .ZM...k9aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&P>.I..'H4K......EY...D.....x.hg}q..nl...G.w...w............CT][1?\|.z.............A.Mq9i.?/.).L...Kqn...A......c....I.k.>....M..<.q9...G~j.?.......0......E...^.E.NO#...i.z$..&h.D.....j.....a......&(..42.J.SM...b.f....Q!Q.4a.D.8j..H..MP.....4:(...K,...nz,4.......8.....+i-E.....-..V.).V...s.hp...d2.c..eg..E..ih.`..J.....Fs;W.......[.A....2......b..B.M...x4......C...t..l.=..f.w..{.}o..U.M.........8......y.uW.n....{#}..}.E....8..j.X./.Fz.....mw.{.......C..?".

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 10380, version 1.0
Category:	downloaded
Size (bytes):	10380
Entropy (8bit):	7.960698675136466
Encrypted:	false
SSDEEP:	192:wTBTIh6auIWVQOv4Rh3hOpcN+Ho5E9Qdyi1vBH5eITpvRCobJNblSq/:wFW6aQwRFU4cwNdyifTH3Jd
MD5:	9CACA193FE7BFF016EF17E26937711D9
SHA1:	121E523FE8F27D18017C2F7A056F2F14BF43BFC9
SHA-256:	3B7D2B4C5417A697678081ED3B344955F0B25E694171178B0C01E029B4A18E8B
SHA-512:	280F17FBEFA9682CECCDAAEB9D4CB5B283F22F3B403FC03420FF3BB51084F8820AE726DD6D3F3308D0EB2939E1A067C28F6F466AD5E7C736A79FEC85AADD2E31
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Icons/v1/SFProIcons_regular.woff
Preview:	wOFF......(.................................GSUB.......;...T .%zOS/2...D...D...V..pWcmap...........p..$.glyf...t...O...l...^head......./...6...Chhea...........$....hmtx.......S....64..loca...d..........Xmaxp...<....... ...:name...\.........S\.post..&8...Q....Ajkx.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d?.8........L..F9..\|.!.I........+.HsMapP...M.....y... 9.'..;x....R.W.......{.AH.&(.%&&&j..{A..QI.$.\..+.r5.....=]....Y..+..8.Pl...-..h.....i.;.......J..y.......sft.M..f..e.k[.....`......mh'...G..~..5..'..7o.g...nr.........Xc..l..#..l..3vx..^..O../..+..M?];.t..g.>.....1....1.o....9.a.9...\|.\|..G9..\|.<.=.....%Nr.e..4_..g...8....9.s..Y.".....r...`...?S..>z...^.......7..=..N..%..Jk8..f8#..pZ(...P:...t..D.........'.4Jo8s..p.(...R......I....2..+e$.\.h8..p.)..\S&...L..N....r .....&P..w.r8......Q{@..].......>.fx.P[x.P{x.PG..Pgx.QW...;...'...7.../...?..h ..h0..h(..h8..h$..h4..h,..h<..h"..h2..h..n.pk.#A=....lP..zv<.3.D.q.B.{.b...R....p3.S.B..B+A

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 160, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6391
Entropy (8bit):	7.925576155945514
Encrypted:	false
SSDEEP:	96:yBOHH4i/VNQ9Z6PSWSzCjDXbh6LTzPAZTMu7EmBOTzB8rl3Y5/T1q04U6xjbM3M:97Q9Z6PSCfl6nzPMVBOfBE3GMp5jbqM
MD5:	BAEA015A2869C38653A857D46D227854
SHA1:	54D9F20EBE2369F3DE5FF260E5660F54A550A247
SHA-256:	B504DD0577136856D78114D514A13139F2D1FB8B05712787019A5D750C811A50
SHA-512:	92D1E731ACA8E1A9E3B9C48695246A941A9D2FBBCC0ACF699593946DFA4DBBF0B6D138EE371AA2A02F4298188AE749579687372DB0449B0EA8B912E2E02C4811
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/images/AppleAppStoreBadge.png
Preview:	.PNG........IHDR..............%O....SPLTE........................................................................YYYMMM...................iii333.............................!!!.........eee...}}}.........III...ppp%%%...www............mmm<<<BBB...+++(((..........???...666......FFFbbbRRR.........ttt......\\\.....999........UUU........^^^WWWOOO000.............```...yyy.~-y....tRNS.T...G...P.....s.;h........>IDATx...;O.`....8..!9.C'C..".....C.-..HMg..d.....(........yo.=+..b8H..7,..h.......J..R. ?.%../.tV...F.;..e5}82o......F.eqJ..bY...zY..Jc..".19.,....%..p..r...^Lg.K.y....h\|z'..>.......6.r&..f%.>Mx.LN.(.m...#...B....8p{z@y+F.......".Z.._......b.9./.$..].U9..0.-`+h}..,....b...~.<.X.2..r........]CWb.~w.!.....8l...Z.:50j...J.B+.6.g.A.B._.J.,.(T...8..... t.o.h..@.%..........t...;..r.t.t...tW......J?.7.$.(..z..8..v.A`..... .%n^P1E.LM+.....]gv.0%...y...p...g.....q.._E..o...T.Wih..r..L.\.....?y@..N..BJ@.@.X......3...z.V...&X.XNhY.U..R.^+..'Tp......K...Q

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	38832
Entropy (8bit):	4.79684101098726
Encrypted:	false
SSDEEP:	768:t0Hr1eMxTF69ukmv+ZNrMUVfd7k3pY7jVSHUo6eI:t+ehL
MD5:	CA74523C8DD2AF8E71096EB90ABEA33B
SHA1:	47B67EF377E9AFC52340BED1A69DD53BF5DA51C0
SHA-256:	FA8045C24FFB80F06CCF48CAB215B0B3D7FF1A59A0F91FCC6B361A73B1462892
SHA-512:	DC2D4CB324F37671A6FE35A4F7E4FF6F8B9BA307EFC12C244348BF0393ED31B3105E7227D9B447B9F7CE52E23DAC42E0A57BCCC18D368AADFC4E194774215CA0
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/flyouts?locale=en_US
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22533)
Category:	downloaded
Size (bytes):	106622
Entropy (8bit):	5.773099720234428
Encrypted:	false
SSDEEP:	1536:Gj4Z7j2bfHqHxug556wXwodG8kX/6PiVbeZpJx3Jb08M1cF5RHR7Ho3GZq:GjyjIHqHxue56wOVC7Zo895JR7HCqq
MD5:	9C2913E42835CB4C03E484791AFD1B4C
SHA1:	807B82425623BAE157FB5EC7F3D90142E26B25D4
SHA-256:	96E0FD5CAB3EE3270C45F7A7B570B93712BCF918B90F1679D321623BDA5C55A3
SHA-512:	E6FADE33E96926EB8C23FCC8537A14000A1E42F4251CA95169047305EF3E7EF58E458A4E6E71A98621CC900B211A694E19C92267B2BF17700C9BBD5E707D29CA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,C7s1K,CKm2Wb,COQbmf,CR2XMb,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,G2gJT,GjTCAc,GkRiKb,Grlxwe,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,J22eF,JH2zc,JNoxi,JWUKXe,JiSSTb,KG2eXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,Qf3l6c,QxNhAd,RBsfwb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WhJNk,Wt6vjf,XMEW5d,XVMNvd,Y413Bc,YTx6oe,Z5uLle,Z5wzge,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,baVq7b,bm51tf,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,jZ2Ncd,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lDZ2Fb,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,n73qwf,nQqY4c,o6xa3b,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,q0xTif,q8s33d,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,wxpxie,xI1uef,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbKb5e,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=fl2Zj,j9sf1"
Preview:	"use strict";_F_installCss(".qlYO9b{left:0;padding:12px;position:fixed;text-align:center;top:6px;width:100%;z-index:20003}.Gq7XXc{border-radius:3px;box-shadow:0 2px 40px rgba(0,0,0,.4);background-color:#fe8;border:1px solid #ba5;font-weight:500;padding:7px 14px}@media screen and (max-width:600px){.qlYO9b{box-shadow:0 2px 40px rgba(0,0,0,.4);background-color:#fe8;top:48px;width:auto}.Gq7XXc{box-shadow:none;border:0;font-size:16px;font-weight:300;padding:0}}.hUTled{height:50px;left:50%;margin-left:-25px;margin-top:-25px;position:fixed;text-align:center;top:50%;width:50px;z-index:20001}.k7smx{background-color:#fff;bottom:0;left:0;opacity:.5;position:fixed;right:0;top:0;z-index:20000}.rFrNMe{-webkit-user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;f

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	247403
Entropy (8bit):	5.569433548917946
Encrypted:	false
SSDEEP:	3072:mwmScAZVNSNcMzszFeIys86jCBPIrTWRvYElfh6St2nBsLqey9XDeltzvsXGh9A:ExAFMgzFe3DLfh6St+aqey9XDelJsXN
MD5:	C91C506F893CF44524CB7819F06C4EAF
SHA1:	52534BF483B66979EDBCFD791581707CFD2C7788
SHA-256:	E18DA1593116AD6CE5D1314F1C47CE86233BEB25577B0ECAE778CDCBE2DA02E1
SHA-512:	6D124A44C80E0286F9AA7910EE3979F84899E6C9599428BFD944ADAA1887D36F579F814281044786FA54FDC7D45637CD04352144271C9EDC20EE3C25BEDD7EC5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-6VGGZHMLM2&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":17,"vtp_rules":["list","play\\.google\\.com"],"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","play\\.google\\.com"],"tag_id":18},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SE

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5880
Entropy (8bit):	7.9365576331910175
Encrypted:	false
SSDEEP:	96:p7+1iZWw3sbwxQ0X1DTNmd09eKWVCv2OFrn9i8Pa3K6sPfzKCqGT7M2j3VVATk3N:8cZbxD1/ACv2yi8P9fGCqGHTjlVAKY1C
MD5:	0411486320B9D5207FAE3AAC547CE8FD
SHA1:	39CB303F18AB006F845120EED8D840FD51ABDF20
SHA-256:	63A7B7220C070D94281F67E886ABFB277BDDBD22392D4057B8BD04F438B0AE78
SHA-512:	51E964BC037229FCD3005EC272C72CB7DD5D87C214CC2A75A4BF072EFA7122F5FFDB14331D125063012A8C6FE507D5B3FBC396EA4C70F5A80E222F6143E6AF0A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8L..../..?..Gn.H..BPH.....>.5....?......h.....%E..[f.. @@.33".hLG...Hfn.^.....Jy..$...rf...%a.$.`..>.k/......o..#.j....D......M..x.D.$!.@!K"[..W!Q.....$.J._ .H`,l..0.?....-C..]...`u./..k........`0.H........... h.1.2.7..\|..`X.0."-...~...A...?$^..... .......Z).B.ZWR.T.... .(...........9dY..5.=4.....$IV.Yw..f.oDL@.e.;....A....:..C.#h.NQ.K.c.}..Psv.r6...T."a.Y....\S........]kzm+7.D.\|..'.s..-r...`c\|+3....I...... ~.bm....f@kN...o....v......m[J63.......)..(.......m$IQ.Z....o}.h.....m.....!23...N.Sfv.R...333......V..h..n4i.J.L+......;p..g..:....z.l.uy.^.P...UmY....ww..........6@.D.jDH...\|...#I.m.Vj.{....7......i..........w.....Z.3INU..........3UF.9._..\|x@.EP.j.....\|...:.EyO..?../..lP3.9iP3..t....H..O...{.y.A.I.T....{,..b...x....x...../...._~._Y.)...U..._...W.=:)2K'_!.-......z.zCl.E......sNv.]..<..c.......tRA.J..1...66(A..w..Q..CPB.%..1..oy.kN8...$5.]q.......y.(A....E..D......S!.@.%....b)l......I..Q..9..(.#..XJPA....5..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9564
Entropy (8bit):	7.97584128021527
Encrypted:	false
SSDEEP:	192:ECJfBVNEZiq09tLVyXEheWrIngVaN6Bd10IkSmqDXn5R:EGBWizPwXEhergVasGIeqD3L
MD5:	64020C74B49AEB0E58B7150F0499D07E
SHA1:	040E51B00591EC2ACF8C6D78BAA8585FB39F4C4D
SHA-256:	EDAEE1F52C4AD3284D51C88F2BEE378C6018A45BE70349DB914073CDCEE2EEE5
SHA-512:	33715C326405E085D85AE03F9CB3A8A750C35503EAC444DB5F717369B2C912DE62F434248D321C79780E5C7675A49D98A3589F3D85259FEBEBC3A4115055B469
Malicious:	false
Reputation:	low
Preview:	RIFFT%..WEBPVP8X..............VP8 .$...........>.J.I#.#...<....y;-......}.....?...i.<....z.....k....w...[......k...^......._n..........S_......_...x.....^....A.i.;...{O..@/c...k..\|..{..<...G......j.!.y.....W..._..K.....c.../`..oN.b.......3~....W.8.......q..(...U.`h...O. .$.CQQv....0Y........O....2...'..........b......do.#"~....Xb...m.....v!84..[`..O..v.@...y}ma.{m.....S.1....d.......y......Z.cb.....mu..h.3....4..:..._<GP.5!&..Ti.v....M...i..z..m;.k.9.....Z[%.#.......~z.lB..T...X.30.I.......qe.Gm.>Y..n.Er..T.{..;."....p..rE.{..p.S....._.Y.\..f.6......M-=.%..,.#....T.....l...w.%.`fh?q..x`j....g.S.B4.0...V...\...).7..z......JT.O.".n.v...^%.dv.%..N>.$.._z`.D.N.!5/q..j.......dx).. y.\|8.D&R.a.F.;=Y?......l-. ...^...%n..G\.)....%....W7..l.Fh.q)e.WO[q...2..Z@...G..&S3...M.=.^..j[]..6'.t1..19....-{.}.....Pan2...(W..&*.(.=....{wr..#.mj..5x/...KR..\|.r$.......".U.>.\|Z.ZP{.,u.c....HX.(~.br._....D.U.jC.b91.-.N....)..A..L..^y'V...,Wm.s.:..(...).....C.Q.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	14592
Entropy (8bit):	7.979566802302065
Encrypted:	false
SSDEEP:	384:g1OLN7HRNRMf8GjkVlFs3kBk/6Iu+HB9YTqv8hgCeTWM97qZa:g1OLNjHJGIVljyzfY+UdeyGqQ
MD5:	B01009243AEE7B58A9160284C54C452F
SHA1:	FE7822587D0E986CC47918A00454C38645D9C98A
SHA-256:	61417E20FE18149D6D87C80EB994D48F0F1D501F45861FE6F1D3E38869149DFB
SHA-512:	2E170A10A063BA2A7A543EAB115FB132E2841AC207B59CDE43B5577DA9048DCE10A0F041DBB80E292495D6C2D632C37B43585A18A6396541732B57670AECBE07
Malicious:	false
Reputation:	low
Preview:	RIFF.8..WEBPVP8L.8../..?.M@r....4.....5..O...2......yI....5.7.X.Zk..Y..5U..F>..U..O.a...."c....c...8r2)[..7...TOzwwy...;....`.(...,3....z...:..$.........I....53=...V{f.E&...6".w.."!k.[.V.Y..C.r.Ir$.....o.e.DbH.o.:..-..K.dUU...;.././....U+.......g.ct.......O..^7....^..l.l...{8.(B.l..........EJ)@{...w..O=..\|.QJ $.A.,.rx.L...b.(PH..ReV...."..H.DH)..(...a..@.$..E)...>..w....c)..M.....R$..Y.f.....`u...@..pEn.P..`...R}.(.._../..'..p...eu-.^...>.7.../.D..P.S.D(1..]."H.A .bS...#.,...B&U..'fR..."..!.V.......(......W.1.&!.R...L.&Sm/&..v.Y.;.9..$B...0..&S..8.g.&ui{........J)K.....d....R......).....N...lG.J.$.@"..&m.]..`W.....;.2.J.&U.....uV.......:..m$I.....g..F...g.>.w.P...9.z....A.C......3....=....wTp..V...R[..K`3...6BM.QAj..Y.)..sqwC.`..7..U....j...Yff.3333333Y......i.yw.{fg......1...s...s7..B9...z-=G,U.o.r.MCn+.lq..W..(..C..lw,....".:..t)....b.{..C...5w.q[..N\..C.m.y.CP...b.....1.e..J.w...+S.K1.. ...R.m...}..*..m.mw.BF.....'e}...=t.m[.F..\|.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	22360
Entropy (8bit):	7.983148681146632
Encrypted:	false
SSDEEP:	384:5AnHZ16ygMyBK7YYHeVcG6PbdoaVbjs1Xnr2lufRp80RHWDYlPJYmsZ:m516nBfIPW08A85pvRWAPJx0
MD5:	814D2E18A827E16BE3519D1262D3ECBA
SHA1:	6B569111006DBC20425C43DD2E4C69E691133130
SHA-256:	148BC30E64E19E263DEF1FF9E357B60B10CEC9EB4D1BDA231F3EBEFED488A1AC
SHA-512:	3F9516A95EDA1A824062C43AE25419C6BC865BE96198555D0E1BCCC4420C3285AF08AECF1745ABAA0DBA13ACF1571A9D79A163C83E297E3A34BB0417270AD661
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw
Preview:	RIFFPW..WEBPVP8LCW../..?.M8n$I..UuX{..<p.............M...C2S.J$P..E.i..f.d...X...U.I..aM':C.!i..j7D..I.....v.~\.._.$g.._v~.}...d&8@PB...VYH.kb.j..$...J.u4K..e..N4&$.$4f..N..nq&.......h....}W....#y..6XHp$I..03..Gc.?....Tj..{+...T.n$. .......0...ZA...B......U.Y#f.......`..if.Q...m.H..w.1n...0h.tJ. ".....x.............2>.......[uan...5D......r...\|+... .H].5k.XL..93....2...x.@]..k.X.?.bW....<..]f..qF`..7.1@E...??.........?&..2...z..XX...f.9....31UV..vD.!..L...a1x.%.F.x;...W..3..@D.O..SI];._L/\]x...\|Z..9..aE...?..x...[_..-.....r....iW...k!..X....Z/L...._..x.UB.N..@..MD...Z.k...c}W..!"".Q.y/......6P6.R=...ir...<.n.._.a.]i./.5._..6... .ra.IDf........GE.`.A.&tED..f.....z:n$.4......4&..q.v.p....L.C..@.4.}.....3>...te.G.3A.ID..wN..aB.C..aN..%.(".0.\.:/.!...._9...eC[k{2.Q.#kY..u....)...h..XN...I.......Z$...%./...&$&"... 9'..$..e0,$H.uA....A.B.H...E....dg'.\..3..@:..g2`..u..0y..;.....'... ..m#9.....w.\|#b.x....k...v.0..>N.........-[...KI.8....x...`.0SD

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	39909
Entropy (8bit):	7.976805543329996
Encrypted:	false
SSDEEP:	768:RH5XX+GbkfLohh7BRsSrRq/oiREkzqNZJsLjt1DUaJNmjgftLEYZjT9:RZ9bkDcBRsyk/oiRuNfsLQaJNqgVLEAp
MD5:	ED6B32D646E747CD9BBD172A3764C098
SHA1:	EEAEE2B6587AAB5280C9131B73BC17C62BC7B02C
SHA-256:	9B860B3327FD3D017F15B8589D08DD6CD9E01CF7FD59910DE16416B28FD4FFBB
SHA-512:	90C9C43F95FB7E173DEC3396782F7438677CFE7E125B80B4255CAA46C2F5BA4C281328DD9E676FAE761B2651A26CAF58FFFDCA73A4D9D59528DF43BF9828FF45
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/uWsQ5IWVilM/hqdefault.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................N........................!1..A."Qaq.2..B.......#R.Sbr.........3C...$..s...4c..................................?........................!1.AQaq."......2....#B..Rbr.$3C..................?..eE.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.En..-q.._._...^...f;l.........8...`.W.<?..k.../.......}......{....Q...D.p........'......_...Q.......pG......fc..r..X.........p..^...^W.d...-.....Z..P...X...........z.................*'...EJ.....E~..~.\Iw..>./..QU.....0.......O..s#.>...El....W.....E...v......j...Q..........1q..p..^...\....W.....l/v.x...)Em....W..................

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11790
Entropy (8bit):	7.98205917521543
Encrypted:	false
SSDEEP:	192:f2oKfdU9K4q+XrqVcK5YP5dxjJbW5VABlQqmaeWAYuC1rWpMZznQxrXL:f2dF+VbbqVh5YB/1v1maenExnQ5b
MD5:	E9FCF4F755B4DAB6CCC52188E65BF7ED
SHA1:	D643A0E99C40D3BABD6B80441D94CC9CE90C3414
SHA-256:	2949501FF3DBD94656CB997D9FE5BBB45D1194E0C73306F57792B44C8225B766
SHA-512:	4C98EB8E704F6C383EAC7655633CF334CB988C38B6AF8F5ED960CBBD4B4688DAE0E8513FEB036B0F439829B329CCC6C17E6ABBDF7BD8A1774E5BDF61B467AEF3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L.-../..I.M@l.H.Tr.w..?.i.>.D.....[.(.j.JS..Ca..$..{[6..?....P....E.SI.Q.s6.&....{.4L.rk.....x.aiH.BI,.1..{!.A..N..ye......p/..\|F...-fP0...0&.p....\|......r$I.$.=F.....D.....1uU-H..m.J}.98.3.0.m..........m.j.yxOJ.....+){.....`.9.<...(.AQ.).). 7e..-..w..q..^...E1...(z....E.......;+.. ......P..-K......PQ...G......r.G...R......X...........GeN.5bj.w ..............}.Y..,.......!.Hf8tt...__....T......,.Kj$T......!.2.P.7.a..@.\.... .P..d.R.2.1....H..x.P..=...o.J...t.[.LQ.<..w>..........o.+.`...o.`.....m.H2.o{c.......1..\|......4&.HaX..S..e%.Y..Zs..b;.L.d#>j.W.mt.H.ef...a..a.2333333.....c..nb..2I.4....3..o.o...gf;.:...H..-9gv...,...=eTImN.en.sm.mK..K..1f.,da..t0-L... &.3oZ..m.m.mk?...~.3.....V..[..e...T.m........m.7....4....Lafffffff^fffft..Y`.....s.Zp.?..FU...T....U.~.aN......&W..l[.m.R......c....L.KK..bK..#.C.5. ..[.=a....ZK.dm.a....qFD..k..m.F.w.V..;...w%.u...1=.#...p..h.R8.E.....7.\...\|x.4......my].I.z.a.N..79x-.*...Y........

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	208427
Entropy (8bit):	5.846705777346233
Encrypted:	false
SSDEEP:	3072:dqo6/8+oqo6/8+kqo6/8+jNONApxe6NJTTM9z6NBnDnWHA5VXcm:dqo6/8+oqo6/8+kqo6/8+JHpxlTTYNm
MD5:	AAE250B5E266CF180740D562A8C4C36A
SHA1:	9AF84D6AFD8409D1168AA69A0C76B156BFA27849
SHA-256:	02B4B98B63AB760A50E7C9F9C93A4D66EA8ADD16C21CC9C720B7450B1DAD1E50
SHA-512:	02943B21C96E7ED51E594E4A1D9447E495A99FC23451D6F87E94419FC3D1E719D23BAD861F100F1069B3201BA7736049063ED4D3638DE8BC18F68160D4E3C7FD
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,COQbmf,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,J22eF,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WhJNk,Wt6vjf,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,jZ2Ncd,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,q0xTif,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Z5wzge,CR2XMb,nQqY4c,baVq7b,zbKb5e,JiSSTb,Grlxwe,wxpxie,XMEW5d,QxNhAd,C7s1K,o6xa3b,G2gJT,q8s33d,Qf3l6c"
Preview:	"use strict";_F_installCss(".VfPpkd-NLUYnc-V67aGc{position:absolute;left:0;transform-origin:left top;line-height:1.15rem;text-align:left;text-overflow:ellipsis;white-space:nowrap;cursor:text;overflow:hidden;will-change:transform}[dir=rtl] .VfPpkd-NLUYnc-V67aGc,.VfPpkd-NLUYnc-V67aGc[dir=rtl]{right:0;left:auto;transform-origin:right top;text-align:right}.VfPpkd-NLUYnc-V67aGc-OWXEXe-TATcMc-KLRBe{cursor:auto}.VfPpkd-NLUYnc-V67aGc-OWXEXe-ztc6md:not(.VfPpkd-NLUYnc-V67aGc-OWXEXe-ZYIfFd-ztc6md-vXpfLb)::after{margin-left:1px;margin-right:0;content:\"*\"}[dir=rtl] .VfPpkd-NLUYnc-V67aGc-OWXEXe-ztc6md:not(.VfPpkd-NLUYnc-V67aGc-OWXEXe-ZYIfFd-ztc6md-vXpfLb)::after,.VfPpkd-NLUYnc-V67aGc-OWXEXe-ztc6md:not(.VfPpkd-NLUYnc-V67aGc-OWXEXe-ZYIfFd-ztc6md-vXpfLb)[dir=rtl]::after{margin-left:0;margin-right:1px}.VfPpkd-NLUYnc-V67aGc{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;font-family:Roboto,sans-serif;font-family:var(--mdc-typography-subtitle1-font-family,var(--mdc-typography-font-f

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10312
Entropy (8bit):	7.978077493567659
Encrypted:	false
SSDEEP:	192:ZZ9O0GzTQJx8I1hrBhBuYUgnORFf7Po/cLyipdDmRqLkBia7mkOJl4KzlRYu:VGY8I1hrJuZgwBkS1LMia7LmvZX
MD5:	48AEFD624535D25098B2666E195C478C
SHA1:	71FF016A958F1AF6B72BB2A7820CF4E0145FB86C
SHA-256:	478052D8E3A1A597646E36658A3634725534437AEE4C4037B16F5DE9120847A3
SHA-512:	80ECBCE481BB3070975E3F81B9C74D3214DF809AB8CD4ABE12D11F479D8186B3D01A826B070753A2C7F6C359AF6F94B20A2712BEF2DCDB52308C0DEB6B4897D0
Malicious:	false
Reputation:	low
Preview:	RIFF@(..WEBPVP8 4(.......(.(.>A..D.......(....p...\|0......>Yg..q................}.....Y..?.;Z.....o...;..........D...?r..}Y.../....._{?....o...}@...=.3.......9.[......s.../......e_.?/..\|!.....?.......?..q..........<t~.....././......e.O...w..........+.......?...........................7.W.?o....}.?_?...-.b.:..k.lXGT..}....d..v.4....1.Y_}{.j...((..R....uF.0.....JU..<~?....-.%...vPzt.9.c....}..Mr.... ....Wp._@.!..t.T....3\|..C-........O..7u..s"k.n...(.V..K..*a..^0.....x.....%6...G.....4.)....o...4R..K?.H$..B6...B.n.!.%..Z^.T.....o-.Z..../x.e..<n.Io....b...O..C...I`..Q.,4?.U...(w.;l..k..$.h.=i..Rq....]...F$.$..r......=.....oVW..........TKh.N........1.A..,g%.T......h.~...Tf...-_0R"[...F..H.SC....9T.h....?..w.P.........0...%o......7.-c..K&4...R.yB.<x...o......p.>.6 ....by[6#.:f...#........{...).......a[......1...z..&.$1.....[.S.......v..j....[:.9n3......)ii".N...+A.......G(.....nLZ.-...UX.@.a..~...#...)....K...5.,...'?..Z.^.b.O

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	41526
Entropy (8bit):	7.992625090894611
Encrypted:	true
SSDEEP:	768:JQdMiAS5ol6obaU/l7US696c0IckBX+vSfz7McN47gw4qu30WNxf:JRit5GLHd7VSdtX+Zc67zu30Kxf
MD5:	E425865C796C7B29CB4EEAF48F07B960
SHA1:	993B7AA2516AC4932146DC2F02C71D99C4DCDCBA
SHA-256:	6CB58A3D29AAFF6031184C736767F2834B375BDCA270134A075B68853F997671
SHA-512:	BE54AD16598EAA9D6E42CF1B8124389AD779394453D269882EEE74F7376548151377DFF93D2F95557CDCC3A5AC0C7D61C3B9E1262DA076A676C8B78EAE017A3D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw
Preview:	RIFF....WEBPVP8L".../..?.M@.l7n3 .....`...........#".....xn.......gD.l.mV.5.[.].....ROj.]W{j.H.R..`.)...w..#...n.b..@ ..@b. ....z.L@b]r...$..(p{c........k.xG-.Oi.....L..]... ...^.=.._y>....u..=..vc.`.Pv.;[..1........y$.e..x.`DH:..EU!.G...nkk.;.w.o..lA.m.V.B...l..O..qw...nw..w......e...J..Cq)6...D.....q.......n+..IR$).......].ToTVvM.....mD..=.......C......g.........Z..s"E.O.....O.....R...F..(.5.@.V..........<'Q_.>~z..~._{...B...o......R.N...V....>.B(...I.._I....s./.f...W..n....<...=.......4..j\|o\|.;...4....S.f...&.@.@a..[. :..HN..DN.....4........w.S..L..9. P..-.[nT.C..)L...Y..U.h...B......K..J...@t.@..u..9n..8....'..B.4f...n....8>d...#N.8.".[6#.x......}7c..o.nm..g[.<.......<.$...Q.....L.....HH$r..J.... zJr..P.....(f.>C"-]:$....@`;.`....LDnG .v.].....-1.JO..l.&............]..9...%........-.c...?H$U:..0AZ.m+.b=G8....FAAA.nr.Q.TT...@E.c.u^.....{.h..._....ur.9...K.2p.u..../..h.b_.*..U..J.=7.....@..n.c.+..o..1.c....'..cjD.....?./..I......Nz..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	26572
Entropy (8bit):	7.986809716076815
Encrypted:	false
SSDEEP:	768:zN6VgER324ZHtXyFvDWRQaTiBDqFurqbnb1oIT+3RoX:zNKp36WRzErqbb1+BoX
MD5:	2825B30C1AFEE4994A0F81C32A936370
SHA1:	7266694A3892FD01357FDE8600428CBEA082B9BD
SHA-256:	2811C8044EBB5CA8A14EFF454B9BD01B07C9C35F65A02F115E41C9E69517C4C6
SHA-512:	7D41602AC05D65691C010631A539A8AF873C128D9ADBE8C7851453D2794D63CB9BF69527B4086E03897C4852FC6EF3DFEEBBEC33C12F82C58D9561F819DBB0F1
Malicious:	false
Reputation:	low
Preview:	RIFF.g..WEBPVP8L.g../..?...m#I......u.............`;......2Od...l....}..S)e.3;.WP`'.%A.B<z%.%.+.nYz.....\|...V.^.E.5...E....W+yh.....]/uo.$mk[o.v...-..-}...],.s.m........o.P.M...aw.<..+..,H.z.......-.~..%.I%-....L.-.V^.C*.b(......d.i...S.e.1!..I,..?...GZ ..I.)....oLrZ)..Ix..[3.4.2...;..Bnd..5Z.6.E...`..f.g~..d.h!IR#<..S...m.$.$.5.w...2Dx..Z...O..T.....3....U....'N...%.:.......a.......P....(..;x.Y.%.R.....`............o.......R...\|..........L..y).1a........{..sB..S.B)...! .S..O..0...4p...!..........x........0.0.1./L...i.1.8...dg........s8D....#..Z.b..vy`.7F......D.x......#F...w.-n....b .H..c...<d.1."bD.x...#".._gq1...s....#.b....p...@.Cgc..../\|...1.x.._..ig........./..Vn...Xu(.$...?m..#b.xU.OE..5.......9.(A.Gs.....`.=...0g.#F%.."..+Iv..dV...{y.[.7.sy...{..v..8y........sd..'/..-..$.54.!../..On.w..[H<4a......R.}o.i......-....bE..M..M.....d..D.QH.@...zSLqV...4.0.Wp..+mAP....J.....q.!......BMe.$N.-.:........3K.K.T.R.m[......n...._..5.....ewJ.....II.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	194
Entropy (8bit):	6.777928192792645
Encrypted:	false
SSDEEP:	6:8Zgxlhoqb+bM8uFqgrBk1uW4spTAw/SOrfCdx:8eThoKJ1FgAUUiu3
MD5:	79E453B72F3470B2C8171356409CAB1E
SHA1:	26A9FD1736BD5899035606756CC61A86C6B0913D
SHA-256:	5E20B59F35EEBDEBEDA7DDA606EE21DB6907A544EB5B82181A9DB787EA9BBC57
SHA-512:	9145DF93042A0FA21305A9818DBB5198FF2ABB57EAE8E7D3A4DB8D8EBCDE4FF2FDD4B8185D8E98500EE3DAC456FFB5D80A8600CA90CD1CA5C345C8E58DCBD819
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../......l.=...$C$-W`......m..U<.C..'..o....$h......i?N........$..#..M].\]S...NDU........=..Y.d.Or.I.....GnO\.........3.../.'.w.LUf<..&S....Oki..Ir...'j...iA.o.....

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	214
Entropy (8bit):	6.859588302730998
Encrypted:	false
SSDEEP:	6:+d1ZwlZtG/yn1tCddfE8GhgsuzBQmSKdGJcA+/n:o1sWx/cIimDaun
MD5:	7CCE1B46A8F79A1683F90BD496D3F1C6
SHA1:	AAED0D0E51938901BC33E69A535DFB0E03736B31
SHA-256:	9E74CD6FD2F4C03A7F559C67A3534DD7ECAF28226E90960E4B1ABBB1B2E14989
SHA-512:	6A6F8FEF9D14BC63C42B512C1AFDABC7061E77832DB8AF2448F23B6CEA20AE606CC39821767FBB5C405F0DD4F6E1BC5405236C4C4FAB48DB7F8AEE246F20CE2B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ZX8lWMl7wuPv8mi-Gtab8pzGKXm3GKa-k8z51K6XxGOGfR7auS6Xre3041LbVEMCCg=s64-rw
Preview:	RIFF....WEBPVP8L..../?....t!...........F...~.!f....H....]..>..l#Ir..66E.:.Pt.Z.....v...:...}%..m.0...O...[.........H^.......t.c....I.r.Obu.......7...oO.`..LK..S.._.+.Z<.]..}.gg.6......../8[..bd.(...........[..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	7.153897685834863
Encrypted:	false
SSDEEP:	6:c3Zulvhb4/Ep0/bXorL+jrXTvx2GCTn0LpIaoyl:c3Ql94sp0/jorUXTZ2GS09Iaoyl
MD5:	9DEA3CBD9E0F9B455FDE32DCA965B41F
SHA1:	8049A160E77BF9FDD2446113611BB8C99D1E5A53
SHA-256:	3A1344E63287114EAD7F90BE694B7FC95370BF7B215D89BE93A54F39C15011CB
SHA-512:	E559F6BC3C44DC6E793EC98832926FAEB3D2D34811041868244CA89DF67DFAEB899689723C0DDAB5A58063EB4E42539614BEBBA23E09A8697E863F20416DB594
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw
Preview:	RIFF....WEBPVP8L..../....5...Fm4.W#...0D.]....J...r..l.2...6.mU....5.C.(.....'vi...R...Fm.t.......\.._..Y.....c; .........\| ....pk..b....`..........p..../.72<.........AQ.........Y..@.ErE.....d..]:..KG.^.@L.S..g..z..^.g.zg..\.JE..

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4318
Entropy (8bit):	7.952340208238396
Encrypted:	false
SSDEEP:	96:SLBOj/g0KkuukzuVqxuBTZCYb56WkKEmNH8YeXEBSiJM:9j/rKEExoZztz/heUEZ
MD5:	603B8BA36C22566C50A10EB94C3511A5
SHA1:	8E076393F2A191B2C38899552B566A287CDD9B6F
SHA-256:	657F14CDFFE966B1D6FABC4E06F4DB674D17E8A570C44CBCABE046F5CC98C8A9
SHA-512:	0904EFFAF009A5E5214AE78D3BED2703D9D91F096714A9CAA4189E950BAA28D10673799A94156B123C5608B6FFD647A08B1C8BD4AF8E9C7508046FDA61DCD2E7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.U.m.$G{......%.R..EuT\.lf..f..0.>....O`......:).0CL.`f.Y2.);..J..d....V{.X...f.......-Hn..Oa.R.X.<YLu..y....K..........\~.8[.'..h.4....v...R.`...J..cv0..sV.......m.Y,.d..,`.1...8.q.v0...$..XFR...;..l......:..Du..;.......c.."......Ij.b..].J:Bf.l...%.F..m.\|.%q_6J..6J...=.%i[......[W,..<..if......UW..kfC4/.E.TjO-,..&.a+...5.....[....G.'.g..X..g.#....;.'.m...gU.v..........@S.P7gFu.=.nA.7k.......k....u.i.t.....4U.[^F...w....&.a~....4%...K..W.W...}c.c...V.{.>..,.pa;..<..U.p.]4./c.....z..7.{.c...q...~XHNMJf..&...WW....'.?.hT0..d..:i.F.....n.4Pf...6.......Py...q..b..b/".dG.;.n.._".77.-\n..:(.....z.dp..28.....c 9.........6s.D] .P..o...T.2.T.v..w..X]].n...-.....S......8q.QM..4....A.V...jn..Q..)......W..'...M6N...oC1.Jjg...:pq...]./ucF.,....S.._0..[....<J.G_..]....2i5.X.9..JK.uR...Z ..j.....d.L.g\.#..2m1...R.\.f........d..Y.%.D.....(...p8......ny,.J.]N.8..m.{r...^m...a...F...5..g..K7...'....Z.i....b...:..H./z...G.. 4C.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2070
Entropy (8bit):	7.864485372164771
Encrypted:	false
SSDEEP:	48:d/wu0b4B+mbxo6SMsT/zllswHeztVJTqqKiTRAtp9g/:dXU6xgl/he5fdC3i
MD5:	E2B81851FF866572E97F2A6ED8F3A87D
SHA1:	EC7EA23254A38C5777FEFFE98AC98C042F762EC8
SHA-256:	592923F8744D20C59F2ACCB1B816F2C3106617F59DD33AE623A770DE0765D9DA
SHA-512:	65DB4EFE0F3A633DD6977B1F8FAC6ED5EC8A0EC60855621140EA07D6E3FBDE7826D3B5ED63198A9B7F1191D09008D98505F88009315F330ACFBF71B71FE9CF4F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw
Preview:	RIFF....WEBPVP8L..../..?...9.$ER....XE.c.N..$)R..o...f..d..$j.o.~.._m...Sf.gA.....2....".0.~.!...~..A@Z.......B..B...J..A!L!.A....P..Dq..i.L. -..a.q.0.B.?..a......Q..../_EA.E..&...X......6y...J.....oP...F.....D.7...`......+..i....(\...VZ...........yE.q....~_.....>lD.!.p.!...2... Y....A.g......u......t...w.eH#G..?..b9...sl....0...Vf;m3..q..dO.[.."..O NQ..DQt..R.....\|1C..S. L.96G./R:.~....[..l...{..$s.....k.....a6...bQW..q..:E..p...+....{....$D...>.b#9ls.[q.5.7W..(N..\.............P.......6L..nl.g..:mB..r(N.)j\|...I..B.{z...ES...8....d......v~.&!...1....t]L..y.-8./...&!..r5I.).....QG...C.{z.^O........6..IO.x....MY...rJT5............w2.7.......9..i.bJi.......E..+k....z7.^..fN.WRG.B1S..'t...1.Dd!.p$.....NB.8e..S..].F...o:.~OS......-..(..N...Dvrem........Sf..S>t...<=..JsT.f.....u.O...?..w1.4/..yYT>1J.. N......."../..E.W3m..@qJ....:..5.....,.Bq.....;o{..{..."$9...5.!B.=kZ....6XOF...:-.z......kf.z.Ru....l8o...........1.5...;..........

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6458
Entropy (8bit):	7.957918669828179
Encrypted:	false
SSDEEP:	96:7PVKoL/qyR2sELBjs3+O6RVlTRbQhJVQjxlCgtOftuKb:7dKg/VEBIeRVlyhJ+xlntOkQ
MD5:	A379AF75205280638DD6B7D078B65C3C
SHA1:	00AC5861CDC7F407D5740FF96AB6191A501684FB
SHA-256:	E81307F9904D497F5F5456A76B65880030C4ADF8C991FD60CE20FACB94899D80
SHA-512:	103B2CB011D1550BEBC6E7903BEC80D8FC1BAB79C85CF062EE538F01FF2DB6723596418D1E260BC4395798C7A31E8181D851BA99B8A5F9B371FC629870B20AF3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw
Preview:	RIFF2...WEBPVP8X..............VP8L..../..?.M@l.H....:....... ... I.<......l$y.H<....cb[.G<.$.@.'..l.y.$.id<o...tG.@....$(I.<.F.....:...@m....@I5.-..z...A.&...v..B.......\bP..n.JUUG.t.O..)......j.pc.v.,L...`(....HC$...29.m$....}.....a[..F..I2..........G.8..?..@,^.H..?.D.d....T.0@.k.g..../l...;.8xS.A.V..........k%=...@#'g[..H...S.Eh&......~=.-I....G.......0x..w...UE=8...Br%.>...T....z.Q%...c ...@.XDGU8.3lp...l.w..p........B.............W...EN6......@...<..P6.h....0L.....}.n..!..P..x..D..L....2q.m....;.....m.e....JCp.A....z....B\<Z.Dz N.,T...[.1.#G<..Dm.i[s......m.U?.b.m.l...3.m.h5..s.5U....9f0..../.S...v.5f......9....V.......'...^...m..6.....ffN..ct...;0..]..sk.S1(..?H.m.N.N.f.A......#....X.m.$......"5.0n......CC1SR./.?".#.k.....+.:.A..9...R.L..1.bF.r.^. I2m....;..o.m.m....m.6.Z..m[Z.}...b'D......yw.mt..;h.....t... ..~...!..E/]........t...U.1.9...X.uNs......>}.."...\|........p...q:.C.9Y.].x...l1!pDb3.\e...J..F=.`tf......6..p..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1420
Entropy (8bit):	7.799297445764672
Encrypted:	false
SSDEEP:	24:azlJ+zVAu5cXL9iUYO56HbSlCYvfwU93E7rrL1IkqTl7e0Sw0ePlT/enCLgYYPZQ:GQ5zUYAakvfwU90zZIkgRPSlcTmnCkYZ
MD5:	CCB410D15817F7665022D4BC0A36AF3E
SHA1:	D0A857054F3CD3EE67150A456825C7BDA284E454
SHA-256:	52B9D8F221B438BF8B914425520DB5FAA49B4FF50F8F89C3419BEFE6201BA332
SHA-512:	63BAE64AC6D0C8402E3955EBDB58D5F9ACDE621AF78AE9E55F80414A2818DA7738C5EB0D1478CCE222BE7C899A2443348DEF117AB15FF78E001E130E3E984425
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8Lw.../3....3m.({...;......J.q....,.E..(....\|.u...`$.../...?..P..m..Y>.........F1...@........ ....+..<..(@g.c.s..`..m.....n.1Z..>....Fe...\|.U\|kg.)........~...m.Fes..0..:.2.....ve...\'..U.J.....w.."..R#.b!.J.qX.D...w....?>..]......b.Z-V...V....'.z;....W...R....[....Z% J....{..O'....f.2.......4#...v....N.JRX.%.y%.JPa(A.Im+.+f...).Fs.4A.....)I%.i.....d.D[.v.'P....;P. Gm....D1.....Tp.....m.R..h......hZU...I1...S..T.Whq...Y..bI.. ..U......z....KE6.F...a.aw...^p..77.>...d..........`l.~..>w........FkC.}...)u.$.V".B.Z+3...7w...o......E'...c.O......."X.#...K...1?.j.......=.@.]u...W...2#A..).`!.w.k..f\|..7o}..Q;.P.^\..Z.....y. ....a.1.F...jQr..W\|..]....v..~.../.g^.k...b.D..@.$.,2\.rji.......p.#......)@.V...AM...\|{.....3..10........(.....b...Tm.]g...q...VN.G1...X.....N...P.5.^k.`...^.v..;h..=............_..-........Q...jb!.......Nt.`ym.^x.........Vf..O....>....u.....b.....M..m`..C6.F>....+?...]q..f..).R.,..n...z....vk. .....e....#Gi..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15902
Entropy (8bit):	7.979385311048091
Encrypted:	false
SSDEEP:	384:MIuCkzTM2Z9KfMO16MXqHCiwGJV3XZ7nCrSnykTm9FJpt30f:putzTM2ZUnqiiwG3wrX9Bt30
MD5:	C9BF1B0C8E9A522267763ABD87AC849C
SHA1:	1422C93842559FC4D7DC187F9291938D8A6082B3
SHA-256:	BE5EFC8F8DF15934C93EFB63685E801D4F9CBB2329587BACEAB6A0230F89A29A
SHA-512:	6EA335EC4AE7ED60394D2540721C2CA862243474276C92487A9CD4C62EAEEC20EE62DD699234DD2BD3127D51F90F559D19767C3067E2C3792BF710618BA63377
Malicious:	false
Reputation:	low
Preview:	RIFF.>..WEBPVP8X..............VP8L.=../..?.M..d7nS..........d......?}.'..c}..^0c..cC....{.OH.$...YDw...>.w.....J.....7....$. $.P...:\.l-...M[f&.U.w.Y.o.^..y.{..T.<.....3..n!.bm_....y..9H........l...6..gPHRd.{.......k...[..B.k....&..Z....0.)..".7....}.i..$I...N\..;.......On..N...ik.o.....{....F......Z.......U..r.5.<2.....W.D..5...Yb....@...D.B..x[.Qi..(.OT.RA....7.TJ..[....B.@....EQ....H.h2S.X.Z.-.@.D.....>....(. I........(...zv.........Z.(D.x......@A..>.).O....CD.!..'..\|...`pu........@...t.......N+Q[.....G........F...._.....P.%.=...P.J.L.v`...^z.'...@+..F.k.i..it........ .vY.@..@.T.D.u..``p....Bqj.9.-.r...................K}t[y..ap.B3...Z4V'..........{.s.V..`G...E.m._~].N,.,q9.A.....G.......I........8"&....T?r.....u.U...\|.u..:....G^w.u.......S.v..5`.`.......<..V.;...;...u.=6..S............V..S.P...>S...k...h....)`....A..AP....7..2.Zs.1....:.Y....kc.....\. ....7" ..E..@.*.<..-....I..!...!....3..\|.%........sfJy.4.+P...b.0O

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10386
Entropy (8bit):	7.975956172302429
Encrypted:	false
SSDEEP:	192:+YXwO8Pic2HJad5gEIUfjepDln3z6Hr8x/TxZEocZ:+YXoPx2HMRIojexln3zFx/NZgZ
MD5:	955F68307CA9BD2F427D5970DEEE1D1E
SHA1:	67F87EF27C6EA1A0B3709F73458EA5FF8176E812
SHA-256:	673272A548E872F947165409FB97372063CADF37EDD624D9418788FA469089D5
SHA-512:	D501B2E052874AA4807F763C4CCE5B27E75463071F71B6999287237DA90A8491B1D64B4C85B7CAAB8DBE58041E22C5D088A64143A2F2CA814F51F2766A907124
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/WohXKjCe_QuVrxL3ksS8lODC17sMd-U4kYALcaYabasjh0mm-quhTCfc2xwuZbA9_HU=w526-h296-rw
Preview:	RIFF.(..WEBPVP8L}(../..I.5..m............'&H..oR..m.F...P9....Dv69.PU.Gp.9'.s.9..9.'..9.....{.z.^...&.x..D...H.#..X....A.d&'..[...J...=.'t.TnJk...$7..k..jk....X/..A..N w..m.....q.f...NZ.....N.c.g.h....,&.#vd......j..&..-:.6.2.E...^[M.t.s[..G]..(..$I.....]...$.$..D..-.{....e.... .m3..9Bb. .G..T.._u).O.....>sd.........].Q..x.....%...a........,.....J.....kN.+.C.lo=..k.o.H...D......fM.a......A..M.5..`f.....3... .K.l...m..m.v...m...=f./..3.7..r..u~.].P..\.&G...M...Ut...".j...9j....>.E.i...G......rNZ%.2VG.DT.YB.GH...i....c.\...)^N.e..A.6.9.\...:.U..!..-..d. <K...Q........h&.T..7......O0...n.AY......B.d.....W(.....?.@......V.}....bD.UX.`.E.&......Nq.E1aB.T..V<..[;......H.U.Pi...6ux).-...?...%.ae.5k........i.......E.wS..Z............v.b.D.......p*6i....V..u,..y'...(%.-=..b[/....`..\b....Q.+2..x..K.!.YQ].dB._.d...[l@.E61.p...c./d..R..L3.;..H]rX..."..`..D.c..V.%.x.w.\T...u#..G.Z.!yjr74Nt......#.p..(.H.(...l.@.Aj.../NCG.<..:.AB.T.IW

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2620
Entropy (8bit):	7.907739599114583
Encrypted:	false
SSDEEP:	48:VvjWsYJqgQQ1DZsFI3v+a83wLw+umPOFXwrl6ipckhwH1VtCWjgg8Ofslf/zouhD:gsYolQdZ8KhjPqXNtkm1VtCWjgg8QY/p
MD5:	52025B894AEFE69D60C3062A654A9BCC
SHA1:	C6CEC5F7B2DB19A21339B974108DEE6B7190CF8F
SHA-256:	E838FE70129812268D3FBFAC662E7CC766EC430823187A64459F32C10DDEEFB4
SHA-512:	94A5924201EDE700FE74BCE864D96281771722B02AD1801EDE0F9747952CC5847494595B4656DAAAFCADFF48353C6591D6C273F24D1D8FC7AF1168FE9F89835D
Malicious:	false
Reputation:	low
Preview:	RIFF4...WEBPVP8L(.../?.....m.9...,..?0D....f[6h4....Z.Z.;....[h,.m.......P.6.c...B....II#IR9X...u#.....".I.O.... B.@....A....P........`.....M.l'........333K.3[.........Q...U=gV..b..h.LY.LL.W.K.u...0\|"Sf....&J..6%-bV"G.d.m...m..g./..l..m.m...?X.l.6.g.{........m.nF...m'u.{v8p.I........0...7....b..)8X........#K..bj.....G}...$.@$b2Y...A...1.@....I$.N $.@A...T.b "@].....5.2Sg.x...V.....%.Z2K.XN.)..X....4Q.Q.. .5.....\|.&f..%.\|.(Q.l....."c`..b.(....].LN....(%.}...S7Y.4EQ0!.A%.3zU.LD.......Z.e..s. +..........<._g.4 .lYv.F...:.....M.....!.cy......!Dz..D!...B..^...b/D>..Oe..PmW.o./...V..m,v6...lz..$.`..1.].fM.M.h.b.c..U.L...c.S..u}..2.O.....>..\..a..X._...[D.}Z..C=.b.R.a..cx.....5..Xqj2...4\bO.O%#c.zX..8.O.B..+...fG...Y...,3E...9.y..6l.b....I...G..R.\|.{U..#.M...qvk...p...'..4....-'..<.nO..^....>..Y.:......u.&\a....8...%c h.V.#~....<.n.X......<.\~5..{1...v.D.@.U../s.m.\...k.m.s........b?.a.}.....6v..g.......-.r"..)$..........d........).

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1219)
Category:	downloaded
Size (bytes):	59153
Entropy (8bit):	5.602178783638648
Encrypted:	false
SSDEEP:	1536:mquW4jWRvdUqnK30xCurrb3JFVmWELruRDZK8:mquWVdU/kFUWELrC1K8
MD5:	7BBD7844542F87C6274AF9B998BB1AFC
SHA1:	CC303673ACB24D56282A7BD91F1F7FEB79529DE4
SHA-256:	2D00D264376F2F0F37B90227849C1C5109A6F36C4BB449CB007359CD661A74A0
SHA-512:	83E68839697F59008953E9A45FD56E5B33F8A23422C441F406300389A6F2A6693D4F22A77B1ABBBC4C9A2044EBF972F801BA7527CAB93DBF5960E097BCE01FB6
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PZ1hre,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=LRovxc,Y413Bc,J22eF,iLGjNb,ULFnWe,grWkAb,Lkzi5d,LcQwud,mmmrlc,YTx6oe,qk5AGd,kdbckd,dZ05Qb,UZStuc,xI1uef,PAQZbb,e3Zld,w08zce,UINLVc,iAQMie,NkwaS,GjTCAc,kpVlPe,g6aYuf,ElYdAc,PRm2u,pQUyNd,RBsfwb,ZMKy0d,Kfp2G,qczJ2b,C7e1Kc,FoxcOd,CKm2Wb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("LRovxc");._.$q(_.dBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"LRovxc"}O(){return!0}kb(){return _.A6}});_.Aq.LRovxc=_.$A;._.w();._.u("Y413Bc");._.$q(_.kBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"Y413Bc"}O(){return!0}kb(){return _.zEc}});_.Aq.Y413Bc=_.TA;._.w();._.dX=function(a){var b=a.body,c=a.class,d=a.jslog,e=a.attributes,f=a.jscontroller;const g=a.jsmodel,h=a.jsaction,k=a.jsname,m=a.ls,n=a.ua,p=a.Ca,t=a.tA,v=a.dj,y=a.un;let z="",C=(a.Ha??"")+(a.Lg?" Ubi8Z":"")+(a.ks?" rETSD":"");const D=_.NM();z+="<c-wiz"+(_.R(n?.Za)?' jsrenderer="'+_.T(n.Za)+'"':"")+_.wo(_.vo(_.Do(c,C)))+(null!=d?' jslog="'+_.T(d)+'"':"")+(_.R(e)?_.wo(_.vo(e)):"")+(m?"":" jsshadow")+' jsdata="deferred-'+_.T(D)+'"'+(!t&&_.R(n?.qT)\|\|!_.R(n?.Ca)&&!_.R(p)?"":' data-p="'+_.T("%.@."+(n?.Ca??.p??null).tc().substr(1))+'"')+(null!=f?' jscontroller="'+_.T(f)+'"':"")+(h?' jsaction="'+_.T(

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9730
Entropy (8bit):	7.977292533251305
Encrypted:	false
SSDEEP:	192:b28inkc200rlUTT0TNPfp2PIHU6MZl2/GZ1uSM9ukgbgKV3:bZikc2ZU25p2Q/M+/GZM01bgKV3
MD5:	C14D3871A3CD2A351D3CAE466421E99A
SHA1:	BE92013D01CA1A7293DB6F4037A1A0EC56AA34F2
SHA-256:	4F757E61AAC42D9E543EC4F724E80B842E36AD3CD53A25AB31567715BCA23408
SHA-512:	28F4DC3C5EFB92B8A6CCB7CFFD4E0E6175EB6A5A34042206383BFDEEA26B09576D865BE550648D1A7B45CBB0620867968F781B58EC1641D4206E63D154030B1C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/mhjx0LuEJrAw4rY3p9ymDfFJIh9PkyKxJAlx6lFy4FWaRFP3TyAZYFMrLuIDz6l1jqg=w526-h296-rw
Preview:	RIFF.%..WEBPVP8L.%../..I.5..m.{.....3"&.M.#..P..i.}{..o..FO<..(.......;qw......?....Q...{.......&.0s.9....4FOw..O.nI.Y.T....g.&..]J..Tb+.!2d..Pf.,.6LY#...a.!...D.T!g+..9k..^..{.2.z.MN;..T....Y.2U......N.......P".Xhg.n..)T`r..6..Ir.8...oOg..$.$..DDo..fn._...?....(Ir.6s.{<@._..U>...../g..m.m.m.m..{3.....W.[tQ......f...r.R.....n3.FuzV.w.&...im.c.m3)s..t.....-S.Rk....l.....R..F.l.m..v..w.............m..S.M...m.m.l..3p.H...........7'...U5.?5.N...QGA.AS......Rk<G..{z.l*f....vuGG..I..\|..xq..`.?~...D..y.IP'K.......... cQ.s..?.:......4.....d.]S.k.......%..S.......'b..x.GE....Gb...DtrD............j.(..AR.$..jo.u...s.Ln...0..)PT.......'.....4....{dc`..j.......w@............wW....L. ..HK+\..R....j..!...[0W^.9.V.V..-.qmK....z~/..._]]N.).[...`c.7.sm..m.{.P@../.$..j7.T.z.9I.....a.5..>\.u..>K..0.}......",IY...{.h...hc.%O..4s!H.....+?....G..o.W.\|.@...0......RR.`p....M.;.vF....45...Ch...0..].[..sIzfR........m..Z..pgy..bZZf...........aw.].p.."../....K...

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-c88356640b7a7aedb98664cb26145a83.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34202
Entropy (8bit):	7.960545923350099
Encrypted:	false
SSDEEP:	768:sNDrB7TpS9fy9Rk6AZ0HCNuep05RfI6zQWlkA4ig30dlG+dkQ5G7dyD/XlA50Ina:sNPB7Twfy9G6nSuDpzQWNLRdlTyQ5G7i
MD5:	40BAE2E96B69FE58B121D7E6938CA0EF
SHA1:	865AD4D08F7CE3E6B64906B9F12D5D2DD3FC1D61
SHA-256:	DEF24518B45222080C6CAC48429194BBF6769ACAA8D5D046D184F6800D4E6154
SHA-512:	9BDBB6B5BF9DAAE21130BC8BF052AC705CBDBEF198482ADF7AD3AB3A8042D577CB60B5D0116ECA3174469DD067AB91AFAC7B3567271DE21CCBA7DDC3733B966B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@.d+l...e...`.&%D.......o..svw.9..>...v....{.....$...s.......e.v.PU..$.M2T...s..c...y.Q.....7R.IU..X9p.$@...o.z....u.#r.V.H.!@..CM..C...<.@H.L.A....D.oUqYXO.....P..Yj.....H.5.ls..z.TG@s..w.F.r}=P@...sR.{...x".G..!.t.O....R..+...]...m.s:..F."._...$..B.C..{...Ir])...v....{..F4K#.1.....m$9......[...............+l.af.%..$I..1..5.c.....3O...16}.u.9kl.t...R.b..8..l..@..z^^e.i.t\|..c.o../.\.H.F..\..u...6.G........Y.N5....l.Q.U........w.W./...e\|.u.x.55.x:Lc.e.....5.+9He.......VF...6,l8u....T8I(...R/#..R$CB...BR.PrQw.m...B.+u)...5..".!..dM.R6%.\|.,...\..M.6..md../...1.....e.'.m....x...5.....6..>.m....u.{^.....8....". ....z......l...<.5..=./..........K}....z.............G..{.>....7T4....;....h.wc^..M.@.v....Q<.m.v...:.O.0.N..o.......t..5.!.V..'.....ga...P.P.V....G...X .NB.....>.....v4....'y...k..}..7v..q....}....s.......{4...=.....(...mhh........x...p.....@hh.a.../......HN..61..O."x...K.l....\|.......[.h..,V..........b0

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17696)
Category:	downloaded
Size (bytes):	18291
Entropy (8bit):	5.675040290596522
Encrypted:	false
SSDEEP:	384:A10ZNodN7X9fo6Gfx+VfvBZbIPGIu/9xJMD5RjTORps0E30cIMW4XdiGZ0ZeaeoR:A10ZY7XNo6Gfx+dvBZkPGt/97K5lTORP
MD5:	8D120D4D5CB207E52720218A143FEF17
SHA1:	DAE68D4F786BDA08FE39D89AB6F3366B1199CB8B
SHA-256:	AC88D994CF1935F39E5504E88EDB7938FB98F589C4D02013F36B46D15F98517D
SHA-512:	4611F40996ABD45761C5D56FD3EE000A3733ED872C6CFA89E112E32104E328AF632B0330C20E125E248F6D5718116D848A1D0CA28F01626CEDE564610319D629
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m})}catch(F){a.console&&a.console.error(F.message)}return z},m=function(z){return z};(0,eval)(function(z,w){return(w=K())&&1===z.eval(w.createScript("1"))?function(F){return w.createScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),w).push(z[8]<<24\|z[9]<<16\|z[10]<<8\|z[11])},zc=function(z,w){return z[w]<<24\|z[(w\|0)+1]<<16\|z[(w\|0)+2]<<8\|z[(w\|0)+3]},Fk=function(z,w,a,m,q){(((m=(a=(m=B((w&=(q=w&4,3),z)),B(z)),G)(z,m),q)&&(m=wk(""+m)),w)&&e(a,U(m.length,2),z),e)(a,m,z)},Q=function(z,w,a,m,q,M){if(!w.SQ&&(q=void 0,a&&a[0]===H&&(q=a[2]

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-border-f519029c9bc5f9130e7826c69b475d0b.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9368
Entropy (8bit):	7.967843375396012
Encrypted:	false
SSDEEP:	192:I8124WLEuOrcUr2Rs2lb2v55XKHvjqLIy659HPmWiE7mO9OhQu:P84WLOrz2Rs2Rc55ocdiNOWDmOkN
MD5:	FDB6C15DFB99947131D47468367100CC
SHA1:	292FE749F194AE3A4900B342CC14BA835672BE5D
SHA-256:	2816C1549257D21C7A99D8E12012987EE26E9821295760C51E8D766BBE5B4180
SHA-512:	7A97CB6079FDB5B8208A3CF839DE45BBF83858A22E2A8125898DC80EBEE310433CC0DA5D42E7D2DC5654ABCCFA90F489EB7CC91FE7D4600D2D57C0F60BDE793D
Malicious:	false
Reputation:	low
Preview:	RIFF.$..WEBPVP8L.$../'.I.5..m....K.....Q.x\|../ ..u.,.......w..f..&...Ib..:..^..;.>...[v....x.\..\.m.m.m.9....}...s.sR..mNS...v.....~....g.m[.+..y.t.\.]gn1u._.IWc.ggV&u;......_...m0we...d.N..&..SwV4.r..R...<%rw2..Tk..'k.}.y........X,......Rp.....m#G..5y.js.....M[.n...v..W...m..]u.Smw...g.w..:'.k....z&T...h...F..(7+..Dc........Yc..J.Yc7..'.+b..7<.S....g...x.{..0..J..mI,....QB........u.e.C.D.......v_`cw...l.mo.{.m..?$...IR..P..;\..M.4i...^.Y....U.0..D....)....s7I......xt..Z.h...+...d..X.........E.)...ZR.T.Dc....HFQE./)..<;M..[...I$..Ll.K...I.........."i..&.h.Bw$..!.q....#.4..Z#:.[.....m..v..GGi.&..I.k.8.6}K.dj..!.Nr..H.......&....1.gno..S.ID)tR...L.._!.sL........\R..Uq.=E.ME.F.....n.....&x>a..z..#.gl.......n..&.Ol.c...h..Q..".n..%..kRH\1p....0}..F.X.kCj.B.......'.$wm.7-.......B7..J...x,T..\H..v2.G.../&......:*U`...S......D.IQ?;..\:..L.%...{.Y....4j.......gu.7..'L%<DZk... .X..X.8f..!..)..Q.7....O.>....[Q..N+q<.wS.O0.\|1..D5........

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8990
Entropy (8bit):	7.959388167722879
Encrypted:	false
SSDEEP:	192:qL+8F5flrsw2TNllSoGp5DRBcFOC41pMvNjC1O4BCJXn5tzmgb:K+83flr7BRBcFO9SCwjzzt
MD5:	7367103A0E06381FB02DE1C6E95DD998
SHA1:	C2A6FF6A9EC8AD29584C6E2D01B15C17658664AB
SHA-256:	162FAB3FA3AE06EAFE7E688D8628A6896E99139D18B34EEEEADCAB541565A8AF
SHA-512:	C45351B6AB639FD72D3A7CDB34D2F95CC4DC82BC46ACD029F2388FF091E48FCA84E66F698D419F8E6CC2537EE706ECD199F52D94DE69AD900E41706F43EC9B8E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw
Preview:	RIFF.#..WEBPVP8L.#../?...M0h.H.&.........$.)..v._.0J.ki..[t.$E.e...o.1....$+../.......E..$..<...p,..5.?^.B&"".I...."<(.d.S....$......N....t..........8.....0.....+...g..^..@..._F.>........:y3........?...XrNN<.B..wj......2.^..sw}....5www..`.. q;..{........}..N...`.m.m.m{..{.$....=Q{.W...}0..............1(.......Zf9:.M.RB.[.....$.....G..P...L.'..S<wHr0e...8X..i%R;....Z..s{.Y..@(...ze9;......4.$.......J..iAN...r.Osh......!.4o.w..xs..u.....z.?.}.r._:..gw...3.rddc.......^..Z...k..N`_.I....H...........'.z..<L..`>.......7....w..aS...;..W..$.\.p~...../.P..H......k.,=..9=..^.'.(...t_..N.W6#.+....e.<...(...8s.^.X{.QE~9...........]..p;........`...........P"6P?..p..Z.N.."(j...@.R.s.o.S.x.c".!.xxs.`z.....^..x...Ll..`........{..1P...~..#J...R.....[....}...Bd..{"M..g(..G..a.c..kz?y.l.D....0A.......l.......q.@..H.i(R..o6..!.X.y...i'..Z....%..~..?,../ck.)...c.......E...o....~$........Cz...T.............3.C<N.I.....i4M...........*=).p./$...........

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15710)
Category:	downloaded
Size (bytes):	1315045
Entropy (8bit):	5.486581690781453
Encrypted:	false
SSDEEP:	6144:qMZgYb2j8zj/s+MBjRsiz82ILA+YodF7UWWkM1OAO0QJGlLXrBNz3HQqkVBdd6t:xhtKPyG1oHKb3QqkBdi
MD5:	D0C3D54A8850742CA39F2133E6143EE8
SHA1:	CBEF393DA25C2076AF6EC3C8977506B912363250
SHA-256:	4C9AD7B8AAD353C4FDA505EF34A136501ABD3790D9E775C210E1697F5F88F7E2
SHA-512:	77A1FB3194DD5ACC8272DBCA36FA2A2AF86065BDA7C4511A01D8EF0F768DCFAB78E5E2D66E5FF11032B967837CC02E36724F1EA3B4792AF010620BF373035105
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d2b5e41e0-2876-ce7d-04eb-ed9b5556ab0e%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK
Preview:	<!DOCTYPE html><html dir="ltr" lang="en-US"><head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">. <meta name="applicable-device" content="pc,mobile">.. <script id="perfkit">window.initialPageRequestTime = +new Date();</script>. <link rel="preconnect" href="https://amp-api-edge.apps.apple.com" crossorigin="">.<link rel="preconnect" href="https://is1-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is2-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is3-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is4-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is5-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://xp.apple.com" crossorigin="">.<link rel="preconnect" href="https://js-cdn.music.apple.com" crossorigin="">.<link rel="preconnect" href="

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 162924, version 1.0
Category:	downloaded
Size (bytes):	162924
Entropy (8bit):	7.998614826254304
Encrypted:	true
SSDEEP:	3072:XdhkQyBlHVVYwHUFDrzXtPz/qJwZmUyhjpimMS6DW4hb59a06EziVFKth8Biq:wQyBBvYw0FD/tPWJZjI3PXhbrduVFc8f
MD5:	7F2E1B48B71EC58FDA4539018A2F56CC
SHA1:	507BF81F52FA8C99BF2C5C8BD59A981899CA9995
SHA-256:	7F80C4C91054B3D6C80721939242C2D4F68F15E41F251E12641F695D78EB2F35
SHA-512:	DD7B52119D1179332147984F6C7D8CDCB3388AEB1E8AF708EF9036ACDDE6E7B3900ACC965221F4E4864DAD89797072E19E5B308CF065A65DDA7656BE884CDD77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2
Preview:	wOF2......\|l..........\|..................................`..P..........N.....6.$.... .... [.m.A.B.$...c....5s/E...%.u..v..J6...:......;............$........@..M..... 8.HA.6%R...tB ..D..M".f.$G.....<....~.y;..R..23.S.T...p...'V{\|u.,S....Z...lZ)..Dc..D..;=n...V...<.X6...h.......:sw.....T.6.eF..!=.f..H\..dDd.q"s.E.Q......JT..v..#Mf"sH}A.>.....q.h.mLC...Q..Cv...+\|.u......6..B...I......K..I...R.[..m(...P<B."R.Ap.f.j:.o...\o..L..G3Yn.C..........\rI..$$!DH.!....v0r.E...p..WK.v...muW...X.[. ......j...1\U..8V.&.X..i.T^TO..^\......&.g2Iv....>.J(.T...y...v....4.f..a....$.K...M-5...1D.ya...'.'...A ....!.@..c...$.D.3q..:...:&O.rV..V..v.m...[-.Z..m.......:o......$}.h..i.N.FH.$(..Zq....v...k. ._.A...J&.J..D.......>...~!...H.".$........_...;v...*gU....W Y3lI...;.....RG.....\|.rw.. ..=@.....N.....=.W..=O.(...`..M......Y..&.O. R..'0.~6@$.4f.`I@.dV{..YJ[j`v).1(.L.."(oO...R...cI(.l.K..P,1.C.b....A=,u.B....;wm..H{.>......8e.8d.2.~.4.CDDDDDDDD..\|.Z..s.G!.._.....

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	498
Entropy (8bit):	7.0509595066397575
Encrypted:	false
SSDEEP:	6:ak5Z8mI7GZ6O0InWZRbA8igtUldnXgs+19DU0kxErVQ8LnYI0KKzKaGQgMPkg+RT:vJIKP6ZR1WDlGgPiuKRBWb+R3N7dJJ
MD5:	D2AA07EDFB36B4BA1DF3EC8342623AA1
SHA1:	8DB533A05072407E431273FD65488D450682F08B
SHA-256:	3AFC77704EB5C56502F127722842B9D8F3D82A49B5CC2EE280E2DFAA4FFD22DC
SHA-512:	122C5D4F5096866E72AF53F0C7CB5B5C7845D383AB866B09BBFE2CB82190A407A357921C9F32C739043F2374C08881D07C186FB100A52F8C94539FE6E3A0E0E7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.O..m#I..eq4...W....3..q?..m.,...Lc.I..F....0.....P"@.4....9p.M..>k.w.Z.[.Q..@.:..-..k.A...+"L....!..m.md.7........?K.AQ..........G.~._\W+o..~.i.U3.....^M.;!b.6.........w'....U5ID.^.Q".....1z......n....7.D..U.D..'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'").'.{\|..z..9.....8+f....,smj1....ys.....e.M-f..8o..d.. ..Z...........r.]...........>.o........{..../G.V...&...!...S..1D...{./..8....'..........y.....s;,._.?..

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3702
Entropy (8bit):	7.937104656961242
Encrypted:	false
SSDEEP:	96:hVlHZ4aIdJfMliUwe0R+qAwLZqDhRVY/oOB5N:hTHZ45vUiUN0LHLaeoOvN
MD5:	EA221EB1F8BDC413DA31D0FDBDC05CA5
SHA1:	E1EB42835453846CA5F9DE12BB395A98394B6B2B
SHA-256:	6C9C866ED2A72E42A8EF956286C88B5B7669371AE810FBDA1E72EE8D9B76F4D0
SHA-512:	4A89B72C5336A1D54306F7925DF7062B53B8844D7F86711634AB1AFCF48B859253EA55E147C70663D2472772EE524DC1DAB02412D8B9084F0754F2CAAE366BE8
Malicious:	false
Reputation:	low
Preview:	RIFFn...WEBPVP8La.../..?.U....%E?.].]pwwwwww(.............s......e.,..2...........h...X..V..S1......7l...#..".T#w.x... t.:.f..R......j....KK.E.)...3b.mv.>.a....S.Du&r...p....."K.-....j...=...3..d.9.#IRd+.y...W._...@.t%H.m.m....Ga.@.jV.{K...d)...I.4.......^zK..T.J=r)G..~$...+a-.=...K........q.H.`0....Y...1....#B6..1x)..s....`.GZ!].a3F+f.A....c...Y...Rs^....tH..N.u4..8..E....`...N.{..WD..t..]...M..X.lv... .....rj`..\..L.]....i...1..-...b....X_...D..$h2,C..(T.. J2.....o.d....{v.....b.)....\..A.......z.`.A3...Tc.o.......?9?.1m0....E../]..b..Z..x.,.b...j.\y.H...y....EC-.!x.<..=.C.`.J.=D.}D..`.e.J.3..vC..^.....ACu...o.....f.6.....17.i....H.~.'].V...(S.?D}Z.............v....`<...m......W.ck......a.V...d.... ..Z.(q/<9,.a$..D^..g"d.S.o)2V6..n.....<H.j9....%V.?Y.>..(...@....)..d../...(..I.......B..O...h.ne2x.?..LTE...5.).U.6.C....+.U.AS.......<.hBXE..8../.?.gP.3...S..a....<dF.p:..X,.r....i.+(..F."..O...Q4,....\|(.%....2.........A..;2l.a

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33182
Entropy (8bit):	7.980229814891373
Encrypted:	false
SSDEEP:	384:T4HjEABUqB4qR7nUC8i3B8mI8DW15t6XU7CW7n77adukVhmhTSt+ahDCaOoYPYnx:sQiUqmgaie7tAbW777itVYhrM8YnTN
MD5:	7B21D33BBB82B09ABD66A9AC59243B23
SHA1:	CE2DC4188AB4B25A12C8BF1141E13059A4EC43CA
SHA-256:	72A95B515F81A9102D1D290331505706B769572A309A1BD847DD02E394ED1B7E
SHA-512:	3DDFEC020A604ABBF4042B4D78E4A16DEC8B2702F4BEEA407043D64698CDC0FF517CB825F36ABE276499F3BE2A5AC563E7F6CCB26EDD0C8B39D98D5E20E893D5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw
Preview:	RIFF....WEBPVP8L..../..?......m....d......".?.c. .y...I...)..R.n.On.nJ...e...Y..Xo..O.J.w...0.M9...O..`..._d...K.Q....l'.TIRU.p. u...T..n...AzFJ..\.$.S..e4.\|.7.O.{f..$...%..........I..84%5.,nI..I=#...^....Hs(._..;C...{......\`..{f...........S?......z...3._."a.4...^/<._d......$.CS...d&#..H.J..%?S.43..........3.].B.[,.U........1p.T....5.e.)-...........w..p.x..y&.{4"g.I...H..5.=3...0.H-.$I.......=.\2DXr..i..#...i#I..Z40M(....... H..Z...w.wh..........[.yB@U...`g....%WJ..$6.9..X@...R.a..6 .Y........o/.@..BpR..&..l...BD"......J@).l6x.F.8. ...BA@(.&...."....X.NJ#.c.a...........B... ".......B6...e..(.....X..."..Jn...6.CDd.A.....6.......b..8.... "..Y.;....7..B.e..l.....E.\p.@.a...a....3EF.!.2.....V.XD....c......W@..6....pD.4.X,c.xyy\|...N..e......&.@,..."........5\|\|....!.4..>4..Z?...._.....9.Z.Z.V+...9Ic..)....9J.Vk.c...F.D..0..l........@.>=.f."".\....n...L.....2.P..;9...68............"B....".,c..Y...".....n....l0.0l......>..F....0.P..6..Ir$...=w.O

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (687)
Category:	downloaded
Size (bytes):	9936
Entropy (8bit):	5.542342043008501
Encrypted:	false
SSDEEP:	192:ZwIzYQLYQ2ziA8ciP97bX1oEH/2vVbiIJcBnJdVKXMKOF/4xQKnS5tYE+Eg:iIzYQLYQGi9PP97bX1oEHevVfcBnJd6f
MD5:	576D3E924CC3FC775E59318318A95407
SHA1:	D90D2CEB01D3CB93AEE16588BABA66A1A33CB3AC
SHA-256:	210BAF7DB084AC00F6A74C3B520D25CCED24B402CF5F95144A1147E2B993E0D9
SHA-512:	A9B513246DEFAD541FC0290EF5CC89FB513317A030EB6C5D9B3B73396219226EB49898B80C2EF1D63DBCC3215A30CAF1C03BC87BC5B52EC4BD8442BB44C0FB11
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=DRmmld"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.L3=function(a,b,c,d,e,f,g,h,k){a.open("span","n1tOxb");a.ma("class","DPvwYc"+(k?" sm8sCf":"")+(h?" "+h:""));d&&a.ma("title",d);c&&a.ma("aria-label",_.to(c));(d\|\|c)&&f&&a.ma("role",""+f);d\|\|c\|\|a.ma("aria-hidden","true");e&&a.ma("jsname",e);g&&_.PN(a,_.fO(g));a.W();a.print(b);a.Ga()};.var Ebc,Fbc,Gbc,Ibc,Jbc,Kbc,Lbc,Mbc,Nbc,Obc;._.Hbc=function(a,b,c,d,e,f,g,h,k,m,n){a.open("div","UXP6Xb");a.ka(Ebc\|\|(Ebc=["role","menu","tabindex","0"]));a.ma("class","JPdR6b"+(d?" e5Emjc":"")+(e?" CblTmf":"")+(c?" "+c:""));a.ma("jscontroller","uY3Nvd");a.ma("jsaction","IpSVtb:TvD9Pc;fEN2Ze:xzS4ub;frq95c:LNeFm;cFpp9e:J9oOtd; click:H8nU8b; mouseup:H8nU8b; keydown:I481le; keypress:Kr2w4b; blur:O22p3e; focus:H8nU8b");f\|\|a.ma("jsshadow","");_.Z()&&_.PN(a,_.fO());a.ma("style","position:fixed");(h\|\|g)&&a.ma("data-stay-open-after-checked","true");.k&&a.ma("data-stay-open-after-action","true");(m??!0)\|\|a.ma("data

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7576
Entropy (8bit):	7.965330171017618
Encrypted:	false
SSDEEP:	192:qVTHZOqECObjBb0tEYx5oHxUHmdvzdTQx+5:crZZPkFbmxKoO5
MD5:	588BF96FFDFAB9151554E942AB001FBB
SHA1:	D0FB8A3682EBE36A91A8208410124E18A88C2183
SHA-256:	324835560ED72AE03B43EAC045ED72668C68697FCFF8B73C79DC990B0C248AA2
SHA-512:	D7CA474706E2E663D441EE7F2285F5518D74E61DE24AB5DCDB24634C8636D4DF1B24C2575E017DA04377C4BD87A7315A0A24836A00107EF1E4D4CF678991B0B6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..H..........s.........}..H.....$..1 ..?....z...2.[.!..r.<...A..j..4./D<......>.P.T'.,..f}K.nL{.0.4y..4"..y..a..P.A#..lv..c/.H....x.O<f...u=...{.=..m.S.....x.A.G.$E.wU..4...3....'....P..I..=g..j.Ab...'(.0...e-...........U.....a.C`^.bM .Hd..l....,..5b.?'......f.9.54..'..zA..q.8...\..........3I#j=..j....a.R...h.......8...... M.2.:...v.7..x.....2.....0x.........p.sD.P.FR. x_;..B...$I.$.^.')..m.8..c_..oDL....`...6...N@%.4.i. k.s+....H;.`.h.3U.;.-...H.......m.w..m.m.mw..f..+3#.........W..ks..+G....b...[s..X?..<.......m;$Y......=..j...A.zt..9...l.m.#"..?....o..\|_..UR.c.m.,f~.m.c.........l.#Ir".D..Z..(......S...V....AKk...b...fU....49....../...l.[.. .X.z.. )..Z..IY' .h4...&k..P.?......$IRl'.......JW..t.....?J..[..-k.{..8.Q.D...wAn..g... .&....'._.k)o$.@..p5...7.o...m...+..4t..&-...d$.8.6.xbq'R;..].......7.6...x...c.0xL.V....1...... $...............Ev.....B.l.3..K@...D...../.....]#8S.?..../..../@..3y.??..4..C.z

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24734
Entropy (8bit):	7.989220634720192
Encrypted:	false
SSDEEP:	768:Wn/UZZAPjZWKhquQDmo9BSv8PJLR4gnr6CODy:WnhtWKMaCSevOm
MD5:	A3D5BF1609455BA96B672C1B43A17921
SHA1:	AEE2172F613F47722E9E763B1CD827C94FA611BB
SHA-256:	49F3861FADDCE7B94ED6B3B27534B8E2942A66C78DC1F62B9694ADA23CA218FF
SHA-512:	38A05D14D1C74893EA5229728319CB4FADECF12EC64DA07DDF1E4D5D2653E90FFE544AFBDEC83BEF5020D8B190BA66E5445B06B94056F07932B1B9263924CD46
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw
Preview:	RIFF.`..WEBPVP8L.`../..I..I.$.md.Yl....?....f9F........Y.7.&.&.W._o.............t....Y..moB.)o.B......OL\|..)3.!..F.@.)I.#.a[B..k...;.........{....$..C.S0.@.U..e...s.m..n......;......o.1..$E.Z.....ZPt..$U.......B. .....iT]D@V./=.{/..F......9ms>.[...>..[w...y...n?.1.c.!.W{...q..8...u.F.G...1.c~..!^xa..9.l}Mw.(.......d.U.Y........n......./.anxm...\.L..4.......9..p...[.@.$[...]p....w...]0rw'.?.._5...,N..+..!.J'..S..Wf..p.....e.9...6aB....K.. ...Lx...m..._..F.m.......No./... ..:CG..;!"W S".B..p.F.m.).0....&G.....A!@!t..HO.....Td.@._.0.p{ty.k...v.....C..,>J...H. ...""AD......w..]....P.2w...6..H...2@.G.H.D.@6.H.L.....4.g.Y6Cht>."y0...R_U..H. ..D@z:D.GzfI..k....N.&.... -..t...RC..2.......\|....D`.K@45.`~.......CD.2...B0.. ....-.M..@..b.@....Z..&....!.q.:...;.'..o...X-.. 2%..#...H-.).<.;"..u.i...Af..H_..H.k7..2.....(...........R.h@..<.9.NZ.`.....i.%..b.....k.{.<.8h...IX..03..Y.Q.1..b..@.&MC........D`..h..B.4.....j.`/...{.....2..D....cs PM...[....U{.@...g..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	dropped
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2196
Entropy (8bit):	7.903352074253317
Encrypted:	false
SSDEEP:	48:A17BRcX4d/54k9kTYtkJ4oTzfwo1nGzV5b24fwp45m:KTmZt2s08uV845m
MD5:	CC16F1781CB55F8A72A01137B6858055
SHA1:	E8795092CB6CFFE1BEAE50651C8668DF6CF92D75
SHA-256:	3BEBC5B2415254D0A88AA1DAAF00AC69F2E98D6B6936918462F9AC6DA35C129B
SHA-512:	2472814001D47CE40BE0A50F05072E34B908AC4E4AE588CFA0040909E467A8D4A0031F0E9E2043B4F436ACCCEDB4CE1EC8AA770306D00A041440192C3311E8DA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....m.F..'.p.;D......d..(.M...$.P.F....O..?.O..m......N7...m#9..z.{.....+..t...\|..5\|...i."le.......>Ev..W$.95s.^33.3f.#.^."Gv....33333./Cw..F.../z....:I.....#.F.Yz0c...{..;..o,..TvU.w`=...q....m.V5.>....[.$D..@..[...;...j...>..p........ ..%v: ...p.....j.@....i..x....=.U..[.....c........t.[].f.8....&0.H....(..LB.` ...12].%._^469.B.\|.........ro.y5.. 0.].&b.@!.4.E.3..B.S.....\F...)....M.:.0. ,x..<..._.D. B.....j... ,.b.{BE.k".....6.......0..!.`..TQz......8...)".!4..C...(}O.....'..Q`.!.a..)..l\|#.5...^...P.,7.....4.(.A..:.0........Z.......F.B..Im......b.@o..)T.. ..$.8RQ.a[.....F../Y.$K....7z.+x...T.b!9.."....>M8o.A.......x..b...>.).....S...".B..j..l...#...^..\..e...a.r..6..ez.GX..V.S......5OO.....p..<...MTr%G..qd.<..tY..5-.6O-#......x.(=.s.:.N.1.+\|....w..R...}m.Z...}..>.Yd'.....=U..P^(..Lg..%.~.)%M..p&.\..7....p..^..........M.a_F.p.1%.}I..c.p....B.dAA...7zzQ.A..6M.!.)id...Y...u.....@NG..l5.*..d.<8...o.;.i......

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	498
Entropy (8bit):	7.0509595066397575
Encrypted:	false
SSDEEP:	6:ak5Z8mI7GZ6O0InWZRbA8igtUldnXgs+19DU0kxErVQ8LnYI0KKzKaGQgMPkg+RT:vJIKP6ZR1WDlGgPiuKRBWb+R3N7dJJ
MD5:	D2AA07EDFB36B4BA1DF3EC8342623AA1
SHA1:	8DB533A05072407E431273FD65488D450682F08B
SHA-256:	3AFC77704EB5C56502F127722842B9D8F3D82A49B5CC2EE280E2DFAA4FFD22DC
SHA-512:	122C5D4F5096866E72AF53F0C7CB5B5C7845D383AB866B09BBFE2CB82190A407A357921C9F32C739043F2374C08881D07C186FB100A52F8C94539FE6E3A0E0E7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.O..m#I..eq4...W....3..q?..m.,...Lc.I..F....0.....P"@.4....9p.M..>k.w.Z.[.Q..@.:..-..k.A...+"L....!..m.md.7........?K.AQ..........G.~._\W+o..~.i.U3.....^M.;!b.6.........w'....U5ID.^.Q".....1z......n....7.D..U.D..'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'").'.{\|..z..9.....8+f....,smj1....ys.....e.M-f..8o..d.. ..Z...........r.]...........>.o........{..../G.V...&...!...S..1D...{./..8....'..........y.....s;,._.?..

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10752
Entropy (8bit):	7.973526144140812
Encrypted:	false
SSDEEP:	192:DpviDu84zgRw1UtbybAjqnP8G/9dDKuPyMNSHu6Qngt4HMc7+l9FjVTOZDW:DHBvEEJzvNSHuKteX7KFAW
MD5:	C9EED90FEB95021C8B88DBEAF6177AE1
SHA1:	6506EA0229924B8F137FE29D7EB20726B5DCE4FB
SHA-256:	0969CE1AA9D96AD5A1D9A331C50CD207021CB441369CE0520E74C94DAD93B672
SHA-512:	5668807AE3A087A3E134B5608FB0C5D00A0CB161B720D1008E1CD9481C07CD5B17F341D690D438EA27CDD21AFC810D7A58B333B970226A9271F0FA3F7584E6DD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Kd17zb0wMFSZ_yCf0CSUCZe5vVQOTVrnTEwz9kYDAKchgH4YiFo6Q5NlaCei92b-DnE=w526-h296-rw
Preview:	RIFF.)..WEBPVP8L.)../..I.Ui....%.z.m...m.5..mw...v...{.wY.v....]{..=...Xs?.}...}.;6.....K.y.Z.z....ze.zb...'...mgPq.Y.G...{.......R..c..mk..6z..Z.........?.m.mg..2.N......g.c......ul.W..+:.>x.'.m..9... N.m...m..gt.-...ms=........1.2.]O!.L3.s;.3._....x...xc....~..I.k..2.......i.Imkl{.m.ku..O..l.m..\...}.....N.'.V4. 4a..d..Y...\S......j.J.V.......2......X......)...^.o.q...A.m..+.1W....8.._h.>{q.J....J.....Wc..47F...qnsS....N....G..........I+...g...[.Y'..&..........x._..V.a/y....cQ@.[..+U.W..#.U..Z.J.~..0..I.y...b..=.2.....^Lj.v.Pi.\|-.a..:.4.ub...B.,...(U.$.....A$...,..cT..G.=.h~+.G.....#....]).j\P......N'.....oL......\o...0>../.1!..^hG..0Z..<..W.......+.$../^.Y.c................u..l....Y)c.V.L.b...K...:i...^.....u...9........N.e..xVW}.1n.X5.e1....r'G2...x........_.Q)1...%.F.....+.[..L....a...V/.VU..:.2.H.,.........]q.K..!J.2..Jl#Sb.......ji+)u.;..p..\..B,.,..a......B7F.h...+.x.j6..T@"ea...Fi\..<.O..5..jc+...v

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10386
Entropy (8bit):	7.975956172302429
Encrypted:	false
SSDEEP:	192:+YXwO8Pic2HJad5gEIUfjepDln3z6Hr8x/TxZEocZ:+YXoPx2HMRIojexln3zFx/NZgZ
MD5:	955F68307CA9BD2F427D5970DEEE1D1E
SHA1:	67F87EF27C6EA1A0B3709F73458EA5FF8176E812
SHA-256:	673272A548E872F947165409FB97372063CADF37EDD624D9418788FA469089D5
SHA-512:	D501B2E052874AA4807F763C4CCE5B27E75463071F71B6999287237DA90A8491B1D64B4C85B7CAAB8DBE58041E22C5D088A64143A2F2CA814F51F2766A907124
Malicious:	false
Reputation:	low
Preview:	RIFF.(..WEBPVP8L}(../..I.5..m............'&H..oR..m.F...P9....Dv69.PU.Gp.9'.s.9..9.'..9.....{.z.^...&.x..D...H.#..X....A.d&'..[...J...=.'t.TnJk...$7..k..jk....X/..A..N w..m.....q.f...NZ.....N.c.g.h....,&.#vd......j..&..-:.6.2.E...^[M.t.s[..G]..(..$I.....]...$.$..D..-.{....e.... .m3..9Bb. .G..T.._u).O.....>sd.........].Q..x.....%...a........,.....J.....kN.+.C.lo=..k.o.H...D......fM.a......A..M.5..`f.....3... .K.l...m..m.v...m...=f./..3.7..r..u~.].P..\.&G...M...Ut...".j...9j....>.E.i...G......rNZ%.2VG.DT.YB.GH...i....c.\...)^N.e..A.6.9.\...:.U..!..-..d. <K...Q........h&.T..7......O0...n.AY......B.d.....W(.....?.@......V.}....bD.UX.`.E.&......Nq.E1aB.T..V<..[;......H.U.Pi...6ux).-...?...%.ae.5k........i.......E.wS..Z............v.b.D.......p*6i....V..u,..y'...(%.-=..b[/....`..\b....Q.+2..x..K.!.YQ].dB._.d...[l@.E61.p...c./d..R..L3.;..H]rX..."..`..D.c..V.%.x.w.\T...u#..G.Z.!yjr74Nt......#.p..(.H.(...l.@.Aj.../NCG.<..:.AB.T.IW

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7614
Entropy (8bit):	7.972871971991287
Encrypted:	false
SSDEEP:	192:TwHXbDtdur73P31Lx/ykYmXttkksYjof9XaRX/gKVRil3W:TInCr73L/ykFXkIoFXuXIKVRic
MD5:	B6EA8FD4921FB9D17C4A903AEB4AEE02
SHA1:	7D404B436A31A57D7826B2AF32FB001B70243423
SHA-256:	75A86D4A0EBC721E5C0ACE2D93851B21003A324EC6879432D9347D844DFC1333
SHA-512:	42A4B29EDE61D60A17C95EA7D3A847E760948B1C82D3E9CA06739FD9F93C52AF697993E23D2A40F3645132100EA0D71CB743DAB20C95B3A1A93394F8BEC72FFB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ZXHmAeEubL_FFSux8ufdc3kWESm6l3Qps0cC-pt8uNWM74A4iElX7CbcQIgyXli9eQ=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I....m.s....wDL@6. .1.5...Ib...^..._.4.>jH..{.w?...8.....{6..zK....%u...q...&..o.=.H.......,...t..'..$Y...@N<...@N\|K.......H.U..,.^...<./..,.n.m.....s...q..%."..\..,.m,Ibv..Bu_.k.{f1.O...Svsk.c.m.m....m....9g7...U..nj3.....m..H..I.m..i.....p{.+..d.$.{?D.Hhf......:.3.l....FR$g......k.$e.sC..i...#.N...\|0o.j..fJf..Se.0\.....).Y....@....P3.M.V...$].L...P_.....y...Z.6A.R.........@.+..S...n.@..$FB.EO.W.LUO.W..."=.>.Q C..cwAR1mc].V......\.^..8.."....AF..-..........wW_...u._.....@uy.>z.=.1.R.p.z.....)Q.....W.'..lS..?T..I..=s..t......+...K....U.....Z..Z...D...2Js.T..<!..X..0.bq....Q..#BW}..........A(...T....d..{..\q......'t...).(...i,..c2.]...a....@.Qj.c.a....T....g.G.$...0P~..9.2.....x.e...q.-......F.c.O.....H_....f.$....H.dL. .%KL.........B5};.!.....4.i(...h......%...JZ.D^.........Mr.........hW....:.....K7.4.Q..TH...>))..............L./4.N...,h..s$.....[.Um$..N..c..7........W..S@....U...:n...>..[...h".K.1

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6354
Entropy (8bit):	7.960700089781389
Encrypted:	false
SSDEEP:	192:7tW8Nc0ZfXfSCFxtCKqEbGO4ADvM0FzD4Hk6rD:7MCcgvuKquGZAhD6rD
MD5:	51B2B08CF48FB14C10A5BC00F7EB3E49
SHA1:	FD547F92F080C9DC6C78BB8CD0CC73E021C61978
SHA-256:	4E0CE59BD28423F000B98ACCDB10FC79F7FBDFB4C536ABC64B35AE17C9CF65C7
SHA-512:	1162EE7C174C160DB1E88538B3E0FA0CA4845FFF919E8DDDD5DEAB2BFC7EDE670B2F491EBCD58BA7C771DC81B300D005F445D3F13742D738986CB91575791DA4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..G..Ma!..Z...f............x\|.......x'...B.("..[f.M......D..j@.......-....(S..6..L.b..L.#seV\...,.;'..{...{8...7......6..`.P.;g....k..3......h...w........H..%O.o..Wh.=gJ.'@..R..4...o..7t...Q.E.u\|.Xh..S....I.....1..B4...lP.........`..s...#.${&.....`P%:A...t&&0:....^.j....&....LT.LTJ.I:.}..........S...+.Z`. :..X..A``.$..4....lO6LL$.l...w.=...8.mn...}...i.h. ...f.M.WG..V.V.V....D=..9..m.Y...;i..1....!Ef .....U.......`...R.n.j.!.JR...z.z.._m[W.\...{..9.9.@...1!9.x......k.c.....X8...6...C..h..........e.n.F7C..~....h&#Ef#WpgUp....W.d..+8)...^...Um........8..@y.......n..}.~...j+c.}.w._w... .....1.v.._'.i.e.a8...3..R....Y.@%O.......gy....o...#lw..K..f....qU..B`.:.`]a...'K.A.J....u.^...._>..o..."K...Ye.1...m.$.@..Q.m.m.m..mu......A..6vt...GV.o"...O5N...^.&.....p...O..".A....{,........eS,.....E.....g.].....k.W.......-..}e@'..y.^...kF....a..oO).x..[.R.5;...d/..1...>..l\|.lh...*..=..Q..6o..g.$@...........y.M.P../....'.........-...

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	48232
Entropy (8bit):	7.993389789636593
Encrypted:	true
SSDEEP:	768:3w4PyBvkKHgQ5PKr+iZBtEceZM6+S04rRnOQc2ET/yJquqFXjiSY+1UZUK3seY/A:3pOT9K6iVaZGS04rdBsyJeThY/Zjs9/A
MD5:	8F207042AE152EF501F2391AF098AFC7
SHA1:	D9B7233450008EE49E6DE7701769046B093B4126
SHA-256:	610D71F82FE6887B785BF15376DD51175779AA98CC85834700663575F608EC3F
SHA-512:	5FF79B88A3F487F3AF2F47808952CA18037EA216B9927CFD47D7F5E2BC752EF400B81171AD88FEF0104FFD4E38BBAAD9F778E578282318724BBB72F8CF42969D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw
Preview:	RIFF`...WEBPVP8LS.../..?.MH..6n..\|D.....[!...`....5Y..'..&...$.H.g7YU.@:.#.n.v.....M.....A.vG....o0l.su.&84m..Zq..C.. .U.......I..!.$..nk..H.$...../_q....f}=.sN."..is..u.xl....i0....OD i.0G. .<.....ne.$I.?.n.UE.f&...toK/......K.../...Zb.._..A......\|..2....m.........}.9.. @\| .....~....r3..sf...'l.5..6`'..d...-q..WR.c.{..aM..b$..#@.......$..@......91:.@hf......P(2...q..<..d0.A..g7F...f&m.J.#qU...#I.$If.pvZ....P......D\.z.@.m.S.z.?O...a....!.^d...$J.m.v...*.......R..._=.1....?......c#.c.{.....F.c0....8.....\...`........p.@p>....W...-.\...4.s.js..........)m..617.M7..h`K3..&....&m.is.6...?.RV..z.1w.7....... @...q.q....c2)=......}.^....v............. ...?p-.a"...d......a......W..].'.B.....1c.%...PwuWw....L.X^........?.l..R..`. .`..,...6..w.v......].... @...cr.B).4fv......W.l.Wz..c@0...C>..K..++.O.2.<{%.....4%..R...1'c2.4......>.7..U..\...n.$o.6..e....8..>.2i.{.#....&..mn2..+..^......(..1..d.]&7......g>........,.t?...0..p...C........EY..x....

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	984
Entropy (8bit):	7.674068185768488
Encrypted:	false
SSDEEP:	24:j3Tnqu3iggc6XDmjArkqCHB5hnUoirkQQ:DTnRTgc6QXqCHqoZQQ
MD5:	521AB661D05B5E40ACFAEAB1F65DFCB7
SHA1:	AE1C2E4A193121281F5D39BD7A4701D0BD9265D8
SHA-256:	2F85BCEB5105CD1F57EA59264441AA3231AC11EF7D714A06EB0A2F578B9A697F
SHA-512:	CD3334CBE3D856ED5E8A041CE75AE88099254EB2B07BBAC09E8E14C38B65DC07BF5B01F8983C52A5769461DFE36A644453C3DB9AAE121B3BF3E7BA81FD4B70C9
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?.......$GR...g..Cp.6.$5...`..A.H.........._..!...6.....Np'.l..V.y...E..V......;..Q.&(.l...FYQ......M..f...w.. .....7......Q........bs}....ylS.....)..R.isy.......T.s.~..p..nmO.X.03333333..>.<o.+Gv.X.....'_.UD.'...vI_.i....d_.ja.h..c.FO]....J...Zjq...{o.1...UF.w.................wv.n...wkR..mA..h....eD...AhE..m.....mt6.../n.......7.mv..DD.RG..$J.t.....Jp..3..%...=.Xp.R...5..u....t;4.o....L..]..<._v....f.B.p...G.%.Q.IO4..J.....c.....['..>Z...Q..C.2Z.A/.u......n..a.........Lv..j....m.....k .,Q..T..1..i"..J.x...#.]6^.h...=.hz....)GF..].h..D.G.&...(..4.....dx(kB..J:...4....'M...1)G2M.E.@..Z<......p.e.!. >B-_...!.2....l...W... ...s..._.........4.$Gw.iU..1.gZ..D.....P...D[.....\|@D..X.S"J:.8J.=t$D.T.A+.....%..V....!...-.@.....Pr!...."...wl~.v..V...x...>8.E@v'......w..D..~.._l.v....9^...;........uT.).N..0..j...\...D..d...x.h....}....'..dy.&.].}.EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	51228
Entropy (8bit):	7.992246318048376
Encrypted:	true
SSDEEP:	768:0c7WoVIu7cy6olmezhzB8gL+cPKE/LpOeP+8VqSHWgGjK7WeNUmMhLcRutE0Sa6K:nWb46SzB8mlCEDpOetVqSHYMiLTQWHr
MD5:	89D3B9BF317C62E45422276B387D3C2F
SHA1:	BECB39F56997FED9BB9D08228762629275C608E3
SHA-256:	AB99996E1B0942C3412330BECDC643BDCC019B495455349A1D1034FC5D4B4C42
SHA-512:	8965A87A6D42895E0F5CED0526DAE8D3EB61BAF3FC8B45350FD4C91F3200235B4A2AACBA5F5C0340C66080DDAE23FE794680D11CBC7D2CD5371054BEDC387EF7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@.$9nS.......Pv......(.......xH...h....j.r.,$k..2...O@...3.G.a...T=U...P.Q.<c......cDU.q........._....@;........I.i#>#...8&..@o.:......`....z.mP..Z...,1>6..5e.xo.sJ.q...{K-....lx{i)....~3{o..7..i.`Cw...20..M.!.l..z_N...oP.m&.....ku7....n....9....l23K..yAI.-G.tJ.V...jzX..c8..p..0JE..$.......oz..V.....a.u.....A..c~...l.z.6......!d....N...xQ.l3B.'.J...JQ....H..I..TQ)..R.T.R.Ee....Y......c.c.c.).asj.E$.%F....5..C..q.....f..0...A.$. 7..\....9:.1..Ni............3.;d9.1..i...JD..L....LH&.N..:t.P.{...k..jj...Q'.........rf.k?.......=p.6'.raee.X.\K...............8.......~=..^<=n.J{...j:u.T).D"1d.M..Iy.........R.$.8J...T.$....HV.....s.vI...?"A.!....u5~.c..g. I...$0D........e.L.b....$I..o"...N....dx{...n.@.$.8zC.......c....%I.oJ....`.m-.\...3..x..C.....b.+tF...../3\|.....I.I........n..,<(.X.8......RS.t.#.d>.n~...yV.b6....T..5.y...m.j^Y...Q...^..../.........I..J.mM.U.U B...f..L.$..%..z...t.c.1........O?..&.$+.&.p[.....{O.0m3.o.G...o

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9308
Entropy (8bit):	7.974353499824232
Encrypted:	false
SSDEEP:	192:zDg0G2sR8LUmyGDrhXiK2dyteRImDFdLjL1V/0LrSKag:zvGfml5sdzVxdZ+LrSKag
MD5:	996537520A738869CB05986E447E410B
SHA1:	F5BEEB6371D2D6B030E282E31C61AAC9BCD9C835
SHA-256:	8C66F387C174CA6F3990FA128B3F70202A7C52FCC677E0FFB5927A7824E241ED
SHA-512:	5BC3557C167FE06E4D19F3D671D00CE5DEFDB75FAEA6DEA5DC2EA97F82117952C4B9241B4516BD19E3CA758EA70F01EDFDF3FF738642972EA9280EA8CEA97C4F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw
Preview:	RIFFT$..WEBPVP8LH$../..?.M8r.F..r....3Y....O..\|..1........jH-Z.N...b..H....+.o7..v.Y....1....cH..&$%.~.xZ.....8.$In......>.....4..6u_s..$.q$.J.8KB8a..$......mY........T..r.e.....@.l...7. ..`g/]+..D..:{Iz ....vY.. >...=.......KCD@..\|R..!.Zcy.1...D...4B+.YD@...../....A..h.p.Y@.i.){ID.D...d1].#R>./$ "..7.4K.&.!Y/Y.o.8.]..#"J.D..m7"....."i..)...).L!.Mh#{...4..I......@. ....h.5..@D.......2e.{R...!..s\|c..'...I.?........X.i~)./..:JS...%.hW.....M7.....4ehe@.8A.....c..lg..........qm..,.Jd......2...L...s.....\#...../+u...~.B<O....7k.aB..;.$..m+...._.%.BH...?p.E......999..q...$.a#I.{w6AK ..........W.HRDd..2..v..........v..w_`..w.......l..N...y.I.2.uY.....64....3.!{:....b.mi.B.x...Xr...6..+..m...s..'...m.m.m.m..JR...{.$IR.X...^.03le..v..\|..6./f..tNw.D.V.F7..!.A@.....'...8.?N...y..?...8...9...?{.7+%.S).g...Mk....`x...f...z........s.n..G...S?v.._.9p...lT.....],.Q\|.Y<`egf^..P....?.@.............d%.....).w..{......r.Bi...p....9.C...3V.."......[...W.\~98.'

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (750)
Category:	downloaded
Size (bytes):	2169
Entropy (8bit):	4.9548772147686115
Encrypted:	false
SSDEEP:	48:ildRbgqluYoCoLUmledemlxUlIUvfALSAl/lmmqlmWlfBlAlVlWlgwheAYf9hbF5:INx4gd/d4fTvsaMefp5oD
MD5:	89F8EE167E82FADB507197C109ED684B
SHA1:	F5A728E7805C71BAE1A8786921AB2735AB07C15E
SHA-256:	0B70D5380DCC5A0C4BDD30DE4D68C4B0F598EB4EA92BEEC1B6D5F0852BD96D22
SHA-512:	BC12D7CB827E364176A691C2ED5C73A481547C572A0C00E5FF6B8BD8E698AC7DA96F2D8DA08485F9363F98A1F21338E61A9E813A31DF0A2EB7E96D43A902E5CE
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.961.e281a7b797aa9204873b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[961],{54961:function(n,e,t){t.r(e),t.d(e,{cleanup:function(){return c},environment:function(){return o},eventQueue:function(){return i},eventRecorder:function(){return r},immediateEventRecorder:function(){return u}}).var i=t(71026),o={_document:function(){if("undefined"!=typeof document)return document.throw"metricskit-delegates-html.environment HTML delegate 'document' object not found"},_window:function(){if("undefined"!=typeof window)return window.throw"metricskit-delegates-html.environment HTML delegate 'window' object not found"},cookie:function(){return o._window().document.cookie},pageUrl:function(){return o._window().location.href},parentPageUrl:function(){var n,e=o._window(),t=e.parent.if(t!==e)try{n=t.location.href}catch(e){n=o._document().referrer}return n},pixelRatio:function(){return o._window().devicePixelRatio},screenHeight:function(){return o._window().screen.height},scre

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.831065452203355
Encrypted:	false
SSDEEP:	24:36Vy/TGkU1M4ZFn5I/h+dzrDBTCtlO4Vnl+nIlSaOd/CACYnh0V/v:36S81zb5IJ+dtGKtnIlSh61ghy/v
MD5:	28981D37AC73E33EDE9658BD687D1122
SHA1:	8C11F1D234A6FA760C50EFF51297539D69D58023
SHA-256:	8797F3F07E95DD77CF151AAB850B1662160733C84A5487EECADC9A1DCFAD6BEB
SHA-512:	A9976640118C3A48AB033D53B08D1A0580DDF5C02C91D0492D8CB423F1AD1B4DA30DCFD95D307E2B734582132349897D38ACF0F572286070AE14940D1F1F7A69
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/GCsSBgR93cedwf2weP7s6VPsBitwir9ioOO0DYjLydIjdCkfQEv0GQzK34ky96L6XMc=s64-rw
Preview:	RIFFp...WEBPVP8Lc.../?..."......S%UR..=..m..-.:.U...>.m..g&{..RZ...fi.].....I.g.TNJ.W`k?g....m...T.m.l..K..Ul.Vk......qr>....x.$...v.......m....q..n.8......Y.=.D+Y..T.[2J.$}"..........wNz;%=.v.#.............K:.$...........:..LNm.&.....tB...Ny]g..s..........MQ...{e.M.pH.kW....Z...{..n..?qN.p......"...P..GU.f.R.z:i.V>.../,..(,...u..#.{mN98g\.........L.E.[F..e.T9a.... .HB;...79...QF..O..H.(..)&.2.....%.......<.....J.....jE...g..8.>....$WH5....\X...;p...i.@.g6....?...b..;.9&.<S...U[t.T{K/'M.}l......!.f.i..\|.U ....#....ve.....S.J5..@tKI-...)......{.>....pB...!.H\|........"..J...k%..u...8.....!....A.6..8.?j,.e...:..@U./...x......Df..Q..O.......~.._..^.I.{.Kd..G.M.f.AW.".,.. .&.....^Y%..pM..8..t.2.{.~)(,.....;8.mZ...^..H#G].Z.........I......).E...%S\\a!8...'C.........(t..V.-.K1.+.2.....9...2LP.a.dh7..B..M(P<pM?..Vx}.._....&....a..".&..B.H.0P.3.M._...q.K........JH\|...@V.@....J.K.;,....QP..G.q...1..\|^/>.C.,Cb.j).a..w._.?....;..#.&q

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45050)
Category:	downloaded
Size (bytes):	45236
Entropy (8bit):	4.986932890972818
Encrypted:	false
SSDEEP:	768:1S7p4S44vR3b8uuXTxXIXcave1vee/YNVwA1NAGCR//f5TTCE6/iSphWhO7E9Z8A:1S7p4S44vR3b8uuXTxXIXcave1vee/YG
MD5:	4A7162BBFB49C42F9BA734511824AD69
SHA1:	22E2808CF5C907572C6E4D0FABA98505CE63E05B
SHA-256:	47BA4BC1501E3717D778816F6C577942876A1796EA75D7798A0C73F8E7E78885
SHA-512:	68DB8592C78320AF013445CA64FC0FA31C1490EA187932CD3DE3BC5D4076C5E45ACC1D3020889A6CAA767153051F4A92231F54470A126F1C09387372160CA955
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/global-elements/2406.3.0/en_US/ac-global-footer.4a7162bbfb49c42f9ba734511824ad69.css
Preview:	@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:100;src:local("."),url("../assets/ac-footer/legacy/appleicons_ultralight.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_ultralight.ttf") format("truetype")}@font-face{font-family:"Apple Icons 100";src:url("../assets/ac-footer/legacy/appleicons_ultralight.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:200;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 200";src:url("../assets/ac-footer/legacy/appleicons_thin.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:300;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 300";src:url("../assets/ac-f

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.700481639872808
Encrypted:	false
SSDEEP:	12:nJQycZnvmWyX+WMhfiI/vmIAIsZeOwWeRdEvt2wtj3X+LV:0nvpy+hqI/vAeOORd0tBtjWV
MD5:	7A2561667DD16C7736D021BE44F7C74A
SHA1:	7D4E6D8C7FB356B619568E8301885F0E232730B9
SHA-256:	4BCB3795DAEB9400A7F3E6B01E2F10CFC9E13908AF7C936B803EB9D91918F41E
SHA-512:	DF01C63184D5DE317B9808441ED743C90CFD0968DE96EE06444F10D3161620D13ABD7385DF68C91D272E3EEC28C018FC0576365732156873B17FFE1B01012B2A
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/css/styles.css
Preview:	..container {.. font-family: Segoe UI,SegoeUI,"Helvetica Neue",Helvetica,Arial,sans-serif;.. margin-top: 64px;.. display: flex;.. flex-direction: column;.. text-align: center;.. align-items: center;..}.....flex-row {.. display: flex;.. flex-direction: row;..}....h1 {.. font-size: 2.5rem;.. margin-bottom: 0.5rem;.. font-weight: 500;.. line-height: 1.2;..}....footer {.. position: absolute;.. bottom: 0;.. left: 0;.. right: 0;.. margin-bottom: 16px;.. text-align: center;.. font-size: 0.5em;..}..

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/icon-app-mask-border-61226afcae6a8f2b3d2755728daaf4f2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	332
Entropy (8bit):	7.358546821442648
Encrypted:	false
SSDEEP:	6:PZVS4Q+recdKlUVHiRQtvCoqYlbJq0AxtC0U8vAzIp9JtOOZkeWbCgfpH:D9Q+recdKlcHiRmC+bJqlAzIpTtOOZTM
MD5:	2F640AA73D5757BA0FE67B74E5D9F41E
SHA1:	A4D29ADF1BA739285BA35AFBD94D51734425429D
SHA-256:	469C936814B431210209150CA7F39A314A333269C07A5C83483D0C3EE0D772D4
SHA-512:	EB2C59AC81D5C2D8DFC90C5A06B283651225A3836A514B47E46009DBE9A9E2AB72EBC77558CD3CD4B3470844D417DE6958A7BFE1AF5BE16C2D7A2F9C314FA58D
Malicious:	false
Reputation:	low
Preview:	RIFFD...WEBPVP8L7.../.......m..s..c...m..[H.....X.q.\|..c[..*.m.#.Jw.E:.uro....z..m[....J..l.l.XNH...D<$A"X.k)......y..W..7T}........V.G..v4.d....%.Z....y)o.......]~.0jS/........$..\|.K......8M...=..I.q....[.9s.../.F:.j...{n..2..d.#A<.T.A.i.../..6.)..9.}. ..%.l..e_..=p.H......z.n.(^..}/.CJ..:;.G..3.q....ZG.ZF..&.b..;..

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/avatar_anonymous/v4/web-32dp/logo_avatar_anonymous_color_1x_web_32dp.png
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	34202
Entropy (8bit):	7.960545923350099
Encrypted:	false
SSDEEP:	768:sNDrB7TpS9fy9Rk6AZ0HCNuep05RfI6zQWlkA4ig30dlG+dkQ5G7dyD/XlA50Ina:sNPB7Twfy9G6nSuDpzQWNLRdlTyQ5G7i
MD5:	40BAE2E96B69FE58B121D7E6938CA0EF
SHA1:	865AD4D08F7CE3E6B64906B9F12D5D2DD3FC1D61
SHA-256:	DEF24518B45222080C6CAC48429194BBF6769ACAA8D5D046D184F6800D4E6154
SHA-512:	9BDBB6B5BF9DAAE21130BC8BF052AC705CBDBEF198482ADF7AD3AB3A8042D577CB60B5D0116ECA3174469DD067AB91AFAC7B3567271DE21CCBA7DDC3733B966B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@.d+l...e...`.&%D.......o..svw.9..>...v....{.....$...s.......e.v.PU..$.M2T...s..c...y.Q.....7R.IU..X9p.$@...o.z....u.#r.V.H.!@..CM..C...<.@H.L.A....D.oUqYXO.....P..Yj.....H.5.ls..z.TG@s..w.F.r}=P@...sR.{...x".G..!.t.O....R..+...]...m.s:..F."._...$..B.C..{...Ir])...v....{..F4K#.1.....m$9......[...............+l.af.%..$I..1..5.c.....3O...16}.u.9kl.t...R.b..8..l..@..z^^e.i.t\|..c.o../.\.H.F..\..u...6.G........Y.N5....l.Q.U........w.W./...e\|.u.x.55.x:Lc.e.....5.+9He.......VF...6,l8u....T8I(...R/#..R$CB...BR.PrQw.m...B.+u)...5..".!..dM.R6%.\|.,...\..M.6..md../...1.....e.'.m....x...5.....6..>.m....u.{^.....8....". ....z......l...<.5..=./..........K}....z.............G..{.>....7T4....;....h.wc^..M.@.v....Q<.m.v...:.O.0.N..o.......t..5.!.V..'.....ga...P.P.V....G...X .NB.....>.....v4....'y...k..}..7v..q....}....s.......{4...=.....(...mhh........x...p.....@hh.a.../......HN..61..O."x...K.l....\|.......[.h..,V..........b0

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qAKInc,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3872
Entropy (8bit):	7.926482378681672
Encrypted:	false
SSDEEP:	96:JQRKMqA0SMQYXXObysJt0txHfvwqKPOCFZB+y0vCD9ycU:WRvc91+twx/vwqKHwCD98
MD5:	B27AA4BB5D8D2244C0D0EDC2D9BC52F1
SHA1:	BABE6F9AABBA26A755DB9E5714774F1537836CE0
SHA-256:	44D9D3A4AAD1573E010A54B69D3FCDE65D2AAFBDE64E44493C2DAF29D8285C95
SHA-512:	60AB5312CC9F2B2BA18C90FC6B8576DAEA9CCA8D5836C8DBCAC271C5985E4BCFE1767186ADB75C32287AE54CE93AC1F19396164D38433CAAF1E58EBD639510C7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.......m[.u]...m6.zl..TE.m+....m..Bf.y..y....m....3.Yu-9.}E.m.\.X.!%j.G....)....=I.3+.vc.m.mw'...i.mJ.vU.e.a#.@.m.m....^.H......$I.....w.....7\|..?'..i.j.j..w...`..>........r/..r..o0.J.^.x3p.....'..:.z M...e[.M..%..#....K.V.....D{*..l.1....E..7.z.&c...v...T.9.o...(%z).C..k..!<y.8.^......yJiqaa.......ooK..4.3..V....GryYa...}.\|:..'}.f./B.a(R79.H_.\C<......#..{..@.....-J.ak.9.).Az.1.......#........^....r0]v...0z....QT...........-..A-.CUN..\x.-tS....XM..<.@[..X.......Ec_'...%.055\|W.....X....2...TI<..]......C...m...ED.e./.B..G..-..!/.O..).<H3........&.."......L.o.xYi.s...Y......1......z..#.1..=.....e........^.{.}?v..,/.@,.......\|.\..r^.7.4\|w..t....X.....G.....i2.z....0.R]..t....c..e.:......9.1b....F+....1.....'...6.\|.T.~........a.\.9lK.rB.3F1..O.eX{..&..3.....{v.a......u.N..........&.N...Em.'.~.....b...p8..'..`p..F..x..Az.0..g..d..>..f....s...&'..D.s.m..g..qv'..H..#y1.'ax.u....3T...{...f....?.h...q.=.....@.....6..

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	6.9991712725025685
Encrypted:	false
SSDEEP:	6:Y/PZql/KiDZfb08qzALLJRn3PRB8y1BLqmX45oBezn:Y3Ul/KMb0tzALL3391t1o5oBezn
MD5:	BA44425C00D3898F79D74B5748E49934
SHA1:	BB2CFD3AC724BDAF3C1F3A3A61030671C79D1B60
SHA-256:	35F1F26A525AFA469CEC210657087027502D02CE5ADC3BB1C431A29C4544FECD
SHA-512:	23D0D7732B4E677FA0E464C3BB834DD28BB232E0460AB6918AACA4CEB1AF7D149A7BA50035B4F39C102472F30B1840EEEF73310517FFDE7810EEE2B4F0F78647
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw
Preview:	RIFF....WEBPVP8L..../........$e...'..6.F..u....H....m$'....P.>;L..L3f.S...+Q....Y............j.s...)...w...B?.V.y?..9.......~`..C..1.b...$)Y.....?O........y+..g.i.V.\.q*.f....5...1. (2.s..R....w=.b....)..0...(......e.........n.n.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10268
Entropy (8bit):	7.976305561250909
Encrypted:	false
SSDEEP:	192:u0okuRcas/S9gZj9R47fOxjzVbfF/j2o/81TB8rvrrDSnIAT6kTwh:u0okuRcV/S9gh9e7E3VzFbCorrDosz
MD5:	6CA37269D896136472A6A0ACED9B04B4
SHA1:	C0FAAF416776C9B0528EA82CD6BB9D0574C26273
SHA-256:	FCB702F59C90EA20D70FE8EB4B56FB631CE38C4D89C6F067CC7109FBFCDF2DCC
SHA-512:	A56E7416C08A4F2743C7429503DC3ECB6746B044FB9D4DFC32F4C68F23EDE80899E8D26D4085EC0F5EFCD64571DDF030AD7C83B1454B6D1BF797109BB26730C9
Malicious:	false
Reputation:	low
Preview:	RIFF.(..WEBPVP8X..............VP8 .'...........>.L.I..#...K.x...n...4..et!...U...s...E..}.............Z~......=.9.......E.O@...e.../^\.../...\|f..D...U..]?..O....5....W..<j~`^..w.O..B~.~.\|.~....[.......h.....w........?.....}..........@....^.........]...^/].IG...-.:....U@.B^._XE.S?{,........^.Z.....(..BQG....}~..1.F.i.o..%v....ho...7..5..B;;..ln.O...R.....e.#S.\....98:..0x\=>...~.z.&.{.....1......`E'.c....@X.l.M.Z0.3_(..<..M....7...e..E.T3.".M...Pu...0......^]t....R.....I7....B/.`a...(......=...I..qh.x..V.F$.Xp.....m.\|..C"+.^.........qw.\|LQ.d@{.;..9.Wa.V.......A%...6f&..."Z..h...=][Ci....$..4Fb...s.......Gw.{..n..Z.w}p..BGg..Y...#YOu....Y.7....dm(.......a........`Av..]rK.w....O{......7-.ub@.PX..?.].=..Emk...,....;....g....'.R5#.._<..4...'#.`..'T.....f....fI..~....+..[........U.>.B%W.PH@...c...X.2.j.{.h4."..m.5m.^I.,e..-.....-.^rk..B....ZW.l.}..1.$.?$.......%j.TOE..:gnXI.z..._q.F.I.......7..l7R.....-A.E:.'./...]_{...#..#v.B...\|.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	downloaded
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/favicon.ico
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19928
Entropy (8bit):	7.9897850540383635
Encrypted:	false
SSDEEP:	384:VjFfZmo/KPGwhtSdfAZYpwqF5TiGTcrvKfhTJzhQKGZq:V3VC+wg4ZYpDF5qkHuKGZq
MD5:	FC180EDAE53C0E7D087CCF30EC6AD3EA
SHA1:	FE449E4462A34CB7D38D3AC4012862960F1CE309
SHA-256:	3CEE4A336B1EEFCC589F4BF43CF1C5AE463C095677AD834A786E7C6065133458
SHA-512:	615627AD2B4E6A03EB793FB3DE80BADDEB5881314A2E81E51D42FAA9ED3F91A2C3F042884C152ADB95D7FE0E7F1C84511BE65D4996B233C3EFA29BC449EF165E
Malicious:	false
Reputation:	low
Preview:	RIFF.M..WEBPVP8 .M..P8.....l.>=..D.!..Y]0H...\|%]..W.\|Q..p~.r....=g....Y.A.~........o..C.W.}....%.?...f'...0.......G..o.........t.C.......?........c.../...?\|.v..~....y......./[.c.@O.oLO...~........{...O...o.... .....r~.......>r}...6../..4?.~@.....o...w..S..P.........s......\|}g..QOi....._......r.+.?...~.{..^.P.............W...'..........;...3./.o._..p.......$~...&.vT.;c..1...AD3?..FvT.;#.(./v...T.;c..1..<...i.;....g......C..vT./C.....g..3.r......b!..Cf.E......9....:a.^;....tM..>.9.}....w.....A_#...OZ..]'0;a./...Q(...+..N....r.$..4..f...K@O..`.d...M.L@f>.o.wo...R50JDe.X...g..y.)..........X..a...U2W.i6H.L..P.........^n...+b.....a.7....$.Vk8D..4@)~7,....z..>...X..s.7Z...#.mUk......p....Mp.\U.?q.Z.U.9..M..J..h..._o\|)..y.H.*.v...^.....fL.t~..O..y.k.Tu.....i.K.......$...O..c.R..rj.h<.>.if./..t."..z...7.+?.Q.>......K...'....%.e..L..2.}..U\|,..8...K....v...c...H.g....n.;......&.....s..93?.{c<1?l.=.i..vw\|7..3.q..........1.....y1XP..oz.a.....Q..X....#..J....'

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5298
Entropy (8bit):	7.948762402090665
Encrypted:	false
SSDEEP:	96:wt7zIgs+Dfs6CrgUvOOBD9EA1j2uE5mY2et17KAEBae8AQPs1rdp0cpmeJ0:wRFodgEOsT3Yh1uF4e8A1ucTC
MD5:	B6D7404EDD22BF56596EA8D9DD923062
SHA1:	B735DE567505C7EC454D666F3475FC552A236742
SHA-256:	CF04A01ACD899385E6B767491C59E4BECC8F5148BBF327D54EC9EB9B83F5648F
SHA-512:	5D10D1C6373DECC0199091A990FBE6D5FBB8FD8D186A12F79A53C22378F8B0659D07CBE971A80414C754BABE744BA8A69D1C643ABF75DCEE4D732B86FBEE96EF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..Gn.H..Ou`...$5.9.....y.6...(D...\|..q.N.....+3..'..3)I$.II....b..RbFl.G.Q...'.2...d... ..-.2.....n[.%U......u.7.mW..".w.......-....{=s.1.H.U+...[OqX!..L....I.]5.'.._.....WE.L....W.q)-...4.......D~P..RE....#@}W....#.@J)U..\...w=[.z....>`.!d.Y!..C\|.e.I...(_.49\l...2....r:.Q6`.Hr8N......u)..E46.HnN7.....%I..9..`h. L...N&.............ts.`..{..`l..............@.{........F{...H..-...G..`yHiZ.....2..$.\lq8n.H.......j.wDL..4...5...........I-....j.kC.\|...8........je...W...o...$..%...9g".F!.........9.;#.....7......_.b@.T..f..Z."....?.CEic.i....+..g..7.m..>..O.Z...z..=_.-:r...8.m.X.~.Hl..........Xv._qd.T.....=3afff.........333s2.L.Z..-.T..7...K.........Zy...B..zV...............{f+..[..6z.O.9.i..Y.t............. ...Or$I..Df....;.N..w..........1.!0..A..&U..5...c."..D.y.Pd..b.C..?%......K)c.....]..L.{..........r.2W.....@Y.v..4..g..l..H,.'.....u;.Q........l8j....l..9.<...a.p.."8h......K........+..T.cq....Ai....H<.O..B*....oE..C...

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7634)
Category:	downloaded
Size (bytes):	78127
Entropy (8bit):	5.720290021753848
Encrypted:	false
SSDEEP:	1536:T/h0A62rqc/ysCrhG8ID/VzJYU8ZPZHAyDggegd:rOA62rqIysCrhG8ID/VlYvr1sgFd
MD5:	2BC6604DE1870372FC64155800E317FB
SHA1:	7DB1E76E53EE5024190E89D7B7B543D8AE803592
SHA-256:	89399A2B839DBF3D768591E2551605D71CD443B4B8B0F3CC99F55160726AFDFD
SHA-512:	B18F3ADDF063C9D96830D3E24C3D1559292217233F196DC2C5E0C447E2F4BE5A9D765DCB6E4C7BB04841DD8CFB16E5EFDF5AE69B1918CF037A728D5490CD8F59
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,C7s1K,CKm2Wb,COQbmf,CR2XMb,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,G2gJT,GjTCAc,GkRiKb,Grlxwe,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,J22eF,JH2zc,JNoxi,JWUKXe,JiSSTb,KG2eXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,Qf3l6c,QxNhAd,RBsfwb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WhJNk,Wt6vjf,XMEW5d,XVMNvd,Y413Bc,YTx6oe,Z5uLle,Z5wzge,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,baVq7b,bm51tf,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,fl2Zj,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,j9sf1,jZ2Ncd,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lDZ2Fb,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,n73qwf,nQqY4c,o6xa3b,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,q0xTif,q8s33d,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,wxpxie,xI1uef,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbKb5e,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=kJXwXb,chfSwc,aTwUve,indMcf,RQJprf,lpwuxb,NkbkFd,nKuFpb,zBPctc,jX6UVc,qfGEyb,SWD8cc"
Preview:	"use strict";_F_installCss(".H1RBrd{max-width:500px}.UIeOBe{margin-top:30px;min-height:120px}.k2cXo{margin:0}.XWz5yd{margin-left:160px;padding:0 20px 20px}@media screen and (max-width:480px){.XWz5yd{margin-left:0;padding-left:0}}.iCVHHc{height:215px;text-align:center;width:160px}.FOYkDe{max-height:215px;max-width:160px}.Dtwbxf{font-size:28px}.Hv8szf{text-align:right}.rYrxJf,.rYrxJf:visited{color:#00838f;padding-left:3px}.F9JOfb{margin-right:3px}@media (max-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:calc(100% - 48px)}}@media (min-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:fit-content}}@media (-ms-high-contrast:active) and (min-height:fit-content48px),(-ms-high-contrast:none) and (min-height:fit-content48px){.ZDGq3b .VfPpkd-wzTsW{align-items:stretch;height:auto}}@media (max-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:calc(100vw - 48px)}}@media (min-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:480px}}.ZDGq3b .VfPpkd-P5QLlc{min-width:calc(100vw - 32px)}.ZDG

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13388
Entropy (8bit):	7.985174540557442
Encrypted:	false
SSDEEP:	384:w6RfuXN6ip0Qjdd/1StIWw9NKoG7MErzOIGB2Lx:wDN6iSQxdwtIWQDG7MEeR29
MD5:	418DE379E4609B0E8F7074A51BEEF6C3
SHA1:	97B93C7F5F40CC0906967488BD0E53595C73715C
SHA-256:	15005030242937DD784BB19074BDABEDD98A38C78DC7606F8AD90868C4E4A6FA
SHA-512:	33C9B93C1DCE225AF744D81938D37CF46FDB3244D8ED30F6906C129583BC26A279621EA407182C4C828C8CBD6399D1DA8C03F2FB396EF8A03EC7826A9A9ABC8E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw
Preview:	RIFFD4..WEBPVP8 84......(.(.>E .D..!....(.D..p...W......1V...t...@y.~...u..g........d.._.=.~......M.....w......U...._...?....._.z.:..5...k.._...?........~......o._..._..I...~............e.....7...(...'......./....V............?./..P_L.U...o.o._.s.y.P.......?.?..w.......K..........\|.......^:?L...+......._............o...?....c.....O.?....'...?................../.....=u~....L....YK\|........`..:0%....m.E....o...ZNP.......7.R.FP....>..1.....F.u`.........@c.JK......z......x..n.. Zj.M.\|.-iV...p%.5......,_.(....r..;.N.%/.R..Y.Nw.kK6...L........?..6.L....H.......V.......{....3m.)b.B.hz....q...7.~...^...r.H....$...%....#7.,.`.Z....k4.Y.\b%.8..t..l.-k.>T.}..m....f^L.OO5..:^.<...Kz!...+..K...o..$.;mg#._.I8.9...`.t5....B.v.....-.8H....z..Y.7..=.. ..+w.*.....N.Ws....9.k.O2q.....p\|.K..f........}....\....tz.i.....q.\|..a.0`/Ld.v..X.. S..d...... 1"].9.....CMU.=dA'....pFV.PZ=..p.i8."+..flX;..u.`c7...\D./.7.0<...0q........W..[....O.t.....7.kj..-.Q. ..{..(..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	39997
Entropy (8bit):	7.97375484107102
Encrypted:	false
SSDEEP:	768:gviOwqkxt4KkDuUR0nFMNGI9/2KRIzePd9m6g6pD1ielvE6f:idTa6Kkp8GEI9/jAKm6of6f
MD5:	CD5881AE4C1F96CA24D28DB455826360
SHA1:	033E3303FD048FC96B8E2FACADD8F9468AA0BCA8
SHA-256:	DD5062DE1DDEC283F55C40DB7E293FA9126E2E932DFD3A527346F9169DECE5BF
SHA-512:	427E0B600921DE49C18D1AB8DD25E51BF6B75496A1C91F635998A74CB38839529B90E2D5AFC70A07D710D3DF2EAEC5B85613E170457D4D1CE423FBA568127D4E
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................U........................!..1A.."Qaq.2....#BR....br...3.....$CS..Tc....4s...%...5DE.................................8.......................!.1AQ...aq..."....2R..#B..3r$b.............?..(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....K.......6#......cy.:..QtT.n...}[.kj..]<.z......T.<..]..,.y\|.k_....[+.$.k_.s..@.D?.).9....EY.3..e.DF....W=.K1.5......\|.......c.7.2<.a.."G.....9BJy#.B.(..j..6..6..^+....Y....>.A.....5..5Y..cPV...iUu.c..q\|......f.......B......]..~...?........2.kG..f........k.^ ..d..j..GGm...v...aHtU........N...\G.....4v.?p]......%QMX...Z...Ei>...%=

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8086
Entropy (8bit):	7.96079286623829
Encrypted:	false
SSDEEP:	192:C/p2NUmgrtCLI4+vUSf31ESZLaegozslnytMWa7TkDcop:C/UNzgrtCLI4GUaESpzsgA7TKZ
MD5:	7BFC640FA12EC8BEAFFFF8CA1CCD9BCA
SHA1:	1AA8C0219571A38E8C1600E4A1862FE5B4190B54
SHA-256:	9BDE6D454CCD3BDFD0CB82052F4B559F91BCDE1ACD09C200B25CEAB5D8441178
SHA-512:	BF5A9BE7E0D4F221CD0CA7C9C13F07997507762F6AB48CDC6E69030635867281CC3DA8154B28FDC89A3670EC27F61099F7C87CAD55D0EEA2394E5EC9157908D3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M0h.H...{...xID.?...,.0...<L.....6.`.I..).p.(...sz.u..$.I.#,.......u$.........g...BKu.D.....i.&...........a.n@..wU..#y"BDE*A.....t.. ....o..... ...........Ir..#5..g..m.U.m...c..k.-i.,..N.effff...<.....en.....,.........).../R.m.....gf.[.F...v44..H...pwwwwwwwww..nqO...(.X`agw...'Z.N.m.y../.6w.[.m...2l.m.mN......{k..R.7..m.t..p.7.....&....`..@....!a..d..b<....7d9..}.....0.f......~).x.g.Fe....K.RP..,2 ........q....Rc{...a.m...@..ET .@. .S..Y.#}..?.{x+.Ad.k.2.k....Vw.6..l.9...:..."@...".. .)R..... .....)..........V.A...0<...{......IW...[...=1...\|..;.t.]...8...A....[5....W.._.'...~.?z..b$..)....B..!......T1"R` ........9....]+>.g?[_}.V... E#P `.f.......N....Uw.:........y.a(..A.:[.B..3.9.....^...Y.C{.og.w9..".HQ.P.x.Vy(.....dG......t......y.'.q.o.9.d@A....\P...S..&%pQZ..Oq.5OD_C.rm.e..6d.+8.P)..@...z...u.....J0b.$......T....C......V7.J.....{....../.!.......6(...>..T.$:o..N..tW..x..V...,......1;.....,F.....k..!..T....

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17028)
Category:	downloaded
Size (bytes):	226937
Entropy (8bit):	5.7153243443160395
Encrypted:	false
SSDEEP:	6144:UPZKmtm7F33g5L5Yd5Ddo+g5EV+V4WonF/AHNFxvQw07IiAM/sCp/k25FGTB7Zoq:UPZKmtm7F339d5Ddo+g5EYynFSD9CIis
MD5:	B26057A8D4D6877953493F979B193FAF
SHA1:	73F015E018E026B680E1A77A9281471C5E47D93F
SHA-256:	ADC2057E8584CBA1C4BD08D855E5E82633946A630322926D20B049983E6D451B
SHA-512:	0F21CB3CF149AE86B1A1ADF187414BA3C9E0E58DB6F4D6E12D26264F607EB66B1BBD33B337068C2924F13D71D5C31A49D3F0872E1D859F9E33900586941087B1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,wW2D8b,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,CvxVpd,gKWqec,tKHFxf,M2Qezd,t7vw0b,rpbmN"
Preview:	"use strict";_F_installCss(".hUTled{height:50px;left:50%;margin-left:-25px;margin-top:-25px;position:fixed;text-align:center;top:50%;width:50px;z-index:20001}.k7smx{background-color:#fff;bottom:0;left:0;opacity:.5;position:fixed;right:0;top:0;z-index:20000}.rFrNMe{-webkit-user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;flex-shrink:1;min-width:0%;position:relative}.A37UZe{box-sizing:border-box;height:24px;line-height:24px;position:relative}.qgcB3c:not(:empty){padding-right:12px}.sxyYjd:not(:empty){padding-left:12px}.whsOnd{box-flex:1;flex-grow:1;flex-shrink:1;background-color:transparent;border:none;display:block;font:400 16px Roboto,RobotoDraft,Helvetica,Arial,sans-serif;height:24px;line-height:24px;margin:0;min-width:0%;outline:none;padding:0;

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8966
Entropy (8bit):	7.962228622683082
Encrypted:	false
SSDEEP:	192:O0jiu/DGEQ3nJBvAr6d5wpg4r6MSVAnZqy9iX3Q0UJru7x8e:O0l2nQQ4gg3S0y3Q0UgV
MD5:	7CDE9F13220A8FC1073D0EB6FED06286
SHA1:	3F4AFDF9A345389AC3EAFA1079EF390A417C34DE
SHA-256:	1508F18A43EC8965B4ED441F87698CF8E28AA28C0C394B720AAB35A1D777AF6F
SHA-512:	B9032FD40F693B8121F25DCC38642A15B08CCE403E503B72E35CFED4FAC85269FAF327D437FAFAEBCA2833E8816EF2EEA3B22BD784D9DA7DBE0D10528EAFEC20
Malicious:	false
Reputation:	low
Preview:	RIFF."..WEBPVP8L."../..?..H.... ......._#.?..#{.....\|.Y..G'GY..MaH!..8.<H..@.....-Iw..=.........H..1:.,V.Z...@2.F...23....WQ.........M7k...xM......#.v#.............\j.#H.G..... k.........H..(.>}.......n.'@...O..n..N.....v.6$[(vrB..f.....h..G4.A0ki..C..P~.3.&.@...........t......v.H. ...-QQ.Bp..`B"...;.\..a7"..x.>SA. I..)).@s..Ms.\....$I.5..0H..a9H............L.;W...2.0(X=..,......Qp;88.~.P.C..Z.i.8.....4......w........4oP.(......,.`..,.Y..m#I....{.{.wDL...4.3w....(\...i.p..f...').........P.9L.C...6U..*2....v...>..u...m....Z....9g..XN...W..9.......A..k.]sg...;2o...0....K..T...M.t.5.+l....5w.5.#.TjZ.e..LS.u.f.2C.M.T"9.m.V.\.$.C.d@..)Z....;.8}w.^.k.Vm+c.....?..1...A..5b..@.8..V.`...2333333o.fvD133C....4,..s.g.4.}..M7......=.[...\.(.R......)...!.-....2.1OB...C.t.."...=.m.m..m.m.#WF2.{tl.Vm+c...9.www....3.(...R............WL@.\|..o..[..fX.O..z+P.P.."...r.A>.A...f.Og.. ...B.).9.b....\..z...........Q...m!...6......r.A.D[.`...b..8....p.....1<.c.`f..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8026
Entropy (8bit):	7.951919079463297
Encrypted:	false
SSDEEP:	192:6wvatDMlFPTDRn/KdTE6kxFc+TQpRXZ6Y3lo:64TFbNnydTqFc+Tuy
MD5:	1F1F639EE27E75D8795B0DA7D5909276
SHA1:	2BBEC31FBCAEFE222BE15E121B2D294F69AFFFEE
SHA-256:	2461F9A0C8BE81A97259A96B177E21C2A822B88F74AE1562A45C0ACEF8894AF7
SHA-512:	92482B265B7CF078D5E829C9BCB7B056707A009B039802C6E280A92D6567DF5A0611A879288C6D65694AE29EE476587AE5059CC768A30A0655E99C6854959F28
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/OaJ9ioyoRept6HWOMXjGkA8IMkfh1st9JEdIOyvpemFmFNFI50frodVswWNcAgFxzg=w526-h296-rw
Preview:	RIFFR...WEBPVP8LF.../..I.M@.$.QT.h.....U..kD.'.oz<.=....U.V..Ue..73.I#I\.{dM;O.`#ph.&....{.../:..................(.W.d.J....].xI.."...C....$GV....s..!<......p.. G..H.../.....d.C.'..ta.,..9z......Y......,.w..[.b.`_....,..`.....W..tt.........'.....0.X,hV.a.Q@.]'..........:.mN'!oV.R. .......522.Dw.@..b...vc..LJ...TuhF.....F....@..H.)..J.r.....T....8\r.F2....y..Hed..H.........@v.+=.$8.E.%..z.....4.....h.z.zJ4.CC....R.....+.:T.F.!@4..V.4.o0n.....{9\|#b....M.}Wm=).b.....:Tk........<.a=KG8..T....8;.....l..dfff.#.Wr.7.c8f..p..\|..h..J.5.U-.qI....V..s....Hm>r..#Mz.....v$..^W.{H..(..%..s..I..I..{L.i.......1..._.6.....3.!df.3..3333.......3..,f..f.E.d.[.N..t...:{.O.OGaP..U.~...O;.s...>.U>..,o......m[...R.;33.Ef7{..AO.'....(=.a. .....h ...=H...m[j...c33.b.<`..2b.N......G.K....b.bb.0....Sk0.Sv.{Sv.......O.....5u.rK.X....93.l.3...uWftL..2Ch.......Q..>.DD4.(.......N.X.8;N...f...ES....P.6F..,h.g.6.t(..f.2.&.\.Q.K[....Q]*..i....f...b'..}6..u.N..&..

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1827)
Category:	downloaded
Size (bytes):	262961
Entropy (8bit):	5.23813262677432
Encrypted:	false
SSDEEP:	1536:n704E5LJB0R0J0qzioyhqJmEJcqt6UqZSqCs94MF2ymxwxJ3P5A4GaGHk6uv3W19:nxWehEmEJcqt6UqZS44MFJA4GJDQahZ
MD5:	A9CB7E537707AB2AAA83815F8CB2CA5C
SHA1:	9C311FF38BE0EDC0695C8E8975EF1CFCFD8073E3
SHA-256:	DEB6C181DB15C6ACACA699FD64801CE046F55721A7E22514AA4BC190A527C565
SHA-512:	95B2BF58FC7E6C04F0A10074B5C1BBD1C9AFED11ABA777CCD1F1FCF2821816C1DC652400E618B5F73D156EE4C7DD5A9FFF3E1C6CC439F6E76D6308B96D3AB067
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.526.04cd0c888ecd9194aa60.js
Preview:	/! For license information please see chunk.526.04cd0c888ecd9194aa60.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[526],{2353:function(e,t,r){"use strict".r.r(t),r.d(t,{KNOWN_CAMPAIGN_AND_AFFILIATE_QUERY_PARAMS:function(){return n},KNOWN_MARKETING_QUERY_PARAMS:function(){return a},METRICS_REGISTER_ENDPOINT:function(){return o},MUSIC_AFFILIATIONS_ENDPOINT:function(){return u},PROCESS_REDIRECT_URL_ENDPOINT:function(){return i},TV_AFFILIATIONS_ENDPOINT:function(){return s},default:function(){return c},handleCampaignAndAffiliateUrls:function(){return f}}).var n=["affC","adId","advp","at","ct","itsct","itscg","itscc","itcCt","its_qt","ls","partnerId","pt","qtkid","uo"],a=["mttn3pid","mttnagencyid","mttncc","mttnmyad","mttnmyadg","mttnmycmp","mttnmykw","mttnmypla","mttnmypub","mttnmysite","mttnpid","mttnrefid","mttnsiteid","mttnsub1","mttnsub2","mttnsub3","mttnsubad","mttnsubadgp","mttnsubcmp","mttnsubkw","mttnsubpid","mttnsubplmnt"

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8026
Entropy (8bit):	7.951919079463297
Encrypted:	false
SSDEEP:	192:6wvatDMlFPTDRn/KdTE6kxFc+TQpRXZ6Y3lo:64TFbNnydTqFc+Tuy
MD5:	1F1F639EE27E75D8795B0DA7D5909276
SHA1:	2BBEC31FBCAEFE222BE15E121B2D294F69AFFFEE
SHA-256:	2461F9A0C8BE81A97259A96B177E21C2A822B88F74AE1562A45C0ACEF8894AF7
SHA-512:	92482B265B7CF078D5E829C9BCB7B056707A009B039802C6E280A92D6567DF5A0611A879288C6D65694AE29EE476587AE5059CC768A30A0655E99C6854959F28
Malicious:	false
Reputation:	low
Preview:	RIFFR...WEBPVP8LF.../..I.M@.$.QT.h.....U..kD.'.oz<.=....U.V..Ue..73.I#I\.{dM;O.`#ph.&....{.../:..................(.W.d.J....].xI.."...C....$GV....s..!<......p.. G..H.../.....d.C.'..ta.,..9z......Y......,.w..[.b.`_....,..`.....W..tt.........'.....0.X,hV.a.Q@.]'..........:.mN'!oV.R. .......522.Dw.@..b...vc..LJ...TuhF.....F....@..H.)..J.r.....T....8\r.F2....y..Hed..H.........@v.+=.$8.E.%..z.....4.....h.z.zJ4.CC....R.....+.:T.F.!@4..V.4.o0n.....{9\|#b....M.}Wm=).b.....:Tk........<.a=KG8..T....8;.....l..dfff.#.Wr.7.c8f..p..\|..h..J.5.U-.qI....V..s....Hm>r..#Mz.....v$..^W.{H..(..%..s..I..I..{L.i.......1..._.6.....3.!df.3..3333.......3..,f..f.E.d.[.N..t...:{.O.OGaP..U.~...O;.s...>.U>..,o......m[...R.;33.Ef7{..AO.'....(=.a. .....h ...=H...m[j...c33.b.<`..2b.N......G.K....b.bb.0....Sk0.Sv.{Sv.......O.....5u.rK.X....93.l.3...uWftL..2Ch.......Q..>.DD4.(.......N.X.8;N...f...ES....P.6F..,h.g.6.t(..f.2.&.\.Q.K[....Q]*..i....f...b'..}6..u.N..&..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	976
Entropy (8bit):	7.81733189819035
Encrypted:	false
SSDEEP:	24:rZJFAFJ+e6vmR0EuiQGFV8HzsSm5nTOAsU5:rZJFAFJ+vmR0JXBTnW/sU5
MD5:	5E02310E9B5BFD0E7E17C4AFAC5E0A31
SHA1:	16E26E87D896A0C25C9F66B69DFEC313AFF50C58
SHA-256:	060A662AA44127BB61267BF77C885272A5C3177C20FB67330646550553859C96
SHA-512:	AE8DC1F897AF8CC8BE4BD69E9E602B29506431259A2ABF511B99ED447BDAFCE27975203E4247DAE9BE137CB54537E0E9B537964699FF9ACBD162758472D31BAE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/S4wylkvt2jz16hnG9IG0pAZosbB82nWWy8P-rQkb54uH-SCVd5L2j7z7x1Vz5pZvIRc=s64-rw
Preview:	RIFF....WEBPVP8L..../?.......O..Zw.q.........A..x...kNN..wp..w.jgX.......@...+.%..m.......Cd.eg....<.....m.6.;......F6...k.v.m.5.[[...VwHfR./Yo..G..R&.es......v.~.(>.q......'.....7..\.O.!...3.A.....q.......ly...o+2\|..6R,..ML`{..S....r.^&I.F.O..g...#=.Z.n.f............%.u.7...c....{.......%3O.S..I_..6~y2..ve...~H...=t.Q..k3..!\<..!..1E.1..=E6..!.N.2Y..iT..-...i....M`....0.%K.#.7.rn.h>7....3..d.%.U...z$;&Z.-....;q...9;.n.e..9.\|nA.....`p.n.e8.B.=.Ej_.SpT\|.G4..C.>..M..(..E..B.5..J..s.....Q.B..{...g`....nR+%U..I4q. .C.=p?.v..u.J......&@..O......B..;f`.XGd_.K........F...s......2..%.RW...{a.$g...p.D..M..'...+~..$w.)=..'Z....G..8.3@....._k..r.Ds.>./.h].EV.l..t.(..C.;PtW.L...0M.%.`&..$....1DSY.?..x.a.}..{.=......d..4.......V@>.."...&...!.........Q..m.:'u.1F....i.Sp..$;..S.2".8^u.KV....2...}..3..C.C....._.b.~f.8r.pO./.{.h..^A._...'K*g....YBe......m..H.S..1.}.1"Q.L`...V...N#...N.....A.q....j....lo&k....\.\.r..b.X.GN..4

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk4BRY1LvFEvhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5770)
Category:	downloaded
Size (bytes):	831349
Entropy (8bit):	5.621097742816547
Encrypted:	false
SSDEEP:	24576:/LFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmL:/LFI80BM4gxA3svhhuRrBiFpAv6DbgWl
MD5:	E719E0F4CF4B0A3D67EC4D1B98095431
SHA1:	84EE28D86E3A5623D39E1B55E1D495FF5872E95C
SHA-256:	777B77D667B3ED654DA6F97E3211E47C7E1A705B640EFDABA8A066A81096AA7A
SHA-512:	96BBF782DF7CB8F732B04E858505FD6FF0D3282206F495E12B0D1B83CA24E38C229BDE3FBECB939FB6C961AD4CF3164A014B978DCD45A5980F5AD6B927A518D2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,fPcQoe,vrGZEc,IgeFAf,wW2D8b,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9060
Entropy (8bit):	7.976507557570821
Encrypted:	false
SSDEEP:	192:YrL4HF6Tj4qE56uPel70Ps1y+O/m4lYAOtjSdUpW1yU2yRx/qXu5uj2UjGU4qM:YrvdE56ueIPTaAKjSdgWF9RfUjGUs
MD5:	61916AD8B9C0A3FC8413D347446FBBDF
SHA1:	3C8C57695675DE18CDC76E506D1E13EDA857E1F3
SHA-256:	F1D3C5464C5708E948DF88738979DBDC822732226B2B99C4A78DDE55E173545F
SHA-512:	8409675C0FB5DEB030AF87B5075EE1C3489D98C6BDDD33880E449A28B07C2F425EA74E7582892D51115ECF5C883BC056D9C290D68C4ACFB221EB1C8912826346
Malicious:	false
Reputation:	low
Preview:	RIFF\#..WEBPVP8X..............VP8 ."...........>.J.I."!.LUL4....~.Kn.....`/.5`..d......0.m...\|......yr.1......N...o.i...'..m.....8.....>t...O...>....5.....O.....~.^......W._.F.#.7......=:.%.}..._...\|..2...3..._...o.......?../._.^...?v.....w....CW.6....Cb..'.n.o..%..j...oA.......%+..o(.v#.h.R+......@..s.....,.......iR}.S.....a..X&l...@..T5.\..._..).Z....hf..q....O..Zh....+.z..DB........L.'.}H..el.....5.&.Q.O..(.l.#./EM3..QU..Qr\.68.b.....k.....iDE.......~(....=....<9ooS.x..M.b.#.,{.Q.."r!..2...d......b.Bv'..\.._.;..j..v..?...xK3."..$M..Cd...47..Ev...M.5.v.....P.@..L...wn........n..y......?....o.%{.A..x.....Jm20...Y..`.#.+.MBG..{.Yk.X/.M!...x...Q......IE(...........z....En9............Pt3..H@...Q....2........7..a4/.B.^i...}.-.e.f..o).8Z.q.~.Eb/..q.)......4l*.".........j...F'.z;.G'..G[[x...x...Z..=...e..y.....K...>m..V..b..#`/P~...3..=YG.SB.I7~hyUQ...!.U.I.;lbg....J1..PT..W.Y.3..$e5F....._....i.U.qJ..4.....v._...j...v.U#YH.c=..._{.N...JCN..5.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5732
Entropy (8bit):	7.94022369350891
Encrypted:	false
SSDEEP:	96:x5bs0XK14h0KwmrpSH8cNRYoqccCq//Ud/xPdDvuQIgxJFaLqnk8Tb7Mv5Jh4e62:xtXRrpDuDqPUd/RxvuQIgxJFLk8TcxJB
MD5:	06BE135223797E98A2AD479F8A515E9E
SHA1:	9220CFBDEA4B9BE3F86755D52C9C4FAFA24CAA6A
SHA-256:	1C2E393D77780EB27BA1E120E86812C2F760A212309E09BD866DD338D05C4213
SHA-512:	10C465B97ACF91CA6A130C7E976001570496FDABBF155F4965838CC7D222BC544608AEE6CE8F0A9B0FC7CBEEE87FB534BB2BA431820CC9D5DFB8597066BB63DF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/XOXJBp4fVtiRE1acOVPBNTcHkSkJl0ly6RTdKvmEPj7EhoR1ZNOalw7n_lGjFy_f_2o=w526-h296-rw
Preview:	RIFF\...WEBPVP8LO.../'.I....m.i..s../"&....q...6i.P....vjH.N..rs.S....NKv...U3..A..V.i..o.n..1.m.m.v..d.O....m..Hr.....g.?...U.973.....`..:]...9'.. h.6i.?.;.$5l....._....O.7j.;................n...........8g&.....X..M...YH.........$.HH...E.i 3...F.... z...\|.k*.2.L..Pk\..M..p.%..qN...,....E~...O?.@Z.s...Aw....[.#..i....w...m.t.I....\|.l....Z......<I.....gdV..H.....G..6......7t..I...h..5.,.@...@..%j.2..z./..........H~....y..4.q.=S..&...,...k.z.........(.<J?....b..^...W...D...S{..3......o0.0........$y..H.....o.......jx2U...iS_.A......i..u.T...#y!.U'..Y..............y...v.Zk...%...cI...pC.dl....8.x.d..4Jz...Y..x....H.Z.....<Gi..B.....HK,....(.C>7..n%k......Q.7.#.`-.,.kE%...D2..J..O.I...#.\|.R..g.....d..$....&.kI..k..U..#i...<I>;..n&o..H.... U.qM..d@br.Q..t.........,...;.p.Ug...E.2.....iF.....Lz...>.p#I...V..8]..#.B...8eG.Mp>Y.}:.A..J.&.......J..I.;Hn.x.. .........R..L.7....h.P.........L3.Ce..m.....h..%...%..4/...Sr$i.....l ...F..+.f.b)..7.=

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6842
Entropy (8bit):	7.96906227819572
Encrypted:	false
SSDEEP:	192:MjLzPB23UOO2Ikw6BsZyxwBFZJ2lSvVDc:MF231O2I2BsZyKBFHEEDc
MD5:	61AE66FDFE5C513A0E5619C9E5C91833
SHA1:	8425E423007C0CD4F5F3D4ECCF5BDB1F6AB72CB6
SHA-256:	87E46B14757FBDC8031EC5BBD0E7D65DC0B56C70FECCE186C53BFC6515D3C3C4
SHA-512:	1159C179236105701DAB66E1FC562D2B9F60A7E7078155FECB2364699EAF50898C5A2C6F254B8388A2614AA5D0BAD913F03154C2A04A6C177F7D3384DAFA1EBD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....n...*(.(.>=..D.!..... ...w0h..e........!....;?.......O....C.'.......9....?A..}..W.?......y.n.E.?._.%>....?.....w./.~.s./..._..Z...A...[.K....r~........+...G..........[.?......b.....;.-......._......W.........6...............".u.c.o....................W.......i..pM0.......4....e'.M.v{......<8.j..LPi.Y.G..<.`H.i.o..Bl.GW"Ot.9j}H{.w+..1.%......\>s.....%gR......j.M.Z9.h..FJ+@N..A.....6o.K.yL_..c..L6.I.%-n...l..s)........!.tM0.......A._.'&}..../...ol,Al.oQt.s....76_...$.t.Z.{v.........X.N.&M^'..j./{..5L ..Q..W..2...N.,.^%...B..F...4.....\_.....&6d7..2..R.....K...... <.a..G.6..........<...(.S..O.....3.w.6...C.n.......(....C...~...TW%d...u`....\|..x...A}$Yx\|.Dx.....>5.1B..B....{~.........W.89-.Ns.f0Y....%_6.w..2\.K..9hZ...l...%S.x..8.{S.R....;.......#z.\|KR.\|.I.l.Z.....0vbr=..J..l9vn\|..,.w.&z.Nm..:.H..$b6...<.....G..NnJ^.u<...[....k.p6"..;...........H.......l...x.."(.Y.[.x.YM...7#...Q(..!.....0dy....e\.$.......]...4...y5../..>.D./.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4318
Entropy (8bit):	7.952340208238396
Encrypted:	false
SSDEEP:	96:SLBOj/g0KkuukzuVqxuBTZCYb56WkKEmNH8YeXEBSiJM:9j/rKEExoZztz/heUEZ
MD5:	603B8BA36C22566C50A10EB94C3511A5
SHA1:	8E076393F2A191B2C38899552B566A287CDD9B6F
SHA-256:	657F14CDFFE966B1D6FABC4E06F4DB674D17E8A570C44CBCABE046F5CC98C8A9
SHA-512:	0904EFFAF009A5E5214AE78D3BED2703D9D91F096714A9CAA4189E950BAA28D10673799A94156B123C5608B6FFD647A08B1C8BD4AF8E9C7508046FDA61DCD2E7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.U.m.$G{......%.R..EuT\.lf..f..0.>....O`......:).0CL.`f.Y2.);..J..d....V{.X...f.......-Hn..Oa.R.X.<YLu..y....K..........\~.8[.'..h.4....v...R.`...J..cv0..sV.......m.Y,.d..,`.1...8.q.v0...$..XFR...;..l......:..Du..;.......c.."......Ij.b..].J:Bf.l...%.F..m.\|.%q_6J..6J...=.%i[......[W,..<..if......UW..kfC4/.E.TjO-,..&.a+...5.....[....G.'.g..X..g.#....;.'.m...gU.v..........@S.P7gFu.=.nA.7k.......k....u.i.t.....4U.[^F...w....&.a~....4%...K..W.W...}c.c...V.{.>..,.pa;..<..U.p.]4./c.....z..7.{.c...q...~XHNMJf..&...WW....'.?.hT0..d..:i.F.....n.4Pf...6.......Py...q..b..b/".dG.;.n.._".77.-\n..:(.....z.dp..28.....c 9.........6s.D] .P..o...T.2.T.v..w..X]].n...-.....S......8q.QM..4....A.V...jn..Q..)......W..'...M6N...oC1.Jjg...:pq...]./ucF.,....S.._0..[....<J.G_..]....2i5.X.9..JK.uR...Z ..j.....d.L.g\.#..2m1...R.\.f........d..Y.%.D.....(...p8......ny,.J.]N.8..m.{r...^m...a...F...5..g..K7...'....Z.i....b...:..H./z...G.. 4C.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	339
Entropy (8bit):	5.203782911992142
Encrypted:	false
SSDEEP:	6:kRZzRxVvn9vrbUAx8G/QVf1M0s8tHf1pOwQRaNw6JpyxZRNlad0:kRZTFdrH/Af1M8N9VkbRN20
MD5:	A532AEBCB8933AAE390902FD1A297C8C
SHA1:	FD058D6777372B85F9BF76FA1AF2516859B393FE
SHA-256:	CD2324267E731EE120BBED75D33C4507BA56E2D9D3425E6A0C8F967F06AC61DC
SHA-512:	742333173486842626FB26442639A1CD9AD3001ECF001D6E65D4822F2ECB5EF6D4F77D9E7B6BC0EF1CBB719333B36986982C19FCD4D0E17D434E14E61AF693DF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=PZ1hre"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("PZ1hre");._.$q(_.SAa,class extends _.ar{constructor(a){super(a.wa)}H(){return"PZ1hre"}O(){return!0}kb(){return _.KCc}});_.Aq.PZ1hre=_.$Pa;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	466
Entropy (8bit):	7.19935230016322
Encrypted:	false
SSDEEP:	12:PZPTEM9qg1sckUnCQSX8rUXTlt9FwkPqXlLwTPx11z1lZUCKFvkGQTta/:RHYg19kUlxrUXhtwrUTBzzZYhkD8/
MD5:	337EE8725B3D9E4DCAB7167906BE4052
SHA1:	0A9943ECFC4D9B3C2ECF7D9AAAC91CACBA345C1F
SHA-256:	59832E77A40F12A4209B7C5B4C9067EF40060E0DC1EA7EE79B3726D8C76EEC50
SHA-512:	EE8575DF8B2BAA7532BA57C97DD9DD8AF5E63B7765287C57B8AF1B760139E6640A564AFE576543439B70A58E30F492D54CCA4A9FD82965786069EB482196635D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/a-/ALV-UjXkGwFtGTUp7J-chzmsBuXw50nlfEPLzblqnxyaMBHTyJKBxPsC=s32-rw
Preview:	RIFF....WEBPVP8X..............VP8 .........* . .>u2.G...!(.....h../l..R.h...u.P...F......:....s.Mb.1.........t..M..xA..g..?........._h.t...O.^.b.,.t]..o..^....k..#tO..Xh..l.l;^.....\N\|n.........k"....\|W.......V.U...`:(....(...>.E?...(..._....7.mK;..<...&../.k.N..(....>".....L.~H.{......_.T....+jd!.:.Cq._~...l3....4kW.....%.;U.....;%....#.\|\|...(.:k..Y.g...o.Y3b...i..K..;.............\....x....:-......EXIF"...II*.......1...............Google..

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	downloaded
Size (bytes):	62120
Entropy (8bit):	5.200233203039825
Encrypted:	false
SSDEEP:	768:rPksmcJcApCeZygCoEOuTudKEEB8xAnpFyS5eCyDvmojEWCykh5kNbeAFjg5gvC8:rPksrJCeZygColbQJL5/U
MD5:	3EA70AE6D554F9FC0FFB8CB0281EC0A6
SHA1:	58D41E45856B15260F69F19200B6DE7FDCBC82E6
SHA-256:	A5B0CC4EF0FF84660C52A703030A8F948CC8702EF6B0535CC31FF8611823DBB9
SHA-512:	00E5EA6FF4C91E1419C4F7FE95815E67C11EDE4849810C2F3371E694622084D439F0E73C855101CB0A1A5B516A8821DE3B2EB1AEB450325F8A38E3EF3B9CC19B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.171.ce33468efea141bac957.js
Preview:	/! For license information please see chunk.171.ce33468efea141bac957.js.LICENSE.txt /."use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[171],{70171:function(t,e,n){function r(t,e){(null==e\|\|e>t.length)&&(e=t.length).for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n].return r}n.r(e),t=n.hmd(t).var o=function(t,e){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)}.function i(t,e){function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var a,s,c=function(){return(c=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function u(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator].if(!n)return t.var r,o,i=n.call(t),a=[].try{for(;(void 0===e\|\|e-- >0

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3094
Entropy (8bit):	7.890684168858667
Encrypted:	false
SSDEEP:	48:M9ZbITqpCFYdowrUefmSJ8GgJhJdyVnTIvHceg4wlFvLTcl7huTQ3rpQE0SiQ:M4qp1qkUefmSW/ZdydINel1LILrZf
MD5:	7DD64F1BE945C1F8D47A8774D25112BC
SHA1:	444FB88D5B28EA6FDF6A5BF4016B9940D4F149EC
SHA-256:	6D99EA52F11974A873C1F941DCD1B953B36D0E170CD0E6E7141F68BBA86EE3A0
SHA-512:	9A3AB4A27B8B10CFF66997407F90A4AF7D14232B2D6F674139CEAC259580A784AC5E0F59FF7916060652E3A4F1631A3FCF5AAEA5C059908657F6A05366CCCEA8
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M0l.6.,..;...g...O....f...D.?..,2.Qu...$I...h....q....&...%._..; $`.I..~....P...F@!......2...ZN6..3f]......j^..3qb.=8...DD..a.?P!S..[..@.mb....."b....#Z.z.#.."..2.{x...L.].e0.=Z.\fmA{...3T.F.....\Y.......(.#.L.._,...bvg"...Z.......DD?.3:.J..'...\......m.V.>.................4.N..=..n9...`s.m.v..o.=.Im...~...N..N......NU...9..m....,.....m.6.=,-...-..N..E..,..l..,.yb..9.,I.M..c....._..h.k.k../..;.:XsJ.m[..9..w......Y...wL. ........Y./D .$...D$d..R.q....i..V..o.Yz."".L.!.PP...A..2.G.....z...D...(%..Th........6.~.._...$...@..d... @.d.p..z..f..BE.9...O...D4...0.)XhA..!d...P@)..1B`5}.D.`._....k.v!......y-...VH.\|.F....m..U.hI!.b._y'H.?UU........S.p..Q........i....V}...(\|."+.B.1n;...F...h......Bp!.............D"..pA.$.Ti..._...i%G4n.0.e.....=.,....c$...1...eA.u=......../@....V...umt.w..,'=......n...A...,Q).t..{..kr.\|..o.C......1.....J..o0.[.^..#N..s){........5CZ.;.lt.q.0. .s..e.CO.I....VX.9...F0X...8...

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13280
Entropy (8bit):	7.960449800390654
Encrypted:	false
SSDEEP:	192:EXA78faBIIgC0Wtr1JbQhrs1WBxqlrX0w0OTqqBIZu1LwxLl1gRw4fDcGtu0uglT:L8fuIzClJbQh9qqqBAuN+h1kw4YIuFkT
MD5:	042D45E1ACC2A111B98DDEB55D0C3E66
SHA1:	C7D0BAC045E8A06FBE5A3FB010822C85DA42747A
SHA-256:	155ED1C06A9D1253C2783AF6BB6C434B76875264C1E26CAE948E671EA6629EE6
SHA-512:	75897D37198E76DFB4CE0C14B0854257C2B4E70759D1A7BC52EEB0B4CF8F3BB9B97823E8F0AED9CFC9FC7A4EC815BA5456B5C71B74DE2A3CCCE3A63EB5603B52
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw
Preview:	RIFF.3..WEBPVP8L.3../..?..H.$.m.0..C....$..9.........K.k.~...ww.x..]..Z.s......~d.[m....d..S@..a...A.T.W-............#....Bv_.$eg.C...$i.I..........e..]...e'8....Ux..WedEde...6.aWp....%....._...$...H.)..B.+U..o.._Y...0...H..).G.....^df.7.$9R.......W...yG.'@.\|$.i.KA-....XvZ8..,..^z}..#=t.N..j.h.':@.I.....C......x.Y..z....N....!.@...).....W0.s.FC........iBq66.\|..@....{..k..P@An.E.......B.8.Cj.@.....s.R. I........_........"...v;....[^e..f..<...Q.$y..my..T..<....$ .yM$.u..` ...B.`..R....R.j.L....7i...b....gUQ............=...B....8..m.H.....1..m.[....-c..T.l.b...... .3dB....a.2(...$w.1..1...H...H,.f.fZ633333.}eff.23.@.v.L.4cq%E.z.YU.Q.....z.;...U.Ka.VfvKiJi....Q...4...].0J=c_.{JS...Z23,.F..m..6..7_.....m{.o.m.m[...n."i.....m.]I...km`.g..9.9.z....D.`..T......s...=....m+k.}..>.{..y..R..@J.HI.mN....{....s.sp...W=.J.1SC.4.S.).._..7_.P..%....D..3l........d[.2k..pw.<H....d.%........9.Zm....{.;?.B6.........{wL..8......S.{.z&.@\|j..#.U..._.LF[.QV.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	7.052421013235357
Encrypted:	false
SSDEEP:	6:yk5ZYChDBpEnS96WesGKsxdRM8Zj5elkndH7xLiGE6CAYdr0jSKIz/zZwE4:34CRBpEnLlD3Pb5e+LE6CACgmKIzLZwT
MD5:	0923A53B64E64DB75177B6972F016A42
SHA1:	6915D871CBEA8A3B8F4E54367DCA538DA0AC3082
SHA-256:	E0106DC1C0490A432C08671994F87FCBB982B7B25B4F9CBB640D49A03BD89CE3
SHA-512:	5054B69C1A895FEEC0CECD471FE317149D8F804E15CDC0ED51F8BA6B3FB61E092C5C78A92768D31273DBCBD189148D305BA4EB1EB210174DC6B0724615B1B1F4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw
Preview:	RIFF....WEBPVP8L..../........$g.......r^.E.$E.....~8...A.H....A8...%l#.Vr....b9.P......N..[n.P.........6\.w.+.....X....U'...#.}...Y....A.xdB.....$%.ww....t. ....Q\|.....,.........q...D.@!H.N.p.5.....*`...ms.~.l....\/.[/..u=..@...X...4j=.}..edi.i...%..0u~.MH..

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	220
Entropy (8bit):	6.8821344864377085
Encrypted:	false
SSDEEP:	3:kl5Zrtlau+UONRkmruJTKlmCD+Gd8GUkOXvAjVUZP0O+14HoeHOUxvkQMJQszwyb:k3ZANGmXlmCD3d8GU2VUZsWHdxv2fHAu
MD5:	3B35CD064A94FB9744148B633A11E10C
SHA1:	7ABA068CD3B4A68482EA930C198E721F71D17204
SHA-256:	403F57F68F9AA81D349866B872206BF96892B1DA1F5BB5A45034DA1735B6184F
SHA-512:	92CBE78D115D7271D69C4362FA531443FAC3EA47AB9AC78B084BB4F5B6839AFE06B8ACF9528D26E238D794BD0CA94C03C3B2331F67CE772535E913437664A0CB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...5..m.U..o.......!..4.......C....m.~Kt@.4@....#..."01...l#.V.?V....[_.Q.5....'A.\|@.?\|A(@.s.J%.g..^.=...L:ggwWg.u.~;7{Y~.......l.m8...t.U.\|.Y.".K.....,3k@.L...TJ.c....B.B..7.I.AM...D.vh....=

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2666
Entropy (8bit):	7.917807355344063
Encrypted:	false
SSDEEP:	48:HVHk2OeFdRrLnN/m8Idf2KWfLnSu4KKohxCiac6tXdMMHyu:9LOe93Nu8IdfSjSMiiEHMMHJ
MD5:	0EB6C2E6E8F82DAEDC8AC2110E0A10CB
SHA1:	B9C32C32437D67AFB1ACFA5ED3309666227619FA
SHA-256:	D3C8506B84D348EE58F5BD43BD4115D893DA7382E12D5D49D19D0E2942528B52
SHA-512:	7AC74EC945882051DD0DAFF7509776A6F217F56B38593F7A027080CDA77B467AE612B299F2FC7EF5ED5BDE1FBEF0DE3C2D976F060CA1C2627FAA6D78440F9643
Malicious:	false
Reputation:	low
Preview:	RIFFb...WEBPVP8LV.../?.....m#9.....?.....AU...3K./..-.3-..7..t7>.Y.i$.Q.".7.......$......<..$E.......t.B...A.P..........H.....`..]`+.......6.......A.m..c...1...).....6[.d.rO.Ui.Z..Z.V.....%x$(...gL...p`P.A........R...&.S.F..(.A.6..>......m#A.?.C....?.-..m.........L~{..zLC..cfffff..02o..>...]j:.:oL..X.....!.{.K.Y.^O!.s....n...%...{...m.Qe...!....gH.R....~...,I........3..uq.@w.?3.7.]1.?.~...H.!/.',..9.8%QSeVr....8U..q...f..k...8..f..W..q.Zk.d.m.\..i..s..3.....q.U..m..w....l.-...(.\ehi.Lc.y.....U.I..)~..j&..k..p.u.P.7....5.6.Fs.".7,.af.a.....^.[..._...A...Y^.B/..:.@4n"8....weD\Ec<d..G....h<../...`......C...D.I..YM!D.....9df0.{.D.....9.<d.$......n.....E8..(.z.!H......H.......)....L..Y...8n....AA....q...<..\..`.j.....U..HH.....2.R....;.[....p..Q..#.W.z........g$.2.... .Q.%...E.y.T...!.C.,JO...^B.......WhQ...v..[...z<:...8.ao..r...Zc.K....m.r!/.]Cv:.i....#...[.v..$z.vN5L5..\..5c..j.+@Pr......Y{..2I..&.f,....}Pk..&...^s..).'.[VdI.e.q.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9974
Entropy (8bit):	7.969479858844765
Encrypted:	false
SSDEEP:	192:nz45Jy4YOKB5tvq5tbZNfyQCMcdFJcf4TWoY5FX6ZaQHHqGn:85JMb0LfVCZdF6ebnX
MD5:	F469161DCB6B428ED579066643E0FACC
SHA1:	06C807905D0264AA497FB2090A7EAA2F9838DACF
SHA-256:	F4A3A202AEF5AA38C9E2281BD8000312FBAC33F3F2576C92326921DFC126BCF4
SHA-512:	FF11D3FF7738202FF698922FE87CC85CF59D7497077B47B2C382A27347F973C632A4BFA506C5D1379DB9E237069AE07879CD2B4B056CD5101A7593104FBB0368
Malicious:	false
Reputation:	low
Preview:	RIFF.&..WEBPVP8L.&../..?..X...m.=... ....Ag.......h.M..]..=9..`.b.ZK{.....Bd.<..%..2.{.n`f6.; ....Z...D.o.....j.....?.....5n"".I........23..\|........y=.....q..33..h.V.......$........}...+...e...C..gYE.....{ ...........w..d0..P.......!........t.{.......@....]........>.....v.0H`{=Y.$.....T..#5..>.ni.@@(Q....1...1.h,.O.n...,..!....A....]....V.:..m.H..}-....1.\|.Y.y..!.+.4...'v....$.M....`..p...s.]......X.m{-K.Zk........{?H.{...y1/.......ow...w..k.6..%...S.E!Z14...?... 4\Y.K.`1]..,$..!]..Kt....N....P.A....=.OA.Qo.P.s....\\.Ep....G.C...\.6.1........t..;.E.S8)....\|.>..@....m....I.I..YR..m...m.m.^z...W.1/j...hG...<k.2.?....3.>g.2&@K.m.&mN.Wf.....%Aq....YV....Y4.A. .B/....%#<..C....BY.......K_...h..C..vFK~z.G..>....C..(.....x....~.z."..C...ZY.\|...]..".!...2..1...m.H.$........\|..?........J..RkO...Qn...........k;7VP.xY........~O.,.7....d..r.,.B.Y.<S.B7J......a....a#....).nP...f......G\.@....Ax.!...\S;.]m.'..........n.....u......+.\I..

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2544
Entropy (8bit):	7.891775535822655
Encrypted:	false
SSDEEP:	48:ss55FpCT8U8Oba48YEXgXWnmdU5eoar5/GYSEwZK3aZ2TO5N:ss5oh8IL8ngmny8eDpGYSSK2Ob
MD5:	245FFD8BAF56F775D50CFA5C52B15A06
SHA1:	096D6C17A3B3B9EBBEC34D99986D219CC770D166
SHA-256:	158BC574F2905504BDFEFD8E199CE012011CCFB49635CD3E56B4FF94C3270D25
SHA-512:	F3F08D32E9FC6E6E6BBDA64020C4B795B27F5437E62B4157A5D653F9DA93471B058DF03DAE4AF8114779114FFEE36C7F2E754A79A2AE8B4E6962AC9806A07082
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M(h.......'.."....?!Me.... =q.i.D:3$=_/...T...\|.. ..m#.\|...CF......=A..?B....v.`.}..}.......7'..D.h:HJ4.q......$..i.4.m.....Pi.j.....m.m+....;D.J.N.h.9.....&.......[3Xk...\|...W..d6.:.U.#.C..N.#..../$rVM...N.v....$).<..$.._:..%.I..I......\|...3_.....m.([..Nr:..m.m.m.m.6.{l....u......u........._l.r..m.V.+w`;.U.s6..IR$.=.fw....?cfjM..m#.............lq1..gp......NA.L\.T<..Y.Y......k.....U.O..>.H.h..a.......X.4..I.jC0.\+..}..X.-..P...a.....5....D.t.U...R."#. ......\|.@iT..,xQ..n.Ry.....P...-NA...1P.F?...%....\|C.P;.3.!t.(...L"2.` .c5~iw...+...nh...E....V...`.p...D..4.............i/(..H..8.v.....T..x.".m<.j.....,...q[....e$..~...%..f......$@4...=./..5.}J../R.\|(.F2.._,G..........GJ3.@.A...h...r..%..q....s..Z..e.46.....#.MSrm.!.,...... ...x.-....g`D..D..g...$.?jY..b.P...........8vAkla....ky.. ..x..+.f.p.P9..e.........,.<.t.,...\.&....;..0\,.h....%.-L..{...!..P.....W...}..C...tcPp...B......3...a...voU..t.A.@2eZF......b...,........ .@.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33456
Entropy (8bit):	7.96315139927072
Encrypted:	false
SSDEEP:	768:yO0Z3NC1cNlRVV3VgrsC/JKLNBNS8smKGI:S3NC1Ajnlg78N9sm8
MD5:	C971C780267D5B469120B497DB586452
SHA1:	531F1AAA2FDA20CCC72E359F9C60FFF68A74868B
SHA-256:	14D2F0860EA6336EE9DCB02D274E18B0A0FB05FE76C40D4A0BE9F6732821300F
SHA-512:	3F504D40867774BC4F62357A1A991224D6138BDDF54F89DB9F14186F133E959349F66200C7896A392C4C366FB2A3DFC3B4237E81943177FFBF090F918E762404
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@l.H.tr.S....p..^.........;..m.........,..^<.#J..=...=..m.l&L...juA.<$.I.@.C...q.....:.PU..=>$..dQudb).L.I..z..@6FU.-i.Y...b.=.../E........B._v.....I>."%\|G...$qH0v.p.#.w.....1...Pt.....!....s..H..e...DK(@.I...w..K.9B.....m....,F..4......^!.....0..z. [.-E.V{P...-.)....?.=H.&(. (.]..H.#I..s"..]./.....0....3.....&A....I$.DbL...c\|..Uc...&....qP...y......:g.1..,.$.%G..#G.6</<s.9..e.>..U&)/Z.....9.q..m......71..k..\|h.jj.....j.6.l..^......c.q.?..%.u.V.m.6T.VS..G>.6].9.......e..b.5.H9.PR.Y(}..M.9...p..,g......6)..i..:.i.%....#..}^...6mBN%.a...k.J.`.lS..N.w.8GWR..`......A.*UB...........Ah'....P!.6.Z\-....V......P%T.U.BP.UrF.!Pq....hl^...+....4}.(x...p..!(T..[.Z;.....6.c..p...<w.....X<.q.pn....F..!d.I&.i.p.......B.u....Z..\..jtl.......my[.=l>;;.9..&..K..\|}..\|q..z.7..NN..;..\|.,.....t+=..@....v.zt.p..._..S..1EL...M..}<.,.,.h...Ll.`.......\..6lX.1........>.?.C.j.m.`.a....L......\j&...K..P..L....a?@}...h.~w..,....cyY....D..

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15926
Entropy (8bit):	7.9763814812413365
Encrypted:	false
SSDEEP:	384:BIojATJ2VLl+3YhSIAwK7PLOeZg4h7vdi2DxiAnj2zqP:DIJ2VLl+3USIAwK/3Z+8BjfP
MD5:	91F4792A3112373F472011704F368E4A
SHA1:	AEA0CAFB81145614515FE999575AAE4FBC24E402
SHA-256:	D6591E6AFF17AA27B8C03C44041CCFFE9F7821520375E5753B73221FC9AF28D4
SHA-512:	89324CB590B0E10805C81D43CF09B4387DFB83B46451BC3623A6A28BCAA89EC98C3E9819FD4F53628146D1EEBBAC17C9475671395796AAFC43488D67EF3AF280
Malicious:	false
Reputation:	low
Preview:	RIFF.>..WEBPVP8L">../'.I.5q....6V.....D..]...Mw.s.. 2M.&...s.9. .r.9G....{.XE...S....\|._E.1K.LwK.j.2...j....I.i.]#&.$...R!d..B...U.............xlV....>g..g..@b..f...6..v/.B.%+...y....%......qo.o.0..N.Xk....}....<f..vi..m.1...c.\.y53...N..yii....6#.af...6. IR.....dH.%I.$I.-bb...Y......{....t.w.?.<(t..C. \m..........T..s...$P3..(..0...P(.pR8.4.R_.pZ..t.?.g.f..B(.xZ.......0>%...0~O..d....BY..8`.O...`...Z.......o..V)....%.j..Q.............#.8*`l...r.....?X......E...3..CL..x.....0..@@.\|X.x{lZ........&.~.... `gp..S.$..C@.p.@...K.................D...0>...R...0~@h.....<..4.1^.x{...O....Hy....A&..P...".qa.......M...O...8S. ......&.o&..9 ..4..c.@u.....T.g.<8Hy...j...m...-. .?c\..Wc....... .A.p.......0......`$...0....`.......?K..(3c\|..h.0n.xF..c.....!..1^O...0......9.......1..8.`l.....oS8.........^... dc.........L.r H..@BGa.xH........P..:..v.R.~.`L..~.d.@.........wa4..W..S..wS..-.~.}....'Ky........o...:..Y....y.....4..X..X.....8.o.z....:.......$..<[..^...

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14592
Entropy (8bit):	7.979566802302065
Encrypted:	false
SSDEEP:	384:g1OLN7HRNRMf8GjkVlFs3kBk/6Iu+HB9YTqv8hgCeTWM97qZa:g1OLNjHJGIVljyzfY+UdeyGqQ
MD5:	B01009243AEE7B58A9160284C54C452F
SHA1:	FE7822587D0E986CC47918A00454C38645D9C98A
SHA-256:	61417E20FE18149D6D87C80EB994D48F0F1D501F45861FE6F1D3E38869149DFB
SHA-512:	2E170A10A063BA2A7A543EAB115FB132E2841AC207B59CDE43B5577DA9048DCE10A0F041DBB80E292495D6C2D632C37B43585A18A6396541732B57670AECBE07
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw
Preview:	RIFF.8..WEBPVP8L.8../..?.M@r....4.....5..O...2......yI....5.7.X.Zk..Y..5U..F>..U..O.a...."c....c...8r2)[..7...TOzwwy...;....`.(...,3....z...:..$.........I....53=...V{f.E&...6".w.."!k.[.V.Y..C.r.Ir$.....o.e.DbH.o.:..-..K.dUU...;.././....U+.......g.ct.......O..^7....^..l.l...{8.(B.l..........EJ)@{...w..O=..\|.QJ $.A.,.rx.L...b.(PH..ReV...."..H.DH)..(...a..@.$..E)...>..w....c)..M.....R$..Y.f.....`u...@..pEn.P..`...R}.(.._../..'..p...eu-.^...>.7.../.D..P.S.D(1..]."H.A .bS...#.,...B&U..'fR..."..!.V.......(......W.1.&!.R...L.&Sm/&..v.Y.;.9..$B...0..&S..8.g.&ui{........J)K.....d....R......).....N...lG.J.$.@"..&m.]..`W.....;.2.J.&U.....uV.......:..m$I.....g..F...g.>.w.P...9.z....A.C......3....=....wTp..V...R[..K`3...6BM.QAj..Y.)..sqwC.`..7..U....j...Yff.3333333Y......i.yw.{fg......1...s...s7..B9...z-=G,U.o.r.MCn+.lq..W..(..C..lw,....".:..t)....b.{..C...5w.q[..N\..C.m.y.CP...b.....1.e..J.w...+S.K1.. ...R.m...}..*..m.mw.BF.....'e}...=t.m[.F..\|.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	48322
Entropy (8bit):	7.9925923618023305
Encrypted:	true
SSDEEP:	768:3tbqdESEHUPdAzlINODPguMRR/OC8ipneWj5tMb+K/ZeG6G62sc2fVAAdgIseEeq:9W6SSCAMOcuwxOr0nnXMb+KRtiztdgZF
MD5:	76497700655681491A9BA6D4BAF13B64
SHA1:	C8DF276FEAF8A43717EC0F9B1EA2DC4AE71C188C
SHA-256:	BBFC9CB7F900979F318D15A59045CB7236636E11B5F8A441E309D9E3F08B9139
SHA-512:	D16D03A8B7D3DA893463A7DA05F7D018CAC6399E6FFFB8535BB8B07114B5B8F3ECB7457C5DD46B3EBD27CCBC14FA79949A74240C3AA1FD7A0335FCABE14B0DE0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw
Preview:	RIFF....WEBPVP8X..............VP8Lq.../..?.M8l.6l.M.#._.4m.........mI.l.{..@..m.........d...I$....N..l{a.Jb.I....,..O.9Z..N.DR.a[I..ND..gC.....$..6.h.I..?...X\|...Wdm..5^....zh.V..8aE.!........k./..... /..H........^..^@.$.U...7..g.E../....$I2k.>.c.d^..](..FR....<.......AN.....Df.(...........P..".........WB.)A.. .q.....1.....!"7."2B).. .....d.+...8.#.8....)"....#.. s..G.g....G......~...........1f...I$.....H0.f....T.lIR.dI..%?[..L.PE.D.'"..q.....Tc].PE.=.4..K.H........,R.D..\|.Y..........I=1..3...G "&.............k..^....d.U.J.%9.........>...\lA....I.>E..]...R.>FHg..B..V.?z.RQBo.....bz...<.KY..."f.C.0..Y3.....m.\|.=...C..{u.w.s..?._.g...{...Y....lk..{_g....N..[t.......gu.2,._.p_.7.#.l.<.8vY.l.....+..p.#...o...U.....7.;.P..fX.99W..}.7\|......DH.;.m.m...c..s.fF......5J.\.j.m.....1..f0[.Hj...l.X....-.....-.r.].....d.g'9T..~.<k.........c.a.x-.'.m..CY...+.....+..=O......Z.Z7F`XS8.)..G$...c.=....@x..w\E.<..H.......A.G7.C....".C^.n..D.q.....(T'...C7.!

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	4545
Entropy (8bit):	5.573837955056086
Encrypted:	false
SSDEEP:	96:kgCHfhXmwu2F6vRzgV4Hg+3sMo7Yjr6NrhrWl0k0tfSRYW6YJPhVJIml:LifFmRF5zG4HgYs3Ujr6NrhrO0F8l6Y3
MD5:	CB39B97274A40824CEBECA48602DE036
SHA1:	F1AA40C780F1EBDC3FB2770FD4506F54F9DAA89B
SHA-256:	BB5450F390D8D6D62F55FF791B6A14FEDC071D93A0E08258023A19825EC1E543
SHA-512:	A0194ED085E2A4B7B1742D6AC09C011BC3079B2FE809508F25032443AE05F44AC8A18EE5E4DF8F1349E4926AE89E16F340DF367E09309A265B4C84E38308C2D1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qAKInc,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=UZStuc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var iKb,jKb;_.gZ=function(a,b){b=b\|\|{};_.fZ(a,_.oo({Ha:iKb(b)},b))};_.iZ=function(a,b){_.hZ(a,_.oo({Ha:iKb(b)},b))};iKb=function(a){a=a\|\|{};const b=a.Vg,c=a.Kh,d=a.De;a=a.Dv;let e;e=_.jZ();e=e+" "+(null!=b?b:a?"cKScvc":"IfEcue")+" "+(null!=c?c:"HPiPcc");return e+" "+(d??"")};_.fZ=function(a,b){b=b\|\|{};const c=b.content;a.open("button","J4hqjc");jKb(a,b);a.W();a.print(c??"");a.Ga()};._.hZ=function(a,b){const c=b.href,d=b.target,e=b.content;a.open("a","BDhSBd");jKb(a,b);a.ma("href",_.zo(c));d&&a.ma("target",d);a.W();a.print(e??"");a.Ga()};.jKb=function(a,b){b=b\|\|{};const c=b.Ha,d=b.Of,e=b.We,f=b.ariaLabel,g=b.jscontroller,h=b.jsaction,k=b.jsname,m=b.jsmodel,n=b.jslog,p=b.id,t=b.attributes,v=b.hidden,y=b.disabled;b=b.autofocus;f&&a.ma("aria-label",f);a.ma("class",(c?c:"")+(null!=e?" id-track-click":"")+(y?" hf6Ybc":""));null!=e&&a.ma("data-uitype",""+e);d&&a.ma("title",d);y\|\|(g&&a.ma("jsc

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2666
Entropy (8bit):	7.917807355344063
Encrypted:	false
SSDEEP:	48:HVHk2OeFdRrLnN/m8Idf2KWfLnSu4KKohxCiac6tXdMMHyu:9LOe93Nu8IdfSjSMiiEHMMHJ
MD5:	0EB6C2E6E8F82DAEDC8AC2110E0A10CB
SHA1:	B9C32C32437D67AFB1ACFA5ED3309666227619FA
SHA-256:	D3C8506B84D348EE58F5BD43BD4115D893DA7382E12D5D49D19D0E2942528B52
SHA-512:	7AC74EC945882051DD0DAFF7509776A6F217F56B38593F7A027080CDA77B467AE612B299F2FC7EF5ED5BDE1FBEF0DE3C2D976F060CA1C2627FAA6D78440F9643
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw
Preview:	RIFFb...WEBPVP8LV.../?.....m#9.....?.....AU...3K./..-.3-..7..t7>.Y.i$.Q.".7.......$......<..$E.......t.B...A.P..........H.....`..]`+.......6.......A.m..c...1...).....6[.d.rO.Ui.Z..Z.V.....%x$(...gL...p`P.A........R...&.S.F..(.A.6..>......m#A.?.C....?.-..m.........L~{..zLC..cfffff..02o..>...]j:.:oL..X.....!.{.K.Y.^O!.s....n...%...{...m.Qe...!....gH.R....~...,I........3..uq.@w.?3.7.]1.?.~...H.!/.',..9.8%QSeVr....8U..q...f..k...8..f..W..q.Zk.d.m.\..i..s..3.....q.U..m..w....l.-...(.\ehi.Lc.y.....U.I..)~..j&..k..p.u.P.7....5.6.Fs.".7,.af.a.....^.[..._...A...Y^.B/..:.@4n"8....weD\Ec<d..G....h<../...`......C...D.I..YM!D.....9df0.{.D.....9.<d.$......n.....E8..(.z.!H......H.......)....L..Y...8n....AA....q...<..\..`.j.....U..HH.....2.R....;.[....p..Q..#.W.z........g$.2.... .Q.%...E.y.T...!.C.,JO...^B.......WhQ...v..[...z<:...8.ao..r...Zc.K....m.r!/.]Cv:.i....#...[.v..$z.vN5L5..\..5c..j.+@Pr......Y{..2I..&.f,....}Pk..&...^s..).'.[VdI.e.q.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8188
Entropy (8bit):	7.97315987746307
Encrypted:	false
SSDEEP:	192:XqKdQmquxznJXzDlIROUAHaKl8LfX3ZfWdJvM/+Ctw4VVT1:XqTmxznhzDlfUKaKqL/Swtwqh
MD5:	D678E080423DE82EFA6CC7C3B426D423
SHA1:	C06E34366683C2EB72B426CAA294C64CFD25D627
SHA-256:	9F2537CA549890BAC770EDE0892AB9AE80E9EA94D1467087A5B27F4F1DF12E37
SHA-512:	58210A7DE37F7F5497B06D7CF9812ECBABC3BBB1D27658BEAB966E00B6AAD8EE50F17E4571936144C8A3E76C6DD6BDB4775EE5F801682E6DDCF323DA37816DED
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.U...$Q....]t.E...Z....6u...R..bu}Gv.a........w...Gls.c.m.m..m.=.c...k...:..\|......S...N..U.6..V...C... ...TYk..6:;...GX.].9.m'{..3'..+.t.b..5....n.q....^q...]..8.lN..I..S.(]..@.:.m..T.b...`;...S].....m....`.A..Z.kkS$9.#.A..a..4...i%...\|...R%gdDTfE...Q.m7mnY[...I..0..k....&...3...G.[.Z...@.K7Q.bP....p.Ca... ..f."\|.:H.......U.r..q.a.....ff.7U....z.^(mL....k^..B..l...&.W.b.S./.......@..L.....+[.(......s..A.7.l...X.(..A...0..-~.L..h[Q..%k.....:../.a9....n.7...W.4.,y.c....b. ...F.1.m.m..6..fjw<..d5..?.>D..".G...$I.$.c...^.xd0.un....fX..?+..8x...9..9..]n....~....9..........Oe.R...x.x.....S.f....4.....l.......2X...9...;X...N.R.uk.g.R8..T!X..z5.2~..Q.c.}.L.P.;.s.I.v..vniv.C.w...-.;.4A.U..3..Mi...My...s.,.$M.~~Ys.{....../M...<vJ....m.....;'...U......C........Q.%w.qW.....tKs...3vi.N..VEf.....M..M)./.....q./..&n...?.9..P...Q..un.G.g.T~)k.Ji..;..N/M.?Y..S..g..a.f..+....tJ...=._..\YpU..QJ9J1%

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3175)
Category:	downloaded
Size (bytes):	45694
Entropy (8bit):	5.118242929635633
Encrypted:	false
SSDEEP:	768:tpi7T07ytsSwuLFB3t8KbX3zrcW3HsBtuv3BtlK7vKH5v9u8kEFsW1:tpK1L5bTIByv9u1EFd
MD5:	8B2EA74C2950F702116F9B02ABC52BCB
SHA1:	AD7455A6E9F0D7E73BA4B80422EF805FC66F7879
SHA-256:	FFEA291B7D7F014FDC619350CAC7B5CECF876DD20EFB498EF0D915FE3AC4BA17
SHA-512:	942397EE9B53797364C02D073689CD3FC049E2EA7AF9D89F19608A61EBB76DA8A554D124F8BE99CECE74EB540806C9BBC383DAC238448D07A42DFC4D421B89A3
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.990.023f8bfb4104e9778375.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[990],{67990:function(e,t,n){n.r(t),n.d(t,{ClickstreamProcessor:function(){return we}}).var r=n(24178),i=n(32722),o=n(76588),s=function(){}.s.prototype.setDelegate=function(e){return r.SC.attachDelegate(this,e)},s.prototype.localStorageObject=r.tO.localStorageObject,s.prototype.sessionStorageObject=r.tO.sessionStorageObject.var a=function(){this.environment=new s,this.logger=(0,o.RG)("mt-client-constraints")},c={nonEmpty:function(e,t){return!!r.SC.isObject(t)&&t.hasOwnProperty(e)&&r.SC.isDefinedNonNullNonEmpty(t[e])},valueMatches:function(e,t,n){if(!r.SC.isObject(t))return!1.var i=t[e].return t.hasOwnProperty(e)&&n.indexOf(i)>-1}},p="overrideFieldValue",u=function(){}.u.prototype.constrainedValue=function(e,t,n){var r=e&&e.hasOwnProperty(n)?e[n]:null.return this.applyConstraintRules(r,t)},u.prototype.applyConstraintRules=function(e,t){var n=e.return t&&t.blacklisted?n=null:t&&t.hasOwnProp

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	7.694737520848792
Encrypted:	false
SSDEEP:	24:Q0gnfwftjFBkUSEMixW78yt1x/YUsfUHS4Xj5OQ/5YDQ:QdIjiDEMixW78ytbNs7+FOQgQ
MD5:	B268DC2EF4CA78606A491547A017C832
SHA1:	4140A3CA287E6C52EFAF6407FDD3B30C190DF53D
SHA-256:	F1AD01CD2BE867EAEE0DC3A0B0BECC8358F3FCF27EE7E1EE8854BD85DD3A2DCB
SHA-512:	EAA399EFCEB9B86652497833C8DD7D424CFF7881F6E07FB5999E00FEA3A795BBB44EE2BDB9455117403EF61F3D7C5B4E50AF536D3063496964BF37CAEA2207BF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L:.../?....'!.$G.b..:BZ..L....."I.$I...Z.8....&!.$G...?.G...L........h......@.?{.......0D.......D0B.A.9..c..........@ .O.DC@.>.@.o..v.%.P.M;l.... .Lh.....0.....t.....t.b4&....p..]..3 ..........`.....4...{....f..c...M....K............c..{.t..x.9.>.!.=v............}EH.B.)....].~......?...u..#..........hm;67w2...I..Im7........Y75..ij...\|..v{....=.QD.'..efmt}LRw..\........h.6....@....O...6.4..o'..r$..6vn(p.D............Ec...%..p,..g....."Ob.8`.G...0..c..n.x..<I.1'...(.0...P..?..?M4v..\|.4Y.8..........\|.aC...-.......+G......F.u.]{.a..{..7..R.D...r..#P...2.............y.Q..< ................\.j$<..;\.y..O....6../..{F.@...V3.5....=v;~s...2q.m.2.X..V%......,.....zc......u..S.I...j...@w.R...6.h.r.v<p..q}.+..R.N..E...XD.KV.G..j.&....Q..C.......7...G.......q.....Rq......H.T.R.Y}j.T..Y.I.U..-........G...&3^.UM....o.Q.X..,]..Z....+S....)K-0...>.....^OS..0.Z_....."...>..f.>..LK.....i.....X...Zr.-...6car...[...KF...^.P..

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_web_exp
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1406), with no line terminators
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	5.807036422634925
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA5QHy+KVCLTLv138EgFB5vtTGJTl4OtBbbLyWOeIbc8s1ngirLOg:VKEcJHxKonR3evtTArjHFmc8s1/OXLrY
MD5:	5D849C49F6C797198E802E070D85A3C5
SHA1:	56781822E84C590993A455C08580481A416772E6
SHA-256:	DEAAEFE3A032841BFEDCED33992A3EA6F0C2BB13F37B3D811385371CA3578BB0
SHA-512:	B385E251214D49B29AAD3BE2D8BF6F1CFA630AE4A8E21AD37EA263E4E6BD8A93F7FCEB2C17CDFE090C7BAEE636B2A4A5214E6D5BC7AA0196F8327E83C6111DEA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var s='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js',tt=w.trustedTypes,cp=tt&&tt.createPolicy,cp=cp&&cp.bind

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	48232
Entropy (8bit):	7.993389789636593
Encrypted:	true
SSDEEP:	768:3w4PyBvkKHgQ5PKr+iZBtEceZM6+S04rRnOQc2ET/yJquqFXjiSY+1UZUK3seY/A:3pOT9K6iVaZGS04rdBsyJeThY/Zjs9/A
MD5:	8F207042AE152EF501F2391AF098AFC7
SHA1:	D9B7233450008EE49E6DE7701769046B093B4126
SHA-256:	610D71F82FE6887B785BF15376DD51175779AA98CC85834700663575F608EC3F
SHA-512:	5FF79B88A3F487F3AF2F47808952CA18037EA216B9927CFD47D7F5E2BC752EF400B81171AD88FEF0104FFD4E38BBAAD9F778E578282318724BBB72F8CF42969D
Malicious:	false
Reputation:	low
Preview:	RIFF`...WEBPVP8LS.../..?.MH..6n..\|D.....[!...`....5Y..'..&...$.H.g7YU.@:.#.n.v.....M.....A.vG....o0l.su.&84m..Zq..C.. .U.......I..!.$..nk..H.$...../_q....f}=.sN."..is..u.xl....i0....OD i.0G. .<.....ne.$I.?.n.UE.f&...toK/......K.../...Zb.._..A......\|..2....m.........}.9.. @\| .....~....r3..sf...'l.5..6`'..d...-q..WR.c.{..aM..b$..#@.......$..@......91:.@hf......P(2...q..<..d0.A..g7F...f&m.J.#qU...#I.$If.pvZ....P......D\.z.@.m.S.z.?O...a....!.^d...$J.m.v...*.......R..._=.1....?......c#.c.{.....F.c0....8.....\...`........p.@p>....W...-.\...4.s.js..........)m..617.M7..h`K3..&....&m.is.6...?.RV..z.1w.7....... @...q.q....c2)=......}.^....v............. ...?p-.a"...d......a......W..].'.B.....1c.%...PwuWw....L.X^........?.l..R..`. .`..,...6..w.v......].... @...cr.B).4fv......W.l.Wz..c@0...C>..K..++.O.2.<{%.....4%..R...1'c2.4......>.7..U..\...n.$o.6..e....8..>.2i.{.#....&..mn2..+..^......(..1..d.]&7......g>........,.t?...0..p...C........EY..x....

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	5.233057420667474
Encrypted:	false
SSDEEP:	6:kRZzRxVvnbAx8G/QVf1Nw80MwQRaNw6JpyxZRNlad0:kRZTFwH/Af1i80RkbRN20
MD5:	8B5E20AF4C5DA4D3807256150855F420
SHA1:	34A53D10E321133E4ADE52E3465C71FED4FBAAD6
SHA-256:	B52C7F8014600DEE1B48C98BD62B64C91F1A95D7786AEC368836E2AD8B4BBAD6
SHA-512:	19F9020A5FE89C6BBF2E244399C8F231E130483D80269BCE53660971238724AD14DA4AAF7E880294F0E1BA90EE9872A219A94814F39DE6C261E1453BDCCFD9C3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,DRmmld,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RBsfwb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("RBsfwb");._.$q(_.LAa,class extends _.ar{constructor(a){super(a.wa)}H(){return"RBsfwb"}O(){return!0}kb(){return _.dCc}});_.Aq.RBsfwb=_.hA;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/supports/supports-Wallet@2x-daec7ef3fb160308d05ddd69a2b1dece.png
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1968
Entropy (8bit):	7.887842259839152
Encrypted:	false
SSDEEP:	48:zKS0PU7BIWKegISpoMKLQe4L5G/PfkKg5IESU1Pd8/kho8QTm+hA6P:z30PUyHSlgIPMXtm/r8QthfP
MD5:	5595E532F330186A628DF64B6BF2AB9C
SHA1:	DAD41B26075CA3D857C92241E646088F87FC593D
SHA-256:	242280AAACE4E73539F6328A80E12486699E260FAD50AD3941C17B32B3126BEB
SHA-512:	D9793F6B1B4455CF2618F6DC76ADB832A342B331536D147B6A74AB62E5D0C17EBCF4295F7EEF6762186DB5051FB16E48C92DCBBABA90BCFBB727B2D7CC367E6F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?....Em.I.v~]../......a....:..!.^..$.I[..&..?O..q#I...."..=g_j.HRc~..C....D...0($...%....w]k.{{..D.##.....qZ.v.. 1.........H....g...........3s........<.3-..u.Z.l...L..=.....p...bdf{)4C.9.....~._..(Z.m...f....m..=.}...}rd.Vme.}.s..?...-..N..;......g...b....FKq./...~..?.Y.,hW=.X.=Z..X..DGQY^.qpj.e...y@...$.2.C.P9.Uv...G.....9>....c...D.....l}....._/=Z..-...f.7.z...R..k....Q.Z.17..5..S....@(Ue.!.......u......k".....E.C...+.........C....v&.>...y.q.F.4jP.........,..>...T.....H\k....}Ivm........U..T..!0..{.....Z...c.a...........y....[......n..q..g.yf..@c../.m.7,..vx...j2X..P.@..{U.9r.......u..O<.....AE@.\.2..I.......@0(...Ib,EB...?..puB.d.......{...n.Y..j...;rUk....n.Z..xI...!H.P..<l............_...3a....s.>...7....<r...6.8. .C@.....mZ..>V[..F.Cc.........R...#.d.Q.@.$B....."Z.B.....9Y..E5...B...a..S" .....ru&wxh...(.tU,.G.E.\|.....7..^(.q.F...A.m.......Y.[$...B.. .1.l!A..A.....s....1..;..A(. .B.j.....H.Q\..0..B...

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4790
Entropy (8bit):	7.920770886596427
Encrypted:	false
SSDEEP:	96:qC4tQxwaUNu/BdFfVD2uYRanUd22fYx08kUHn723QEItHB3fCI6I:Z4GxOUdF9DDYKwu0tfQhPCpI
MD5:	24F44AE57FE644A09175B4CC4ABA8F65
SHA1:	15EB3A04426D5257525C00364CA9EA041D27AB14
SHA-256:	BC20924415481F17717E875B13F2DD99C1A36EF340A46DF7392CC271B8458D05
SHA-512:	4F7D9B233FFC2C26CE62CFD364DFD897077DBA574D86B29399AE6505A3C490CE53F9333906740A70B3FD8FA89818F0DA8B35C08C1DC1E08B81C21A7DCF2EE4E7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8Le.../?...M0j.IR........CD.'@.{...Q.B...E....6..Cx...F.c. .6.........{{.g.d....n3y.'..t.U..8.1.5-....G......8....7..m...._CDL.dv.Uh?(_.....%eV.xl.Z.m.W.m.ug...3....>....O......._l\|.vm..VN.Z..!..e......2...i0.".:..D"2.......]+....?...0.0. .FH.9....m..N....7....?dG._U5n..m.m{l......'...Z.'..>......3....=.m.........Gd.53k.m.m.m....mTUVD..kkS$9.H..f.ffff...p@....4A{f.aff....?&.'NZ.2..,0..5....6w.7..9..I..AZ..p.JB)Q..e..e.}3...............D.......ea[0`0..`.....1R.q....).8,.HBB.....$.e...L....e.......x........L.z.Pf......B.......5.....1.`......>.p...,...@...._\|..)..@ ...5...mc.l.....tye....N..'..s.......1.6...6`..............`P...3p!....b.J(c....n`..2#.d...vp.....@BB....l..c.`0..q.J... .p..o.....lc.oC.b.e.C,....m......3.....lc......L.L......q..c...'..`...q..ZF.7...J..L.A..A.G.......`....x.../....7......n.w..A"..=.......=...rRQ.U....O.......V.m....x.5g;.0D..`.A0.6.4..cvDUj.3....I.....s............

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	240
Entropy (8bit):	6.9991712725025685
Encrypted:	false
SSDEEP:	6:Y/PZql/KiDZfb08qzALLJRn3PRB8y1BLqmX45oBezn:Y3Ul/KMb0tzALL3391t1o5oBezn
MD5:	BA44425C00D3898F79D74B5748E49934
SHA1:	BB2CFD3AC724BDAF3C1F3A3A61030671C79D1B60
SHA-256:	35F1F26A525AFA469CEC210657087027502D02CE5ADC3BB1C431A29C4544FECD
SHA-512:	23D0D7732B4E677FA0E464C3BB834DD28BB232E0460AB6918AACA4CEB1AF7D149A7BA50035B4F39C102472F30B1840EEEF73310517FFDE7810EEE2B4F0F78647
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........$e...'..6.F..u....H....m$'....P.>;L..L3f.S...+Q....Y............j.s...)...w...B?.V.y?..9.......~`..C..1.b...$)Y.....?O........y+..g.i.V.\.q*.f....5...1. (2.s..R....w=.b....)..0...(......e.........n.n.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	37564
Entropy (8bit):	7.962934539665607
Encrypted:	false
SSDEEP:	768:OwoSQdgxtwSFVcBULLwPSwwtTdiqsS4QhabMUNHzNJ:wd6uSDcBULjHTdiSXhfy
MD5:	21EAC75763F5C2012DDFEEB866FCD348
SHA1:	526E0BAF20277F985072DEBDAD9CBD7A20B44144
SHA-256:	7D91F09A449207296941E6E5AADA5FCA26942BAF69591DF1936B9EA28C59FC3F
SHA-512:	DF9D6E9F47F3D71FC709906B72760EE2A696881A30E29CBCE0F7F1C97F4B0B35C9583B94169037175E9D0846DFD80838532CF96743D833B7283DF66D1D79AED6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M8l.F.FNn/Y.._.<.BD.'.....n.....z..w.T.....0.]u.T.......A,..].ou7.......l........Zd.&@...... ..#"...."bd:sIl[..!I............K@.".......%.8/...6`@'i...XZd..K\.%b1.A.)q?.'...N.U...1.l....=..-0.D_.i..}6.........0.V..$.p.W.....#....YHR.=.....K"2..WU..1?F.a.&nRK..l{.F....92s....Y....#.0".&.#1.m.....D....;.s...i.'..t/I..1.e.Yf.$.93...g.X.c.d.W.5..u..\.oI....%...E...Zl-....)nO..A.....I.Z.T.R.I.-Z.......,..o..c...;.V.Yk..T.J....B-N.?jq...g.......7..u..V.J.4.%..4,.?.J...K.....K.R.fa.%I....]..W.~\.$iY..U..4.)VZ.IHQ.I..C>d.L.r3..J..r..W...y.B...Z.}mo.....]..x..._.n%UEJ3....o>..x....E...am...@(3.. .8&>..dr8b..X..#.b8.Xb..F..b:.x.....!........Y...~,..%z..o..g.qu..2.^k......b.\9..t~....;f.........7..@mL..~...b....8Y....V.l..'...@.z....V.q.#.n..:i...!.o.~.. . ....j?....H....n;.......Lned@.k.}8).1`...bO.....5`..........22..............@...`..t..u@....x:V.........W.....2....kw.....J..}S:\|...4/W .............}$......v.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3094
Entropy (8bit):	7.890684168858667
Encrypted:	false
SSDEEP:	48:M9ZbITqpCFYdowrUefmSJ8GgJhJdyVnTIvHceg4wlFvLTcl7huTQ3rpQE0SiQ:M4qp1qkUefmSW/ZdydINel1LILrZf
MD5:	7DD64F1BE945C1F8D47A8774D25112BC
SHA1:	444FB88D5B28EA6FDF6A5BF4016B9940D4F149EC
SHA-256:	6D99EA52F11974A873C1F941DCD1B953B36D0E170CD0E6E7141F68BBA86EE3A0
SHA-512:	9A3AB4A27B8B10CFF66997407F90A4AF7D14232B2D6F674139CEAC259580A784AC5E0F59FF7916060652E3A4F1631A3FCF5AAEA5C059908657F6A05366CCCEA8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ZrNeuKthBirZN7rrXPN1JmUbaG8ICy3kZSHt-WgSnREsJzo2txzCzjIoChlevMIQEA=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M0l.6.,..;...g...O....f...D.?..,2.Qu...$I...h....q....&...%._..; $`.I..~....P...F@!......2...ZN6..3f]......j^..3qb.=8...DD..a.?P!S..[..@.mb....."b....#Z.z.#.."..2.{x...L.].e0.=Z.\fmA{...3T.F.....\Y.......(.#.L.._,...bvg"...Z.......DD?.3:.J..'...\......m.V.>.................4.N..=..n9...`s.m.v..o.=.Im...~...N..N......NU...9..m....,.....m.6.=,-...-..N..E..,..l..,.yb..9.,I.M..c....._..h.k.k../..;.:XsJ.m[..9..w......Y...wL. ........Y./D .$...D$d..R.q....i..V..o.Yz."".L.!.PP...A..2.G.....z...D...(%..Th........6.~.._...$...@..d... @.d.p..z..f..BE.9...O...D4...0.)XhA..!d...P@)..1B`5}.D.`._....k.v!......y-...VH.\|.F....m..U.hI!.b._y'H.?UU........S.p..Q........i....V}...(\|."+.B.1n;...F...h......Bp!.............D"..pA.$.Ti..._...i%G4n.0.e.....=.,....c$...1...eA.u=......../@....V...umt.w..,'=......n...A...,Q).t..{..kr.\|..o.C......1.....J..o0.[.^..#N..s){........5CZ.;.lt.q.0. .s..e.CO.I....VX.9...F0X...8...

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	31756
Entropy (8bit):	7.956502283816247
Encrypted:	false
SSDEEP:	768:St2kT5NDIf0gcLIpQIP+DYzwVTCAxC62NxBcGFVUKOtLDvE:St2kT5N0f0gcLIt+DWwVTxQ62NxBnFZh
MD5:	2BF44080957E5D7552E6E4F36DD55652
SHA1:	F413AF4B336B19710BD76168CD2D1F39BE0A653E
SHA-256:	8621574F773A70374D42FADE3865AD3AFA33D31C2256A9935DE61FA1EFF65F9D
SHA-512:	B47201404E19FE2A314DAD8788ED6D2E28EE79B50BFF1D0DD805356A969D4B2B7902BE73822881627698A3B8FCBFEBE733358172C23A8F225A642E1764952857
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw
Preview:	RIFF.\|..WEBPVP8L.{../..I.M8.$5lr..@ ..,.i!...PU..U.O......VV../l.SV...\r....-+..........t._.I_...z...l`..V2..c.XF..n1]7..NG...G.....P.O..6.....xw.J...t.U.k.0..--{...s......6l..p..".}.n.rZ.@..-8..\k.F"6..v+....j..~.A.U?...o.}?.n\|..x.x....V}N..U^..p.~...B.j.q#..E..._]U...O..#D...d+..ZUy...x......f'..arX.......l.mNY.9..K..@.......O...^.$.c..".,.I\.pa.7\|..X.c.d..-7.6l..2...n5..^Z.NM.BE7...t.Y.y...R..]..E.M..mkz.]8c..u......W#...[.n.z5.RI.vv....uF...1X..~..........[YY....(.T...\]Vi....R.Vf..[Xyi...RRU.R.6..j.rZ.Z...!iY....K.UH...PYIiiU.TYNU..G......l......;.;.j^Z....0.) zl.v..37..+VL..c.......x...s.ad8.@..nn^........}E./....o.=.G?c.1.:.@..Y7..'..=...x....O{.../+..=`-....6.Y.:.@. 1...L.K.=.1.a.)....{d...+.u.....f...y._,u..i.f&...=..7.3..f.......`.i.@.N.......@.\..h....K.N......1....r....{.......Y^...0.........,..NX.N.i..m.C....#Lh..Hc=\.z.).........4...!...M......"D...R........l.9KK..I.]q..^...S......B#qO..C.1.P.vLbR...9...B.......$.v.......D.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	458
Entropy (8bit):	7.061920474186539
Encrypted:	false
SSDEEP:	12:3JcWXSom7OiRJNOtqnZBLWsssssssssssssdijHjGBaEgl4:i+SJOWXOtqjWsssssssssssssMHjGBae
MD5:	6C38690E2D4AC20F2352EC9A67FA13AC
SHA1:	FD9961AB0FF195148F4E1DCFC66A4CBCCF1E2664
SHA-256:	79BF41F2F5C98680409453FE1E5557141994107B9CB35126237A9A6E3BECE001
SHA-512:	959D76FF67256F3A1470C00A0127424A9839A3C7D43B70314B217EBD2AD6EC9F4C546F63949E822628A0A9C93E9A542C920655E5F6269F3950510257BC9D41FC
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.7.........!..?...i....{.v.A.....$.I..U*.Hx.2.7......2......X..&..na.C....@..d..GA..e}.l..... .v.6P....\...:%..S...O@.......\|.>lZ/.g...k3k..A..w.Z..X=....M!R..u.B.f..%.a..NQ...Z.(..c.Bt.3..:v.B..u.B\|Z.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.($...\|.>S..Y....av..p]..{5..tu...\.......;]].)...\.............w...\|............s...yfw%..g.Y..{......T..K....<..k.......3[..K(..7G.cs.~Z.......

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	187116
Entropy (8bit):	7.989674958243787
Encrypted:	false
SSDEEP:	3072:wkcdGbyQVF/cW7NvzfeGAsl1h4zfai1j/drkZSsnaroTdP2Wm1Xw+Z9/3eTogOXv:2SDNxfFBl18yiJ/NkparoBeT1XzL/fiQ
MD5:	AB9C95719FFDEC8C51CEFC3A9E7E58F1
SHA1:	8456B445DA8080A253B5F162D503536F5EB10BA2
SHA-256:	5C373BC7E0DD60BB5A98A1C519FE274369C00A294CBA34D1E2D3B92DBFDC3D70
SHA-512:	B43A92C5A2E9BFED54B967CA134F19E83723B94AE321024DD1961A092349BEA7010426D07242639B9B6DDD0AD5225ABEF1908A7F8F17038D4BA250334504DB56
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.MP..6l...a.@..........O.$%.%)..y)...2ZJb)R.d.C^9..=.v.$.....'...w.}K4f..A...[.I.....Ibe..9.eet.....!..DzH"..m.K..3..D{...$.7.j[.....Hw.../..p.\|.........w]....u..].,.^.S.(!.e..J$..8$........m.$.]..2J....6...N.Q$?-...E".%'...9o;.-9.N.......v.[......J.y....z_..\ Q..{..t9...#@...i+.\|f#8..K....;)o....H.&I,z..O`E....!..m.!..A.z.,A.O.....7d...$..M..v..v.,.....<..N.8Q.....j..$y&N.(q,).,MR").Db-...?..%.HR.....?.g..%...zq.?..e.......'....C...-...O....(..@[.m......?.-.....@..[.....} H.D./......[_._...\|......S... .4r.@>.37.O.X......,.%..(I.%.....b......A~>.O?(I.E../~..@.mAt.t\|s.X..b&....@.4p.\|....<...%I.m5.........)."..Ng .. ..C.t....p.O..z#I....H..H..hwyo.]......:Mr.4E#...B.x.m[uc.J.}....KC.#.b23..;..X.Jf/f......H..0.t.G..Z.....9.n.V.+..X.....L.....RLD.H.S+.....att.f"EZ.(.....H.1L...!n.t. ...xG1)z.....IC..(.F...0. .AjR31..".....[.H.R..D.DDf""v.....P0`.........XE.0D3.!.....k.a..+V+.b.8..6)..^..{..f.R..X1 RL 0........`V.....R

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	7.045749695935627
Encrypted:	false
SSDEEP:	6:Wd1ZoKwloGmpau12N9IUPNSZjSwiNRoBKc9:A1Lbx12VPNOjSwiroB39
MD5:	E37D455FEB14AA6D50B64F3865CE5545
SHA1:	BB67EF4AB3A9EF7BE3ECB0D2B7D73AD8D0CBEB42
SHA-256:	30B1646061F9307FB17A1E2A0393EE80DB4D85BF3C05E5800526771F06B141FA
SHA-512:	57DD9B395F55C2F1CD6DDE8E3B3CBC21AA138E97A6C3E12BEDC72F5ECD3BBAB21C3FD390424CCF8B53F4EF161873E3D016F40403DD7E2A8B80CEC60C739DBA52
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....(..g.o......C.6.2.$U.fEN.,....m........1.6RO.....?.O_3g..t`...B.........<....q$.i.,....}Z._..g.m$..}.8.....+y.h.\|....@%...pd.v.G....q..8.r.i5...G..U.. .."@u.I......%.nB./+B....C_......G.v...[+..`..$.X.V...~..

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3812
Entropy (8bit):	7.922451062209362
Encrypted:	false
SSDEEP:	96:sx3SGYzpNuTh2qDNrGXbgQZHYYh+ITpWXdBYM7bKWY+:sx3SDp8CXbgJYh+xBYAY+
MD5:	3C50577E74966837BE535CFA1BB62E38
SHA1:	DF35010A655CBF896DC5F592C1656410CB83DD63
SHA-256:	9C960DB00934C89DE1A7BE6931C972CB67E9E20C07462A7C870CB93943AB8BE0
SHA-512:	BD86FF5C590F1603E32238D0DB6F7CB17B8C1A46AA78177296D8F6359B3DD73605ABD72EB4BC34A49BF3AB6548947540ABA62E429AE8E428FB6CE67E2C465340
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.M8r.F...f............M?6.n...`]..c....Lp2.;0.$.Y......v.^J.v.....&^...KaGT......m.v.1....z....SX$n..h.._7<\|...H.......K...).?..G.[g.3......0@L...z..z..m.@......)...wa. .9....j....z..$..o..;.B...M.!.vR...0......tV...)...V......^..&.e...z4=.L..d6....[..?....^{7........]......Je...C......R...rW5N3.....K.UR<........[....7.m.V.QX#H..UZ.Lz.....N...}.#..m..\|r.^.......(....vL..\|.......?p.....[.......yo.Q.....&.....v..o......f.WtO.7...Vf..i.).[I.J.v..?./.z.y/{..\..!....+.:.{o.+..]..."\......T........U....S.zD-.......\|..\|.E.......v..$i.....lY.V.I.\......(b.bEQ!5G...].K...Z.f.=.4..s.[WY..i..T.l....kz?......RH.e......$.D...C.i ......n..A.S.P.i:.....ai4......s.e..C.(..>.i...@i.i....".....H.HR`.H.W.BN.=..9z......\Y.sE.;q.P...5i..20:.G.H..tvy.,..kT.........O....2&...i.6.I.!....x.7...8v.$.C3=...r...r.>pC...q%*Q..M.qA`.....k..8..6..43T#..f..7.....y..r[tT.R.k.\,..Fa`.@Hn\..&s.z7&..7.CM......4..@........GQ.n%...4<.+2

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	32634
Entropy (8bit):	7.961527082075673
Encrypted:	false
SSDEEP:	768:yHmWR8UySBjEp9NQkOfO+0L7Pf6PHtrcplIIPEL3sCB:yR/KdmvOjf6P9GlIiEL3ZB
MD5:	35BC5A79BCAD7AFE5F11FEDE9447B784
SHA1:	FE5BE320827F27490393126067470BEBADDCC836
SHA-256:	2BDD685AE4F92D871CC525437EB3606D7F40162CAF2E1ADF8F620127648C5AAF
SHA-512:	62E76DFD6BE19D290FA0320E04F8B1A48D9EF2D33FD252D6DA50A6231F5469510EC48BBC5ACA745087FFCF7DC30950B50AA87D8C5BE4FB14235997CD6DAF1E5F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw
Preview:	RIFFr...WEBPVP8Le.../..I.M8l.F.F.>.z...gv....O.mw........^y.._....^<.")...d..{j......y.Y]....U+.Z.a;>..y5.W.u.....8$i..:2e..Z0.$ UU.;......AU}K..d.....w.{......J...$..^D...SU4 @...Q.?65sH..u......$]{...).^.14.n-.~u..+r....\|EK.......;`.tm.!.....T[......."...q...#.0.I.d...9....%..I........A.\..H.m.m..&...K^......hD...m......A.Ph.S.r21...'1>...X.c.'..{9....e..)..T+\z.G..(YK/...b.r~..s......\).X.Rz=.f..Dq.... ..j..s.9...RV2e.`UEII.r...i..Ci.b...SM.ZO...K..j63.PVV.U...^UU....t\|i.C......ia.K.Y...kVK?..\|....E.L...U.....A...8..GY..8I.....+....I..B........;\.".Ho.d?.^.dX..............7.A..Z.&.:...<c........?.\|...F...b5.7.0.[M..Q../.W7K..z..-......+.su.V:\....&3..@..........5.&.8.u.....G...M.b....@.zA.?nz/L.+....iF5...,.........]...M...P.s..7...6...r.....3.f.b...L...E..:pq^...B.?.n.k.y...5...-..AN[C...........\.okI;x.C....d.......4..g..p..G/ .O.......C.................qr.z.g..J.Ohy.,..;4..?Z^.............H6.UY.\zSM..b[%0.5..u....V]t.U..X.....

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8594
Entropy (8bit):	7.972041832412324
Encrypted:	false
SSDEEP:	192:zuNHCSZCF6C102YYaCWGBO2YAHsC5T3lfw+f5loPIU/MzBFbSta1v:Sk0C102YOW52YN+tdkIU/MzBF2Cv
MD5:	DB88717E6607B032D9690E1F2A1C8447
SHA1:	6B5CD217FB06FC4A7EC49581D2F8E3F46CA83483
SHA-256:	A702B4D7912E5E8E771907FA22E3D336906788A3094FA42EE0AF381F907612DE
SHA-512:	84194254A8B42A71EF76531E02B0D20A25F3398A9755A896C1372B3F7A151BFFC60FEC40A645934265B8397A91F911790C58004F6E6B8554E51F1C8850DAD6ED
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8X..............VP8 .!...........>.H.I#"#...j.x...n.MM..h......n..~.t.x.....s...a._.'......2.........R.f.....C......{......6.w.A.O..}5....=..gh........._.>'........>w.G....z..~...?.z..W..`....>....v.....o........c..._.....}g?z....?D8@..m.0....S.=......R.7.&........U.S.b..!.Zr V..up...&-......D8@w.l@i...+HL@/.....(...3..f....5....h..Hi.R...>.B\|...'Pw.t....&.`.G.).PE....x^...g4R..-..a.(.... ...:....Ys......^7.Y.<M..n.WA.....Ft...H...$Jz...Q.K.F....\.O.s...;....!A_.%....y~.1.,2L...W..>...SM..L......]..`u.~9Sp~........+....-h/O/..u"...I..'b....ONr.R.>..F.....}.{3.)f.....SK S.0A.F~....!.P.#1=n]%re...W.j..8....G.L.@..U7..._.QG..<.~...a..u.u....I ..=@...v...3&.....n=.0....O.FU..0.J.h...q..O3b..T...6..K....8.vA..Y+x.W:-~.E.Z.be6.6\....=.....J..K.t..ET.....P9..rq.y0../....:..I.]K).#w.L...%#.......t....C.....jC..\|...h/+..>;.gh..S..^`L^..H\|...$..3.....G.J7n.G.[`..@.Wz8..h=..E'0w.=../.H.....7A.?..H.....+.+n.4.~m.[9+.9p{..0.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	414
Entropy (8bit):	7.343024686301996
Encrypted:	false
SSDEEP:	12:dxBfTFw3VuoWWeGj75Cx0dU33Gv0BH/QRYlu1n:LwlLWGGnDB4Sl6
MD5:	BBAA019A294CD6ABEC878D45EFA82948
SHA1:	E844CD5AB2B380AB549A98CF41C3120915FC487B
SHA-256:	87DBDC9AB64B8755632322D0DE8DE5E03ED7CFBA415D649009806875CC8CEAF8
SHA-512:	EA1ABB6B6672AAE67949DC630A1A7962D7F35323B65DC20D34DC8276117DA1CC5BC8DF0FBC5BE393C0882CB8E085CA0AEFC87022D068B44938904B2A7C938721
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../....O..$E.._,.C.p..#..f.}.9l#I...?V.{(..m..Al.s............D .......A.....'P.0...E+.._..~.....0.R..~.....E.u.......R......\..gf!.=....3...M....~.o~p?.u....Q..y......k..._E(/............i..8.$...m..\|>...~.......^.......]v....2..h......m.6mM[G...5.m.K..R..K...e....gW..._..:.k.).>..E...H.JD..J..T."""aH..%.F.R"..#...z....?g.xa;Q...C.jb....zo_..u9z,...q..%...Lq...p.....B..!...p..

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8117)
Category:	downloaded
Size (bytes):	222505
Entropy (8bit):	5.692644832889038
Encrypted:	false
SSDEEP:	6144:WPZKmtm7F3W5L5Yd5Ddoym5EV+V4WonFxNFxvQw07IiAM/sCp/jKZO+VVlYUZA+B:WPZKmtm7F3Hd5Ddoym5EYynFxD9CIiA9
MD5:	80EEBB4F2008641CCF983CDE50014FE8
SHA1:	C9BE005F11464757A777A32532864BC674E5EE29
SHA-256:	81D1543B92C18C3FAE4FFCB75FAD7393B520C7A68A1F67FD9503F5EA18B15988
SHA-512:	CB978954F9292CEB9F2BCF0974E8087A8997D3819832B7116ECEDA837AE7CD43ABA8EE1E62E9863E33FAF8C6F2B913B7A5E97123A0FAA5102C111E4C89B38319
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fl2Zj,gychg,hKSk3e,hc6Ubd,j9sf1,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,wW2D8b,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,kJXwXb,chfSwc,aTwUve,indMcf,RQJprf,lpwuxb,NkbkFd,nKuFpb,zBPctc,jX6UVc,qfGEyb,fdeHmf,SWD8cc,tKHFxf,rpbmN"
Preview:	"use strict";_F_installCss(".H1RBrd{max-width:500px}.UIeOBe{margin-top:30px;min-height:120px}.k2cXo{margin:0}.XWz5yd{margin-left:160px;padding:0 20px 20px}@media screen and (max-width:480px){.XWz5yd{margin-left:0;padding-left:0}}.iCVHHc{height:215px;text-align:center;width:160px}.FOYkDe{max-height:215px;max-width:160px}.Dtwbxf{font-size:28px}.Hv8szf{text-align:right}.rYrxJf,.rYrxJf:visited{color:#00838f;padding-left:3px}.F9JOfb{margin-right:3px}@media (max-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:calc(100% - 48px)}}@media (min-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:fit-content}}@media (-ms-high-contrast:active) and (min-height:fit-content48px),(-ms-high-contrast:none) and (min-height:fit-content48px){.ZDGq3b .VfPpkd-wzTsW{align-items:stretch;height:auto}}@media (max-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:calc(100vw - 48px)}}@media (min-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:480px}}.ZDGq3b .VfPpkd-P5QLlc{min-width:calc(100vw - 32px)}.ZDG

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13528
Entropy (8bit):	7.980890722978058
Encrypted:	false
SSDEEP:	192:5QAxwCZOYOiezE7GakTksZoo2CdmPWuyPyduJDx3iEjxPuBD4FoA1rwuLyEgdGfa:5+ttiezE7GVkcTmPuNx/jx6D4FoggT
MD5:	6EDD8C15A386648ADA9A1E14858128E7
SHA1:	95CDC4A11E3DF841575FA88EBE5C2C66A789500E
SHA-256:	22B76AB369CF9F12C901159F053C1BE0821B31C075760A15A7F4248FF9B270E1
SHA-512:	5FD73BB2B0B0D1D0AFE238359343E9AA25424E11BFA98E9BB59C04227BBD3221ABF1C62A1ED2E7D4E7CB7351E1F915B92768CD8A62D74419DF2EDA13FFC80C13
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw
Preview:	RIFF.4..WEBPVP8L.4../..?..Fn.F..E......9.5....?..!-.".@C.B...p.$....p..U.8!......-G...K<H.l...... ..^d.K..G?....K/..9g... .hI..#=?u.G.mUU.r....2..i.....H.G........`I.q....$I..=-.O.....O.R.fI....GMh@.....I.$e..\|W5...N. ..@...^....X...V...U..u.6..Hb.40 .T.Xjo........d2.R.....P.%b...A.{).....]U.H...J.H..i....*.B_9o......@...c[...z....m...%....p..-.....ci.&.....K%.Q.X.p".S.9.T.........u.V..j...R<....:....x.....d(.l.9..q.I....{.....1..L.<.......+.Q....u.....pD/NLB..2Uk......Oc....m;U.p3.a.......W..9Q.....3o.q..k......Dw.d...C.l,..\.._..d..)-..i{.....BO .u.p..m.-{....\...n.6L........v.l.l. .+4.&.h.<..%..L ........c.5..E..4.#...9..3.;..;..z.e. .6m[.c...l.m.m.m..m.....k.O....m.Vy._...m{...3Cf.6C.m[..k...........l..1.j!....\..p..S.P]...`....L..s..?...i...v..3......h...d.b8t.I75..%z......zJ.N.....s8)8.../5l..8.......HaS.....Z.Z...M}..E.T.5.Q.U..F^zwA.$I.....D@.qx#.}.t......_.......c.4.....!N....../.TA...H.,.X....A..<..Q..U.....;..+...W

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8404), with no line terminators
Category:	downloaded
Size (bytes):	8404
Entropy (8bit):	5.23122971904006
Encrypted:	false
SSDEEP:	192:S1XF2VhJJU2h2dc1cJcpcTv9cqxPs3rcTctcIcuBVcgcVAxg+EsYNtD1l:S9FmpU2h2dc1cJcpcb9PYrcTctcIcuBa
MD5:	CDF596B6A09E2D33415C8429AD5AC858
SHA1:	B7AD84975B629937AF85B055D5CC4E34D85267B6
SHA-256:	0558F702BC35AD30CF70512357E17658D9B7E8227E4C5DFB7466830CF3AF6AFE
SHA-512:	6953A59C54D55C370FDFA81EEFB5403F98CA409A0E5F2DFC27A8DC8ADF3177AA6A729E501E135B74194166B139682AE2C2A1F28AF67E8CF5E0BA0275F027768E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/global-elements/2406.3.0/en_US/ac-global-footer.cdf596b6a09e2d33415c8429ad5ac858.js
Preview:	!function t(e,i,s){function n(a,o){if(!i[a]){if(!e[a]){var h="function"==typeof require&&require;if(!o&&h)return h(a,!0);if(r)return r(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var d=i[a]={exports:{}};e[a][0].call(d.exports,(function(t){return n(e[a][1][t]\|\|t)}),d,d.exports,t,e,i,s)}return i[a].exports}for(var r="function"==typeof require&&require,a=0;a<s.length;a++)n(s[a]);return n}({1:[function(t,e,i){"use strict";e.exports={EventEmitterMicro:t(2)}},{2:2}],2:[function(t,e,i){"use strict";function s(){this._events={}}let n=s.prototype;n.on=function(t,e){return this._events[t]=this._events[t]\|\|[],this._events[t].unshift(e),e},n.once=function(t,e){let i=this;return this.on(t,(function s(n){i.off(t,s),void 0!==n?e(n):e()}))},n.off=function(t,e){if(!this.has(t))return;if(1===arguments.length)return this._events[t]=null,void delete this._events[t];let i=this._events[t].indexOf(e);-1!==i&&this._events[t].splice(i,1)},n.trigger=function(t,e){if(thi

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/five-star-rating-gray-ec0707c56bc834adf5dd504c555d4982.svg
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38832
Entropy (8bit):	4.79684101098726
Encrypted:	false
SSDEEP:	768:t0Hr1eMxTF69ukmv+ZNrMUVfd7k3pY7jVSHUo6eI:t+ehL
MD5:	CA74523C8DD2AF8E71096EB90ABEA33B
SHA1:	47B67EF377E9AFC52340BED1A69DD53BF5DA51C0
SHA-256:	FA8045C24FFB80F06CCF48CAB215B0B3D7FF1A59A0F91FCC6B361A73B1462892
SHA-512:	DC2D4CB324F37671A6FE35A4F7E4FF6F8B9BA307EFC12C244348BF0393ED31B3105E7227D9B447B9F7CE52E23DAC42E0A57BCCC18D368AADFC4E194774215CA0
Malicious:	false
Reputation:	low
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1968
Entropy (8bit):	7.887842259839152
Encrypted:	false
SSDEEP:	48:zKS0PU7BIWKegISpoMKLQe4L5G/PfkKg5IESU1Pd8/kho8QTm+hA6P:z30PUyHSlgIPMXtm/r8QthfP
MD5:	5595E532F330186A628DF64B6BF2AB9C
SHA1:	DAD41B26075CA3D857C92241E646088F87FC593D
SHA-256:	242280AAACE4E73539F6328A80E12486699E260FAD50AD3941C17B32B3126BEB
SHA-512:	D9793F6B1B4455CF2618F6DC76ADB832A342B331536D147B6A74AB62E5D0C17EBCF4295F7EEF6762186DB5051FB16E48C92DCBBABA90BCFBB727B2D7CC367E6F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw
Preview:	RIFF....WEBPVP8L..../?....Em.I.v~]../......a....:..!.^..$.I[..&..?O..q#I...."..=g_j.HRc~..C....D...0($...%....w]k.{{..D.##.....qZ.v.. 1.........H....g...........3s........<.3-..u.Z.l...L..=.....p...bdf{)4C.9.....~._..(Z.m...f....m..=.}...}rd.Vme.}.s..?...-..N..;......g...b....FKq./...~..?.Y.,hW=.X.=Z..X..DGQY^.qpj.e...y@...$.2.C.P9.Uv...G.....9>....c...D.....l}....._/=Z..-...f.7.z...R..k....Q.Z.17..5..S....@(Ue.!.......u......k".....E.C...+.........C....v&.>...y.q.F.4jP.........,..>...T.....H\k....}Ivm........U..T..!0..{.....Z...c.a...........y....[......n..q..g.yf..@c../.m.7,..vx...j2X..P.@..{U.9r.......u..O<.....AE@.\.2..I.......@0(...Ib,EB...?..puB.d.......{...n.Y..j...;rUk....n.Z..xI...!H.P..<l............_...3a....s.>...7....<r...6.8. .C@.....mZ..>V[..F.Cc.........R...#.d.Q.@.$B....."Z.B.....9Y..E5...B...a..S" .....ru&wxh...(.tU,.G.E.\|.....7..^(.q.F...A.m.......Y.[$...B.. .1.l!A..A.....s....1..;..A(. .B.j.....H.Q\..0..B...

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	696
Entropy (8bit):	7.671310320036595
Encrypted:	false
SSDEEP:	12:mPXiJwvNPm1F+nu24710UPgizMQRBNt/Sh+1EBti7GhAp0P10Y:iiJwV6VFPg/Q3NtqQ2tYDsl
MD5:	04E23AC8DE78BD97B9094438AEA6E9FA
SHA1:	6B85504C01DC4265B88D22BC6CFFCA553DC368C8
SHA-256:	31652DBAD187570B093D34FD68C4A475CDD03F7C458C76A1D8321EC0EC518731
SHA-512:	6CBCEEF3FACBDE15473846A2514210236C89542A7E8CCDA6BB2DDA58024D54478F3739AFC6B20EA0D022A65FE0CB109B07EC01B1CC3109A4BEBB3755F2601BCB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....).$GR........{.i@.$I....r..d<..p.I..d......5..&..2..."D@..I@..bIF..F...n.S........N.R7..{)..}...aM"0.?..$...$:.H...R'....I.P7Lm.CM2.rD0#$.$".0.0...g.H0..!.C.bd.0.......J?.d....s.+ 9..In5.~&....g.o.....D.@..,,.K.r.....O.X.C^.y>.^f._./dM..:L.t..7..m.\...%.6mk..m.m..m.....\k.=.~..+....~S6...O@.........O.......0E....7RQu..`&.IL..m.Z...qtzsW...;x..FD.Mm..mD.7...f...`"..Me.^.....L....]..._..c....Q.{;.J.QO\|..U=C.Z.+.!.3.@n-.[.$.jQ0,v9....._b.2......I........,-.....Q.>=T...B*g..9Q}.v.$...0............h.c.F.....'~9.L..&^t..y7'\<...#..3..TmS.Q.Nl.x......')....3a......W]...~'.bt.............m.z......xd........B...UN.A.>...^R.p.:...P..`..1

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	503752
Entropy (8bit):	7.999414825379731
Encrypted:	true
SSDEEP:	12288:MM0EDiDX/+r484zoXSLPIaBV2VcjgxUSQ:MIDcX/tFzXAaHmUSQ
MD5:	4F2639665269079C0E8DC00CF16C1952
SHA1:	4000BC56899ACB809434F3866E00ABD68C8DCF30
SHA-256:	711A0EC08E8FC86D73EC96BC2C070DEC25E946F38C1703F26E5AD4EA74D51D97
SHA-512:	EC7D8AEC4541DE76E0F51F70C4E2E433D5B99E5D553FC274C46CAC3EDF787633EB82DA457F1D78E29D5AE986E26C136AFBF5013D3FA89F4B4DF8F6FCDD121DD6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw
Preview:	RIFF....WEBPVP8X...........o..VP8 ....."..*..p.>=..D.!.&".i0...gn._...._.s..F........f......7......g........I....;.n_.O.o.~.?....?...W..S_...}..g....y...._s.i..~_.9.w......7._..W...o........\|......../.O._........C.w.....7.?....`.c.....?.#........?......5...........U......_.?z>,.........m..._n.L..................7.W._.?+..............._..>.g........i..._......I.....G.o..?.~R..r............._........%.............7...?......../..v...\...{..................W...........9.y............}..........,@82>..D2r.Mj 858h..m...........D-...V.w..(.k.8.......'.rQ...../O....Fg.Q...I...rC..E....Z......lyX..?..B.75.j.=Z.Y..x\..@k.n..e5.........h..a[A.4.....]..@pd}x.c#........z..08..2y..O..Y....i..`!..8.....L......-.1i.1;Y.\|.P.T.V#..6.oC.T......u.-.........H....x_6...2...#.IkMI%n..8._...&....\|.^}.oq5.....pZ..oC j.!.bK%L.3.W.%u..........$t...d\.A..fB....P..........I\~..u.z..V...p.......vt.Z.......\|7.r.@.`.....&.L.E..tB...k.....w...]...\.P.J..&m.8[.J..a...0h..me

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11790
Entropy (8bit):	7.98205917521543
Encrypted:	false
SSDEEP:	192:f2oKfdU9K4q+XrqVcK5YP5dxjJbW5VABlQqmaeWAYuC1rWpMZznQxrXL:f2dF+VbbqVh5YB/1v1maenExnQ5b
MD5:	E9FCF4F755B4DAB6CCC52188E65BF7ED
SHA1:	D643A0E99C40D3BABD6B80441D94CC9CE90C3414
SHA-256:	2949501FF3DBD94656CB997D9FE5BBB45D1194E0C73306F57792B44C8225B766
SHA-512:	4C98EB8E704F6C383EAC7655633CF334CB988C38B6AF8F5ED960CBBD4B4688DAE0E8513FEB036B0F439829B329CCC6C17E6ABBDF7BD8A1774E5BDF61B467AEF3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/YPvG90WiRFcg7A45HZ0bPwKe6h_I7lcfy6jMWjQYq3ryi65iCR7UQ-r7WFQDpLkSBQ=w526-h296-rw
Preview:	RIFF....WEBPVP8L.-../..I.M@l.H.Tr.w..?.i.>.D.....[.(.j.JS..Ca..$..{[6..?....P....E.SI.Q.s6.&....{.4L.rk.....x.aiH.BI,.1..{!.A..N..ye......p/..\|F...-fP0...0&.p....\|......r$I.$.=F.....D.....1uU-H..m.J}.98.3.0.m..........m.j.yxOJ.....+){.....`.9.<...(.AQ.).). 7e..-..w..q..^...E1...(z....E.......;+.. ......P..-K......PQ...G......r.G...R......X...........GeN.5bj.w ..............}.Y..,.......!.Hf8tt...__....T......,.Kj$T......!.2.P.7.a..@.\.... .P..d.R.2.1....H..x.P..=...o.J...t.[.LQ.<..w>..........o.+.`...o.`.....m.H2.o{c.......1..\|......4&.HaX..S..e%.Y..Zs..b;.L.d#>j.W.mt.H.ef...a..a.2333333.....c..nb..2I.4....3..o.o...gf;.:...H..-9gv...,...=eTImN.en.sm.mK..K..1f.,da..t0-L... &.3oZ..m.m.mk?...~.3.....V..[..e...T.m........m.7....4....Lafffffff^fffft..Y`.....s.Zp.?..FU...T....U.~.aN......&W..l[.m.R......c....L.KK..bK..#.C.5. ..[.=a....ZK.dm.a....qFD..k..m.F.w.V..;...w%.u...1=.#...p..h.R8.E.....7.\...\|x.4......my].I.z.a.N..79x-.*...Y........

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10602
Entropy (8bit):	7.9529391117564465
Encrypted:	false
SSDEEP:	192:T0hh3kXnWQNYV6Q4MtjuGlPUBwc7k9GueRJvaWZRFrMcBs8U:whhUXWQNYYX2lPQ4UXtZRiJ
MD5:	27903BD5B9AA7C3ABAB807AB493ADBD3
SHA1:	8D19C7DEA760EB480A0508FDC22708C80223E7BE
SHA-256:	5FFD3C8D248CB815E2194F28C8D1A7E8031E3301FFC09BE727D9E42D6D470731
SHA-512:	7ED5DFB90E3C059B30D5EE4C41A7969A18A5E66EDBDE18499209F188AE1C8D92C38592346D61ACB7A7347609E9083AFCF9349AAED0BDB54BEDC20231717F2A74
Malicious:	false
Reputation:	low
Preview:	RIFFb)..WEBPVP8LU)../..?.M@r.H.... .....g.......:b.....-..dC.Gp.....m<;...~...+.v&...j.e.MK.....L[]..%....A...M...6z%......e.^z.l.5......+".......}.s...rd..F. ...m..?.2.SH.m.j...]^.:..K.....I.#.gz...d!........Us`../,.....3..Fe..=C..C.....">....-.N.....\.%.H...E.?.......zt."!Q]J....f........YW..~.@.....X.z. ..V.s..L.1...X.....i..t.v!.,e.....k..Y....@$..];."}i.]C>....A?)E.k..)H).kQ._......@".2u).K$.QTJ.i...(:..B.R..R'...ED......?....)}.....R.P.TSGx....+.m.EC...c..K.#".j>...\.......>...c..+..+.8....HRU.Qo.s...n/..3.w.=..D5+..$qr.......U.T6.b.A5.B.4...$YI....@Wv.B...v....,%.JW..>b.....R.R.....6..W.r..g...a...M.3"...!...k......h..'R.\.W...^....k ....^...NF....*8..F........y<.._..$)..K...g.1....K../..dV...............vswww.uw.....:.LOU..s..:......"V.].........~...'..$Z.....S!.".}.9.l.A;.$E..Q={.133.......j.xB03.s..LWR.m.$..>....2"r...m..3s.#......V..p..........".v2..e...~.zD......3..g&s.39Uuh.5.......Ui.V./."....^...J.2.Wf.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	33456
Entropy (8bit):	7.96315139927072
Encrypted:	false
SSDEEP:	768:yO0Z3NC1cNlRVV3VgrsC/JKLNBNS8smKGI:S3NC1Ajnlg78N9sm8
MD5:	C971C780267D5B469120B497DB586452
SHA1:	531F1AAA2FDA20CCC72E359F9C60FFF68A74868B
SHA-256:	14D2F0860EA6336EE9DCB02D274E18B0A0FB05FE76C40D4A0BE9F6732821300F
SHA-512:	3F504D40867774BC4F62357A1A991224D6138BDDF54F89DB9F14186F133E959349F66200C7896A392C4C366FB2A3DFC3B4237E81943177FFBF090F918E762404
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@l.H.tr.S....p..^.........;..m.........,..^<.#J..=...=..m.l&L...juA.<$.I.@.C...q.....:.PU..=>$..dQudb).L.I..z..@6FU.-i.Y...b.=.../E........B._v.....I>."%\|G...$qH0v.p.#.w.....1...Pt.....!....s..H..e...DK(@.I...w..K.9B.....m....,F..4......^!.....0..z. [.-E.V{P...-.)....?.=H.&(. (.]..H.#I..s"..]./.....0....3.....&A....I$.DbL...c\|..Uc...&....qP...y......:g.1..,.$.%G..#G.6</<s.9..e.>..U&)/Z.....9.q..m......71..k..\|h.jj.....j.6.l..^......c.q.?..%.u.V.m.6T.VS..G>.6].9.......e..b.5.H9.PR.Y(}..M.9...p..,g......6)..i..:.i.%....#..}^...6mBN%.a...k.J.`.lS..N.w.8GWR..`......A.*UB...........Ah'....P!.6.Z\-....V......P%T.U.BP.UrF.!Pq....hl^...+....4}.(x...p..!(T..[.Z;.....6.c..p...<w.....X<.q.pn....F..!d.I&.i.p.......B.u....Z..\..jtl.......my[.=l>;;.9..&..K..\|}..\|q..z.7..NN..;..\|.,.....t+=..@....v.zt.p..._..S..1EL...M..}<.,.,.h...Ll.`.......\..6lX.1........>.?.C.j.m.`.a....L......\j&...K..P..L....a?@}...h.~w..,....cyY....D..

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_appstore_perf
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6438
Entropy (8bit):	7.962532855941252
Encrypted:	false
SSDEEP:	192:uoIjRkriJCEqyo/J4/efNcy7NIPBQFn7ci2WGSOEqM8p:mjRkmQQo/fcy7NIPGcSOBM8p
MD5:	85DC87478C1A43485A97BE67420532E0
SHA1:	2946EA409D9E66A559F275E5A472470F9CB142F4
SHA-256:	9426C1CB54B6F8B4334CED56F6B4DF85E3D16AA52348A4022E5788C75F45FFB6
SHA-512:	A9ECAB0707DD44889EBE40CEB013B0FED713F7EF0ABB88C7213556CDC2CE52696C86B1C77CBEE006A32DFC4C825C4A3B3C87EF9F0BD249C823C95AC7E9DF5E00
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M0p.6n4..#.....f......c.<.B+G......?.`.(.$E..B-._..).....6.$'.....l...u..H......O.....u...z..V.W..&....Y.S<x$f1..y........s.M..[...E...Vk.....G.=...k.}91.;..+.^.....^.:D.9\.....>C....#"YlOw.h.....p..m.6~.m.9f....YffF<....c...[...$=..GdTVe..\S.c.m.Gk...m......Uf".....)7..=....A2q.w.zo.k.m.m.v...I.[#I.r...L....z=...F...0..?..x............z....~..xs.%.............9?.vHn.f.?.........\.!S..%.L.y...1.{........G...p..V..qv....sRnJ..23.z....{.........zS.?......^N..I{...^{..,_..=E..Y.{F.C...x.NDQ.8..Z.14....Pp.Q..o........../."..Q.\|S.Z...Y]..i.....n.....:..s.pY!y[.......'.%w.\z.Rr.P....F....%..........\_...g.......V.........b.....m.....u..s..=.. &.....c.'.$...n.rW.].................[....5.bg..%..+a.A.......5.t...8......O.:C..-@......m.'.....%.c.).$.ebb:^G.N<D<B\|`......}.z.p.2X..N...5.-o....r...7\|.i.VX.0i...6;.m.....EF.!..(@.(..`...%...'....B..K.G]^(X;........US.....(.U.A...T......Y/.6>..B./p.....K.{G.)&k..

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3008
Entropy (8bit):	7.926057879000394
Encrypted:	false
SSDEEP:	48:2gx9k+wslq4eVo2DMgnG5WdpvsqjvL8bgw33dsbhTKayGlGOu1PE/:2gxGKE46oqG5sEqjgbgG3UhtyGEJs
MD5:	E4B704C1858279E8A36F96DA4D88A4F3
SHA1:	AAA8A2F1617FE294FEE71879A6014A5078DF71DF
SHA-256:	F0A7A3B74E026E51F2102FC58905CAE03ADA02331BD673F7519A77EEF73A1282
SHA-512:	AFFC2F4AC891FB123811754765A730E7A095A74904C7770BF445D22DDA4F9031217C4E20718D4C208CF1AD24E27A59EBB00980301BA8F43C01C31B1B29A55CB1
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..P.6..._.1.+"&...4....[.lE...F..."......)o..y<7.ms...=....z.=.m.m;9g.W.....JiW.X9.r.:.l].!$.....t6&v..W.......].J..j.{.1..s.9'...-6..m...+.NF.m.....8._l.6.j..m.m......?..?.rk.Z.....L.k...........Jp._....bG.=..L.......\.f.....9S.m.A...........WO..!....f..R..[Uvik.,...k....8...$.........y....K....E.M.6.H0c<....?.d6w.k......).{..i...=..?.2.c..^s.V..~7J/n3..x..Q.S..`.K...E...@...A..AY..#..c..Y..}......N.H.T..Ez.F9..fs.E...)...J...=...).E.....'..Y.\.;..wh.G.v. /...m...O.x..:Z.m.....]@.wj.L.8R9.....9.P...4.........#.^<.....d...aQ..I..^2w.J...u.a....k/$..).G.;g...g..k2..\w...d{....C.^.S.1..m../..>....... ...U0..\|......!.#...l.\|...1 $._H.5....2.Fo.V.}..K.g..ta.V.W...B.......q......r...C1....V0.F....n.\."C.5"..........Z.Z..Z$n.....J.Co..q~.`..8..._..P}I........6G.X#..{...yw....N.#96`.+......Mw&..O.n..<.5..i).AR%..Y=..s.8.._w2.A..D......Zs.X.l.8.).N#.hZ...'...K..q.K.i..t...I...'!.`zqQE.....+Y.tK.( NR..x/.*..t..SK

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9564
Entropy (8bit):	7.97584128021527
Encrypted:	false
SSDEEP:	192:ECJfBVNEZiq09tLVyXEheWrIngVaN6Bd10IkSmqDXn5R:EGBWizPwXEhergVasGIeqD3L
MD5:	64020C74B49AEB0E58B7150F0499D07E
SHA1:	040E51B00591EC2ACF8C6D78BAA8585FB39F4C4D
SHA-256:	EDAEE1F52C4AD3284D51C88F2BEE378C6018A45BE70349DB914073CDCEE2EEE5
SHA-512:	33715C326405E085D85AE03F9CB3A8A750C35503EAC444DB5F717369B2C912DE62F434248D321C79780E5C7675A49D98A3589F3D85259FEBEBC3A4115055B469
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/3c/b3/45/3cb34544-49ad-f5a7-cf96-bae0e5bfdd99/0b2afd26-fee6-4027-9487-caa6c1887dd8_APP_IPHONE_65-3.jpg/230x0w.webp
Preview:	RIFFT%..WEBPVP8X..............VP8 .$...........>.J.I#.#...<....y;-......}.....?...i.<....z.....k....w...[......k...^......._n..........S_......_...x.....^....A.i.;...{O..@/c...k..\|..{..<...G......j.!.y.....W..._..K.....c.../`..oN.b.......3~....W.8.......q..(...U.`h...O. .$.CQQv....0Y........O....2...'..........b......do.#"~....Xb...m.....v!84..[`..O..v.@...y}ma.{m.....S.1....d.......y......Z.cb.....mu..h.3....4..:..._<GP.5!&..Ti.v....M...i..z..m;.k.9.....Z[%.#.......~z.lB..T...X.30.I.......qe.Gm.>Y..n.Er..T.{..;."....p..rE.{..p.S....._.Y.\..f.6......M-=.%..,.#....T.....l...w.%.`fh?q..x`j....g.S.B4.0...V...\...).7..z......JT.O.".n.v...^%.dv.%..N>.$.._z`.D.N.!5/q..j.......dx).. y.\|8.D&R.a.F.;=Y?......l-. ...^...%n..G\.)....%....W7..l.Fh.q)e.WO[q...2..Z@...G..&S3...M.=.^..j[]..6'.t1..19....-{.}.....Pan2...(W..&*.(.=....{wr..#.mj..5x/...KR..\|.r$.......".U.>.\|Z.ZP{.,u.c....HX.(~.br._....D.U.jC.b91.-.N....)..A..L..^y'V...,Wm.s.:..(...).....C.Q.

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/stars-lg-bc4f4bfdd931e007ab096dd1c209c689.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157352
Entropy (8bit):	5.4513730019566164
Encrypted:	false
SSDEEP:	1536:VcQ2UlYdxMXwcK2Bg6mqBhHPVy/ynVmXeXWH2H3i47UW4nb00pqpIReMaahQYg5o:f1mhfaahWI8sMkVT+StdOaBrdD
MD5:	2CB0588B519CA96061BA5C30AAC4511A
SHA1:	22DE2E42A74CA721B55269B6D81E3E9B7D465817
SHA-256:	4657EFB3912F2E0FCD1ED177EED282FE799F23E62219C0DEC5230142D51DC530
SHA-512:	ADBE5F35891E985F8EDC3B2C609A2E04DE165933D2963B6B1149130B02B6A6AA5B0648E1126B42510063E78FC1A6BE87E5802F3BB3934A0FF14C2DDD7C50906F
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.umd.js
Preview:	(function(mt){typeof define=="function"&&define.amd?define(mt):mt()})(function(){"use strict";function mt(e,t){return t.forEach(function(s){s&&typeof s!="string"&&!Array.isArray(s)&&Object.keys(s).forEach(function(n){if(n!=="default"&&!(n in e)){var a=Object.getOwnPropertyDescriptor(s,n);Object.defineProperty(e,n,a.get?a:{enumerable:!0,get:function(){return s[n]}})}})}),Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}var Ye,M,ss,ns,Je,is,as,dt={},os=[],Pn=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function we(e,t){for(var s in t)e[s]=t[s];return e}function rs(e){var t=e.parentNode;t&&t.removeChild(e)}function Xe(e,t,s){var n,a,i,l={};for(i in t)i=="key"?n=t[i]:i=="ref"?a=t[i]:l[i]=t[i];if(arguments.length>2&&(l.children=arguments.length>3?Ye.call(arguments,2):s),typeof e=="function"&&e.defaultProps!=null)for(i in e.defaultProps)l[i]===void 0&&(l[i]=e.defaultProps[i]);return et(e,l,n,a,null)}function et(e,t,s,n,a){var i={type:e,props:

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8420
Entropy (8bit):	7.970959285950581
Encrypted:	false
SSDEEP:	192:sTMp1ZJtuQQheOotTLouVZk//KX38kp1YJ02HUSUVDSy:lp1Z/ufo7TLogFXnWJzPU1r
MD5:	CE7637A2A51E7C23829F8852BC66A2D4
SHA1:	0E6D715B7DF65FC4963B5A12FD05F420BC552B04
SHA-256:	2DEC18EB9F60E9CDB27687A21154611919CCE7F23999F6EF4BD2A79BBA2D23A5
SHA-512:	B6B2198A3AEA39AEA36498D9BE9C560C698F4360CAEC38D0E783F3D0B0F6C1F1E752E2CD6CB626BFE184FC569486622EE508EF6C4254C0FEC579DBBCCCEB9655
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Rv_Fumphjg7BH6I8_sA7PPA2R4Vyq2twJ7ijutwLd54zbDD-d_tDWk9miKA6Kp6cWCM=w526-h296-rw
Preview:	RIFF. ..WEBPVP8L. ../..I.....I.?.g..1.}.1!8._T..S.w:{...C....a..H..........1{3)......e..m.r.....fKaf[2.I.................p2.....{m..K....y0X..RM....Q+...#....k......D...D.r`.!...q...w...!.c.m.}=.A.i"./.Xx....P..6.9....N.I.. J....(fn......$.m.#48.....I.....?/7...b.m.m;.mNl[.3.m.....s..N.l.\$gVu;]L...=..j.6.]..6..m~j.6....$).$..c.ef....c....p.k.i..1...w.}...G.x.m+ef.Fhf/\|.a..^..;p.I...c....\|..j.RI..NV..SJ..RXr,t{I!!.8.dH#.h.I......WE..!.<...A.1b.(.C.M..oO....h.h..>@uP.2..........@T.V.H-.E..o..AyS...>`..R.5W..E.........P[....L?NV.+{3C\q.D..........+w.R.v>.r2.....^V4..!.+.]7..Q..=.....2..4v..^..#~.Xa.........\....=<....f.;.Z..M.... ,.%.t..........1.{....Gl.B!.4vj...d..V.`+E..Ca.$Q...#....l7{.F..M...O.>.V4......!.4.:I..DT......Y...\\...$.....s..`e.&....T...........M.0z.wys.}.K..G..s.n...o...dTq.\|w..'+?..1Q.D.(1..4u.{.#.6.... T{q..2@....J5@i...-"._..Y$.+X;.I..6Dc..q=..b..xs$.....J....B.j.c...O%U..+p.F...l+......+h...$..)......3.XJ

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	774
Entropy (8bit):	7.690416168441072
Encrypted:	false
SSDEEP:	24:P2hPcF73K6fiB1G+VSZ8NsSNhKd4lgzKsDdikPjfsX:P26RxKTG5ZZSNhKd4lgzPxTPjEX
MD5:	0C69820B6574F95F7FA350B9F0537C65
SHA1:	8680D902CE9493D480AE551C06FCC883857535C0
SHA-256:	9694EDE45707D541967FC7B25EAD7FBD09B39DE54099665718ECF46FEDC14112
SHA-512:	12F12E57F7233F11372EC52FCBE148023E978D7312E300CD0D26F87220D71B2CAA6CC08E93426A9A8FA5DC7EC794143CE37593C6B59E857BB569FB385BAEB73C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/QJObxznpklAxDNp0OVe3kAP5ZfUouIvRDO0kPj-V3MRjoRYKwj9RVTxOwG9yrlY-bgG3=s64-rw
Preview:	RIFF....WEBPVP8L..../?..... .dW...H@....p.K....$IU...D.n\|.v..m$IJ........wf..2...B!.P.p..B.B....!@.......".Q ..S.4".R..B.V.Y.(..B.e...7.ix".(T.TaGD7.!.@@ bt...@....m...T ..Z%b z..<..j....{I.m...>#.mE..Q....96.&......f.&r...o9-..O.@....(P.......0.......$.......4h...l.aw=..e..AM.(.um.Ew5..i....m;]w6.M/>....~z..ND.'..........,....s\...6....X=J.WU%@..{t..,.<3....f.7.LR..kH%1.~.N(..c...c.....bP.Uc....M"8.T..?,..oK6......=.rrrrr...V..Q.......wg....7:0.VCd.+y..HeG..q.q.... ..H;..(i+C...4.n;8.K..,......2B...T.A.o>~.....;7 .\.....Wb.Q.$.] ..4.kp.L....4.....).?.X,.....}..$}.......U ..~..h.f......M.._j...N..o.(.+V.g."D4...d.%.HD.........D...u..3.....z/.s[..M./.".....K..Q.....M`o.z.6{..<...!..E..j&Qy...T..F....v...3.6......I.)O..0,..t.v....+G.PU

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	179240
Entropy (8bit):	7.988894279260863
Encrypted:	false
SSDEEP:	3072:bU0fv2bXl6ABM7Me/fBwILHrMIjcgEXe0Czq/hI1hagswlQ7N8WAVPu:AwIl6xaILHYIg7X4i2agswlQG3I
MD5:	47BB815C40A19EEFA2EAFDB66AA679A8
SHA1:	4D1B601F178A658E42A6B7F534D80CC0ADEE0181
SHA-256:	E3D077DCE75D0C3AA12A656FAB50252AE70E4C38E157C55171EACF714A01B979
SHA-512:	17AA1B0B7C908A991623AF3EA760ACED520B2F5D388EABC56AAB2C29ECB5668F1B172570E59EC0A15473C8B9271D0A6FFA8E149A2AEAA318201CBF1BFEE48F6F
Malicious:	false
Reputation:	low
Preview:	RIFF ...WEBPVP8L..../..I.M@..6ls..b..?l;.....O.$%^%).Y.\|).......R...C^9....W..DN.....'...3.$.f.H.%R.O.'..;g).'....u..Q..d}.x..........Y..G...In-..(Kw.q..c)3..$Q.D.z."I...c..)i.$%..8..V.H.}7K.....B}K..G...].(.8.w..qhfv.....K...~..l.!Zn[.EY...$.).7.1..<0.m..@.m..0..I,9.n.g......O).tl'H..F.(..j}.$w....lk'VlI~..9+....k.-Fk+.\|Gz.?.eK.9OR.e0. H...8...${$I..f.vB..$.....C....ha..t..9..A.0.X.D..9.g...H...lGR..wr........v.<..;.m.N.8{.h{}"Ek"..H.........P../b...+...E.t..j.-Ws?..{E_. .. ..l.vi..@.@[...........v).........../......+..=.\J...\|..O.........^....\..-....$Y.$.....Z.{....E.g.......q }.....\...f.,0.......7....d..m.V,....O..4..B..h4..Fg.....-..Uks$G:$.H.B...E.z.......IS.b..$..~...m..$.{.....bf.....3..!....m.&....@.4...t.8.0...B.J...@.(...B'C............9..a8L.H%.BL H......p........A0J..I..U......@.t...:. .@...M.)..`..C..0$R.....1.Q.... ..A.....P.`.&......!.!..!}..b..0........S.......(i....9.)RP...)&.8..E#.@.RP.+.a.D..B1...Q..n......)... ..P... f...R.......

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4722
Entropy (8bit):	7.943014014932954
Encrypted:	false
SSDEEP:	96:36VZKKvG+iqhwic63hSW1+qokCWMg3QO0rg0KC9SKBI7KFXRBYw2FAThwY4B:KhZc6p1+qXDNBUBxFBb2FAThJ2
MD5:	E9595764EE6671D7E2E923003120A8FE
SHA1:	C1D3A729073D5FE3355B2A7865654E0FC324022B
SHA-256:	94C4A2BF82F3A33FC0BCDF7AB25D6A8A8717045E4F6E0C7BDCF0E8B8DFAF567F
SHA-512:	27D67AC98D6DC5A92097E198EB46F3147352AF54490B6C88B362A2CC612364549C16C4E97BA7F7B998ECE2CCA3451CBB690F29FC1EEA052FBDD6E7EB3F3C9179
Malicious:	false
Reputation:	low
Preview:	RIFFj...WEBPVP8X..............VP8L!.../..?....-.-.rg...Y...mG....}.......-..}.y.~.^..Y'".L.D."./$..N..+xks...k.k....tW....d8..._...uG].....&..M....@5......&.MNLMH..pb....s..p..OJM..N>....; ......]b..DTu2.....5..uF....}._E.....";.........iG+vr3.m.m.m{b.m....m.v.b'7c.m.m.'.m.m....d.......psW+).....v...].......N.N.l....k.-....{.i.Z.'"..]..L.....f....w...eRRV..Z..p......7........[..t......LL.?8x./.)..F~..`.....n.....j.U6..G............99s..Lnm}.#G..v.V...8Z\.p...qpX">.9]..z....>}.;x....Z.x.0...b....j..s..u9s&N..&P......I.....@U..\..]....Z.@....v........k?s..V..j8.k7h.^^...F....[4Z.3....e..P..>...^.......H/_.;.s...}..j....5+Q.......jYY.e..{.`........^.HU....k.....b....h...c.,.....AG........q.o.R-....9.....@\.m..7.h.1.~}.kX..JeK'%...s.!/]j+.^./z.........Z.._-'.. M.T+*f../.....9.+3....:^}....tt:L.^0u...QF....$$...@...z.....AA....;..m...<? .e..).O.B.........O..^.@F..fd$.H/^,.......9:.VT..&..VR.SYZ..........BM.JF.\....SR......L.j..7

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2840
Entropy (8bit):	7.8803852518960795
Encrypted:	false
SSDEEP:	48:r724o8WCI7otjpJlgP8pMjdg8XgFxi5HyC+slXUutOVletFxksBuN/X+cy2FgVSv:mf8WdotjpJlgPcMgissf0V2F6N/6ZZY
MD5:	D1A7C5BDAE96E3CEF5D2EA33660454F5
SHA1:	A208B8BB9D376CDE199CC48D75EBC3E60CDEE75F
SHA-256:	83153E7F75101015D69EB7EF66BBA3500B6EC29A1DC6B889DB5D1A2E7F314956
SHA-512:	144E1D2FEB5B5203E7A39C7F41298009BAD98F4088DB823E2BE7F98D232052C89C58BB790E97A35C2BCF76F033F23753CB4E0CC3F6B7F8E68F25F6879E5EE2DD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M(n.6....t....".?.\|..`....b..t.u.....m+.^D.T@D.E.....6.$'..0.0/.....m#I..3..#bf6......Z8....9.3l.jL....{.g%: W%.....W.P.W$kU}......ke..>..,m.vL.t.....U.c.m......fi....m.m'#...{/2...X.....m..m.V...1.m..m.m.m..i{..V(.m..\..s..m.T.hQ...Q..#.H.m...{..k..........r.....Te1j........={..[L..<..8.4.}....1..>E......,.,..k......y..K..r('>M..=.i..jH..K...e.v.^q.?.;......f.....N.6..U.'........I.X.d2....6....8pc..=.....W.........`b$ ..b.,F..LmRKG....Em...}g....:.G>:...u..A.3.@.FJ...H..d.Rv.@R.f.u5.....~....v.'/[.."......I.38.,......@..3..nmy\z.y...m.y.y..A.`@.DY.L.S....p..h.. JLR.Rv._8{..'N..rN..o.g@D......nhd....(..B.....)-MP.......k..`..<p.:[P.(....!s..34b....if%(.A..PY.K%....W.s...._..wN"B-..\y.cM..!.......]. ...A.C. ......A..V...[...]ZA..E.Ht2..........v(..$.J..t.....f..!@bG.@. .0iNf.D.?T.......f.s..bi..o...Ken..9..D..b..I...p.....OC.......$..0s.e....j].VR..t.~w.._;..[E%.f....`b......5.Pg}z179E..0....

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (949)
Category:	downloaded
Size (bytes):	5561
Entropy (8bit):	5.718411868960198
Encrypted:	false
SSDEEP:	96:kp8xaXkJ1V+E1KYxvD12Ryc0VTyLf4g3pCnMCl:E8xaXkJ1oE1lvIyc0904xr
MD5:	B836A3D2F0A3B96145C81871DBB07664
SHA1:	A549892DA0BF40F19F1633F75A0EE017CB6C4D2C
SHA-256:	8CC779902FFF81BD8013EACB8BDBDFEA227CF3D7FB2A63D6FE02258F3E5800D5
SHA-512:	4CC5BB2909C5E1E77033FD70911756083E6F3375492B49A375E5F15BA426315E5E4136BDA2561F949EA3183CD8F217516E791BCCC6696728CA198A6A3FBD62EE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,C7s1K,CKm2Wb,COQbmf,CR2XMb,EEDORb,EFQ78c,ElYdAc,FCpbqb,FoxcOd,FuzVxc,G2gJT,GjTCAc,GkRiKb,Grlxwe,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,J22eF,JH2zc,JNoxi,JWUKXe,JiSSTb,KG2eXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,Qf3l6c,QxNhAd,RBsfwb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WhJNk,Wt6vjf,XMEW5d,XVMNvd,Y413Bc,YTx6oe,Z5uLle,Z5wzge,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,baVq7b,bm51tf,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,hhhU8,iAQMie,iLGjNb,jZ2Ncd,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,n73qwf,nQqY4c,o6xa3b,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,q0xTif,q8s33d,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,wxpxie,xI1uef,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbKb5e,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=lDZ2Fb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.cCa=_.A("lDZ2Fb",[_.Zq]);._.u("lDZ2Fb");.var Z1=class extends _.x{constructor(a){super(a)}};Z1.prototype.ta="K4YEGe";var z2b=class extends _.x{constructor(a){super(a)}},$1=[2,3],A2b=class extends _.x{constructor(a){super(a)}ob(){return _.F(this,_.Ps,4)}},B2b=[7],a2=class extends _.x{constructor(a){super(a)}EA(){return _.F(this,_.S_,4)}};a2.Sa=[1];a2.prototype.ta="swBvle";var b2=[2,3],C2b=class extends _.x{constructor(a){super(a)}};C2b.Sa=[1];var c2=class extends _.x{constructor(a){super(a)}};c2.Sa=[1];c2.prototype.ta="XMKGyc";.var D2b,E2b,F2b,G2b,H2b,I2b=function(a,b,c,d){var e=_.vW(c.ob()?.H());const f=e?"3121\|"+e:"3121";e=_.Y(h=>{null!=_.lh(c,_.Pg(c,$1,2))?(h.open("p","WcV9v"),h.ma("class",d?d:""),h.W(),h.print(_.M(c,_.Pg(c,$1,2))),h.close()):_.Qg(c,_.Xs,3,$1)&&h.print(_.tW(_.L(c,_.Xs,3,$1)))});const g=_.ON(h=>{h.ma("target","_blank");_.PN(h,_.fO(""));h.ma("jslog","197536; 1:"+f+";

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9990
Entropy (8bit):	7.964763181222116
Encrypted:	false
SSDEEP:	192:5FwLEVi+Ir5AkxUUgJ78hdL1JBK7n/kp36JIIx0OoYDDifrlYepwrukCIA:I3+InWUg9EhJk7/kp66+0TKDifrlYepx
MD5:	04D389A4467BA76AE8C0623AC9BEA07F
SHA1:	2A12DFF7CC279729B8D0AC71BF552A6A9A58250B
SHA-256:	7D9F877546306975C24D6A72B65B3F4B31816D8712735796D0BBC159DE49FD9F
SHA-512:	E36617ECCAA6F6D069B6AA2DD71D7AEC81F10D13596FC70A9CF707AE8EE3F5F59992966F5AC361AFDE89DA164005086FBA41F7C7280D9900FE7C09D520EA7A2B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw
Preview:	RIFF.&..WEBPVP8L.&../..?..X...mj...X....!.v...........1.s1...w...b.q.t...1....[..+RmeF1/.f..F...cS.5.t>.e............7)..}...d\]...D...p.\.Z...v.....~..m$..............F.IJ6.C.P..?....m$IN..DX...QPX......').x..1C.2sq.Xx:.\.\...7s...8..v..p.ff6...jf...1P6.P...t..Ap.O...f603gk.c....L(a.L.GR..F.7Ao...&..RF...9.U.tq8n.H.......c........Zk.?.n.r..m..].t...+w..iy...tn`........M...]...k.v....i..Z.........V..Zk..=..c.9..E........U...a..z.#pS.+..E7...'f.S..}l.~..k}..j.j.;.#.V................Ue.....b.Q.[FFL.....7.m.......b.....\P..!8..9H.d7l.5._.... .....}...c.7s.^..ef.afff...{..2.33..K.f.33.=>..S&.....~...;.#k.Q...G.j........;....N.:U..03.......6.l.V.5k].pw(R.....{....SJ..=....Z..R............J.r:zJ......p....pw.-._.G.,...o.m$..^......m{..l.l+q...tBQ\.._pB....~...A..$C..:...../.....g'.=.#.SA...;.3.j.pD.rt.....:...:(....3.w..+}.>(.Tv._...r.(.6^W.KA.......6E..U.'v..]-......`7..Y.8......f.W.....* .U.Q...e..q%.@`..r...}...R.S..Wy..=.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	7.8594540212727475
Encrypted:	false
SSDEEP:	24:zjF9cfYoaifnCIxqtKYTetGYbh/wcww8o6h547DtgUBS+Z+sjTt4ctVZDEkoPWmF:fmYo3ytKYTyGOwv3h5it3Tt9SPPW0VYW
MD5:	AC47B4C1D3EDF0FF4DB738F9DB8DFD2D
SHA1:	6EDA933BBC8FF4ED73A94A5F77BA09C7C6E82E2B
SHA-256:	CAB22C287FDBF0E475222226DC89AA41E4E44BA751EF7B1DE60BBB677DDD6C78
SHA-512:	6C4CD51225B1724F17A032DCC00DB2AF2820BBEB7970C5C7DB5F2B279460B0AF257157DE7F9A676F681C6BB647D5D01C62B60F469D0F558505F64D73C655F21E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....m.0...w........1\|T..e.DD3......x......Aq.6n.i.^..m$........;.W.....w.s..M.M..........?.t..O.]..........;.......J..y..W`ff..\|..gg'p....\}..l...ye.6.....T.......$..d.z6.:.....m..m..m.m.oc G..H..9f\|...-.1.\eL.......m..m..8............3....W......(i....z..{....\|....`@.t...j.P+.....V......+.........M.g.Up`..Y......Z.F...#.....B~..\|8m?...H....!....6...H3.H4.,....1`1X.".3h........w....O..h....b....).\|]^.(....t.u....=..E7..\|a......b..(.Ad.d.3....0..n..A.......Q5.'<....Z#...<..?.q..o.$.....(..}.<.rj~..(..?...9.....w.B.a..Vt../L.......5`..2p4&/t.P...+....w;/..z..A.B.;v.+@.....C.9}..>$.&H..AY.....B..A...5x .....z...$ljLmd.....k._..~.56....}u..5.;...S.%4....AM.]...N.51..8...-.E....f'....J...a.RB..S..yxj..g..\;.W-d.g........{...M...\|_...3p.v!.~.......[c.....0.v....?*7u.W.O.0.....2.[.w...a...,..4:.../.eCW...... Ero(..:.c1...-....w...Q.......H5.p..Gj.}.^.?^.f6.WGG>...........AH...)B.A.....\?-/.e...C..:[N..9..

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7614
Entropy (8bit):	7.972871971991287
Encrypted:	false
SSDEEP:	192:TwHXbDtdur73P31Lx/ykYmXttkksYjof9XaRX/gKVRil3W:TInCr73L/ykFXkIoFXuXIKVRic
MD5:	B6EA8FD4921FB9D17C4A903AEB4AEE02
SHA1:	7D404B436A31A57D7826B2AF32FB001B70243423
SHA-256:	75A86D4A0EBC721E5C0ACE2D93851B21003A324EC6879432D9347D844DFC1333
SHA-512:	42A4B29EDE61D60A17C95EA7D3A847E760948B1C82D3E9CA06739FD9F93C52AF697993E23D2A40F3645132100EA0D71CB743DAB20C95B3A1A93394F8BEC72FFB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I....m.s....wDL@6. .1.5...Ib...^..._.4.>jH..{.w?...8.....{6..zK....%u...q...&..o.=.H.......,...t..'..$Y...@N<...@N\|K.......H.U..,.^...<./..,.n.m.....s...q..%."..\..,.m,Ibv..Bu_.k.{f1.O...Svsk.c.m.m....m....9g7...U..nj3.....m..H..I.m..i.....p{.+..d.$.{?D.Hhf......:.3.l....FR$g......k.$e.sC..i...#.N...\|0o.j..fJf..Se.0\.....).Y....@....P3.M.V...$].L...P_.....y...Z.6A.R.........@.+..S...n.@..$FB.EO.W.LUO.W..."=.>.Q C..cwAR1mc].V......\.^..8.."....AF..-..........wW_...u._.....@uy.>z.=.1.R.p.z.....)Q.....W.'..lS..?T..I..=s..t......+...K....U.....Z..Z...D...2Js.T..<!..X..0.bq....Q..#BW}..........A(...T....d..{..\q......'t...).(...i,..c2.]...a....@.Qj.c.a....T....g.G.$...0P~..9.2.....x.e...q.-......F.c.O.....H_....f.$....H.dL. .%KL.........B5};.!.....4.i(...h......%...JZ.D^.........Mr.........hW....:.....K7.4.Q..TH...>))..............L./4.N...,h..s$.....[.Um$..N..c..7........W..S@....U...:n...>..[...h".K.1

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 232500, version 1.0
Category:	downloaded
Size (bytes):	232500
Entropy (8bit):	7.998884606824205
Encrypted:	true
SSDEEP:	6144:e5M3heALdDh/vgiW8Voyf6TCBh/59/JIPo3LA/mjKkcJjzHGm:33hDNhXgiWyoyf6TCBR5NJrs/+BcJjCm
MD5:	61961C768851CA32A9CF38E8F30C7277
SHA1:	5E0A7018DE235BC07AB09AAB70056FB7EDF23136
SHA-256:	51DC07699694A66AD46960C186AA00FD12DD8B4E55F209839F85C173B436984A
SHA-512:	45A98EAC5F87B2DF41B3D0A261C48FBD11B7200411AA29DD565BA4395C80C613F6831B2515EAFE5F7B778CB6C060E68DC310F8CAB144251759155154F5E8574A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlematerialicons/v141/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2
Preview:	wOF2OTTO...4.......................................e.....`..X.6.$..b....~. [.......K...BE......Y........S(.Dp'9.k0<..%.q(.?.....e.EBn...q...............K~<.........&.lb...P. xp..].R.h...m..,.#j.S.U.. t....R_=H....!Y.:....@.C.C.. ..BK......h...`3U.....).\.Pf.......d e....!h`..4.X...=Tl.tk....@.;,(.A..m#..<..b......sw..7336.=IU.}...(RM.t....P..Gy.j.J..J.{T..Q.....{ttr..N+...HM<#3.XNw.[z\|..P..]....x.L.....9....Bi........x.7.9....4........\|..l..LR....=H..Y~A.1.._p3.......<......iB....7.$U.!L..kJ,2..KZP.z..Ff...(.R',.X...2.........O.4.7....)Mi..1F..L.D@F..B....G=.^.U" ."..{/....6rw_.l" ..}.(5.)..?.f" .....A.).]T1../....@i..a....[.]..Az8.&."wc....L....uI.9..\|..V.......\......BJ)...\.rgUUUU...)7.N:.......7b....QQ..}.^....{.j.....w.'R.,.\.)...5...O'.`..t.4..:.a..V..Y~&.b[h..,......v.6.e2(..h..R....(p..2\.)C....u.... o(..@.....Z....X..H...h)....e..!%..a..uyS.RM...\....}Z15v...\....W.{.m?.Q..,wyK...0l..V..YM60c......q....}.....X..Y.[.......v..........."...v:..c

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	7.278552618982457
Encrypted:	false
SSDEEP:	6:hZcT2lC/bcdl0zAtd84/0PHO2a1fRMDOG2mPBbmHCxn7BG3NsoX4fgYsvq:kT7Qpdp/06RM6hmpb/h7BG3NfmgY/
MD5:	BDAFFEF3A4430AEB4D69E68075DB2848
SHA1:	7CF67CFD33F3D1663C7CA30509B6EC1888F17EC1
SHA-256:	F0D985ED1BF4BA2A0A127B598E07DA6FE733523A99386A38FB53F4E16C87C8D4
SHA-512:	DC9D802F2E5054FC3168EDCB52B19912D240B3F3DA0B6C76F82EBB32245A7DAE2DB656A5AB291BB204A462D6F4E37CB44EF8C73FFAFF823149C08B6B8B34257B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw
Preview:	RIFFj...WEBPVP8L^.../]@....6.mU..~...&..)......F.$I.Y..V..2L.Zn.M$.R.98.....`.....:M@P........M.O.n.....E.}!(..a....."......0f#...C...u...(..S.^.G.?...j7...K.A.....Y..,v...........w.-.,N...!..}....?..$.6m.k.m.6......^E....X...W..s...X./K....Wc4q...<M.'....rY^...v.M.....~T.5...WF....P2.....V@...(b...>...ip..h.`.A..R.p..)...:.z.`..:..8Zft....55z]p_...:

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	39997
Entropy (8bit):	7.97375484107102
Encrypted:	false
SSDEEP:	768:gviOwqkxt4KkDuUR0nFMNGI9/2KRIzePd9m6g6pD1ielvE6f:idTa6Kkp8GEI9/jAKm6of6f
MD5:	CD5881AE4C1F96CA24D28DB455826360
SHA1:	033E3303FD048FC96B8E2FACADD8F9468AA0BCA8
SHA-256:	DD5062DE1DDEC283F55C40DB7E293FA9126E2E932DFD3A527346F9169DECE5BF
SHA-512:	427E0B600921DE49C18D1AB8DD25E51BF6B75496A1C91F635998A74CB38839529B90E2D5AFC70A07D710D3DF2EAEC5B85613E170457D4D1CE423FBA568127D4E
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/5CBdVmCuDx4/hqdefault.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................U........................!..1A.."Qaq.2....#BR....br...3.....$CS..Tc....4s...%...5DE.................................8.......................!.1AQ...aq..."....2R..#B..3r$b.............?..(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....K.......6#......cy.:..QtT.n...}[.kj..]<.z......T.<..]..,.y\|.k_....[+.$.k_.s..@.D?.).9....EY.3..e.DF....W=.K1.5......\|.......c.7.2<.a.."G.....9BJy#.B.(..j..6..6..^+....Y....>.A.....5..5Y..cPV...iUu.c..q\|......f.......B......]..~...?........2.kG..f........k.^ ..d..j..GGm...v...aHtU........N...\G.....4v.?p]......%QMX...Z...Ei>...%=

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9371
Entropy (8bit):	6.775324714137017
Encrypted:	false
SSDEEP:	192:aSkVHhQQSk+tvHzKRlZfR/bwJ6b3nvIQe:aRVBaTTKRN0KIP
MD5:	96E7DA23073D7FFEB2B90FCEF2570B2C
SHA1:	6AEFAC48244653FE982489338E70C5FB0D900FC2
SHA-256:	89514515CA490C1E66E3298D91D74EAF1F760C0D4B21E4E9F18FDAF3996554F3
SHA-512:	D1D82FB43FDADD9F8A3F55AD7E7D8FBAA0B7EBB82B0742B8440121EB272E3D68E7A67A163AA095BD6DD961286B61A130DCE130FA7C308E79639A2D6DD9E6A718
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4..........n. ....zTXtRaw profile type exif..x.mP..C!..w.........t..`.l{.'.x".\|...6.....MZ....P.8;tr.4y.)C...t]..pT....e.qa.E-..#~D.'.... :.....#.#.O.0P.Vn......w..4.xo...mzG.w.............u..B+Sc.J.3..9-..1.YO.+J~....iCCPICC profile..x.}.=H.@.._[KU*.F.q.P.."...E.P...:.\..M....G.....b...YW.WA...quqRt.....Z.xp.w..w.....T.'...e..q1._.C..........'3.Yx..{..z..Y.....J.d.O$.1..7.g7-..>...B\|N<i..........g.F6=O,..........x.8.....s.+..8..:k..0\.V2\.9....D."d.QA....j..H.~..?..S..U.#..jP!9~.?..Y..r..q .b...@h.h5l...['@....:.Z...$..."G..6pq...=.r..y.%Cr..M......7.[....... K]-.....D...=.....g.....~r.v......viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceE

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4722
Entropy (8bit):	7.943014014932954
Encrypted:	false
SSDEEP:	96:36VZKKvG+iqhwic63hSW1+qokCWMg3QO0rg0KC9SKBI7KFXRBYw2FAThwY4B:KhZc6p1+qXDNBUBxFBb2FAThJ2
MD5:	E9595764EE6671D7E2E923003120A8FE
SHA1:	C1D3A729073D5FE3355B2A7865654E0FC324022B
SHA-256:	94C4A2BF82F3A33FC0BCDF7AB25D6A8A8717045E4F6E0C7BDCF0E8B8DFAF567F
SHA-512:	27D67AC98D6DC5A92097E198EB46F3147352AF54490B6C88B362A2CC612364549C16C4E97BA7F7B998ECE2CCA3451CBB690F29FC1EEA052FBDD6E7EB3F3C9179
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw
Preview:	RIFFj...WEBPVP8X..............VP8L!.../..?....-.-.rg...Y...mG....}.......-..}.y.~.^..Y'".L.D."./$..N..+xks...k.k....tW....d8..._...uG].....&..M....@5......&.MNLMH..pb....s..p..OJM..N>....; ......]b..DTu2.....5..uF....}._E.....";.........iG+vr3.m.m.m{b.m....m.v.b'7c.m.m.'.m.m....d.......psW+).....v...].......N.N.l....k.-....{.i.Z.'"..]..L.....f....w...eRRV..Z..p......7........[..t......LL.?8x./.)..F~..`.....n.....j.U6..G............99s..Lnm}.#G..v.V...8Z\.p...qpX">.9]..z....>}.;x....Z.x.0...b....j..s..u9s&N..&P......I.....@U..\..]....Z.@....v........k?s..V..j8.k7h.^^...F....[4Z.3....e..P..>...^.......H/_.;.s...}..j....5+Q.......jYY.e..{.`........^.HU....k.....b....h...c.,.....AG........q.o.R-....9.....@\.m..7.h.1.~}.kX..JeK'%...s.!/]j+.^./z.........Z.._-'.. M.T+*f../.....9.+3....:^}....tt:L.^0u...QF....$$...@...z.....AA....;..m...<? .e..).O.B.........O..^.@F..fd$.H/^,.......9:.VT..&..VR.SYZ..........BM.JF.\....SR......L.j..7

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19928
Entropy (8bit):	7.9897850540383635
Encrypted:	false
SSDEEP:	384:VjFfZmo/KPGwhtSdfAZYpwqF5TiGTcrvKfhTJzhQKGZq:V3VC+wg4ZYpDF5qkHuKGZq
MD5:	FC180EDAE53C0E7D087CCF30EC6AD3EA
SHA1:	FE449E4462A34CB7D38D3AC4012862960F1CE309
SHA-256:	3CEE4A336B1EEFCC589F4BF43CF1C5AE463C095677AD834A786E7C6065133458
SHA-512:	615627AD2B4E6A03EB793FB3DE80BADDEB5881314A2E81E51D42FAA9ED3F91A2C3F042884C152ADB95D7FE0E7F1C84511BE65D4996B233C3EFA29BC449EF165E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw
Preview:	RIFF.M..WEBPVP8 .M..P8.....l.>=..D.!..Y]0H...\|%]..W.\|Q..p~.r....=g....Y.A.~........o..C.W.}....%.?...f'...0.......G..o.........t.C.......?........c.../...?\|.v..~....y......./[.c.@O.oLO...~........{...O...o.... .....r~.......>r}...6../..4?.~@.....o...w..S..P.........s......\|}g..QOi....._......r.+.?...~.{..^.P.............W...'..........;...3./.o._..p.......$~...&.vT.;c..1...AD3?..FvT.;#.(./v...T.;c..1..<...i.;....g......C..vT./C.....g..3.r......b!..Cf.E......9....:a.^;....tM..>.9.}....w.....A_#...OZ..]'0;a./...Q(...+..N....r.$..4..f...K@O..`.d...M.L@f>.o.wo...R50JDe.X...g..y.)..........X..a...U2W.i6H.L..P.........^n...+b.....a.7....$.Vk8D..4@)~7,....z..>...X..s.7Z...#.mUk......p....Mp.\U.?q.Z.U.9..M..J..h..._o\|)..y.H.*.v...^.....fL.t~..O..y.k.Tu.....i.K.......$...O..c.R..rj.h<.>.if./..t."..z...7.+?.Q.>......K...'....%.e..L..2.}..U\|,..8...K....v...c...H.g....n.;......&.....s..93?.{c<1?l.=.i..vw\|7..3.q..........1.....y1XP..oz.a.....Q..X....#..J....'

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2916)
Category:	downloaded
Size (bytes):	7201
Entropy (8bit):	5.323454849442783
Encrypted:	false
SSDEEP:	192:1i9TDfZmRHx+tvDXXKzB7fk+sI4F1G6qFw:aeW7XXKpfk+sIi1/N
MD5:	93F809A7464F12CDB8C36C914F4B366E
SHA1:	A316C094169B5C61CBA6CED2A3C4AF46932F15C4
SHA-256:	8928FFCAE58EF6FD63FBB0F66649AAC026D57CA06F73502C91189E854CA0C5D2
SHA-512:	CF4EE35387A00C94E2C2CE122DC3048713249986DC59FFCCA2C2ED663EA4ACA57524D89E74DEFF02E65338CE5EC633C567E4D35D1F7529A82C7D80C3F1662B08
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.143.00046eaa0c4ba0e3f4b0.js
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,i,o={4161:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-apps-featurekit",[],(function(){return

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	41480
Entropy (8bit):	7.984382119800143
Encrypted:	false
SSDEEP:	768:aHHQZTU84STKu1gLXOCLa/FI+y+rW2NIeLq9wTqjrlWRd7OjSRTdXjuq4/G:S8CSTHkPLcFr1ww9TgM9dCqcG
MD5:	F0216C5E6F3164CA18EEAD137A37D41F
SHA1:	C6C7FAA47A3F8426A12041AF7961927CFB605612
SHA-256:	4ED0BC7515E91E83DAB8605FC80486996624880FB4D0C065F26A79DE18615524
SHA-512:	7093E020C1362F28AA15C5B203D2D0F4A99AB630715B9A712157D979BF2C6CC5CE7D3AB0B63006651CD1E96B6B6C159F4AF49E45CA3596B6A8F7396E722BD072
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L.../..?.....m.........................3.L8.Dd&33.l.!{..C..LfnNBf.H......[Of.18...1m.=...........c2;...{....f.9..D..p..;'...5F.8v....G.....L....]. .y....E.2.<.......v..NJ.....O\|..m...m....<..u..<bw.c....I..Bb.....l{.=...v..vE.....N\...~..v.c.2...yh..=9....G.._{.f./R=....=s.".........~m....^$...mGT..../.......f....U..?."B.. ..ND...H..l/.s^".."......C.[..MwH........WwK.....H....{...r\[...d&.Bx....JU..e._.L.%0C....-.um[.2r.\..pJjj.....~...E.l....W.......53.qh.n....((.JA@).J.@.........R(@A).............C.....+.3PB..J).P.P.@...P..6..BP.L3].<.q&.P.H]....J!.......C...T....RJ.!..g.#..<..@...6B...Ea8..u$..;..m)..8...p...p..i.".P....8o....\.. ...........Q8.@....f`=8oj".4k..!D.a..W.x.'...?..}.S....;5.6e..^.l>...,.!......<..L.r...Cl. ..s...D..vLy..j...qG.,....~............N.~..F..Y:.PJ.(...@..4..Mzv.Y..q?..<..s...(.......3..B..^....F.u1n..Y<..........;~.p..h...-...>XM.......%.! .......{.a....J-........@...1..a..F#].'....c

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	835
Entropy (8bit):	5.13432744982287
Encrypted:	false
SSDEEP:	24:D76bBSjFvVdGUF+fWlp9SlTpXXW/clctloFHMZeKsf:H8yNAwlp6lmicnosk5
MD5:	CE070B0F37AAD4B4E4D88BD0E0F05F4C
SHA1:	FF566AEB9CC2716C836185D1F88A0FB4E19DAB90
SHA-256:	0F9DD240A0A865EE1EF94A10A67490A7908BC6EC3CFB1CBC803A1D143B38399F
SHA-512:	DB29ADAABB650CF2966BDA1CE171D8C54644A965464DF996DDA0F7F8D51944EBA1B0446623A8B268C1CADFC0265F95C305B4849FB35B6269053DB4A79BD85ADE
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/realtime/operatorParams
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1712908896069/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1712908896069,. "screenShareVersion": 1713258072750,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qAKInc,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1832
Entropy (8bit):	7.878490302274349
Encrypted:	false
SSDEEP:	48:xufyDYyYs7HE6Ua/MRJ3TV9nEaAjoLdvPBu:xuf47H7Uj3TlAEZ8
MD5:	15AF7E993179F66E122C70161FC09778
SHA1:	D57AC0DAD5DDFE9255D4E3CDA8F23B80D1A33ADB
SHA-256:	645DE20533AF34C49BCA2B961E8C7D8E9C3EBBB1D03B00925B87F2C647668DA1
SHA-512:	F3EC179D15C5591A6CB7E0EE4BA5F327E45CF1D34522B145618D00D7CD1E04CA5880D9BA1F4E2F124FAD0FC9A3D4C8991E95EF5C90160368B1646982D72F2A21
Malicious:	false
Reputation:	low
Preview:	RIFF ...WEBPVP8L..../?....Em.@.....0D...x....6\.f...l.IRT....-.....6...t........Em#.I?.z!.......(..3`..f..\.^Vfv...f.d.........z...3I.?.Et..Sd+3.r.wwwwx."2..4u2ww...)"ww......[37$......a..l..pI..m...r...dS.u.g[.......G.:.M..m..{?....0...g.l..U..m....)..-.V.:U.w..K".Y.$#....D.i...j..(....}.=U..)...."`..,,..0w....C.&5....,(...%.NC`IS.;8...r.......T\|...../lw.........(..6)...p.M..!.y...Rh..D....., ..B...b>}.........a[$..H...._C.o'.T...B......G.7..d......o<[.O.R....^a.....y...pn.....J...d....%.'..=....-...........9.....%0./!ESR..Y.5Hx...A.........X....hXp.2...F$.......\|.. .E..Z.b./...~..g..4[(b...$.D.&./.V....\h..g..\|...5R[...B.$"..%"M.B..\.Q...N."..!I.5E...M.j.(.'.....$4,.!..../..x.j.f5..Hn..\.7..,`.P....:?..C<.J....wf9...>._.I.}....k.~...X:>..-....,.if.=hA...u;.;..,c..D.^.....?Z...%.W.G...j..t..*....c..=.#;v.ep.....xA... .` .g..tra.u....l}.'.{c..C.........!.....g.:^.uu'..o.=.eB4......@...8R..E...n.!.e'.....2.4.0.f.I.]C..{/.q...F.!_..~....'ZUZ..5`.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10752
Entropy (8bit):	7.973526144140812
Encrypted:	false
SSDEEP:	192:DpviDu84zgRw1UtbybAjqnP8G/9dDKuPyMNSHu6Qngt4HMc7+l9FjVTOZDW:DHBvEEJzvNSHuKteX7KFAW
MD5:	C9EED90FEB95021C8B88DBEAF6177AE1
SHA1:	6506EA0229924B8F137FE29D7EB20726B5DCE4FB
SHA-256:	0969CE1AA9D96AD5A1D9A331C50CD207021CB441369CE0520E74C94DAD93B672
SHA-512:	5668807AE3A087A3E134B5608FB0C5D00A0CB161B720D1008E1CD9481C07CD5B17F341D690D438EA27CDD21AFC810D7A58B333B970226A9271F0FA3F7584E6DD
Malicious:	false
Reputation:	low
Preview:	RIFF.)..WEBPVP8L.)../..I.Ui....%.z.m...m.5..mw...v...{.wY.v....]{..=...Xs?.}...}.;6.....K.y.Z.z....ze.zb...'...mgPq.Y.G...{.......R..c..mk..6z..Z.........?.m.mg..2.N......g.c......ul.W..+:.>x.'.m..9... N.m...m..gt.-...ms=........1.2.]O!.L3.s;.3._....x...xc....~..I.k..2.......i.Imkl{.m.ku..O..l.m..\...}.....N.'.V4. 4a..d..Y...\S......j.J.V.......2......X......)...^.o.q...A.m..+.1W....8.._h.>{q.J....J.....Wc..47F...qnsS....N....G..........I+...g...[.Y'..&..........x._..V.a/y....cQ@.[..+U.W..#.U..Z.J.~..0..I.y...b..=.2.....^Lj.v.Pi.\|-.a..:.4.ub...B.,...(U.$.....A$...,..cT..G.=.h~+.G.....#....]).j\P......N'.....oL......\o...0>../.1!..^hG..0Z..<..W.......+.$../^.Y.c................u..l....Y)c.V.L.b...K...:i...^.....u...9........N.e..xVW}.1n.X5.e1....r'G2...x........_.Q)1...%.F.....+.[..L....a...V/.VU..:.2.H.,.........]q.K..!J.2..Jl#Sb.......ji+)u.;..p..\..B,.,..a......B7F.h...+.x.j6..T@"ea...Fi\..<.O..5..jc+...v

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	16242
Entropy (8bit):	7.9402572379727125
Encrypted:	false
SSDEEP:	384:Xuw19G/c5AIyS87w1YRmRAjkECvcFd/NP5zOoYJw0:P19GU5T587wiAsw0H/NPeJw0
MD5:	6B2CB8AD472A93B0D97FEE592C13E1AB
SHA1:	F40C495C1CA874FE508F6F69059041A5243D9A38
SHA-256:	49CA14F45BE05F2A2CB10304CB6481A9A18E15141819C86D15E8891CF371AEC8
SHA-512:	7C63115A9EA99072CC01CE04D354952C4EEC03B7CB781186199F6D45967A7FD5D7E190B2810D671F53A03A6B3964AB1B7F7A4D84114EF3BCDA7BA4BCABA23C1C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/dSg_iqQpKYA/hqdefault.jpg
Preview:	......JFIF....................................'.....'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./../W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.A."Qaq..2RS....#B......3Cbr...c...$...4ds.........................................................!1.Q.A"2.3Baq.#.....$............?...B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..N..N+.P.?...8.n....Z.>H.9.N..N+.P.?...8.yC...L5a.G...t.bq^...}..{..g.a...>.n.......<....N+.....K.\|..sp...W.G..LO...n....i/B.a..a:/...n.....C1>.......a..a:A.N$..yC...Lp....(y..V?.>.f.......<...../.P.?..X......O......3.1.b.>...i/B.#..!:?.x.yG...L>..}.>g.c.^.....Bt..O.....;.6+.P.?....?.>.f.......<....6+.P.?..Xo.g1.....{..g.a....(y..7..........3.0.....<...V....Bt..a.^....a.^..3.0...s0.Jz..c...?.%?.w....;..4

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	9646
Entropy (8bit):	7.978414359238506
Encrypted:	false
SSDEEP:	192:ZmMOm1hQDK+AidUQxUm02pPk1Lg+cvKF52Z2atvUsKV5eae52KKYh7:Zrk13mQZF+T/b28sKV5He5Hh7
MD5:	0AE371A505FE3C80969A9688D951A2F5
SHA1:	A57D4DFEF281175CB496A794D26ABCF907A6D3D9
SHA-256:	A6BAB33920314E85B5AA549B27FB2FE901B5F48ECF4772C9E51D8A8129DB70D0
SHA-512:	45BE99C58FD0917C31A5E7658651C93E16D00ECD5A08F7F385B880CB4248AB30E27B255CB162BFA00F5D7E67C4D661E5B8E96E99E9FA7C4AB9E207CB39C4B545
Malicious:	false
Reputation:	low
Preview:	RIFF.%..WEBPVP8 .%.......(.(.>A..D....z}X(....\|/.x............E......'......x..=.~C.....k.w.?..h...r?.?...?..n...".c...o.G....>@?..=.....U.g......../._......?...?....g.....?.>.?.~D.k.g...#.'......!..xN...~..K........y...{.)......(~....K.K.c.../...................g.'..^..~-}....9.......o..X.....?`/............../........n...G.?............I.........?..........#.w.G.....Q..-.}.>..............z.l..z/Y.s...;.o.............-.D7."._.8....`...UiO}.O......JK..O.....u .q.......!....`.0.......o...$V..l.Jr]...J.(....8A..... ).W....=B.!.A\..Y..z..;...%>X....<.....%...W..s..C..........9..-...[f.@i....&$. .EX..2......g...Y.D...\.bs:..b....1C)..\|.O......a......w..R3.?..-..f.U^P..q.f#...hq....p.E._..a(..o........I.8.Ul.....,.J3OKe..h. ....t...........g........M.:.J.9..gY.z.0c,p.#p.....9...F\...E......8....8...Nj....R .....Y.e..I.O..{.B.]$.A..gM.u.p.."...N..{OU%H=..}..)....;.^>.d..l.pW.u..[....vZ...Y...d.$.m...D1w..g..........>1~..V.ly...).m.v...#.Z..:i

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64931), with no line terminators
Category:	downloaded
Size (bytes):	993776
Entropy (8bit):	5.432288530865964
Encrypted:	false
SSDEEP:	3072:/t0Ebp7itYQmgT5Awu48KFIVChBVbIjvOmCC/fYUasWtJOKbPMCP:hitYQmgTOyOKbPMCP
MD5:	0FA73178BA92E4FE8E9648CC3094F379
SHA1:	AF8BF58424E1B12E3C15B88C4578FEF497ABB288
SHA-256:	26A2B01575B24D20C686C774C5B26D6C246800145D6BE0B18F83AE14A22A754C
SHA-512:	033A03C3B03FB7C45868F24D2769D5A108DB3080FAE6D81AABA9161EF22C8348C39188FC4E90C5A3A388E9C393782C862916FCC2362F17B6778E0E257BB28BBC
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-real-0fa73178ba92e4fe8e9648cc3094f379.css
Preview:	@charset "UTF-8";#localnav-viewport-emitter{overflow:hidden;position:absolute;top:0;left:0;width:0;height:0;visibility:hidden;z-index:-1}#localnav-viewport-emitter::before{content:"ac-localnav:large"}@media only screen and (max-width:1023px){#localnav-viewport-emitter::before{content:"ac-localnav:medium"}}@media only screen and (max-width:767px){#localnav-viewport-emitter::before{content:"ac-localnav:small"}}.localnav{position:relative;top:0;left:0;width:100%;height:52px;min-width:1024px;z-index:9997}@media only screen and (max-width:1044px){.localnav{min-width:320px}}.localnav.localnav-stacked{height:66px}@media only screen and (max-width:767px){.localnav{height:48px}.localnav.localnav-stacked{height:63px}}.localnav-overlap .localnav{margin-bottom:-52px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-66px}@media only screen and (max-width:767px){.localnav-overlap .localnav{margin-bottom:-48px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-6

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
Reputation:	low
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2850
Entropy (8bit):	7.919481037115899
Encrypted:	false
SSDEEP:	48:hR92luUPRm6mUWYskqzMuUvqRCvG5Ibs67rIawAyoli9kO1k5aWL4TWm86z:nUluUJm6gpiigOSbs6n3w9GiH65uWF6z
MD5:	745EE717C69C0DC477BFE2DA7DC7C73A
SHA1:	77FC31D2800C3ABEAAE41402E3E90F11ED484EE7
SHA-256:	55D1F535B9A9502FBA5FE0299FCC636A8C08B17373886B66521E89687ECA07BB
SHA-512:	8EC7F468AF2CC46FA4C1935E0129D9B3A0464DAC48AE600100ABE4EE46AD71410F64082975DF2347B89173E071877AB26F6FCD74ABC370514F6594189CBC1E5B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?....Dm.H..O.r.".?..,k.q{.BC....H..4Z......&. .6n.9.r/.......d.I..y..[..O...?........ pK(..f.8Gox......3..p.sq.^.3?1..jg.X.Q~........O......q.....b...{ D.....z2..:.q.......m...\|^.....9H...?.....@g{...u..t.g.:..[N.j.`x...$)....x.}.....m$I.R=..6...!c...........]e.....>-........ci....J..+..{o.h..r...................a&I......._V.....t..J...je..dfX.JUaN...m.me.........[F.4.....CHE...K...E7.m.v3...Z......`iW......90.z.Ik...{.......{.....pv........%.....>r ..._k...Xpl...C........99.t.k"..@&.#a...V[. \}._.q.V8@.D......P...Y.0%.\|.....d...).@.......`...q!..Z&.13...hh..(;..IO.. %...)..d.4F.@8...I.i..h..&..L...Zk..."..h.).........(.p.7......l.o....q.`F..q .J<..@.C..Q.0 h..'f&UA..CI..)a.YP)..h$E.../...N-T=...gO;wk....ri#...(M.;.y:........i.liU....^.....?.i.bq..}A%fD.........3....~>:..<.v.."....[{.'_....=.y... *..?...)il+e....T.'...I.....n.D_._..,..U.8..y...R#Qk..........$G..u....].h>..@.1.....?2%..}..R.../&HaBa..w.....?.k..7...

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2940
Entropy (8bit):	7.9144179696915335
Encrypted:	false
SSDEEP:	48:Kg7R8Yyn/yILvfcj06+Ic4QTniAdupEI6vy0zlVd9fl06vhfa3ka0qkW9Y2gHCtK:KkRpyn9LvfcIzT4QDdupDXqlNfl065Cy
MD5:	997EB9AF458C6DF564C09301CF9260A6
SHA1:	AD7A6F1F6A235512E4A3CCDFE677F253F699CE74
SHA-256:	F66958CF576D87CB419F45B2E9D066630099D117E44BE80558F152D9F1F4D811
SHA-512:	130EB98B02A2AAFC1C49A7FBF2ADC82D4098C0D9B50C677A659529388B2E90C6B78CFF3C6B1F0B7B909C3DCDCEAAB48B53E82E1641D38397A19120F78523F607
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw
Preview:	RIFFt...WEBPVP8Lh.../..?..{...m#=..S........nJav..&.W3?..{L.r.y..9..k.a....\|.e^....+..m.Nm;....m.m.Fl.m.v../.m$G..u&.......(..1.....O..8a...e%q=v).H....Im..5G"..FR.S................1J......M...FV.dA..v.&.^..\|.............E.0.I.m..%s..6....;..._r#.i.o.US...9Q.yk(!Y.1$......-vTxJBl!..&......l.~1..m...c..v..O?o+..]...J..c.R2..@..@.....d.j....).....^....VzVn......//dO..o..........>F.x...D...)....a,.....x.#R....%.Q1Y.....^.D...w...k...B....v.O+...5D.d...^j....T..~........1..K.MG8bI(._r.fFM.\8Q...j!G.B.!..o..n9...m."G.h.%....]....k..r.Z.zdo...kV.i....@..p...7.%.j0...F..)Bn.Hv.i.K.....(..6o.*<`...1(.W..M._S.......:..o.........6.[......o.:~(.;..C)..\|...NU...lC...`"...2AX.......-rk.]..._.H...0.........C.t..."..,Km.1..a..8gG....H`.].....W0:...........,[Ak.a..0...)...e.2..U.........6U....d..P[&..!....u.#i..x@...Z....~..g#..?......a.......AS"..e...sV($.'`k..W...n1.......@e....6.p.....V.>.g.8.E..Xt........w..1Sfh,:r....r[...[....8C..Ft..a.La....m.%v.k..?q7#m...

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1176
Entropy (8bit):	7.75567097304523
Encrypted:	false
SSDEEP:	24:q8pLq5tJn+igi+y+4ZoMv/eNXS8gx9U0LP49te4puQ:DpqtvgfJ2z3eNXbgx9UN9tFuQ
MD5:	21DF94B8CDE49C982B09DCE59473BF0B
SHA1:	BDD434F55363C453B335A7E3165DC858259727C8
SHA-256:	B9C4BE614B36FB5C336FB5BCC5CE61E840C2A95422DD54C40C254CC60685D76D
SHA-512:	27FF437E90AE8B4233C25044F5F8060CF845DB5F64F307FBC2DE0AEEFD245CF8B0831A36DAE15FB715C562137FDCBD4982208974871CE4D40432A31ED6B7EBB6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/NntMALIH4odanPPYSqUOXsX8zy_giiK2olJiqkcxwFIOOspVrhMi9Miv6LYdRnKIg-3R=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8LG.../?...O...m......]C:."..5...... G..H..c..$>]N...3.t.$.R=...h..%.866....Zk..N.L.......QF....K..J...'r.k.&...`gn....B....E.....PHP .....).....D.....S....@. ".T......@.}...m.@[ `."..@DV....o..R7.....,`..u0...I..C.'..rGV..$..).C.C8w.k.6.;V..~.j..n.".X.8.;.".........D..F'..I..e.K...5.^XJ...K.f...za...u.[a...Y....K;.....A .....C@.o...<..c.s1..o..rZ..x{N.....=.t. .sQ.........`.vb....w...p.Y._..(...tJ...!P.Yz.?.=..../..=...4..m....lf.m7oq.m[..2g.vk6.....=.w..<.oD...m.....3~A_O..$.8z...n ....+.....N%Jn..k...M.....FyW}.2H..p.i "..%&e.Q.3... U.......QS....R...8.;.`S.K.A.l#.!.V..[.].55J@......=O..o.]..j`.."...k....2..Z....\B..vWK.S.....<..u(...u.........v...<..m.]..F.lN....$'..6W.......^G.n.iv.....?..u.p..95yl^qV......?z.\..":8g\./..#.@...?.B.#_......<......JI.....F.\|y5ZT0.."..G.5)..fb...Y..1\|.V...U......\....zZ>..w..d2...IZ.....O.....Z. .Yo.#..u...OGo._..y+.ql.n....8.E...\|.@."T].=./..1..c.k..X...q...s....wk..4

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	503752
Entropy (8bit):	7.999414825379731
Encrypted:	true
SSDEEP:	12288:MM0EDiDX/+r484zoXSLPIaBV2VcjgxUSQ:MIDcX/tFzXAaHmUSQ
MD5:	4F2639665269079C0E8DC00CF16C1952
SHA1:	4000BC56899ACB809434F3866E00ABD68C8DCF30
SHA-256:	711A0EC08E8FC86D73EC96BC2C070DEC25E946F38C1703F26E5AD4EA74D51D97
SHA-512:	EC7D8AEC4541DE76E0F51F70C4E2E433D5B99E5D553FC274C46CAC3EDF787633EB82DA457F1D78E29D5AE986E26C136AFBF5013D3FA89F4B4DF8F6FCDD121DD6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........o..VP8 ....."..*..p.>=..D.!.&".i0...gn._...._.s..F........f......7......g........I....;.n_.O.o.~.?....?...W..S_...}..g....y...._s.i..~_.9.w......7._..W...o........\|......../.O._........C.w.....7.?....`.c.....?.#........?......5...........U......_.?z>,.........m..._n.L..................7.W._.?+..............._..>.g........i..._......I.....G.o..?.~R..r............._........%.............7...?......../..v...\...{..................W...........9.y............}..........,@82>..D2r.Mj 858h..m...........D-...V.w..(.k.8.......'.rQ...../O....Fg.Q...I...rC..E....Z......lyX..?..B.75.j.=Z.Y..x\..@k.n..e5.........h..a[A.4.....]..@pd}x.c#........z..08..2y..O..Y....i..`!..8.....L......-.1i.1;Y.\|.P.T.V#..6.oC.T......u.-.........H....x_6...2...#.IkMI%n..8._...&....\|.^}.oq5.....pZ..oC j.!.bK%L.3.W.%u..........$t...d\.A..fB....P..........I\~..u.z..V...p.......vt.Z.......\|7.r.@.`.....&.L.E..tB...k.....w...]...\.P.J..&m.8[.J..a...0h..me

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	370
Entropy (8bit):	7.278552618982457
Encrypted:	false
SSDEEP:	6:hZcT2lC/bcdl0zAtd84/0PHO2a1fRMDOG2mPBbmHCxn7BG3NsoX4fgYsvq:kT7Qpdp/06RM6hmpb/h7BG3NfmgY/
MD5:	BDAFFEF3A4430AEB4D69E68075DB2848
SHA1:	7CF67CFD33F3D1663C7CA30509B6EC1888F17EC1
SHA-256:	F0D985ED1BF4BA2A0A127B598E07DA6FE733523A99386A38FB53F4E16C87C8D4
SHA-512:	DC9D802F2E5054FC3168EDCB52B19912D240B3F3DA0B6C76F82EBB32245A7DAE2DB656A5AB291BB204A462D6F4E37CB44EF8C73FFAFF823149C08B6B8B34257B
Malicious:	false
Reputation:	low
Preview:	RIFFj...WEBPVP8L^.../]@....6.mU..~...&..)......F.$I.Y..V..2L.Zn.M$.R.98.....`.....:M@P........M.O.n.....E.}!(..a....."......0f#...C...u...(..S.^.G.?...j7...K.A.....Y..,v...........w.-.,N...!..}....?..$.6m.k.m.6......^E....X...W..s...X./K....Wc4q...<M.'....rY^...v.M.....~T.5...WF....P2.....V@...(b...>...ip..h.`.A..R.p..)...:.z.`..:..8Zft....55z]p_...:

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5890
Entropy (8bit):	7.94622741341264
Encrypted:	false
SSDEEP:	96:Xy2Vh+rv7Qrx+t8MWjldUnIbVXIPO0zSXfTYntSqoJDf7pmWBvDm3n2AMOKOK:XyO8ru+0RdUI4IXknEqWD5v6X23oK
MD5:	8745A61AD5DD31A669049AD41A8DBB94
SHA1:	D430CE11AAD6FA7F00824776B14E1FF33335963F
SHA-256:	774146DF2B94845D2FC4B1524AC05AC93F62699EDAFBB1FF073EBF589A729288
SHA-512:	E263D752DB0FBB3B5841808E54E77B0FACFA098CBD0AEBCE2B4376C7E9B2669252D2887E6F566448438580A57C1B14F1D95649B2CEC2239780999F075230E824
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..X...mjw..(..?...m'........=kP7u..[...S.\|...t....~T..gF...;`Q...T.r..NUSE.\|U.H.."9#....H.6./.....gE`.2.3 .....w.......rl...\|...6..G`...m8.d.V......=._.1"DDn.Hr$.4...z\|..].g...?......r...h..A........v.K.7dJ..O..+.\| ..uG%.....S..........T..?.+N`gj`....8)3~.G.../.[;..s.S...........D...'.+f..BDL...tc~..}....A._r"..A...x..(...Q....u.............>g.K..g...5..5@.......`..#.../m.wDL@?..w..9.. bDhLh)d.d..0.^y......X....^.33[L.S.J.}.B.........1..:sggN.x..w.'.A.?g.Jd]....f'".Wp...+..s.J........A..9Y\.....0.2K...m..~~....>....)...a.......e..t......rk.V.j....V.d..6@........._........."I..i.........~w=.......w..W.......I..H...L ..v.d...\7...F..hp..&.nD.....y...H.m..S.FR5.m.m.m.m.l.J..C..=..#.~.m.....g..U....m..'&`....;..'.A..9`...K8...3.g..:3..8....Y......-.....g...........y?...8T..;...~...f..[..i....CF.....\|2..Q.E.._.^....J... ...X.w...A./i.,..(..z.....p.(MN`y..R.....P!....p......f....e...k9H9..zxVP...x......!../.Y

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	26572
Entropy (8bit):	7.986809716076815
Encrypted:	false
SSDEEP:	768:zN6VgER324ZHtXyFvDWRQaTiBDqFurqbnb1oIT+3RoX:zNKp36WRzErqbb1+BoX
MD5:	2825B30C1AFEE4994A0F81C32A936370
SHA1:	7266694A3892FD01357FDE8600428CBEA082B9BD
SHA-256:	2811C8044EBB5CA8A14EFF454B9BD01B07C9C35F65A02F115E41C9E69517C4C6
SHA-512:	7D41602AC05D65691C010631A539A8AF873C128D9ADBE8C7851453D2794D63CB9BF69527B4086E03897C4852FC6EF3DFEEBBEC33C12F82C58D9561F819DBB0F1
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw
Preview:	RIFF.g..WEBPVP8L.g../..?...m#I......u.............`;......2Od...l....}..S)e.3;.WP`'.%A.B<z%.%.+.nYz.....\|...V.^.E.5...E....W+yh.....]/uo.$mk[o.v...-..-}...],.s.m........o.P.M...aw.<..+..,H.z.......-.~..%.I%-....L.-.V^.C*.b(......d.i...S.e.1!..I,..?...GZ ..I.)....oLrZ)..Ix..[3.4.2...;..Bnd..5Z.6.E...`..f.g~..d.h!IR#<..S...m.$.$.5.w...2Dx..Z...O..T.....3....U....'N...%.:.......a.......P....(..;x.Y.%.R.....`............o.......R...\|..........L..y).1a........{..sB..S.B)...! .S..O..0...4p...!..........x........0.0.1./L...i.1.8...dg........s8D....#..Z.b..vy`.7F......D.x......#F...w.-n....b .H..c...<d.1."bD.x...#".._gq1...s....#.b....p...@.Cgc..../\|...1.x.._..ig........./..Vn...Xu(.$...?m..#b.xU.OE..5.......9.(A.Gs.....`.=...0g.#F%.."..+Iv..dV...{y.[.7.sy...{..v..8y........sd..'/..-..$.54.!../..On.w..[H<4a......R.}o.i......-....bE..M..M.....d..D.QH.@...zSLqV...4.0.Wp..+mAP....J.....q.!......BMe.$N.-.:........3K.K.T.R.m[......n...._..5.....ewJ.....II.

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	40644
Entropy (8bit):	7.989683828799069
Encrypted:	false
SSDEEP:	768:9ALe12qaOKZw6Md4iF7CWrx7LZLKsjiCCvryGLKeoKGYVIoKIg:9ALtqaOKZwl4ivrlZOs2CAbWeoKGYVIH
MD5:	9D9A28DFE5CFE510C0E17D3990D8FE4A
SHA1:	969D7269198571814924D52DBEC15339A67E2908
SHA-256:	1C324A06CE457154BD370FFB15EB6F7F3A0258786138B75823BF6752594B2248
SHA-512:	6A680B135D11C9E223306F6397DBFFC22DDCD9D57E2431D883B657750B029F5739AFE42218246A8F7B7957C218A299A4911EBEAF99D37A10CB82D2BD4C3C91FD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.MH.$Il.t..X..?..........._......WGe$9dA"....%..g.. .........wF.q...'.......HU.?.1R#.H9.3-dJ]i.h..\|R...f....$.Kl[@..... .s.l.WI../_.........Z.o..T........;.....l6.0..9.7.$,;p.].A...Z..`!..R..Jmy..H.C".LUZ.2u......a.Z..iX.U.: .d..r.".H.8_...FM.......:G..>.L.Yj...8..[...#u'.-oo......i.i..m)IL.z..E..o....S@.S..A..`}5...8.o<&...9...A..#.$$.$.9....'....oFX.[.q$I...MqE..=..b.h$... y-x_.U]..EH.m)..AP.q.\J....[.mA...9.m..2......o....[.....^....._U.$C.!dH..!.!..!IB.....1..H.i3..dF.u/_m.q6.l...2..$!$!.Y.0.$ic.F&0.....c.$A..$...I....}.$F.$.`..c.c."..I.....}Y.e.......nc6f.0..1.0.0.I.,..c&.......o..P.B..;...!.......h...i..d....S.,c....@.1qu.R.(.....Q:@~.@.n..B....2p.I.~.u.u.u.u.YQ.......?.E7.N....qR..:...!.gB....z..BPnN......PHHB...=@.PKL\_..g..........u.$.e..TS.$....(...+.Zf..4.... .0...6.`.X#.1..$......._...b.....c2KLar"1.1...a....oWH.0..I....T.`..!.......b4...H.NI..-...g...!..{.^....~.l?.Z C.DfIb*$&1&1.$......../~......8....8.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1494
Entropy (8bit):	7.855673114226291
Encrypted:	false
SSDEEP:	24:Hd5CJTJTAPUAME518c5CAyxmU2mqt2bkPRYoJ5WyAmzDBv4VA/Sps7oSXZ+dKvs7:HETAcAMLc5CFH2bt1txzDyV2Sp/SoEF+
MD5:	0C8023F37B95AA08269C9DD68B7FB3CB
SHA1:	74C8DA8823B9B49DB4804561CF98D8F09CB9F1A2
SHA-256:	3D4D89F4E5DCEF362E3730ECFCC66BF553BAE7AAA8E7A7AA169C93D0271BACF2
SHA-512:	A70850CBD44BEC4A775BF5CB8B14167A60F74ED6CBA261EF3C6B6B10E9299493F94F92698C546E6FE554DB75F1A0B2796E70E9B7D0346A728DA82768F2768199
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?....Em.@J...#.(D...8.H...I#.>...6..Y....,....`.m.......A....9..?..x..@..>s\|..x....x2....d...........m.{.>..]rRwww._...dN..C......t.g.../b......n.:EJ\|k...[ON.....Tg...Z..n.e.]........y..m.......vw....6.......{t.......N.Cg...)a...m..wL....]..e..8.4..8.).~]}`....9.Q\|;..3....v~/z..R._......;.L...E..J..Q..8)<.a....#_....A.\..$.(^+....4.._..:.D.k..,.?.?o.)K..Q/.....R...;..~....-a.h.B.8h.....y.\zt.5}G.0.d.,9d. ...x.,Y...../....dC.CYb..}.'.O....U.(.).QT-.l.U..A..z....M.'.....1,.l{.-.R..:..9......!.S./....T.r.^..XO...R5Y.J..S..0.K..&%.\.....Z..V.%z92.,..z7[..yk^.O..sd?.N....k.'e..f...{v.f.9.j..&......;....'.G..C......'......z.Es\|.:..^....._.K.S...].i%)#.S.X.h...cs}...;.>......q..{R.4.q...f.....Y....[$;..<}...o.+...:...l.D.Q$.Ha.P.(wz.j...g..'.9.:.T)E.<P.k..yCLL<@.2~\w.1...x....d..s.!.F..k..B..2O.B...Q,....,a.V.....n/...@....O...3... ..2....<.........V(.....8P!.}}YU....S...R.1...+..0..3'.zy.s...J.^./L.x...h....2<..A.....-..

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9108
Entropy (8bit):	7.949328366075731
Encrypted:	false
SSDEEP:	192:tB9/jljn53/VOxAspx9xKFbpmof9Gz/bSOsq7r2ogCj:tBhZVVOxtpKb7ceOzO8
MD5:	9A062526BB5E6BF5306613F900DBF363
SHA1:	DBBEDEC1CF0BA32AA843507B779E0E35E3C65E85
SHA-256:	732BC48C537FFB075AA1A628FA19A1E2E137690D6C3350C1C301059809963C3F
SHA-512:	DFDC7BF76F735226D2E8122ABF1F5373A12C5F991D55C8466C2B6EB0A2D84A8F0C770B13E7C34D9CB0EA894C6B0BE6EF8B2C8CBEF606C3D5BC7621CFB295023E
Malicious:	false
Reputation:	low
Preview:	RIFF.#..WEBPVP8L.#../..?.M8.$.Q"o....[..@.#.?..N:.N......ZR..C..LdWm..C.sW...'....[.....:.U&3Se.&.2.......KkC....e. .. ./...I."Yn.u.K..$`.y.8.$......_.....3.).$GR.G..bN...{....F......'."...y..2W2....".7.u.H...w.".E..{k.[...X..\|.T...#...m...Xc}"RJt.....D)...R.\|..$6..$.0...}.B..>0...h.i..[....,:I.e..x...-..R&q..].#G72.t.3=....Q.M.8.E...b....E...xJ.....9.W..H..@...y.. .D.H.....-S}H..<w.>.H."....ya;p!.FO.....RD....xa...X.x..=@....R....g....k/.... ..u......o0l.6....k.....1..u..;..8..-R.bgG...e.r..;-.F......?.."=.:.c.+....P....%).....2.f...Ov....H.m[..lR.Z.].].].]1&.%^....9.....o..l.i...H.....S..B[...?B.R,..."I.........Z..+..$)R.../...T.m.n..}:!^.....o[...q.83a\:.efffffffffffff...aN.3.......'..q....R.._.]r9ZWbt.\...U..V.k.Vm+c.#..w...d@vD.IPvw.z...m.Z'...I.....g......fn.`.,.-....q.9..p.F..."l8.k........?..G...8..x...N...q..#............1L..........B.}f...C..C...Z............A..x....8..a.\..K..ts8V....T].j.P..sU.......T.....kp@...'.2/..U

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8966
Entropy (8bit):	7.962228622683082
Encrypted:	false
SSDEEP:	192:O0jiu/DGEQ3nJBvAr6d5wpg4r6MSVAnZqy9iX3Q0UJru7x8e:O0l2nQQ4gg3S0y3Q0UgV
MD5:	7CDE9F13220A8FC1073D0EB6FED06286
SHA1:	3F4AFDF9A345389AC3EAFA1079EF390A417C34DE
SHA-256:	1508F18A43EC8965B4ED441F87698CF8E28AA28C0C394B720AAB35A1D777AF6F
SHA-512:	B9032FD40F693B8121F25DCC38642A15B08CCE403E503B72E35CFED4FAC85269FAF327D437FAFAEBCA2833E8816EF2EEA3B22BD784D9DA7DBE0D10528EAFEC20
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw
Preview:	RIFF."..WEBPVP8L."../..?..H.... ......._#.?..#{.....\|.Y..G'GY..MaH!..8.<H..@.....-Iw..=.........H..1:.,V.Z...@2.F...23....WQ.........M7k...xM......#.v#.............\j.#H.G..... k.........H..(.>}.......n.'@...O..n..N.....v.6$[(vrB..f.....h..G4.A0ki..C..P~.3.&.@...........t......v.H. ...-QQ.Bp..`B"...;.\..a7"..x.>SA. I..)).@s..Ms.\....$I.5..0H..a9H............L.;W...2.0(X=..,......Qp;88.~.P.C..Z.i.8.....4......w........4oP.(......,.`..,.Y..m#I....{.{.wDL...4.3w....(\...i.p..f...').........P.9L.C...6U..*2....v...>..u...m....Z....9g..XN...W..9.......A..k.]sg...;2o...0....K..T...M.t.5.+l....5w.5.#.TjZ.e..LS.u.f.2C.M.T"9.m.V.\.$.C.d@..)Z....;.8}w.^.k.Vm+c.....?..1...A..5b..@.8..V.`...2333333o.fvD133C....4,..s.g.4.}..M7......=.[...\.(.R......)...!.-....2.1OB...C.t.."...=.m.m..m.m.#WF2.{tl.Vm+c...9.www....3.(...R............WL@.\|..o..[..fX.O..z+P.P.."...r.A>.A...f.Og.. ...B.).9.b....\..z...........Q...m!...6......r.A.D[.`...b..8....p.....1<.c.`f..

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	15512
Entropy (8bit):	7.94238830224228
Encrypted:	false
SSDEEP:	384:mjfpnSj/q8g10wKLg6B8XW7l4CUYLmWWbxd:wnS7vgSLgO8Xcl4CUfW4
MD5:	7744F5AC69419F5A2B6B6C9A21F8F307
SHA1:	38DC8DD4AF99B44B73BEE5025FA1114AC15DD5AF
SHA-256:	B417A3C865819CC87799E5FA4A5C190057D3935AFF7659609B2EBF4F642858A0
SHA-512:	BF368CC50E928A6370A9BEB331DF36E152D3DA2F1F9068AC5C11E426AFDEF923C1ADD1D6E3A54647072AB2891C6A3FDE8623929372D810FF8FEF15B800D87749
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/C4uzmiVn8Og/hqdefault.jpg
Preview:	......JFIF............................."% ..%%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./..0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................B........................!1.AQ.."aq.2....B..#$Rr...b..34CS...cs.%.............................-......................!.1A.Qa.."2q...#Rb..B............?...B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.G.G./r\|..G.'p\|.h.(.G.....O.X#...._g=DZ.0....'r\|..#...>P.O.X#...>Q{.....%...N..E.8IE......@...en...dn.....%.cn...cn....^.s.n...p..-.(IE...a....0..+u..F.>.h.BX.F.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. ....}a..}b.+.X.6.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. .....O.X#..P'._fn.-..I.......DZ....+u..V.". ....Q...Z.P..9.p\|.."....Q...Q...$...D=.....a&.f.!...E.HE.".`3..!.....)..B..G.....)&...Y..y..t....9.Tn0..XFN...ibV.e........V....1>7.:._....b...

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1566)
Category:	downloaded
Size (bytes):	41276
Entropy (8bit):	5.2368089739293495
Encrypted:	false
SSDEEP:	768:EkxiX+skUbNIvnXh5hC+gSyJNbX+V4N8zuZYJOKLNWDjqcR5cXcpcO0cDcIvScTu:lskUbNIvnX7hC+MNhZYVNWDjRE3
MD5:	CF98EF659A7C40F16FB89858EE051693
SHA1:	F223F862E3DC2347DEC54A932E35C5BC5F794C8D
SHA-256:	D1DAC8F97C25357AE55BB0FF7EFAB6349022317CFBC549BB2057C15ED2DD337D
SHA-512:	58043EF2BA149E03964670CA8A2FB8039691129058FB95D29851F84E7D65F66270B5ECBED675D56E871D6722B959FF3AA7ED2672E1E3E89B6F071A90B120C7E4
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.706.4a437bd91dd079e92306.js
Preview:	(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[706],{43862:function(t){"use strict".t.exports=Object.freeze({ELEMENT:1,TEXT:3,COMMENT:8,DOCUMENT:9,DOCUMENT_TYPE:10,DOCUMENT_FRAGMENT:11})},96339:function(t,e,i){"use strict".var n=i(38694).t.exports=function(t,e){return n.insertNode(t,"insertBefore"),n.childNode(e,"insertBefore"),n.hasParentNode(e,"insertBefore"),e.parentNode.insertBefore(t,e)}},38694:function(t,e,i){"use strict".var n=i(37844),s=i(43862),r=s.COMMENT,a=s.DOCUMENT_FRAGMENT,o=s.ELEMENT,h=s.TEXT,c=[o,h,r,a],u=[o,h,r],l=[o,a].t.exports={parentNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,l))throw new TypeError(e+": "+i+" must be an Element, or Document Fragment")},childNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,u))throw new TypeError(e+": "+i+" must be an Element, TextNode, or Comment")},insertNode:function(t,e,i){if(i=i\|\|"node",t&&!n(t,c))throw new TypeError(e+": "+i+" must be an Element, TextNode, Comment, or Document Fragment")},

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.87377555746297
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKeHZQx66FTEVgWaee:PLKdXNQKOyo6FIVgL
MD5:	701C50FE2F9D8CFCA61542DEE7684552
SHA1:	952A04F81A291E11F5D4ECD7364A3840412BA65E
SHA-256:	9FC5DFC54DE18E9C98733BBEA6EBDCBC1F01C0B23F985556F24684EE96DC0582
SHA-512:	5CA3C342F4BE563EE68235F32BCB8B25B62215A961B903B3568C496FCAD4508B9408FBDE00C6592085A819826630462863630F888FE73348F13FC037A9AB2C99
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1162
Entropy (8bit):	7.694737520848792
Encrypted:	false
SSDEEP:	24:Q0gnfwftjFBkUSEMixW78yt1x/YUsfUHS4Xj5OQ/5YDQ:QdIjiDEMixW78ytbNs7+FOQgQ
MD5:	B268DC2EF4CA78606A491547A017C832
SHA1:	4140A3CA287E6C52EFAF6407FDD3B30C190DF53D
SHA-256:	F1AD01CD2BE867EAEE0DC3A0B0BECC8358F3FCF27EE7E1EE8854BD85DD3A2DCB
SHA-512:	EAA399EFCEB9B86652497833C8DD7D424CFF7881F6E07FB5999E00FEA3A795BBB44EE2BDB9455117403EF61F3D7C5B4E50AF536D3063496964BF37CAEA2207BF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L:.../?....'!.$G.b..:BZ..L....."I.$I...Z.8....&!.$G...?.G...L........h......@.?{.......0D.......D0B.A.9..c..........@ .O.DC@.>.@.o..v.%.P.M;l.... .Lh.....0.....t.....t.b4&....p..]..3 ..........`.....4...{....f..c...M....K............c..{.t..x.9.>.!.=v............}EH.B.)....].~......?...u..#..........hm;67w2...I..Im7........Y75..ij...\|..v{....=.QD.'..efmt}LRw..\........h.6....@....O...6.4..o'..r$..6vn(p.D............Ec...%..p,..g....."Ob.8`.G...0..c..n.x..<I.1'...(.0...P..?..?M4v..\|.4Y.8..........\|.aC...-.......+G......F.u.]{.a..{..7..R.D...r..#P...2.............y.Q..< ................\.j$<..;\.y..O....6../..{F.@...V3.5....=v;~s...2q.m.2.X..V%......,.....zc......u..S.I...j...@w.R...6.h.r.v<p..q}.+..R.N..E...XD.KV.G..j.&....Q..C.......7...G.......q.....Rq......H.T.R.Y}j.T..Y.I.U..-........G...&3^.UM....o.Q.X..,]..Z....+S....)K-0...>.....^OS..0.Z_....."...>..f.>..LK.....i.....X...Zr.-...6car...[...KF...^.P..

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8420
Entropy (8bit):	7.970959285950581
Encrypted:	false
SSDEEP:	192:sTMp1ZJtuQQheOotTLouVZk//KX38kp1YJ02HUSUVDSy:lp1Z/ufo7TLogFXnWJzPU1r
MD5:	CE7637A2A51E7C23829F8852BC66A2D4
SHA1:	0E6D715B7DF65FC4963B5A12FD05F420BC552B04
SHA-256:	2DEC18EB9F60E9CDB27687A21154611919CCE7F23999F6EF4BD2A79BBA2D23A5
SHA-512:	B6B2198A3AEA39AEA36498D9BE9C560C698F4360CAEC38D0E783F3D0B0F6C1F1E752E2CD6CB626BFE184FC569486622EE508EF6C4254C0FEC579DBBCCCEB9655
Malicious:	false
Reputation:	low
Preview:	RIFF. ..WEBPVP8L. ../..I.....I.?.g..1.}.1!8._T..S.w:{...C....a..H..........1{3)......e..m.r.....fKaf[2.I.................p2.....{m..K....y0X..RM....Q+...#....k......D...D.r`.!...q...w...!.c.m.}=.A.i"./.Xx....P..6.9....N.I.. J....(fn......$.m.#48.....I.....?/7...b.m.m;.mNl[.3.m.....s..N.l.\$gVu;]L...=..j.6.]..6..m~j.6....$).$..c.ef....c....p.k.i..1...w.}...G.x.m+ef.Fhf/\|.a..^..;p.I...c....\|..j.RI..NV..SJ..RXr,t{I!!.8.dH#.h.I......WE..!.<...A.1b.(.C.M..oO....h.h..>@uP.2..........@T.V.H-.E..o..AyS...>`..R.5W..E.........P[....L?NV.+{3C\q.D..........+w.R.v>.r2.....^V4..!.+.]7..Q..=.....2..4v..^..#~.Xa.........\....=<....f.;.Z..M.... ,.%.t..........1.{....Gl.B!.4vj...d..V.`+E..Ca.$Q...#....l7{.F..M...O.>.V4......!.4.:I..DT......Y...\\...$.....s..`e.&....T...........M.0z.wys.}.K..G..s.n...o...dTq.\|w..'+?..1Q.D.(1..4u.{.#.6.... T{q..2@....J5@i...-"._..Y$.+X;.I..6Dc..q=..b..xs$.....J....B.j.c...O%U..+p.F...l+......+h...$..)......3.XJ

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8092
Entropy (8bit):	7.964327266421199
Encrypted:	false
SSDEEP:	192:FAC6CN+YAyzayeAXNsSvg2nxAjl6Aje6TB8wEwJ:FAbLyfeENfv3Kjezc
MD5:	2732EE9ACBD98558EDD0FEE72B12737A
SHA1:	217BD081BFAD5BF68CF646B9CE832DCC746AC4AF
SHA-256:	7083924024981422FF404CB4CE7B52E3C95D98A6DF17AF6AE8D79EF69B9455BF
SHA-512:	E07E8FEF98957720C3E736A0DF5A28E68410B64B8D9CD13A2CD320651FCF271F2AEAB05E93A4BBB1441E6AA4D4898487E5B6E17A0207529A5D9F5A1286DEA0D5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.M@r.H.....E...\YQ9.5.....r...%......J.>......-bFF..Z.H.R[D4..\.$........U"..k..j...\p6.{...;.d:.s.."'..wd.\..m....mL......8.m.V.ww.).?.B.......=....H.U.qV......+w.[.).m.mv..2.$..a.s.'....u...P;5..c@..aR...<..f;j^.V...Q.<....,.r...DDB.......@..8..A.T4......~.E....G.(..........t....;..;......P...Z .8.....P.O..B.....N.@$B.n-.;.F....9.....n.v@D.\.;>m.2....' ...B.x.s..!h..Aa.U!D.O5..^4R.....'...+:...g.o.G".(PS....].cCD!.D...}.S....a...0..\|...~\|...."2^mN.9.w...b.......m.I....].......m.'.%........A.a.V=...pr.....~.w.....K.Yv(w..).?.Oum.&..y.m.%..B.+....XK...{o...}......H.\.ph..c.'\|.....R._.S(JJ'.t.N'.%!..N:.......O...P..~.p8........X.DH(..N..ml...w.......-:...?z...Ue..?..R.m.'%1..n.......d.SUM3=..a..^133333K.3333333-3.0O.4V.1.......q....D.b).....@.s..Q(...K.f..s.R8....B...n.B.&..rw.....`...B......#V.9...r..&..G.Yw.X..eqC.+s\-..J@.t.%...5e.....^..<..d.;.\|.w\.........I2Y.m.v{0vO`.L...u.m.m....}.-....y......ef.G&.9

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 108468, version 1.0
Category:	downloaded
Size (bytes):	108468
Entropy (8bit):	7.997835393798081
Encrypted:	true
SSDEEP:	3072:pWhXrpbCa6gSWYdNt9aYKHEX2a2k+kgylVi5nh9B:QhXYaGNR5ynyl49B
MD5:	5011345B7AEB8F847CAEF745BB1B464E
SHA1:	B37CE84520A2B9607E19BC0FC9CC7B841BC1C831
SHA-256:	27464F709D857A113F9AC53FA038A3F61FD0059F9EF4BD48A58C41EDBFCDD996
SHA-512:	BA5775614D07C16CB98625833EB3B3D381BD14278AEEA16A9F114FCCE1FD903F7264C76C135F069BCDA4E3936A64A10F103F32F62B0A4AD50CF6F209CF3ECAE8
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_bold.woff2
Preview:	wOF2..............y....Q...........................$..H.`H...>...4..c.6.$..$..(.. ?meta....(. 8.t[.x.F.m.n..I.....[G4..&.{.3............x.....+..8.vY.I...........y....;f..;.K..(.D.(...r..Z2..VTk.R6.......09..9.&.i.URN....f..n.@+..&[."...."ke.5L..r.E.....fd.\|..nJt)..2.....u..`.k....:3mb...OZQ.Gs..~..bv.......?..,.....R%..j)._....b#.v..#1./.....t.+v..O..5.xe..Na.......y3.?v...R}.kO...[.le...(.>........F...2.3f.9a......)%d.s.2....9.....7..f....H...+aC..F..c..R.?..L.?.f1...uT.-..z.....\e.Q.c.q.W3$..b.P?F.]......&....TM...+Q.;..4i.DJ!)V..AQ..~?....N.xS...V!.A.`..0....[.."...&...g...V%U2.\|..B..T.....i..!....g.~..oe)'.....F94....Y....x.9./&.m..h.7..W..\M4.n...7Q..`Z..t.....n..`...B.{qu<.;.......L..]...(..8....u.......v.A. ..Iz...qr!7......o......A.....<..........."....=...N?...". D.-4H....!..'..7;.w7.8x{..Rq.yH...qT....."..... ..8.?.TK......>.T...Rb...J).Ak.....vB.sw.....V.8.!dMR.2.....R..........,k..Dp"8Q...%.bk..v.../R.M.9.IO..I..

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	11258
Entropy (8bit):	7.847770069025951
Encrypted:	false
SSDEEP:	192:INqfUfaNNMfiWyCtescqvtnHrB8yDQWJ5Rj34yaEkCBLsY7UXTTHEoLNQF:X4oHmciHVNT7RVa5C5LCTTkSNQF
MD5:	16ADA80965BE7D202D4097C02E38DA64
SHA1:	7A79BE8F463124C104C2021FD95163F9F2A7CFEA
SHA-256:	FFFFBF93550764FCD667CF954B3E7DB27C270D2925796C35D1D1193763E9D382
SHA-512:	8AD31BDA1C87DAC3A22CC004A3C362E5DC1E9023A21EF05CE28C0D8A8615C66E4D32FE906BFA81A7B5F536BA097580F3D43FFDF810A32A634C074A16AAF3BA96
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/R3x88pl2rZI/hqdefault.jpg
Preview:	......JFIF............................... ....%...!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W.......-..-W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................E........................!.1AQ.."aq.2R.......S...#3Bbr.C.cs....%4.$...............................'........................!1AQ.2.aB..Rq............?...........................................................................................................................6..g.\|..~.8...k./.@m..8.....>q..!....P.....>o.?g.\|..92.............7...8Y.M@m..8....W`V..Wr..m...on..H.C......K.~%^.\....q>0./..p..p.g... e..q.C...O/.`.....<.1.....#.Bx.J..szNI......A..... d._q..d.g.m....p..................7.L.5...".8y..g.j.........t..J.i7..w...}...k.../..92..}..<...Gk8..J..+.Cp......5V.....E].V...c.!...\|s.....WR..r..}.......Cp.....=.VR.....Ilz.YsB./.9...<.Z...U....F...<..sC...7'.g..>o.Q`e.>o.7....:./..qU.8T..Z.NRY.,....,E..-9J_H.N.[..o..R..<..].(o./.7...>;....\|. g.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108855
Entropy (8bit):	5.485794699594584
Encrypted:	false
SSDEEP:	1536:smuR3kfQlFl9S9ITIKDCK5NFmYwHiWfgqx5OkN/cihLLXWvZ5XGmsvE6dN:WktCDtDFVrONThLLXW6msT
MD5:	DE2F04957196AC8C3C7678AD4C33A46A
SHA1:	4788D5B2576E992626DF52268F212A5A2D141D02
SHA-256:	E4073A5D69E86546E65B01C6F50F43B91691CEEE2A9EEDFE2DDFCBB90A8D695B
SHA-512:	74316ECAAA611B47C1CB5D192BC77A71877B610A456605CCF35A2C35449D8A35861290C7B3012DA6F6E54D25C59423D1D568C8D7904DDF0FE0BCE864EEB9200D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.vc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.vc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5890
Entropy (8bit):	7.94622741341264
Encrypted:	false
SSDEEP:	96:Xy2Vh+rv7Qrx+t8MWjldUnIbVXIPO0zSXfTYntSqoJDf7pmWBvDm3n2AMOKOK:XyO8ru+0RdUI4IXknEqWD5v6X23oK
MD5:	8745A61AD5DD31A669049AD41A8DBB94
SHA1:	D430CE11AAD6FA7F00824776B14E1FF33335963F
SHA-256:	774146DF2B94845D2FC4B1524AC05AC93F62699EDAFBB1FF073EBF589A729288
SHA-512:	E263D752DB0FBB3B5841808E54E77B0FACFA098CBD0AEBCE2B4376C7E9B2669252D2887E6F566448438580A57C1B14F1D95649B2CEC2239780999F075230E824
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..X...mjw..(..?...m'........=kP7u..[...S.\|...t....~T..gF...;`Q...T.r..NUSE.\|U.H.."9#....H.6./.....gE`.2.3 .....w.......rl...\|...6..G`...m8.d.V......=._.1"DDn.Hr$.4...z\|..].g...?......r...h..A........v.K.7dJ..O..+.\| ..uG%.....S..........T..?.+N`gj`....8)3~.G.../.[;..s.S...........D...'.+f..BDL...tc~..}....A._r"..A...x..(...Q....u.............>g.K..g...5..5@.......`..#.../m.wDL@?..w..9.. bDhLh)d.d..0.^y......X....^.33[L.S.J.}.B.........1..:sggN.x..w.'.A.?g.Jd]....f'".Wp...+..s.J........A..9Y\.....0.2K...m..~~....>....)...a.......e..t......rk.V.j....V.d..6@........._........."I..i.........~w=.......w..W.......I..H...L ..v.d...\7...F..hp..&.nD.....y...H.m..S.FR5.m.m.m.m.l.J..C..=..#.~.m.....g..U....m..'&`....;..'.A..9`...K8...3.g..:3..8....Y......-.....g...........y?...8T..;...~...f..[..i....CF.....\|2..Q.E.._.^....J... ...X.w...A./i.,..(..z.....p.(MN`y..R.....P!....p......f....e...k9H9..zxVP...x......!../.Y

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	39909
Entropy (8bit):	7.976805543329996
Encrypted:	false
SSDEEP:	768:RH5XX+GbkfLohh7BRsSrRq/oiREkzqNZJsLjt1DUaJNmjgftLEYZjT9:RZ9bkDcBRsyk/oiRuNfsLQaJNqgVLEAp
MD5:	ED6B32D646E747CD9BBD172A3764C098
SHA1:	EEAEE2B6587AAB5280C9131B73BC17C62BC7B02C
SHA-256:	9B860B3327FD3D017F15B8589D08DD6CD9E01CF7FD59910DE16416B28FD4FFBB
SHA-512:	90C9C43F95FB7E173DEC3396782F7438677CFE7E125B80B4255CAA46C2F5BA4C281328DD9E676FAE761B2651A26CAF58FFFDCA73A4D9D59528DF43BF9828FF45
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................N........................!1..A."Qaq.2..B.......#R.Sbr.........3C...$..s...4c..................................?........................!1.AQaq."......2....#B..Rbr.$3C..................?..eE.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.En..-q.._._...^...f;l.........8...`.W.<?..k.../.......}......{....Q...D.p........'......_...Q.......pG......fc..r..X.........p..^...^W.d...-.....Z..P...X...........z.................*'...EJ.....E~..~.\Iw..>./..QU.....0.......O..s#.>...El....W.....E...v......j...Q..........1q..p..^...\....W.....l/v.x...)Em....W..................

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	36974
Entropy (8bit):	7.869731994362244
Encrypted:	false
SSDEEP:	768:H3cLtbg0waKsaI+Oq3roGLTAyzNTshamT+EUUQezg+koJXrxZXBsKCLqL96YggQR:H3cLdZL+Oq72yzNXtEjQecmXrx5BsKlY
MD5:	C2EF0B7FC3C86FF987368BC05E66511F
SHA1:	0AE925FB913D4A07D3B5259B88182F83D210750A
SHA-256:	5194A1EA73958A6DFF29A73D5F583B3D689B4CFBDBB4484842ED77B204409813
SHA-512:	835A7A424469B428CC390F97C36E423AC6F05304BF25045DD84034B6A2B42489DDEED9E24F9C1EECD19E893C6EB021D8A782F07B27E1C67781D74E1835ED94DB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw
Preview:	RIFFf...WEBPVP8LZ.../..I.MHl.H.$.S...q..<=..BD.'..".d$..J.R..}..}...-.....H..6.#.k....w.....wK.Nw.p...H...u...3.._..b...LS...\|......$...@....6G..0...3...^.k3X.....9....+)I.K.P..........\|..'.H....lQ..d...u...w.4.m...Z..H..9s.......G..3....pP.T...".<..O.........y.......u..u.w..I~.Q..S.O...!.'!`I..rd...\|.3".......u..'1.rm[..4\|......E..n+7Ov^.,..H..I.c.g._.....gs.{......9.H .1........F F...L..#.,.4 "e.0.......`.@ ...q.....+.7q.....:..."..).`.,.B..3..!0$4...UG...h+0.E.....U..0...P..P.{...!..... .......j...\|.{}r.[".,..........=..`........X...6......jc.D$...h/..(.lp.[.. ..".u..4.N...H.xG......;..;.7..="....b..].s..I..............k/_...A......;..})0...4m..L..o.!"0.yh...."E....b.x'!.n9>.".....=.....V........' .a...!...+..X\\\>...X,.A[W..;.....j..E....$....v..k.BD.....3.V.S.k=;e..6.\.W...(...sg.....L.W.E&qwd.[up29... A..V\|_.......3W.x.B!I.b..a......._...8Sg...y...(....tg.n.a.I.a`.L...H<.FgR..'..b".8q.p.....k8\|..y.}g.....H#=.P.}O.^v.8...P.s...R....m#IR.....;...

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (664)
Category:	downloaded
Size (bytes):	14214
Entropy (8bit):	5.423098025111413
Encrypted:	false
SSDEEP:	192:5Ou495s6yYMkJqYWJ+Jaucgd/ix0BSc1e6t44KfKb6m3PbBISj:5BVuqYWJ+Jauld/g0BS56t4IuoPlISj
MD5:	853877426A53490ADEDBCB2E1CE9624E
SHA1:	BA2E275A1C0148B2F12CA53F17746BB920B7D555
SHA-256:	F3163FB2E48B27F81ECCDB331EEBD4F05AEAF9AF7253765323A35E869D8E5D6B
SHA-512:	12368317D1C18BD215ACB20B1D4EB859C72A7DA8FBD8299348E2D5A462EBE57BC015748330C4C1E07FF5404CEBE61B1A228145F9748D92C12DD2B00346AC910E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.572.93058cb1137c31242bbc.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[572],{24178:function(e,t,n){n.d(t,{BU:function(){return J},EE:function(){return q},GP:function(){return H},L5:function(){return Z},P0:function(){return R},Qk:function(){return B},SC:function(){return O},Z_:function(){return X},tO:function(){return ce},vc:function(){return k},wr:function(){return oe}}).var r={setDelegate:!0}.function o(e){return void 0!==e}function i(e){return o(e)&&null!==e}function a(e){return d(e)&&0===e.length}function u(e){return v(e)&&0===e.length}function s(e){return p(e)&&0===Object.keys(e).length}function l(e){return"function"==typeof e}function c(e){return"number"==typeof e}function f(e){return c(e)&&e%1==0}function d(e){return"string"==typeof e\|\|e instanceof String}function v(e){return!!e&&e.constructor===Array}function p(e){return!!e&&e.constructor===Object}function h(e){return p(e)&&l(e.__lookupGetter__)&&l(e.__lookupSetter__)&&l(e.__defineGetter__)&&l(e.__de

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	186166
Entropy (8bit):	7.9883329493359385
Encrypted:	false
SSDEEP:	3072:MFt9erMnJxsut9gyDLs52SZ7+uuyxA7yrlgqvvgmeoIypUpgLfi08zeRcwcaWI9t:M/9e6xsAdLmLauAerLgsIypUI58zeRc8
MD5:	BB8A102A409774C8F013747DA753C110
SHA1:	648F0F7ECCD079D0DD995F1FDF04098130714C95
SHA-256:	2576569306CD6DC10DA6D4F98E7885F590B27E2EC300D38237623AD5FD29A478
SHA-512:	D6FC0430772D7D827F21A92D52F7278EECF4F8F1418822C55771A0CFA4EEC55CABA26BBB3138781A7B32B65D11611490404DCEE2A7A241670D920A719555274A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L".../..I.MH..0l....!.?,..zAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R....D......).4..u]YZ..B..x...4I.,...D..$.&Ig.7.h.J.B..IJ.(.G...n0J..rA...K;gm+d.k.t7p\.....].l'.l.2.....@..@. ....]..K.:0H.%.. .$..$Gb.c............ c)v.K...e#....S.b[r.0bG"..,J...?..}.g..Q.Y..D.\[....`..Q..Gy.......M&...P{..e.......K..0..$K.,.Vq..-.@..U\|....([..A..P.=..].O...%eV..$.C..#K...O..ZFJ$]....H...SJ.U.$.$'q.'.(.....mERf[J.H.......l...S..-'N.......?......}.....N...h;.h......D.a..D...g%....}....x..F...1..57..@Q,m..p.i&@.%@.`W..P.....a....\b[l[.$.,Y...$.-..../........x..@..pG`,........1.l..'..,.....m..............,+.....i.*K".......m.$.z..R).,ei..../..g...Z...B.......mm#m.}?..#...\].ff...v...v\........Q2<.W..J...3.n..n.aEy...+.@. .I....&DH!e.^ .3...1...)..@!L@ ."..a.0l".q..C.. ......[.sQ.u..........a.A...n.B.!....5...R...!........fo..... ..`.&.."...!.!..!....:.a..+.^....F.....Q....s.RH....B...p.......H....0.X.[](......V......R.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1880
Entropy (8bit):	7.8878381210189445
Encrypted:	false
SSDEEP:	48:NoW9rslz80QWxB7T8SjWr9slcrQUJKv/61H:NzrslIWx5TRmAiqQH
MD5:	41DB2402073D34E7C539CDFBB7290875
SHA1:	BC2B13CBDB0D33959F4F4A8B109DAD914280DD53
SHA-256:	CA4D719D9BF9FD875E4993E15D21D645303A93A032EB7CE738035ED880E29B8D
SHA-512:	AE7A13D618D884DDB2EDABEF76ACB029A529A8F92BFBDCE384B4CC26A7637B9F0A861A97019BD812B0C02359B6D762C71AA9509760DFED0787FC679603F09BF2
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw
Preview:	RIFFP...WEBPVP8LD.../?...M(j.H.;....'...O..lMB.....Y',XE...+:._.p..>....m..^...v....m...5NJ.._d)...%W.G.]....<.,...c..."...C..?C.S.=X\|^.m[W.m.:'W.m_.6>...V_....'.....L.L......T.Ll..N..H.....{.L"<...c..J..)..~U.3...k..f...............03+mU.L..8.....s-.z`..O?......RF...Vj3.\.....z.....Z..).......jy..V........#t%.s....:....>....F...yJ..........T........c.......<..dJ5..4t?..3..g8{S_]....8z..O..9l...(i..B.h...a....U....Y.E.=..@H...J-...LV)...%#....PU.s...U[..!.[L..l...5..F.+=..C...x........A.,..'...-.n....'5)....c...Qf.,..V.b..4...h..%.....n96.JB.....&..r{..M..I..J......V...,.._Dy.....)....c...:.......!.`.\.."=H..9Jx.G~.&>L.6.\.."c~....;6.(..~Bz._....#.pp..sw....2,H."A/R.8V.......&.....wa....{xC.e.;....tp......bON..3{x.}}.5.....XdbD\...b.I....N9).../.j.>...A.k...z... ;..+........KwX.........j.......I...h.`3QS..Cw0...2.OH..;`.$G..9IyQ....@...:2..DC#.86..#^...Fz5.z..U.Rl.W..#......."....n+..B.&........AM{.....k...z...O.@..k.?.....4

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9646
Entropy (8bit):	7.978414359238506
Encrypted:	false
SSDEEP:	192:ZmMOm1hQDK+AidUQxUm02pPk1Lg+cvKF52Z2atvUsKV5eae52KKYh7:Zrk13mQZF+T/b28sKV5He5Hh7
MD5:	0AE371A505FE3C80969A9688D951A2F5
SHA1:	A57D4DFEF281175CB496A794D26ABCF907A6D3D9
SHA-256:	A6BAB33920314E85B5AA549B27FB2FE901B5F48ECF4772C9E51D8A8129DB70D0
SHA-512:	45BE99C58FD0917C31A5E7658651C93E16D00ECD5A08F7F385B880CB4248AB30E27B255CB162BFA00F5D7E67C4D661E5B8E96E99E9FA7C4AB9E207CB39C4B545
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw
Preview:	RIFF.%..WEBPVP8 .%.......(.(.>A..D....z}X(....\|/.x............E......'......x..=.~C.....k.w.?..h...r?.?...?..n...".c...o.G....>@?..=.....U.g......../._......?...?....g.....?.>.?.~D.k.g...#.'......!..xN...~..K........y...{.)......(~....K.K.c.../...................g.'..^..~-}....9.......o..X.....?`/............../........n...G.?............I.........?..........#.w.G.....Q..-.}.>..............z.l..z/Y.s...;.o.............-.D7."._.8....`...UiO}.O......JK..O.....u .q.......!....`.0.......o...$V..l.Jr]...J.(....8A..... ).W....=B.!.A\..Y..z..;...%>X....<.....%...W..s..C..........9..-...[f.@i....&$. .EX..2......g...Y.D...\.bs:..b....1C)..\|.O......a......w..R3.?..-..f.U^P..q.f#...hq....p.E._..a(..o........I.8.Ul.....,.J3OKe..h. ....t...........g........M.:.J.9..gY.z.0c,p.#p.....9...F\...E......8....8...Nj....R .....Y.e..I.O..{.B.]$.A..gM.u.p.."...N..{OU%H=..}..)....;.^>.d..l.pW.u..[....vZ...Y...d.$.m...D1w..g..........>1~..V.ly...).m.v...#.Z..:i

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,DRmmld,EEDORb,EFQ78c,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7576
Entropy (8bit):	7.965330171017618
Encrypted:	false
SSDEEP:	192:qVTHZOqECObjBb0tEYx5oHxUHmdvzdTQx+5:crZZPkFbmxKoO5
MD5:	588BF96FFDFAB9151554E942AB001FBB
SHA1:	D0FB8A3682EBE36A91A8208410124E18A88C2183
SHA-256:	324835560ED72AE03B43EAC045ED72668C68697FCFF8B73C79DC990B0C248AA2
SHA-512:	D7CA474706E2E663D441EE7F2285F5518D74E61DE24AB5DCDB24634C8636D4DF1B24C2575E017DA04377C4BD87A7315A0A24836A00107EF1E4D4CF678991B0B6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..H..........s.........}..H.....$..1 ..?....z...2.[.!..r.<...A..j..4./D<......>.P.T'.,..f}K.nL{.0.4y..4"..y..a..P.A#..lv..c/.H....x.O<f...u=...{.=..m.S.....x.A.G.$E.wU..4...3....'....P..I..=g..j.Ab...'(.0...e-...........U.....a.C`^.bM .Hd..l....,..5b.?'......f.9.54..'..zA..q.8...\..........3I#j=..j....a.R...h.......8...... M.2.:...v.7..x.....2.....0x.........p.sD.P.FR. x_;..B...$I.$.^.')..m.8..c_..oDL....`...6...N@%.4.i. k.s+....H;.`.h.3U.;.-...H.......m.w..m.m.mw..f..+3#.........W..ks..+G....b...[s..X?..<.......m;$Y......=..j...A.zt..9...l.m.#"..?....o..\|_..UR.c.m.,f~.m.c.........l.#Ir".D..Z..(......S...V....AKk...b...fU....49....../...l.[.. .X.z.. )..Z..IY' .h4...&k..P.?......$IRl'.......JW..t.....?J..[..-k.{..8.Q.D...wAn..g... .&....'._.k)o$.@..p5...7.o...m...+..4t..&-...d$.8.6.xbq'R;..].......7.6...x...c.0xL.V....1...... $...............Ev.....B.l.3..K@...D...../.....]#8S.?..../..../@..3y.??..4..C.z

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	51228
Entropy (8bit):	7.992246318048376
Encrypted:	true
SSDEEP:	768:0c7WoVIu7cy6olmezhzB8gL+cPKE/LpOeP+8VqSHWgGjK7WeNUmMhLcRutE0Sa6K:nWb46SzB8mlCEDpOetVqSHYMiLTQWHr
MD5:	89D3B9BF317C62E45422276B387D3C2F
SHA1:	BECB39F56997FED9BB9D08228762629275C608E3
SHA-256:	AB99996E1B0942C3412330BECDC643BDCC019B495455349A1D1034FC5D4B4C42
SHA-512:	8965A87A6D42895E0F5CED0526DAE8D3EB61BAF3FC8B45350FD4C91F3200235B4A2AACBA5F5C0340C66080DDAE23FE794680D11CBC7D2CD5371054BEDC387EF7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@.$9nS.......Pv......(.......xH...h....j.r.,$k..2...O@...3.G.a...T=U...P.Q.<c......cDU.q........._....@;........I.i#>#...8&..@o.:......`....z.mP..Z...,1>6..5e.xo.sJ.q...{K-....lx{i)....~3{o..7..i.`Cw...20..M.!.l..z_N...oP.m&.....ku7....n....9....l23K..yAI.-G.tJ.V...jzX..c8..p..0JE..$.......oz..V.....a.u.....A..c~...l.z.6......!d....N...xQ.l3B.'.J...JQ....H..I..TQ)..R.T.R.Ee....Y......c.c.c.).asj.E$.%F....5..C..q.....f..0...A.$. 7..\....9:.1..Ni............3.;d9.1..i...JD..L....LH&.N..:t.P.{...k..jj...Q'.........rf.k?.......=p.6'.raee.X.\K...............8.......~=..^<=n.J{...j:u.T).D"1d.M..Iy.........R.$.8J...T.$....HV.....s.vI...?"A.!....u5~.c..g. I...$0D........e.L.b....$I..o"...N....dx{...n.@.$.8zC.......c....%I.oJ....`.m-.\...3..x..C.....b.+tF...../3\|.....I.I........n..,<(.X.8......RS.t.#.d>.n~...yV.b6....T..5.y...m.j^Y...Q...^..../.........I..J.mM.U.U B...f..L.$..%..z...t.c.1........O?..&.$+.&.p[.....{O.0m3.o.G...o

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	186166
Entropy (8bit):	7.9883329493359385
Encrypted:	false
SSDEEP:	3072:MFt9erMnJxsut9gyDLs52SZ7+uuyxA7yrlgqvvgmeoIypUpgLfi08zeRcwcaWI9t:M/9e6xsAdLmLauAerLgsIypUI58zeRc8
MD5:	BB8A102A409774C8F013747DA753C110
SHA1:	648F0F7ECCD079D0DD995F1FDF04098130714C95
SHA-256:	2576569306CD6DC10DA6D4F98E7885F590B27E2EC300D38237623AD5FD29A478
SHA-512:	D6FC0430772D7D827F21A92D52F7278EECF4F8F1418822C55771A0CFA4EEC55CABA26BBB3138781A7B32B65D11611490404DCEE2A7A241670D920A719555274A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw
Preview:	RIFF....WEBPVP8L".../..I.MH..0l....!.?,..zAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R....D......).4..u]YZ..B..x...4I.,...D..$.&Ig.7.h.J.B..IJ.(.G...n0J..rA...K;gm+d.k.t7p\.....].l'.l.2.....@..@. ....]..K.:0H.%.. .$..$Gb.c............ c)v.K...e#....S.b[r.0bG"..,J...?..}.g..Q.Y..D.\[....`..Q..Gy.......M&...P{..e.......K..0..$K.,.Vq..-.@..U\|....([..A..P.=..].O...%eV..$.C..#K...O..ZFJ$]....H...SJ.U.$.$'q.'.(.....mERf[J.H.......l...S..-'N.......?......}.....N...h;.h......D.a..D...g%....}....x..F...1..57..@Q,m..p.i&@.%@.`W..P.....a....\b[l[.$.,Y...$.-..../........x..@..pG`,........1.l..'..,.....m..............,+.....i.*K".......m.$.z..R).,ei..../..g...Z...B.......mm#m.}?..#...\].ff...v...v\........Q2<.W..J...3.n..n.aEy...+.@. .I....&DH!e.^ .3...1...)..@!L@ ."..a.0l".q..C.. ......[.sQ.u..........a.A...n.B.!....5...R...!........fo..... ..`.&.."...!.!..!....:.a..+.^....F.....Q....s.RH....B...p.......H....0.X.[](......V......R.

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8092
Entropy (8bit):	7.964327266421199
Encrypted:	false
SSDEEP:	192:FAC6CN+YAyzayeAXNsSvg2nxAjl6Aje6TB8wEwJ:FAbLyfeENfv3Kjezc
MD5:	2732EE9ACBD98558EDD0FEE72B12737A
SHA1:	217BD081BFAD5BF68CF646B9CE832DCC746AC4AF
SHA-256:	7083924024981422FF404CB4CE7B52E3C95D98A6DF17AF6AE8D79EF69B9455BF
SHA-512:	E07E8FEF98957720C3E736A0DF5A28E68410B64B8D9CD13A2CD320651FCF271F2AEAB05E93A4BBB1441E6AA4D4898487E5B6E17A0207529A5D9F5A1286DEA0D5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.M@r.H.....E...\YQ9.5.....r...%......J.>......-bFF..Z.H.R[D4..\.$........U"..k..j...\p6.{...;.d:.s.."'..wd.\..m....mL......8.m.V.ww.).?.B.......=....H.U.qV......+w.[.).m.mv..2.$..a.s.'....u...P;5..c@..aR...<..f;j^.V...Q.<....,.r...DDB.......@..8..A.T4......~.E....G.(..........t....;..;......P...Z .8.....P.O..B.....N.@$B.n-.;.F....9.....n.v@D.\.;>m.2....' ...B.x.s..!h..Aa.U!D.O5..^4R.....'...+:...g.o.G".(PS....].cCD!.D...}.S....a...0..\|...~\|...."2^mN.9.w...b.......m.I....].......m.'.%........A.a.V=...pr.....~.w.....K.Yv(w..).?.Oum.&..y.m.%..B.+....XK...{o...}......H.\.ph..c.'\|.....R._.S(JJ'.t.N'.%!..N:.......O...P..~.p8........X.DH(..N..ml...w.......-:...?z...Ue..?..R.m.'%1..n.......d.SUM3=..a..^133333K.3333333-3.0O.4V.1.......q....D.b).....@.s..Q(...K.f..s.R8....B...n.B.&..rw.....`...B......#V.9...r..&..G.Yw.X..eqC.+s\-..J@.t.%...5e.....^..<..d.;.\|.w\.........I2Y.m.v{0vO`.L...u.m.m....}.-....y......ef.G&.9

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4416
Entropy (8bit):	7.94177891589712
Encrypted:	false
SSDEEP:	96:KDCeQjdXQvkXJ3GMRTLo0TAsN3YzZcBkJojedAZaUnEMX4CzvlMM:+MjdgvSdVTdTAsN3ocYyeSx/B
MD5:	E6A1A5EF5377B178774BF38CC5B0C0B9
SHA1:	F5D8C0A4E259D1D7AA265CC1FB19108949F63D3A
SHA-256:	19ADB2816B8C83892EF1735C8EEB67FA32FDDA93962D3FAB1FC9C31E4AC78E98
SHA-512:	C8E05C42661FE265B1293C04A5F31FF7AEF950C40DD75D4D663BD04B0BFB5141BB199CFD2030DB5A45F37EE6F6CDD7E1FF71E5370F9A514665006EE6B10A38CA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw
Preview:	RIFF8...WEBPVP8X..............VP8L..../..?.U.._.e9gx......033333333C33s.cffl.6..k.sN..L........z..B_z..x[d.j0...v...xb..q..SX..#.5.0.....9.,.w..9.t..S....O...'..Y...X>....S..JK`.$p.+f:U....^...?..b.Ka..Y......V.d..N.e..N..7.<a[.uW.7..'Q....fu6.%ig.ms:..p.{.m.g.....I..I..........n.........V...r\....Ll#....f.\|l=...w...Z....=....'...b...6.()N.f(%..biK.......\.Y9..E...Ig........^).6vbW..e.U......JU+.S`'....Vs9..f2....`Y)/..'.i}%#..f..-M.%..&.0C../`.p....by.!.\......d"}.k..g.0..xl/$.`..L]............9..D....6w.{p..+T..].....6p.' A..O..{O..........G..q...vq.$u.1...x..hd.K.-..3.`..{.'w./.(U.#.ZY.G..v!.$.2.^+..5.B$.Y...Z...<'....hv...>..._.>{....+........oa.x..r.e.[.q{...... .X.%.....H.+.....M..l.K.}../.m...%.H...6d....6p.U.."..gg..ZZ.z...r..P....0.x.._.0.F6.P.@.f.\......Z'.8.....c<^Y.@ ...Q.@.fR."......EK..B....{r.y,..{..d!9..C. :.P\...5..xL.....0U,.v^.n.W.zt.$H...&6m.=..GI..3.`#...hO.gP.i.Jx..F).....l..;....5k[Z4:.H....hO...sJ.....@zf.Jq*.J.z.....

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	7.668561411611923
Encrypted:	false
SSDEEP:	12:61sFkct9I6HmEcbkItek+dW4wpMsb21T5Ivw6YQT8ti15LadIYBrIs62NzgaW3+:YsFhlHm9EvdW9L8iEti7LgIYD6MzgJO
MD5:	30EE1F61136CB2FBDA7FE3BC5B2E9A7F
SHA1:	25578E8B132C97EA88CBE6DA83AC46672E720861
SHA-256:	61D232D57F5EA6B6E89416D11F27DDD25950F5F20820D1F258D2D5FF63A76967
SHA-512:	1AAD0121C2B8C5FA3A6783170092ADF42D522797007CFA9229E9744E1A729C1964BC1F5FC4DDD5CD373DBD83AFF83D3082A909AF3FE50CCCDCFEA632C303B772
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw
Preview:	RIFF^...WEBPVP8LR.../?.../. .$E.;.o.=0.L?.p.H.".........t.I.".......a.]..&+......#T._...I$....)JLH..j.h. @.3"T.#C.s....H../ "".F....C.)"J.Fi".j.mT-".....(..j.jO?._..6"""p... A@~..q.?..~.%.H.6...P&.lg.6.CYl.R.......V.......O...xy...6.=<\|. ..;.82A.A.OBB..._(~V.%.:.. T..!.!,.8a[..j.&.......2.!1..0........d...^l.5b'.mk^w^3/._.../.....~.....4..B.t*`zS...[m.6.....n3..\Kk...hEk.....v..hKk.oK.v..lOk.s.....Ag.U..N..M..=...T....@.....^.pz.N.Nk.}..c...5...#..S.=m..L....h~..g.......N..p.C..........B..[...[.._......j. V....8>!(g.zM.....3..@.#...D1>..h>"..PW.@..M..1.[0))..R.9..LJJ..8JH.....A..G8r.....^.Y....!U...@.....5B..p..K.(... ..Qsz..$......\.Z..~...+>]d....R.T...........JH.>)..5. @....O..W..y..exa$;?...8.je..&...e.&.F.........Q...5B.t..E:@..GrKK...N.:..c...(sn.@...bS.S%...(<...........?.%..\X.......v......_.f.B..k...lg`..v..3.gC@.

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	41526
Entropy (8bit):	7.992625090894611
Encrypted:	true
SSDEEP:	768:JQdMiAS5ol6obaU/l7US696c0IckBX+vSfz7McN47gw4qu30WNxf:JRit5GLHd7VSdtX+Zc67zu30Kxf
MD5:	E425865C796C7B29CB4EEAF48F07B960
SHA1:	993B7AA2516AC4932146DC2F02C71D99C4DCDCBA
SHA-256:	6CB58A3D29AAFF6031184C736767F2834B375BDCA270134A075B68853F997671
SHA-512:	BE54AD16598EAA9D6E42CF1B8124389AD779394453D269882EEE74F7376548151377DFF93D2F95557CDCC3A5AC0C7D61C3B9E1262DA076A676C8B78EAE017A3D
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L".../..?.M@.l7n3 .....`...........#".....xn.......gD.l.mV.5.[.].....ROj.]W{j.H.R..`.)...w..#...n.b..@ ..@b. ....z.L@b]r...$..(p{c........k.xG-.Oi.....L..]... ...^.=.._y>....u..=..vc.`.Pv.;[..1........y$.e..x.`DH:..EU!.G...nkk.;.w.o..lA.m.V.B...l..O..qw...nw..w......e...J..Cq)6...D.....q.......n+..IR$).......].ToTVvM.....mD..=.......C......g.........Z..s"E.O.....O.....R...F..(.5.@.V..........<'Q_.>~z..~._{...B...o......R.N...V....>.B(...I.._I....s./.f...W..n....<...=.......4..j\|o\|.;...4....S.f...&.@.@a..[. :..HN..DN.....4........w.S..L..9. P..-.[nT.C..)L...Y..U.h...B......K..J...@t.@..u..9n..8....'..B.4f...n....8>d...#N.8.".[6#.x......}7c..o.nm..g[.<.......<.$...Q.....L.....HH$r..J.... zJr..P.....(f.>C"-]:$....@`;.`....LDnG .v.].....-1.JO..l.&............]..9...%........-.c...?H$U:..0AZ.m+.b=G8....FAAA.nr.Q.TT...@E.c.u^.....{.h..._....ur.9...K.2p.u..../..h.b_.*..U..J.=7.....@..n.c.+..o..1.c....'..cjD.....?./..I......Nz..

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	22996
Entropy (8bit):	7.96937716263766
Encrypted:	false
SSDEEP:	384:qve2krs7aF7Dy6V2Ek11J+MAQ8OI2vWqJHhUNCCcjDOdouzxFoScfiT+5Xq4O:qPkwWP0EiL+NQ8OlnJHyNCNjQouz7cYX
MD5:	FCEB7F55997CFA489E583ABDC5452272
SHA1:	EC29BC7D6376D47485A346AFB8F050BEB9B36A8A
SHA-256:	9E2E668F4F7DCC79738B05D8EEADE33704D1B1610520EE85ECEF1FB695E46BCD
SHA-512:	94553EDCF64B843C2D6667D0D49374AA9D0FE8432695A9C015FFBE9FD244537FAD888DE86CD80810F268AABED1513621ECF68998B49D3D3B360265A1D615D94A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/xYnq3zRONE2rpRksqySiqBC8G3UvXJufCV2If7Ck8cPELE8OY1PcVbmGof8CxjXlIyY=w526-h296-rw
Preview:	RIFF.Y..WEBPVP8L.Y../..I.M@l.H.T.........{......O.'.Q.Vj..q.\..$.J..#D.....~..a.......,.:d..r..]..S...4V........+....".I......\|..&..d..Y'.n...$.I.h....E......].8...`....... ....G.a....!z.b.6a..$.J....F#>]....znw.!q.I.m.V5....\|.$.v.[c.a...h.<.H..H..];.Ac....@...............X...k...Kvx.......>.q.v8.(..#v..=..c......#...V.F.9FN........<.@.E...vu./.$....9.......)..).2...7...D5../$....VN.e..Q@.&..%LaJ...S.5..o_...N..{.. ....[.4(....g..L%.S.?F.....a0D.P..3.g......C.).P(..@....2.W.\|o...._..T.....C...C:,4....L7..r[n..G....Z..g.H...M....j.I.t.....K..d..;.;.63....>...r......YC)&%@..a.....RM......Z=...G.....h......C.[/V1...b......T\....,.....;.F....[.v.......S].Q...\......._E.&j.(.. A.@.....p....qk......`~+.b........... Vb#6;..o...$.bC..A.2.....)A)....e....m.....?...{...1...C....T.M..V.....R.9.../d<...3..J...../O4..T9....0..MXEO^.Q.\|D...h..{~..m_..x.Q'&..y..b..<..B.M3...i...*wu..../...3f.U;v..>G.J..`ffv...]u......u..033...d..E......koI....[.m.>...m[..cT

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1832
Entropy (8bit):	7.878490302274349
Encrypted:	false
SSDEEP:	48:xufyDYyYs7HE6Ua/MRJ3TV9nEaAjoLdvPBu:xuf47H7Uj3TlAEZ8
MD5:	15AF7E993179F66E122C70161FC09778
SHA1:	D57AC0DAD5DDFE9255D4E3CDA8F23B80D1A33ADB
SHA-256:	645DE20533AF34C49BCA2B961E8C7D8E9C3EBBB1D03B00925B87F2C647668DA1
SHA-512:	F3EC179D15C5591A6CB7E0EE4BA5F327E45CF1D34522B145618D00D7CD1E04CA5880D9BA1F4E2F124FAD0FC9A3D4C8991E95EF5C90160368B1646982D72F2A21
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw
Preview:	RIFF ...WEBPVP8L..../?....Em.@.....0D...x....6\.f...l.IRT....-.....6...t........Em#.I?.z!.......(..3`..f..\.^Vfv...f.d.........z...3I.?.Et..Sd+3.r.wwwwx."2..4u2ww...)"ww......[37$......a..l..pI..m...r...dS.u.g[.......G.:.M..m..{?....0...g.l..U..m....)..-.V.:U.w..K".Y.$#....D.i...j..(....}.=U..)...."`..,,..0w....C.&5....,(...%.NC`IS.;8...r.......T\|...../lw.........(..6)...p.M..!.y...Rh..D....., ..B...b>}.........a[$..H...._C.o'.T...B......G.7..d......o<[.O.R....^a.....y...pn.....J...d....%.'..=....-...........9.....%0./!ESR..Y.5Hx...A.........X....hXp.2...F$.......\|.. .E..Z.b./...~..g..4[(b...$.D.&./.V....\h..g..\|...5R[...B.$"..%"M.B..\.Q...N."..!I.5E...M.j.(.'.....$4,.!..../..x.j.f5..Hn..\.7..,`.P....:?..C<.J....wf9...>._.I.}....k.~...X:>..-....,.if.=hA...u;.;..,c..D.^.....?Z...%.W.G...j..t..*....c..=.#;v.ep.....xA... .` .g..tra.u....l}.'.{c..C.........!.....g.:^.uu'..o.=.eB4......@...8R..E...n.!.e'.....2.4.0.f.I.]C..{/.q...F.!_..~....'ZUZ..5`.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4790
Entropy (8bit):	7.920770886596427
Encrypted:	false
SSDEEP:	96:qC4tQxwaUNu/BdFfVD2uYRanUd22fYx08kUHn723QEItHB3fCI6I:Z4GxOUdF9DDYKwu0tfQhPCpI
MD5:	24F44AE57FE644A09175B4CC4ABA8F65
SHA1:	15EB3A04426D5257525C00364CA9EA041D27AB14
SHA-256:	BC20924415481F17717E875B13F2DD99C1A36EF340A46DF7392CC271B8458D05
SHA-512:	4F7D9B233FFC2C26CE62CFD364DFD897077DBA574D86B29399AE6505A3C490CE53F9333906740A70B3FD8FA89818F0DA8B35C08C1DC1E08B81C21A7DCF2EE4E7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8Le.../?...M0j.IR........CD.'@.{...Q.B...E....6..Cx...F.c. .6.........{{.g.d....n3y.'..t.U..8.1.5-....G......8....7..m...._CDL.dv.Uh?(_.....%eV.xl.Z.m.W.m.ug...3....>....O......._l\|.vm..VN.Z..!..e......2...i0.".:..D"2.......]+....?...0.0. .FH.9....m..N....7....?dG._U5n..m.m{l......'...Z.'..>......3....=.m.........Gd.53k.m.m.m....mTUVD..kkS$9.H..f.ffff...p@....4A{f.aff....?&.'NZ.2..,0..5....6w.7..9..I..AZ..p.JB)Q..e..e.}3...............D.......ea[0`0..`.....1R.q....).8,.HBB.....$.e...L....e.......x........L.z.Pf......B.......5.....1.`......>.p...,...@...._\|..)..@ ...5...mc.l.....tye....N..'..s.......1.6...6`..............`P...3p!....b.J(c....n`..2#.d...vp.....@BB....l..c.`0..q.J... .p..o.....lc.oC.b.e.C,....m......3.....lc......L.L......q..c...'..`...q..ZF.7...J..L.A..A.G.......`....x.../....7......n.w..A"..=.......=...rRQ.U....O.......V.m....x.5g;.0D..`.A0.6.4..cvDUj.3....I.....s............

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1124
Entropy (8bit):	7.797221913617723
Encrypted:	false
SSDEEP:	24:+qzu5YFxsottexNW/Xa3Ay+kevJYGAH81LqlgMGfsK:+qq5YF5eOwHeBYGKOCGfsK
MD5:	3D3C755E05C91266B192156B9402E6D8
SHA1:	89538A9431507569B65BE39F6ABC87A712D0049F
SHA-256:	B628CAFC5F0E7317F05A81EE4B86D157F285CEB0A470FEAEF9D9F711F7742FF2
SHA-512:	3E8A750CB86AD1C1A617BEBD2CCE83D56B1BFCBA6BEFCE3888BC6BCF9A646CF4C6838931FC6E5D666C8F20034504A395A1A53A7074EBDFF990E6D4E677AEE895
Malicious:	false
Reputation:	low
Preview:	RIFF\...WEBPVP8 P........@.@.>a(.E."....@....b.., f..'....._N...U.%.'.../.o.O....;........y9x.\|..7......}....k.3.....?.?...........G.7..._b?.."....'...;..+..rz.7.<Nut.'6.......b.i$.fGr.E.._._...zW&.+f@...(..;.n.i.E...]...s.Z..........;Y..5.}..Eo.d%..D.0.g.T...h..-......\|yn0./..{k...T.zP.S.(...`.w)..:...u..p3l?.4.of.L..%....}S.j.j..x..2.......V.J....a..5.?.~....).....<.....\. D..@...xl..?.&....3.l<.M...5...R.uf.#..a...}../@.g.......".i.7;...%.L.'.....Y\.O.0i=..W.4s....S.Ou;5l..Jv$_....B.#.....=~...G.....). \|[.....p~.PR..;q.......r\......cy.K....Z.O,...@..YRRWC*...c.F.i?D.....5.....S:!.....1..1.....d.I/.K...x!..j..\|)A..E.....gT........N).a..+N:..P-M....d:+1X8h\.K.......@..8G.e<.-TW%..`.0..D.........../.X !=k).x.....[....a...[.,^..zx."D...W.....S.w.3.....T......y...V'.`.._......V..[.G..........g.z.r.7...c...Z..3.~.......j5m..9......s..\|.aN.Q-.>...C.E...3...........9..v.\1^/.....{...&g.}...j.%....S..+.Z...}....$c.%.$...HD.s0\./8..Ry.4\|..J

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7114
Entropy (8bit):	7.949066568760502
Encrypted:	false
SSDEEP:	192:fSsvvBv3D6GRt1wC7xRQ2N2KLb6X30dGN4gFlF9+l:fSi5v5Rrf7/QxYb6HZ4W9+l
MD5:	794D878D3F3333508C9270AF3E2EADA2
SHA1:	1AB7FAA454D5EF9A1599B106C8002B7B2B22677E
SHA-256:	669AF012E2BBC4A3665B8BBE67DFAF6C65E31C5601FAD90B78C66E297C077730
SHA-512:	7F17E2EB5975129EE51039A746D6D8EB64EECB7DDFA429B90EFC405EE1E4181488FFBEE8F52430C98B2189980135BE40D28647811E58074C526EF086E9FE5FCF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M(l..Avw.......}.w...)..E..... Y8.$Y.........`q..d..l....T....{3l#.V.pw.)... "uww....G.:-z...^~u..Z.D.~.......'h............K.V.....S....}........w...7+W'....S...-.Z2.@._y`..k^......i....!"&...O....<..H.m[..)s...,f..Z..^.X.ZI[Affc3..1..[.J..k.V$9..h....,.].ki&............k..P6.......01.E......P.m..t..o.....m.n...qDd.2.....l.m..'.m..u..\Y....q..m......C..m...8##.U..j./.m.6~.m.5....3+.q..7.M.m-.R[o]..m....m[sn.m.....^k.s...h...B..j..G....%.............<Z..d......}.P.....D.d.E.!@=;....g..t.2g...A...lq-i.4...h....L..........d....a..).&s..q................t..t.@..BG.T.Ub........l......AO.....ZO ...-....Qs..1!.=....P...]...L..XfP(.b......w.}c.?........!A).D."..*c..-..A....(!D).Rg{;'.MU...R&HO..n.....^k...<.K...H.W..W@...y..AF.$.l........{/[S.&.(-..8..........;...........&....H;.........-?=.i...(...I..w..~....3......w..~g...:.l.K......~..u{..RAr C.c.L..7.......j7....t..k.....'.8..[..@.......Z..YQg..-.......

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8594
Entropy (8bit):	7.966296411345263
Encrypted:	false
SSDEEP:	192:uBP/bR7pJfOTI3Nqeuo+gbCHvU0gMJ6FuAaPa2ZPStvh+Yl8:aPzRqTMUTgAvU0JMwAEaDl8
MD5:	4AEA614380B998263508C1153B9DDEC6
SHA1:	6160ABF08D74CE8A9BAED61A8634935147AC1700
SHA-256:	393065BD8ACF1D886E07030B1DAE40B2387EC3AA631C46774A43FCEAAF9689D7
SHA-512:	F427D3CAC274F57F1A307C19B9A31760DF4D05F066199EAC6B7778694E53216BD214F9FA2AB139013875E64209FD55D710347FC5908FFC07A29DDB6ABDB1ED9D
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8X........?..?..VP8LA!../?...M(.$.2c....$"..T5L..'L3Tf.....0..S..w8...A$I.T.._.33.O....m+9......q"B"w.;..HRT.w..X.cf....4Cq..0EG.8........{.-.2.ap...(.....i}J.".H..MMvN.... T8....~.dQ.f#Yx..A..!..pA.........!e...9...D..._.H...PY.....[jf...efffff.aff...L3.`.R.J..._....!c)c^.....2.6B&E..'3-...l.dZF..of.....!33..]\|.v<.msn;..H).2..~l.^....m.6....y.N..$G.c..m.m..I....q&.J...i_=..m>.m.m.O..m.v.T.R.y.{L......4.\|..]N.....W}.Qk..i.j.......^...:..w...P.....s...k)Am.$...91}.t...._v....4....I3..j$.H....WG..d.2f.....f...x5..N...-....utsy.m\|."Z<....@.(..7g..qd\Z..w...L..9./.B]{.9.'Ieu..l#.{g.:go..D....4S....-q..C.....&...haAC.-....\;.v.^........9...>=d'..c..........RF..N._.e.b.FVM.......\|.T..)q..u......,..0*9X.l.....6Vf..AH.........!..@.uwf.{@0%w...u..a.etU.'.N.....j .4.tN_.6.~...\|.4..+C..W.n.P..XA.........x.GN3.DJ@J...',.Z9.J.....O..0].=...k....wi\.......&....Fl.i.+..1...[...ez0.y.V>....I.4.l-..c..D......P.<4.. .0..b...`$...?m

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	189446
Entropy (8bit):	7.988359190242352
Encrypted:	false
SSDEEP:	3072:4V2AdqOB5zIXm9CGsdgOfiZ+mSG7lkEcDlPaj3H+lzhnWRy29tMV15gaYSbE7u:xAdqYCmzs6Ofi4TGR2JPaj3eznd2nMVZ
MD5:	387547FD54C693C114FF72576C5971CE
SHA1:	A0FF8E64FD3E61DD1142EBA06F969221ABAB3039
SHA-256:	D89318D9C1653A9A475CB99CFC1CFC2E2D334D391A4DE62896C7A077BF55B60D
SHA-512:	B71A3F754321E695273B51295E8CAD5ECDCD96D239E9C143ACC43D13E056D5221FAC082DD13B7B3E1B570404EE055C97A6247B94E0BD51494945E2BC4051EA45
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.MH..6l.......?X....O.$%^%)..y(.......R.....9....G..DN....'N,9..X.h.u#m.HQ~.8I..y..q.X.gNr[.J..3.....$zK"YV...@..V,.d....).G..k.<2O.9.9..$.N.!X&7DI"1.9.dV;.Nx.-HM.e...ms..3.....N.<..F&.>J$..8$1..`K.=~B.u.}....(.....#..d..-..M... ....b..m...-I..B.}w.....q.]\|5A..<......-.M^0J{..........}.H..+..[....r...;)g+.....I.c..'v,..-..Dv...M.m....K..v[.N..K.~..$....&.dy;.,.-.os.A..u%...l.i.DY...a....8.#..l+.-Ak...-.cT..../I\|...,1......'...,&...c.+....}Y.A......g.R,@w%..m..X...-........+v.dKt...G8iA...x..7...q...<...I.\|.r.@..{....Q`..W.dI.,..@I.,Ivr-...lY...o....(0.,Z.?..k..hO.o&..pC...Y..................K.mK.$...[.gf5......9..y\|>.b(.b8...8........'I.....Zji.QZ.=._.....u..>K....RHw!...m.vc.V....N."DSS2.`f._..U.4S0i.....m.I..C..P...t....e...M.4QP.$....Y.C.FFD...$.b+.j..a...!.fl0.IFD..\d,yEh. .I.Z..M..x4..I.B.@k4...$.I..jc.H2.Eq..a.K..iB.#c#.b##.......P..TTE.l..!9...d.D.M\|U.1.6..21...:.i.r..$.V.....6KD.bbaDl0.,Ye. .A"...eY..

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12046)
Category:	downloaded
Size (bytes):	283638
Entropy (8bit):	5.545121684346182
Encrypted:	false
SSDEEP:	3072:IT0dmGCpAZVNSNcMzszJIjd819CBPIrTWR6JP/IR1fK6St2nBsLqXWJh7RCQ:IT0dmGgAFMgzJEQoLfK6St+aqXWJpRT
MD5:	C3A5E189DC48F458AD0661FF6313DD0C
SHA1:	329F417BA36AF7E69372685BFA66C59B2C2A7178
SHA-256:	C66BEB2AB400B992FEBDF0B43B39199F24737931CFE89C11979B0461090FB59F
SHA-512:	C90939A56AA94785AB99673297DC8D5B79A2F99719AF913618349A68E27F46EFCB662B05E218A884A9A9DC756EEADDA89AD765545A5F0C4BDDFB46D155135105
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K59689F
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__j","vtp_name":"navigator.userAgent"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":["macro",3],"vtp_name":"originalLocation"},{"function":"__u","convert_case_to":1,"vtp_component":"QUERY","vtp_queryKey":"utm_source","vtp_customUrlSource":["macro",4],"vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":["template",["macro",2],":",["macro",5]]},{"function":"__dbg"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"G-LL

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10585)
Category:	downloaded
Size (bytes):	198097
Entropy (8bit):	5.67237889332544
Encrypted:	false
SSDEEP:	6144:wXZKmtm7F33g5L5Yd5Ddo+g5EV+V4WonF/AHNFxvQw07IiAM/sCp/zdGLk3KZp7S:wXZKmtm7F339d5Ddo+g5EYynFSD9CIiH
MD5:	6429B46F68985F4BDC6874E272078682
SHA1:	0DC24233448544632105DA884B06BCE3642C4E65
SHA-256:	3DD4B441034A03619BAD26534C586285F762E00CEEE20648D70C2E8E4C5F3DEE
SHA-512:	9B535619C53FD881D5C1B5213DC00E26D8FBB7EA91D79A3F8F0F334C365BD101135D1B02234A57DF42542BFA44AA61703497FCB68E2635FC1F1329A322DD58E0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,kJXwXb,chfSwc,RQJprf,tKHFxf,rpbmN"
Preview:	"use strict";_F_installCss(".hUTled{height:50px;left:50%;margin-left:-25px;margin-top:-25px;position:fixed;text-align:center;top:50%;width:50px;z-index:20001}.k7smx{background-color:#fff;bottom:0;left:0;opacity:.5;position:fixed;right:0;top:0;z-index:20000}.rFrNMe{-webkit-user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;flex-shrink:1;min-width:0%;position:relative}.A37UZe{box-sizing:border-box;height:24px;line-height:24px;position:relative}.qgcB3c:not(:empty){padding-right:12px}.sxyYjd:not(:empty){padding-left:12px}.whsOnd{box-flex:1;flex-grow:1;flex-shrink:1;background-color:transparent;border:none;display:block;font:400 16px Roboto,RobotoDraft,Helvetica,Arial,sans-serif;height:24px;line-height:24px;margin:0;min-width:0%;outline:none;padding:0;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4004
Entropy (8bit):	7.921213566288204
Encrypted:	false
SSDEEP:	96:pkHiDU35dDOAfHekbrRE5D9/EfTKECuk/5s:2h5Ye+eeD9sbKAkBs
MD5:	708900440644413321CCD0376724277C
SHA1:	C4B13DEB7753B8CBBCE953086239EF7C2CFC8006
SHA-256:	6EE43498CE91D71E442C035FFC0E818E033857DA143558AFDB14943312098E0B
SHA-512:	668736001E2D34BAD8A361C82B602AC61119A48ED126C40AB19251FCD44EB2E34A13076FB1D278A2DDA1B804100CCD1533569690F99CCCE79CABD52FD9B5A0C4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw
Preview:	RIFF....WEBPVP8L..../..?....?.v..<B....O.{...r..9Gp..2s..........5.)..2J....9....Re.3MX.H.d[.Ui......3.>...@v$I.d....S.I..}.13.....H.L...m...m...m.m..y..$[U.s....e..(\.S../..O..%3]................@... y...f^..7....Qw.Q.LoD.d5..^.. By......a.+....EV.&b..7...E..v....);.A..1........S3iw...!.lo.y.+`E..:!.LAa.E..f....5.[..L...,.....@Rs...W...6......}A.jU.....v..i6..ZU.....aY6W! ....\2. 3....MYD.2...dV.r.H.e..Q.1.K...i.G.$#...>.wyD.n.......j.h..q.h7..n.r.....:.....G.MH......r..o_.XiU)($.......t......DP...k\+{.(!T.A..l...GKc.Av...(.....!Z..A.+..q.....q.:..X.@...C.k.l.H.v..B.b.M..b\2.... 6...B...7........Y.<..%sJ....]'L#..uo)..K...E#..j}.?Q...Y.h.f...(MJ...G......&....y...1s{..'.^...QE;3...aK"k.D..q"5.j.&....[w\|........n.....g...Y.......e.t.._...fUNY.3..s...F.....,4^..R/...... .Z.\2....e.j.....^.@...^E90IO.J.0...c./w .......r..D...F..]..z.........x.^.c....h......V=(.K.Cno..b5.p8....w.d(..-...."..r......Y V.".'.iW....r..C.....GH

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5456
Entropy (8bit):	7.942522923555875
Encrypted:	false
SSDEEP:	96:UqmY1qc8xV/J+OK020BBhhu62BoRzY84bIdTq90EiMjSUR9ehICAdn:5HkWOK02ujRUqRq91WUkICAdn
MD5:	D2108D9A773EBD36F5C1743122778A4D
SHA1:	41444509051F153357EC82E65E24279A756523B0
SHA-256:	D3DF3F41B93272A64F15B66948CC3E13CABF9FB0958C6503D5C9A6CCED3F46B4
SHA-512:	EB26F304BA523397188097BD4D8640883A08D45AB1152844E830C0073D36A10C46C49CD86AEC7C2472E3563D0EC643A526BFB12D7B1CB6199F7FF7E19D1D07CE
Malicious:	false
Reputation:	low
Preview:	RIFFH...WEBPVP8L;.../..?......,.....if.{.f...U}.......r.....G.....<.\.j.p.....\..3.....G.....1..S.J\.Xq.8..lG..p_@...\@....K.........f....c.uT..h....%......H.m.op.r.s.atK.;8.\...\@......t..T..9^a......QQ...K.1Z..'.m....iG{l.m...m..\|...m.)..m...m.'.m.m......m...e..6.Py.N.D..@.......?...._..2...S.).8.pd.H...).7.lK.U7....8,p.@.}x...Q..H.7...;.P....ZZ....df>P...*'...h.I.....,u.N..........2EW.<.;$p<...r....t....mms..........SQ1...7..:<../..)....u.Z...yy.....cY...'++......+.X41....`l....N\|...J.]8>^R@...ull."..8.f........9K.==.mV,\..tp~...i.frss'"q.{..'. z..@..B_.r..#.Mjn>4@..c.q.@2...INjj.$..G.....S.ZY....%......k.....e..S..y...P.t~.(+.Kc\....H......v..... .(........-,f.....`0.b../...h.NM.+,.G............./@u%.4.-..\2... _.[[%q...-.......{,@.&.':t.......qp .y..v....F.i.!.}..(%...c0..7B.Y<;KWh...?.RR....^..R..(...5-...U...F..=...li......OJ.cf....{..4G&c.. ...JT..........6I.=.......T....@.{..-.UVJ..n...Z...#...j.`~.}l....kk.ss+..i..../..6vu.I.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (971)
Category:	downloaded
Size (bytes):	164847
Entropy (8bit):	5.667765963244268
Encrypted:	false
SSDEEP:	3072:D5JaWJB3kyKIcwTVI1vTQYVvFW9O1TmD069v:HJTKIcmI1UYlFWNx
MD5:	CCC25615949C7E72B7DFD79230547F62
SHA1:	F03690F3BA63BDB365B0E5619FCC2D02DBA995CD
SHA-256:	0E4F0B950E7E2E10F3E84237674311B878925767112DBF97DD68605FDDFDA675
SHA-512:	3B7E37609094DE0E7BA7627466C0DFD71BEE17A56B5DA5594F39C50376E02ED925BF7D0F2EBBC03C73C49CE0DB434278C0EA3493788EDD4BAA0F83D84F56C66B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,AKTwDe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var ypa;_.ln=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");-1===c&&(c=a.length);const d="-"===a[0]?"-":"";d&&(a=a.substring(1));return d+(0,_.Qf)("0",Math.max(0,b-c))+a};.ypa={eO:["BC","AD"],eU:["Before Christ","Anno Domini"],AU:"JFMAMJJASOND".split(""),TU:"JFMAMJJASOND".split(""),vO:"January February March April May June July August September October November December".split(" "),IO:"January February March April May June July August September October November December".split(" "),FO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),JO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),PO:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),.WU:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),HO:"Sun Mon Tue Wed Thu Fri Sat".split(" "),VU:"Sun Mon Tue Wed Thu Fri Sat".split(" "),BU:"SMTW

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	22360
Entropy (8bit):	7.983148681146632
Encrypted:	false
SSDEEP:	384:5AnHZ16ygMyBK7YYHeVcG6PbdoaVbjs1Xnr2lufRp80RHWDYlPJYmsZ:m516nBfIPW08A85pvRWAPJx0
MD5:	814D2E18A827E16BE3519D1262D3ECBA
SHA1:	6B569111006DBC20425C43DD2E4C69E691133130
SHA-256:	148BC30E64E19E263DEF1FF9E357B60B10CEC9EB4D1BDA231F3EBEFED488A1AC
SHA-512:	3F9516A95EDA1A824062C43AE25419C6BC865BE96198555D0E1BCCC4420C3285AF08AECF1745ABAA0DBA13ACF1571A9D79A163C83E297E3A34BB0417270AD661
Malicious:	false
Reputation:	low
Preview:	RIFFPW..WEBPVP8LCW../..?.M8n$I..UuX{..<p.............M...C2S.J$P..E.i..f.d...X...U.I..aM':C.!i..j7D..I.....v.~\.._.$g.._v~.}...d&8@PB...VYH.kb.j..$...J.u4K..e..N4&$.$4f..N..nq&.......h....}W....#y..6XHp$I..03..Gc.?....Tj..{+...T.n$. .......0...ZA...B......U.Y#f.......`..if.Q...m.H..w.1n...0h.tJ. ".....x.............2>.......[uan...5D......r...\|+... .H].5k.XL..93....2...x.@]..k.X.?.bW....<..]f..qF`..7.1@E...??.........?&..2...z..XX...f.9....31UV..vD.!..L...a1x.%.F.x;...W..3..@D.O..SI];._L/\]x...\|Z..9..aE...?..x...[_..-.....r....iW...k!..X....Z/L...._..x.UB.N..@..MD...Z.k...c}W..!"".Q.y/......6P6.R=...ir...<.n.._.a.]i./.5._..6... .ra.IDf........GE.`.A.&tED..f.....z:n$.4......4&..q.v.p....L.C..@.4.}.....3>...te.G.3A.ID..wN..aB.C..aN..%.(".0.\.:/.!...._9...eC[k{2.Q.#kY..u....)...h..XN...I.......Z$...%./...&$&"... 9'..$..e0,$H.uA....A.B.H...E....dg'.\..3..@:..g2`..u..0y..;.....'... ..m#9.....w.\|#b.x....k...v.0..>N.........-[...KI.8....x...`.0SD

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2083)
Category:	downloaded
Size (bytes):	70099
Entropy (8bit):	5.4172289664524875
Encrypted:	false
SSDEEP:	768:y4G5mqD21+io1L27Ljg07HGTehxiGVJoGoDvoaNIcG1mT/sWGpj60Y1+:yl422sfL0LEfTOx9VcMBmT/hiG0S+
MD5:	509018D1FE0ACEACCBA62427DEDF5130
SHA1:	76EAACB10B07C5D4C556DD7994B83BAF34324100
SHA-256:	A37F510CD4D24CE05B9E0D7116B9FDFED2D7A8E950C5F46F56553819FC30A948
SHA-512:	C0653F89067BF10355382904C0B89B5F5913333A3AAB7487B4CCD6E164D95BA10F39A02049E7408B9EC9F08A258C801DB8C899104E3C7D522687D9311C82A541
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function t(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(g){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(g\|\|"")+"_"+e++,g)}function c(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/android/market_images/web/favicon_v3.ico
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	13822
Entropy (8bit):	5.308557467153006
Encrypted:	false
SSDEEP:	192:YPNfrSf3gy1fQx56zKsvEsSDIiFtTislPchPTwFlOvHChmC82YFK:YPNzSf3g6zKIHqtpRKEuvHTC82Yg
MD5:	2A92CDD99A42BFCD7DAB16887539E231
SHA1:	310E2855E334F6F49937490D621710021B15066B
SHA-256:	F20C946DA61069DF3F4DC8097FB617DB50F266D25D53758D91FCCBD8341C533C
SHA-512:	7DBD1CA6AF6E7AA86F408C6E3D5D35AA49AD39908D8AB10AEF4CF8C806AF27889DA43D8AEDDEE030E6351DF1D81442B431C6AF206A4DF6E9BFB043892850EF49
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.15.097368f212a6a942763f.js
Preview:	/! For license information please see chunk.15.097368f212a6a942763f.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[15],{21015:function(e,t,n){"use strict".e.exports={canvasAvailable:n(1892),continuousScrollEventsAvailable:n(93117),cookiesAvailable:n(2022),cssLinearGradientAvailable:n(83353),cssPropertyAvailable:n(15871),cssViewportUnitsAvailable:n(77499),elementAttributeAvailable:n(13462),eventTypeAvailable:n(70683),isDesktop:n(13459),isHandheld:n(30677),isRetina:n(25152),isTablet:n(53489),localStorageAvailable:n(83574),mediaElementsAvailable:n(58093),mediaQueriesAvailable:n(28342),prefersReducedMotion:n(54719),sessionStorageAvailable:n(63160),svgAvailable:n(91676),threeDTransformsAvailable:n(78795),touchAvailable:n(50012),webGLAvailable:n(72810)}},1892:function(e,t,n){"use strict".var r=n(93796),i=n(6379),o=function(){var e=r.getDocument().createElement("canvas").return!("function"!=typeof e.getContext\|\|!e.getContext("2d"))}.e

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 416x234, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19102
Entropy (8bit):	7.989967773372439
Encrypted:	false
SSDEEP:	384:VUv4uedgnmnSVgEoS4ynDa+HTp7VQViv/Zo5rOeqny/:iQuNnwMghS4j+nOMxo5rOZG
MD5:	32353208EFEE7F4364C6E878C7D53AAF
SHA1:	6E5323D6567DEBFC7730138B42CA36DCAAB408F9
SHA-256:	B81B93F228219BA0E819E5A4399AB1060C2EDCD740370523173C3ACA1A766710
SHA-512:	1F21A71375C3402F509CCAC588086A1FC097D1781788CD43DF71B2D5BF3A79D5B05A66951135C701134C4D0E3C4C9520A93A1B26568B2C1894ED0CA8799276C7
Malicious:	false
Reputation:	low
Preview:	RIFF.J..WEBPVP8 .J...........>U$.E..!$(x.p...cm.D.Irt08X.y7......d..}/..k.?..P..>.}=y............SW...w.....>.......f-..~G..........z......C~.....D.....w..._..t.....O....B?).u......+...........~....../....l}......g.../...?....\|...........?.x.}..'...............................O.o.?......S......._.................>.?.?..?..]Pk..6h.d<.A...z.C...P.V. 5.Z5a. .....x.Nj...6V.......+..]c,.....!.].w..=Bw.i.W4..H.Q....YTV.....{.n......\|.J...{......S.........3.-.Q.....wR>...k,N._-....#rE..[........^^^.H..$...f..mW..[.,Ep..2.(JA..%.....""$i.Kq.M..^..........)...^7......,....yqE..,.<. ..3.4..........u...T..D.f4O$...c.:...%)Z.;.....>..XM.H.n.P{.6.s.dsV.S...E\|.^C.C..@.v.........!\.5..;...`....nN...dy..K.....0.B.....zbJ.V.......#..f.Y<Qi!....l.+.v........)..$.v".v....fb....e$}..dP.N..(O..).C....M.Y]..e......;O.d...8.YDE....W..&]..'.......r...H}....`0.....G(J..d.EU..O..[.:&8.)8...z...[.;../B....D.rTT..4....l..'.....-~..k.x.\|.@-.!...M...(...j.....

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	984
Entropy (8bit):	7.674068185768488
Encrypted:	false
SSDEEP:	24:j3Tnqu3iggc6XDmjArkqCHB5hnUoirkQQ:DTnRTgc6QXqCHqoZQQ
MD5:	521AB661D05B5E40ACFAEAB1F65DFCB7
SHA1:	AE1C2E4A193121281F5D39BD7A4701D0BD9265D8
SHA-256:	2F85BCEB5105CD1F57EA59264441AA3231AC11EF7D714A06EB0A2F578B9A697F
SHA-512:	CD3334CBE3D856ED5E8A041CE75AE88099254EB2B07BBAC09E8E14C38B65DC07BF5B01F8983C52A5769461DFE36A644453C3DB9AAE121B3BF3E7BA81FD4B70C9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?.......$GR...g..Cp.6.$5...`..A.H.........._..!...6.....Np'.l..V.y...E..V......;..Q.&(.l...FYQ......M..f...w.. .....7......Q........bs}....ylS.....)..R.isy.......T.s.~..p..nmO.X.03333333..>.<o.+Gv.X.....'_.UD.'...vI_.i....d_.ja.h..c.FO]....J...Zjq...{o.1...UF.w.................wv.n...wkR..mA..h....eD...AhE..m.....mt6.../n.......7.mv..DD.RG..$J.t.....Jp..3..%...=.Xp.R...5..u....t;4.o....L..]..<._v....f.B.p...G.%.Q.IO4..J.....c.....['..>Z...Q..C.2Z.A/.u......n..a.........Lv..j....m.....k .,Q..T..1..i"..J.x...#.]6^.h...=.hz....)GF..].h..D.G.&...(..4.....dx(kB..J:...4....'M...1)G2M.E.@..Z<......p.e.!. >B-_...!.2....l...W... ...s..._.........4.$Gw.iU..1.gZ..D.....P...D[.....\|@D..X.S"J:.8J.=t$D.T.A+.....%..V....!...-.@.....Pr!...."...wl~.v..V...x...>8.E@v'......w..D..~.._l.v....9^...;........uT.).N..0..j...\...D..d...x.h....}....'..dy.&.].}.EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5732
Entropy (8bit):	7.94022369350891
Encrypted:	false
SSDEEP:	96:x5bs0XK14h0KwmrpSH8cNRYoqccCq//Ud/xPdDvuQIgxJFaLqnk8Tb7Mv5Jh4e62:xtXRrpDuDqPUd/RxvuQIgxJFLk8TcxJB
MD5:	06BE135223797E98A2AD479F8A515E9E
SHA1:	9220CFBDEA4B9BE3F86755D52C9C4FAFA24CAA6A
SHA-256:	1C2E393D77780EB27BA1E120E86812C2F760A212309E09BD866DD338D05C4213
SHA-512:	10C465B97ACF91CA6A130C7E976001570496FDABBF155F4965838CC7D222BC544608AEE6CE8F0A9B0FC7CBEEE87FB534BB2BA431820CC9D5DFB8597066BB63DF
Malicious:	false
Reputation:	low
Preview:	RIFF\...WEBPVP8LO.../'.I....m.i..s../"&....q...6i.P....vjH.N..rs.S....NKv...U3..A..V.i..o.n..1.m.m.v..d.O....m..Hr.....g.?...U.973.....`..:]...9'.. h.6i.?.;.$5l....._....O.7j.;................n...........8g&.....X..M...YH.........$.HH...E.i 3...F.... z...\|.k*.2.L..Pk\..M..p.%..qN...,....E~...O?.@Z.s...Aw....[.#..i....w...m.t.I....\|.l....Z......<I.....gdV..H.....G..6......7t..I...h..5.,.@...@..%j.2..z./..........H~....y..4.q.=S..&...,...k.z.........(.<J?....b..^...W...D...S{..3......o0.0........$y..H.....o.......jx2U...iS_.A......i..u.T...#y!.U'..Y..............y...v.Zk...%...cI...pC.dl....8.x.d..4Jz...Y..x....H.Z.....<Gi..B.....HK,....(.C>7..n%k......Q.7.#.`-.,.kE%...D2..J..O.I...#.\|.R..g.....d..$....&.kI..k..U..#i...<I>;..n&o..H.... U.qM..d@br.Q..t.........,...;.p.Ug...E.2.....iF.....Lz...>.p#I...V..8]..#.B...8eG.Mp>Y.}:.A..J.&.......J..I.;Hn.x.. .........R..L.7....h.P.........L3.Ce..m.....h..%...%..4/...Sr$i.....l ...F..+.f.b)..7.=

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	36974
Entropy (8bit):	7.869731994362244
Encrypted:	false
SSDEEP:	768:H3cLtbg0waKsaI+Oq3roGLTAyzNTshamT+EUUQezg+koJXrxZXBsKCLqL96YggQR:H3cLdZL+Oq72yzNXtEjQecmXrx5BsKlY
MD5:	C2EF0B7FC3C86FF987368BC05E66511F
SHA1:	0AE925FB913D4A07D3B5259B88182F83D210750A
SHA-256:	5194A1EA73958A6DFF29A73D5F583B3D689B4CFBDBB4484842ED77B204409813
SHA-512:	835A7A424469B428CC390F97C36E423AC6F05304BF25045DD84034B6A2B42489DDEED9E24F9C1EECD19E893C6EB021D8A782F07B27E1C67781D74E1835ED94DB
Malicious:	false
Reputation:	low
Preview:	RIFFf...WEBPVP8LZ.../..I.MHl.H.$.S...q..<=..BD.'..".d$..J.R..}..}...-.....H..6.#.k....w.....wK.Nw.p...H...u...3.._..b...LS...\|......$...@....6G..0...3...^.k3X.....9....+)I.K.P..........\|..'.H....lQ..d...u...w.4.m...Z..H..9s.......G..3....pP.T...".<..O.........y.......u..u.w..I~.Q..S.O...!.'!`I..rd...\|.3".......u..'1.rm[..4\|......E..n+7Ov^.,..H..I.c.g._.....gs.{......9.H .1........F F...L..#.,.4 "e.0.......`.@ ...q.....+.7q.....:..."..).`.,.B..3..!0$4...UG...h+0.E.....U..0...P..P.{...!..... .......j...\|.{}r.[".,..........=..`........X...6......jc.D$...h/..(.lp.[.. ..".u..4.N...H.xG......;..;.7..="....b..].s..I..............k/_...A......;..})0...4m..L..o.!"0.yh...."E....b.x'!.n9>.".....=.....V........' .a...!...+..X\\\>...X,.A[W..;.....j..E....$....v..k.BD.....3.V.S.k=;e..6.\.W...(...sg.....L.W.E&qwd.[up29... A..V\|_.......3W.x.B!I.b..a......._...8Sg...y...(....tg.n.a.I.a`.L...H<.FgR..'..b".8q.p.....k8\|..y.}g.....H#=.P.}O.^v.8...P.s...R....m#IR.....;...

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	337
Entropy (8bit):	5.1776673129286745
Encrypted:	false
SSDEEP:	6:kRZzRxVvnQY1fV/Ax8G/QVf1324By8HedcMwQRaNw6JpyxZRNlad0:kRZTFfVmH/Af1G4s8HeYkbRN20
MD5:	25DA9B9A3176E6D44D1FD2642ED71360
SHA1:	B07456DFEEA93248A7110B9713B810F520B186AA
SHA-256:	8F816BB92E7D72265141EBFA316F56628D5A48920FA85F09830991E893A3D958
SHA-512:	181809C75B4348AA25CA625434395C1C22278AFBF5C6E630C3CD2F7BCE38C932EA796AA02AFA5239E61FF697B512097D1213881599AB6085E31F6A53F2051987
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=UZStuc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("UZStuc");._.$q(_.eza,class extends _.ar{constructor(a){super(a.wa)}H(){return"UZStuc"}O(){return!0}kb(){return _.f5}});_.Aq.UZStuc=_.mz;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 416x234, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19102
Entropy (8bit):	7.989967773372439
Encrypted:	false
SSDEEP:	384:VUv4uedgnmnSVgEoS4ynDa+HTp7VQViv/Zo5rOeqny/:iQuNnwMghS4j+nOMxo5rOZG
MD5:	32353208EFEE7F4364C6E878C7D53AAF
SHA1:	6E5323D6567DEBFC7730138B42CA36DCAAB408F9
SHA-256:	B81B93F228219BA0E819E5A4399AB1060C2EDCD740370523173C3ACA1A766710
SHA-512:	1F21A71375C3402F509CCAC588086A1FC097D1781788CD43DF71B2D5BF3A79D5B05A66951135C701134C4D0E3C4C9520A93A1B26568B2C1894ED0CA8799276C7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw
Preview:	RIFF.J..WEBPVP8 .J...........>U$.E..!$(x.p...cm.D.Irt08X.y7......d..}/..k.?..P..>.}=y............SW...w.....>.......f-..~G..........z......C~.....D.....w..._..t.....O....B?).u......+...........~....../....l}......g.../...?....\|...........?.x.}..'...............................O.o.?......S......._.................>.?.?..?..]Pk..6h.d<.A...z.C...P.V. 5.Z5a. .....x.Nj...6V.......+..]c,.....!.].w..=Bw.i.W4..H.Q....YTV.....{.n......\|.J...{......S.........3.-.Q.....wR>...k,N._-....#rE..[........^^^.H..$...f..mW..[.,Ep..2.(JA..%.....""$i.Kq.M..^..........)...^7......,....yqE..,.<. ..3.4..........u...T..D.f4O$...c.:...%)Z.;.....>..XM.H.n.P{.6.s.dsV.S...E\|.^C.C..@.v.........!\.5..;...`....nN...dy..K.....0.B.....zbJ.V.......#..f.Y<Qi!....l.+.v........)..$.v".v....fb....e$}..dP.N..(O..).C....M.Y]..e......;O.d...8.YDE....W..&]..'.......r...H}....`0.....G(J..d.EU..O..[.:&8.)8...z...[.;../B....D.rTT..4....l..'.....-~..k.x.\|.@-.!...M...(...j.....

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5456
Entropy (8bit):	7.942522923555875
Encrypted:	false
SSDEEP:	96:UqmY1qc8xV/J+OK020BBhhu62BoRzY84bIdTq90EiMjSUR9ehICAdn:5HkWOK02ujRUqRq91WUkICAdn
MD5:	D2108D9A773EBD36F5C1743122778A4D
SHA1:	41444509051F153357EC82E65E24279A756523B0
SHA-256:	D3DF3F41B93272A64F15B66948CC3E13CABF9FB0958C6503D5C9A6CCED3F46B4
SHA-512:	EB26F304BA523397188097BD4D8640883A08D45AB1152844E830C0073D36A10C46C49CD86AEC7C2472E3563D0EC643A526BFB12D7B1CB6199F7FF7E19D1D07CE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw
Preview:	RIFFH...WEBPVP8L;.../..?......,.....if.{.f...U}.......r.....G.....<.\.j.p.....\..3.....G.....1..S.J\.Xq.8..lG..p_@...\@....K.........f....c.uT..h....%......H.m.op.r.s.atK.;8.\...\@......t..T..9^a......QQ...K.1Z..'.m....iG{l.m...m..\|...m.)..m...m.'.m.m......m...e..6.Py.N.D..@.......?...._..2...S.).8.pd.H...).7.lK.U7....8,p.@.}x...Q..H.7...;.P....ZZ....df>P...*'...h.I.....,u.N..........2EW.<.;$p<...r....t....mms..........SQ1...7..:<../..)....u.Z...yy.....cY...'++......+.X41....`l....N\|...J.]8>^R@...ull."..8.f........9K.==.mV,\..tp~...i.frss'"q.{..'. z..@..B_.r..#.Mjn>4@..c.q.@2...INjj.$..G.....S.ZY....%......k.....e..S..y...P.t~.(+.Kc\....H......v..... .(........-,f.....`0.b../...h.NM.+,.G............./@u%.4.-..\2... _.[[%q...-.......{,@.&.':t.......qp .y..v....F.i.!.}..(%...c0..7B.Y<;KWh...?.RR....^..R..(...5-...U...F..=...li......OJ.cf....{..4G&c.. ...JT..........6I.=.......T....@.{..-.UVJ..n...Z...#...j.`~.}l....kk.ss+..i..../..6vu.I.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3346
Entropy (8bit):	7.927787140499046
Encrypted:	false
SSDEEP:	96:mY+rHnf5AhAsKKecLUsMccj/kRLYe0qxKeyT9FL9I9Vyk:MbsgsCjcr1HQzo9
MD5:	24432E68CDC80B8A42EBE0DEF7EE264E
SHA1:	6FB55525297EFC44D5DB9407AD46297AB2880218
SHA-256:	AEB2EEC5C20F7EFE0EE1E89E1043A19AAC4A77217797ECD839FC52D7DB357A8A
SHA-512:	86BA0C2C40C346D1620577402689A6AF4344FB0BC6F10E29FC455E809208E4A3C547FBF233E0285B50F4CF52F54032109E7620BF328D2E2C97CAD6ECB9B1CAD3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..P..#.?v..oDL...u..v$.9..1.....dT#`R......N:.-........[SE..........w?n3...www9.h.;../.9i..O..".Y.@F.j..n..34....X.K..;.-`;p60..El.Fz..Y.; ..CS...f..Srm.:..T....k.M.L..v..Nm...>.>....I.$..~.m..g..m.m...m....O.....[Y%4A7..g}..............=...n.s.@3...n.G.,.1... u...-&....CdE.....i.r"fN.=.i......g~M....mB.$.m.g.m.9.g.m.m.m}D@h#I..@...::G..dTUw}........^.....:...<....~.ZMf..\|.z.k..h.....y.k6............ ....e.6..........5.o....Fi.....t,..........(.._.......V...;....d ..Z....,TmS... Qk..?...q....W`....C.....o.4jq..".H."@..A....F.%C.;.]..@..j.G..L.....n.-Q..B..`...e4....>..........~..BH.P...Hd.6..g.2)...f.i..6f....Xp.A...@.%..V..0...<Q.y&.....R.........R.r..w..{.%.n=^zn...n.hl..QpI..W.......[..#.Ca...!.6.lfP(..]..K....G.Td.:./..G.7F........3....VuE.(.. o...g.A..\.U..>....XttW..<.......R,.(.<..&Rg....q..&...V._C...5.T..T.=.!.F..k.z\.j...9\|..\|..%.6m..p...En}.#E........INN=.........^...!f.A.#...,.<O"D.s. _I..

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34150
Entropy (8bit):	7.9605429516569455
Encrypted:	false
SSDEEP:	768:1u9/IEI2Y8ovLDIm5VvC+TSPI05kE9xX0r+Xv4NdqnzYl:O/7Uh/ZeW0qqxEr+wNkUl
MD5:	4DF004D4F2D2F7921EE1AB1E16EEC7B7
SHA1:	39489B65493B9FE9883F359E5FAB5170C9D9E1F2
SHA-256:	ECF16BA0EBF68546464B4D0E8E47A95B961423E47413C25E5A5BA73DDED2FFD2
SHA-512:	09563045BAE58061067227F649EBFA4A334659B1A4BDB9164377B2D6BB85274AFB57D260609528E089533BFCB9FFDE4EBE8E945323D77EBDA5662E7CF7ACB83C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw
Preview:	RIFF^...WEBPVP8LR.../..I.M8l.F."gn/Y.._.<.BD.'.....n.....z..w../$uI..[]..9m[............f,......^...............C.....H83.3..0R.X.609/_[......$..\<-...tK...X..cl~...A.7."".....%..."-..!I..H.c..&.@K.L...I..h.~....F....\.>'...v..c.)"l.6qT......-...Hz.....{..Tko....."..5_...zo/A.!.!.J. I.-Gr.\|.\...j../AC/....."(..t."I.$E.Lf.fy....#.34Dyxf.t........u......A..H.RbL..0>..f.._d-.8j...e.....,.K..\.L..R..,J....gN.K{.$}.dQ"..Q.z.EO..I.....zk"c\|j.nm...t.WeHII.....gjW...J{...I.l.....z.SOii)M..3.K.Tm.:=..H.%.m.n.K.."......<$5.(.2.L.ti.....).!.E8Qyr.f..mW)...ZO..$$3-.....Xg.d/u..i...~c..Y.....x6.>..!.&t..(.h.]......3fg......{t.A ..p..u.a. [a......?.,.a.~......?.{u.Zn/..PQM..k^~.m.Q2...}..........#V.V..~w......L.a......wm.5wl.P.a1.P......./w......./........).~..Y.F.6........Q'o{w...f.K.j...a5...1.N.D.,l^...X0....r....,.\|...@...43X..u......g...~..J....'...Y..%....Nm..D.w.^....e.Rw....H.F.......3..N"..ok.0H}.Pv..E.....f...r...S...q....e..$........,X.......x

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1176
Entropy (8bit):	7.75567097304523
Encrypted:	false
SSDEEP:	24:q8pLq5tJn+igi+y+4ZoMv/eNXS8gx9U0LP49te4puQ:DpqtvgfJ2z3eNXbgx9UN9tFuQ
MD5:	21DF94B8CDE49C982B09DCE59473BF0B
SHA1:	BDD434F55363C453B335A7E3165DC858259727C8
SHA-256:	B9C4BE614B36FB5C336FB5BCC5CE61E840C2A95422DD54C40C254CC60685D76D
SHA-512:	27FF437E90AE8B4233C25044F5F8060CF845DB5F64F307FBC2DE0AEEFD245CF8B0831A36DAE15FB715C562137FDCBD4982208974871CE4D40432A31ED6B7EBB6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8LG.../?...O...m......]C:."..5...... G..H..c..$>]N...3.t.$.R=...h..%.866....Zk..N.L.......QF....K..J...'r.k.&...`gn....B....E.....PHP .....).....D.....S....@. ".T......@.}...m.@[ `."..@DV....o..R7.....,`..u0...I..C.'..rGV..$..).C.C8w.k.6.;V..~.j..n.".X.8.;.".........D..F'..I..e.K...5.^XJ...K.f...za...u.[a...Y....K;.....A .....C@.o...<..c.s1..o..rZ..x{N.....=.t. .sQ.........`.vb....w...p.Y._..(...tJ...!P.Yz.?.=..../..=...4..m....lf.m7oq.m[..2g.vk6.....=.w..<.oD...m.....3~A_O..$.8z...n ....+.....N%Jn..k...M.....FyW}.2H..p.i "..%&e.Q.3... U.......QS....R...8.;.`S.K.A.l#.!.V..[.].55J@......=O..o.]..j`.."...k....2..Z....\B..vWK.S.....<..u(...u.........v...<..m.]..F.lN....$'..6W.......^G.n.iv.....?..u.p..95yl^qV......?z.\..":8g\./..#.@...?.B.#_......<......JI.....F.\|y5ZT0.."..G.5)..fb...Y..1\|.V...U......\....zZ>..w..d2...IZ.....O.....Z. .Yo.#..u...OGo._..y+.ql.n....8.E...\|.@."T].=./..1..c.k..X...q...s....wk..4

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10968
Entropy (8bit):	7.9747642221176225
Encrypted:	false
SSDEEP:	192:1Zf1+lBJQ0XtWeu6ZbUwo4lgZCjr3qXgceHJk0yzwoTYWkN/EG18xONadB0G:1RsRFEIwyjr3r5yGSrkN/p1c3d9
MD5:	288C5659B8B33851CBE776E6B0DFE99B
SHA1:	7899BBF88159EEF8EF8304C67C7D146FD4D7C52A
SHA-256:	44C509F255CEC0407C45A38BED31745FDBFED5A865DEB573BE80589DC63302EE
SHA-512:	CBE572C9864598553294EC672B45E6E5158C656A3296B019251B6F59DE1DFAD8EB2D5ADD093FD4A766119A1A3BABDEBC89345A6BAF75FC4B352E6FB0024682F8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw
Preview:	RIFF...WEBPVP8L.../..?..In#I..3s.......c.e.......{...w.$..b........3me...el.3.0.;.`%........)..23mIw..%....:B.$.e..0.3.51..#.....9i..d.....@U.....B}..........u..y.U7U7....q...$GR..A.+.....Ig.k3...4.m.jv.u.G..T.%...H..%...../.....0...@.;...0&L....wB....&.`..Z4c.....B..B...eQ...&. P.~bZ..C..A;...N......g.i%fX#....!Xm.......D.%:...eVc\..@..a.w. h5............W......J.......@.......{..7...Z.`~...j.....y.C..=...D'...1......O-Z7.P.Z4Z.^5..$IV.Yw...\|G....T.oH.A...<.[......Q.r.......j_.d.....<9.A.dAbT.J...QEdi..%..z!.3j.......z.m{6.V.g..A%.r!..,...h.jii...{..j/...D..'..x..~.R.....v:...T.Y.....\|.....^E..2.......t.b.h....]e....$G.T....0x..F.E.S!....."..6.dW....1.(.(........O.$....j.z......=.^.]=Y,.=fffffi...x).;...n..P....R......0.}....bi.-.[..d.q....\y..:@.. ..R.`\=..M.=..q...{.].].X..H.L..k\|.m.m.m.m....{...m[...}..;.A....5B..ww"w...91.z..We.Vj.\.vw9..D...........s>.5..6...;.!.....H.X./a.......).y%.3....._.LW.;?$.....t\.U..{.......v.ka.N....2....\

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3872
Entropy (8bit):	7.926482378681672
Encrypted:	false
SSDEEP:	96:JQRKMqA0SMQYXXObysJt0txHfvwqKPOCFZB+y0vCD9ycU:WRvc91+twx/vwqKHwCD98
MD5:	B27AA4BB5D8D2244C0D0EDC2D9BC52F1
SHA1:	BABE6F9AABBA26A755DB9E5714774F1537836CE0
SHA-256:	44D9D3A4AAD1573E010A54B69D3FCDE65D2AAFBDE64E44493C2DAF29D8285C95
SHA-512:	60AB5312CC9F2B2BA18C90FC6B8576DAEA9CCA8D5836C8DBCAC271C5985E4BCFE1767186ADB75C32287AE54CE93AC1F19396164D38433CAAF1E58EBD639510C7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.......m[.u]...m6.zl..TE.m+....m..Bf.y..y....m....3.Yu-9.}E.m.\.X.!%j.G....)....=I.3+.vc.m.mw'...i.mJ.vU.e.a#.@.m.m....^.H......$I.....w.....7\|..?'..i.j.j..w...`..>........r/..r..o0.J.^.x3p.....'..:.z M...e[.M..%..#....K.V.....D{*..l.1....E..7.z.&c...v...T.9.o...(%z).C..k..!<y.8.^......yJiqaa.......ooK..4.3..V....GryYa...}.\|:..'}.f./B.a(R79.H_.\C<......#..{..@.....-J.ak.9.).Az.1.......#........^....r0]v...0z....QT...........-..A-.CUN..\x.-tS....XM..<.@[..X.......Ec_'...%.055\|W.....X....2...TI<..]......C...m...ED.e./.B..G..-..!/.O..).<H3........&.."......L.o.xYi.s...Y......1......z..#.1..=.....e........^.{.}?v..,/.@,.......\|.\..r^.7.4\|w..t....X.....G.....i2.z....0.R]..t....c..e.:......9.1b....F+....1.....'...6.\|.T.~........a.\.9lK.rB.3F1..O.eX{..&..3.....{v.a......u.N..........&.N...Em.'.~.....b...p8..'..`p..F..x..Az.0..g..d..>..f....s...&'..D.s.m..g..qv'..H..#y1.'ax.u....3T...{...f....?.h...q.=.....@.....6..

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4318
Entropy (8bit):	7.926634621042285
Encrypted:	false
SSDEEP:	96:bav62OvK9ewKKeUDzs1FTaQ9G9Ijf0cBlZQqv8wg4mcqv:cwv6/sjOKGujfQqvLHmjv
MD5:	87C4B9CB9F28758DE7BEEFD691544757
SHA1:	F882EA8126C3A12CED130902BD103B8D46FA3A10
SHA-256:	B9FB17F6BD1994651311BD2664DC512563D54C24344992AB4B59A0CAE64F6C9C
SHA-512:	7CF00ECCC6BB6CD87180EA7AA13ABD46151FC8D3DF030191E2A04670DE1F1881646C7F78E700BCEB07E84762609B29BDBE104A4D19A527E3EF16CD0C8D81F988
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../'.I...m.k......"b.......O.}p(sY.&..T]... ...o...o...........:wwww...>ww..wwww....3..eG...>Zz.8.....1.#..c.F.".......q$.......rpwM.(....._.....k.m..n.m.m.mF.......$.e..7h....'..N..........IR$uA......=.C.m.m.2....k&.(....Q..O@.>..."wp7...<@U...~.f:.....0..pv...t.X~Cg."....g20.B..$.q..Q.H`G$0..'...'1..w..D..0vT&.1\|.i}N.e..a,..b.I...%=.....EQ..6...1$."p.R/....P...D..3.."i..E.jB"....0.c1..+H../".#.....\.8d....'..U$.i....>....q.....!.~..6...9~..t..#s......D..w..l....G..Q8...-.OI.\|...g1......y}....Q....)$........G...f....G.......i8l8.".'4..%..H.r.....Fy...`/.p!..9......bp.P......B+,..'..$p......o9q..z"..jb..~....`.I<...{...[q...4..L..W8....,.4.h.o..+'....{7.]....=._#ic.w......F{37.7L..?C..4e..0.e..x,.........k.g........O.JN.x..!y9..u\CJ.M6......2..l.3-..D..V.Q=F..>NZ.......>....?....X..fA7..G&.....&............i.2@#..f./...>x..B.>...F.H;`4?.}@oQ.o1...c.r+>x.7.L!..X.%I.."....w...G.....!xs........h~DR9^v8...6..~.....#...S.#.

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15902
Entropy (8bit):	7.979385311048091
Encrypted:	false
SSDEEP:	384:MIuCkzTM2Z9KfMO16MXqHCiwGJV3XZ7nCrSnykTm9FJpt30f:putzTM2ZUnqiiwG3wrX9Bt30
MD5:	C9BF1B0C8E9A522267763ABD87AC849C
SHA1:	1422C93842559FC4D7DC187F9291938D8A6082B3
SHA-256:	BE5EFC8F8DF15934C93EFB63685E801D4F9CBB2329587BACEAB6A0230F89A29A
SHA-512:	6EA335EC4AE7ED60394D2540721C2CA862243474276C92487A9CD4C62EAEEC20EE62DD699234DD2BD3127D51F90F559D19767C3067E2C3792BF710618BA63377
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw
Preview:	RIFF.>..WEBPVP8X..............VP8L.=../..?.M..d7nS..........d......?}.'..c}..^0c..cC....{.OH.$...YDw...>.w.....J.....7....$. $.P...:\.l-...M[f&.U.w.Y.o.^..y.{..T.<.....3..n!.bm_....y..9H........l...6..gPHRd.{.......k...[..B.k....&..Z....0.)..".7....}.i..$I...N\..;.......On..N...ik.o.....{....F......Z.......U..r.5.<2.....W.D..5...Yb....@...D.B..x[.Qi..(.OT.RA....7.TJ..[....B.@....EQ....H.h2S.X.Z.-.@.D.....>....(. I........(...zv.........Z.(D.x......@A..>.).O....CD.!..'..\|...`pu........@...t.......N+Q[.....G........F...._.....P.%.=...P.J.L.v`...^z.'...@+..F.k.i..it........ .vY.@..@.T.D.u..``p....Bqj.9.-.r...................K}t[y..ap.B3...Z4V'..........{.s.V..`G...E.m._~].N,.,q9.A.....G.......I........8"&....T?r.....u.U...\|.u..:....G^w.u.......S.v..5`.`.......<..V.;...;...u.=6..S............V..S.P...>S...k...h....)`....A..AP....7..2.Zs.1....:.Y....kc.....\. ....7" ..E..@.*.<..-....I..!...!....3..\|.%........sfJy.4.+P...b.0O

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6458
Entropy (8bit):	7.957918669828179
Encrypted:	false
SSDEEP:	96:7PVKoL/qyR2sELBjs3+O6RVlTRbQhJVQjxlCgtOftuKb:7dKg/VEBIeRVlyhJ+xlntOkQ
MD5:	A379AF75205280638DD6B7D078B65C3C
SHA1:	00AC5861CDC7F407D5740FF96AB6191A501684FB
SHA-256:	E81307F9904D497F5F5456A76B65880030C4ADF8C991FD60CE20FACB94899D80
SHA-512:	103B2CB011D1550BEBC6E7903BEC80D8FC1BAB79C85CF062EE538F01FF2DB6723596418D1E260BC4395798C7A31E8181D851BA99B8A5F9B371FC629870B20AF3
Malicious:	false
Reputation:	low
Preview:	RIFF2...WEBPVP8X..............VP8L..../..?.M@l.H....:....... ... I.<......l$y.H<....cb[.G<.$.@.'..l.y.$.id<o...tG.@....$(I.<.F.....:...@m....@I5.-..z...A.&...v..B.......\bP..n.JUUG.t.O..)......j.pc.v.,L...`(....HC$...29.m$....}.....a[..F..I2..........G.8..?..@,^.H..?.D.d....T.0@.k.g..../l...;.8xS.A.V..........k%=...@#'g[..H...S.Eh&......~=.-I....G.......0x..w...UE=8...Br%.>...T....z.Q%...c ...@.XDGU8.3lp...l.w..p........B.............W...EN6......@...<..P6.h....0L.....}.n..!..P..x..D..L....2q.m....;.....m.e....JCp.A....z....B\<Z.Dz N.,T...[.1.#G<..Dm.i[s......m.U?.b.m.l...3.m.h5..s.5U....9f0..../.S...v.5f......9....V.......'...^...m..6.....ffN..ct...;0..]..sk.S1(..?H.m.N.N.f.A......#....X.m.$......"5.0n......CC1SR./.?".#.k.....+.:.A..9...R.L..1.bF.r.^. I2m....;..o.m.m....m.6.Z..m[Z.}...b'D......yw.mt..;h.....t... ..~...!..E/]........t...U.1.9...X.uNs......>}.."...\|........p...q:.C.9Y.].x...l1!pDb3.\e...J..F=.`tf......6..p..

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,C7e1Kc,CKm2Wb,COQbmf,EEDORb,EFQ78c,ElYdAc,FoxcOd,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,J22eF,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,Kfp2G,L1AAkb,LCkxpb,LEikZe,LRovxc,LcQwud,Lkzi5d,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkwaS,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PAQZbb,PH175e,PHUIyb,PRm2u,PZ1hre,PrPYRd,QIhFr,RBsfwb,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UINLVc,ULFnWe,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Y413Bc,YTx6oe,Z5uLle,ZMKy0d,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dZ05Qb,dfkSTe,e3Zld,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,g6aYuf,grWkAb,gychg,hKSk3e,hc6Ubd,iAQMie,iLGjNb,jZ2Ncd,kWgXee,kdbckd,kjKdXe,kpVlPe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mmmrlc,n73qwf,oEJvKc,ovKuLd,pQUyNd,pYCIec,pjICDe,pw70Gc,q0xTif,qczJ2b,qk5AGd,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w08zce,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xI1uef,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5298
Entropy (8bit):	7.948762402090665
Encrypted:	false
SSDEEP:	96:wt7zIgs+Dfs6CrgUvOOBD9EA1j2uE5mY2et17KAEBae8AQPs1rdp0cpmeJ0:wRFodgEOsT3Yh1uF4e8A1ucTC
MD5:	B6D7404EDD22BF56596EA8D9DD923062
SHA1:	B735DE567505C7EC454D666F3475FC552A236742
SHA-256:	CF04A01ACD899385E6B767491C59E4BECC8F5148BBF327D54EC9EB9B83F5648F
SHA-512:	5D10D1C6373DECC0199091A990FBE6D5FBB8FD8D186A12F79A53C22378F8B0659D07CBE971A80414C754BABE744BA8A69D1C643ABF75DCEE4D732B86FBEE96EF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..Gn.H..Ou`...$5.9.....y.6...(D...\|..q.N.....+3..'..3)I$.II....b..RbFl.G.Q...'.2...d... ..-.2.....n[.%U......u.7.mW..".w.......-....{=s.1.H.U+...[OqX!..L....I.]5.'.._.....WE.L....W.q)-...4.......D~P..RE....#@}W....#.@J)U..\...w=[.z....>`.!d.Y!..C\|.e.I...(_.49\l...2....r:.Q6`.Hr8N......u)..E46.HnN7.....%I..9..`h. L...N&.............ts.`..{..`l..............@.{........F{...H..-...G..`yHiZ.....2..$.\lq8n.H.......j.wDL..4...5...........I-....j.kC.\|...8........je...W...o...$..%...9g".F!.........9.;#.....7......_.b@.T..f..Z."....?.CEic.i....+..g..7.m..>..O.Z...z..=_.-:r...8.m.X.~.Hl..........Xv._qd.T.....=3afff.........333s2.L.Z..-.T..7...K.........Zy...B..zV...............{f+..[..6z.O.9.i..Y.t............. ...Or$I..Df....;.N..w..........1.!0..A..&U..5...c."..D.y.Pd..b.C..?%......K)c.....]..L.{..........r.2W.....@Y.v..4..g..l..H,.'.....u;.Q........l8j....l..9.<...a.p.."8h......K........+..T.cq....Ai....H<.O..B*....oE..C...

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2544
Entropy (8bit):	7.891775535822655
Encrypted:	false
SSDEEP:	48:ss55FpCT8U8Oba48YEXgXWnmdU5eoar5/GYSEwZK3aZ2TO5N:ss5oh8IL8ngmny8eDpGYSSK2Ob
MD5:	245FFD8BAF56F775D50CFA5C52B15A06
SHA1:	096D6C17A3B3B9EBBEC34D99986D219CC770D166
SHA-256:	158BC574F2905504BDFEFD8E199CE012011CCFB49635CD3E56B4FF94C3270D25
SHA-512:	F3F08D32E9FC6E6E6BBDA64020C4B795B27F5437E62B4157A5D653F9DA93471B058DF03DAE4AF8114779114FFEE36C7F2E754A79A2AE8B4E6962AC9806A07082
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M(h.......'.."....?!Me.... =q.i.D:3$=_/...T...\|.. ..m#.\|...CF......=A..?B....v.`.}..}.......7'..D.h:HJ4.q......$..i.4.m.....Pi.j.....m.m+....;D.J.N.h.9.....&.......[3Xk...\|...W..d6.:.U.#.C..N.#..../$rVM...N.v....$).<..$.._:..%.I..I......\|...3_.....m.([..Nr:..m.m.m.m.6.{l....u......u........._l.r..m.V.+w`;.U.s6..IR$.=.fw....?cfjM..m#.............lq1..gp......NA.L\.T<..Y.Y......k.....U.O..>.H.h..a.......X.4..I.jC0.\+..}..X.-..P...a.....5....D.t.U...R."#. ......\|.@iT..,xQ..n.Ry.....P...-NA...1P.F?...%....\|C.P;.3.!t.(...L"2.` .c5~iw...+...nh...E....V...`.p...D..4.............i/(..H..8.v.....T..x.".m<.j.....,...q[....e$..~...%..f......$@4...=./..5.}J../R.\|(.F2.._,G..........GJ3.@.A...h...r..%..q....s..Z..e.46.....#.MSrm.!.,...... ...x.-....g`D..D..g...$.?jY..b.P...........8vAkla....ky.. ..x..+.f.p.P9..e.........,.<.t.,...\.&....;..0\,.h....%.-L..{...!..P.....W...}..C...tcPp...B......3...a...voU..t.A.@2eZF......b...,........ .@.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9974
Entropy (8bit):	7.969479858844765
Encrypted:	false
SSDEEP:	192:nz45Jy4YOKB5tvq5tbZNfyQCMcdFJcf4TWoY5FX6ZaQHHqGn:85JMb0LfVCZdF6ebnX
MD5:	F469161DCB6B428ED579066643E0FACC
SHA1:	06C807905D0264AA497FB2090A7EAA2F9838DACF
SHA-256:	F4A3A202AEF5AA38C9E2281BD8000312FBAC33F3F2576C92326921DFC126BCF4
SHA-512:	FF11D3FF7738202FF698922FE87CC85CF59D7497077B47B2C382A27347F973C632A4BFA506C5D1379DB9E237069AE07879CD2B4B056CD5101A7593104FBB0368
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw
Preview:	RIFF.&..WEBPVP8L.&../..?..X...m.=... ....Ag.......h.M..]..=9..`.b.ZK{.....Bd.<..%..2.{.n`f6.; ....Z...D.o.....j.....?.....5n"".I........23..\|........y=.....q..33..h.V.......$........}...+...e...C..gYE.....{ ...........w..d0..P.......!........t.{.......@....]........>.....v.0H`{=Y.$.....T..#5..>.ni.@@(Q....1...1.h,.O.n...,..!....A....]....V.:..m.H..}-....1.\|.Y.y..!.+.4...'v....$.M....`..p...s.]......X.m{-K.Zk........{?H.{...y1/.......ow...w..k.6..%...S.E!Z14...?... 4\Y.K.`1]..,$..!]..Kt....N....P.A....=.OA.Qo.P.s....\\.Ep....G.C...\.6.1........t..;.E.S8)....\|.>..@....m....I.I..YR..m...m.m.^z...W.1/j...hG...<k.2.?....3.>g.2&@K.m.&mN.Wf.....%Aq....YV....Y4.A. .B/....%#<..C....BY.......K_...h..C..vFK~z.G..>....C..(.....x....~.z."..C...ZY.\|...]..".!...2..1...m.H.$........\|..?........J..RkO...Qn...........k;7VP.xY........~O.,.7....d..r.,.B.Y.<S.B7J......a....a#....).nP...f......G\.@....Ax.!...\S;.]m.'..........n.....u......+.\I..

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	696
Entropy (8bit):	7.671310320036595
Encrypted:	false
SSDEEP:	12:mPXiJwvNPm1F+nu24710UPgizMQRBNt/Sh+1EBti7GhAp0P10Y:iiJwV6VFPg/Q3NtqQ2tYDsl
MD5:	04E23AC8DE78BD97B9094438AEA6E9FA
SHA1:	6B85504C01DC4265B88D22BC6CFFCA553DC368C8
SHA-256:	31652DBAD187570B093D34FD68C4A475CDD03F7C458C76A1D8321EC0EC518731
SHA-512:	6CBCEEF3FACBDE15473846A2514210236C89542A7E8CCDA6BB2DDA58024D54478F3739AFC6B20EA0D022A65FE0CB109B07EC01B1CC3109A4BEBB3755F2601BCB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....).$GR........{.i@.$I....r..d<..p.I..d......5..&..2..."D@..I@..bIF..F...n.S........N.R7..{)..}...aM"0.?..$...$:.H...R'....I.P7Lm.CM2.rD0#$.$".0.0...g.H0..!.C.bd.0.......J?.d....s.+ 9..In5.~&....g.o.....D.@..,,.K.r.....O.X.C^.y>.^f._./dM..:L.t..7..m.\...%.6mk..m.m..m.....\k.=.~..+....~S6...O@.........O.......0E....7RQu..`&.IL..m.Z...qtzsW...;x..FD.Mm..mD.7...f...`"..Me.^.....L....]..._..c....Q.{;.J.QO\|..U=C.Z.+.!.3.@n-.[.$.jQ0,v9....._b.2......I........,-.....Q.>=T...B*g..9Q}.v.$...0............h.c.F.....'~9.L..&^t..y7'\<...#..3..TmS.Q.Nl.x......')....3a......W]...~'.bt.............m.z......xd........B...UN.A.>...^R.p.:...P..`..1

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	187116
Entropy (8bit):	7.989674958243787
Encrypted:	false
SSDEEP:	3072:wkcdGbyQVF/cW7NvzfeGAsl1h4zfai1j/drkZSsnaroTdP2Wm1Xw+Z9/3eTogOXv:2SDNxfFBl18yiJ/NkparoBeT1XzL/fiQ
MD5:	AB9C95719FFDEC8C51CEFC3A9E7E58F1
SHA1:	8456B445DA8080A253B5F162D503536F5EB10BA2
SHA-256:	5C373BC7E0DD60BB5A98A1C519FE274369C00A294CBA34D1E2D3B92DBFDC3D70
SHA-512:	B43A92C5A2E9BFED54B967CA134F19E83723B94AE321024DD1961A092349BEA7010426D07242639B9B6DDD0AD5225ABEF1908A7F8F17038D4BA250334504DB56
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.MP..6l...a.@..........O.$%.%)..y)...2ZJb)R.d.C^9..=.v.$.....'...w.}K4f..A...[.I.....Ibe..9.eet.....!..DzH"..m.K..3..D{...$.7.j[.....Hw.../..p.\|.........w]....u..].,.^.S.(!.e..J$..8$........m.$.]..2J....6...N.Q$?-...E".%'...9o;.-9.N.......v.[......J.y....z_..\ Q..{..t9...#@...i+.\|f#8..K....;)o....H.&I,z..O`E....!..m.!..A.z.,A.O.....7d...$..M..v..v.,.....<..N.8Q.....j..$y&N.(q,).,MR").Db-...?..%.HR.....?.g..%...zq.?..e.......'....C...-...O....(..@[.m......?.-.....@..[.....} H.D./......[_._...\|......S... .4r.@>.37.O.X......,.%..(I.%.....b......A~>.O?(I.E../~..@.mAt.t\|s.X..b&....@.4p.\|....<...%I.m5.........)."..Ng .. ..C.t....p.O..z#I....H..H..hwyo.]......:Mr.4E#...B.x.m[uc.J.}....KC.#.b23..;..X.Jf/f......H..0.t.G..Z.....9.n.V.+..X.....L.....RLD.H.S+.....att.f"EZ.(.....H.1L...!n.t. ...xG1)z.....IC..(.F...0. .AjR31..".....[.H.R..D.DDf""v.....P0`.........XE.0D3.!.....k.a..+V+.b.8..6)..^..{..f.R..X1 RL 0........`V.....R

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.13432744982287
Encrypted:	false
SSDEEP:	24:D76bBSjFvVdGUF+fWlp9SlTpXXW/clctloFHMZeKsf:H8yNAwlp6lmicnosk5
MD5:	CE070B0F37AAD4B4E4D88BD0E0F05F4C
SHA1:	FF566AEB9CC2716C836185D1F88A0FB4E19DAB90
SHA-256:	0F9DD240A0A865EE1EF94A10A67490A7908BC6EC3CFB1CBC803A1D143B38399F
SHA-512:	DB29ADAABB650CF2966BDA1CE171D8C54644A965464DF996DDA0F7F8D51944EBA1B0446623A8B268C1CADFC0265F95C305B4849FB35B6269053DB4A79BD85ADE
Malicious:	false
Reputation:	low
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1712908896069/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1712908896069,. "screenShareVersion": 1713258072750,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	7.574658091098493
Encrypted:	false
SSDEEP:	24:pl5ZWw96EdiCvH86u3kT8kfl42Q2BAQbOKgaQ:pl5ZWuRdiV6iilrRA4pFQ
MD5:	A09C4FC40A9C597CF2D7C3965850FA28
SHA1:	0A9E6F625E373CF509180F37011C1D2E10C09B14
SHA-256:	D04A1E303595F131CEA2D8FE94BAD1565E2F6080DF3AD5C8EE29F422A9A3C532
SHA-512:	4E420B90A57923C9457B4675AC528DEF236794559CDCE4A6C5002C9C24A526DCF15083BDD5A6DA10CB9C5F4B4250A33B2D5187D3D38492F8D06FB91D290B717C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw
Preview:	RIFFx...WEBPVP8X........?..?..VP8L0.../?....%....j%y....Z.m.m...].;...........^Z....]..R.{...T.)....y."..~.>.{...1.#.\......\.0..w?.^{2Wb.mg.....e....,....;......<...5...kw...3..LO..{j0.>...wg....c........Xe....9..@.....4~.x.A.t.C...g'........l.}..m.E..+........YK...h./...$ $U.q........<^m...n.@.\|.3Z..K......I.`....m...e.......3..p....x...Q.=`.. ..^@^..G.N}.u......lI..L.HE....6..Gd.t.vZ.)@g'i .u.y).R.E......2....Z?.1...34.p..V....9..?.8....C...y....D..r\:.<4..............E..A.q.p...hHM...........i...L.H;...[.=A...N.a.Z....c6..bNvX..E....<.......N...#.......uc.\|...@(.L.u..p`..k.\|.+....R....+......+..nf.JI.y...C..iYo...&.....6a^_"kf^5:. .. fQ.8X!.v.q`:..W....hZ...~......z......pk.L._..@....+e=b.^.....i..98%.P.Q..w...Y[_4.z.....(pH.......N..'.......+.XnH'.....^S...,......<.....6f.r....}/......ej...]........EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10942
Entropy (8bit):	7.957006422703397
Encrypted:	false
SSDEEP:	192:YMY2AuhnJ2aKIHabY9G9uEpaoIEtSvrb467R4n6x9yQ6+xne3rQ/QzyPlj5XwhX9:aQhJiU9G97Czb46V4nkLne3GRPlxOt
MD5:	50D7B3BFBBBE0D627C40710B7A50B3B2
SHA1:	9ACBDF856DCB7814FE77D55C69AC51C403C33322
SHA-256:	CAF84F0C4AEE337CB0DC13903528C599C9090739FC0A25DC887CB0897A2D2350
SHA-512:	68F9EA5F32A12C3CA045317AE82F9CFC6DA928EBD0C2BD69AE949F87AB7CCC4C260A9C78937A4FA8ED1544B3D1D5FF3E6482E3E4DA9A9D8C0ED1DF95E7D2A665
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8L.../..?..Fn#IQU5=@.......O....d\0K.b.../ .L.E.JW.].-.....J{.!.C.m.u.8.$5M5...$.SM...............p......6l......rcs#.$N.}...3/.~.9.$E.....^\|W....S...@.$...&\....S...$I.$_..5.q.X........6R.9.Q...8CQ.0.1~..#\.`.Ku.7.>../?.T....`.......%I....p.Ps..z$...(....U.2...\)......!.........#C@4.Z..[...P..u!c.......H........s.Ps.s.\...U>y....^.Qw.7Z..1......f........S..w~.....R...-.p...w~8_X.....5Mza....%\...e.@...D..,.B...@+.....ilF..........i...'........z.+.2+......z....H.O.....t.{t\|. .3.....@...q...N......7u.........j..n...-...b....V.e...l..so...#.S.s...D....Y.....A.W....?"+3.E.I..#).+(.C".6.I...JjSk..h.K..+(...[(..2.Ljei.v...Z....]P..C.tC...NH...o.$.2...E........{..-......k..P. )..4.."I..<.Y-;=>..;....p.....n..........].*.........9..I"..k..I.!.vLL$:G.p...P.hb.!:.....+...T....:.......W..j.{{.F..}.2;.]v...m....z.....F...v...w.g.G..J.<....Q..A....3.{...m#E......'......@.....p1..P"...:..Pp....\DW.Y...jX.T.c.....Xd[.E9.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13528
Entropy (8bit):	7.980890722978058
Encrypted:	false
SSDEEP:	192:5QAxwCZOYOiezE7GakTksZoo2CdmPWuyPyduJDx3iEjxPuBD4FoA1rwuLyEgdGfa:5+ttiezE7GVkcTmPuNx/jx6D4FoggT
MD5:	6EDD8C15A386648ADA9A1E14858128E7
SHA1:	95CDC4A11E3DF841575FA88EBE5C2C66A789500E
SHA-256:	22B76AB369CF9F12C901159F053C1BE0821B31C075760A15A7F4248FF9B270E1
SHA-512:	5FD73BB2B0B0D1D0AFE238359343E9AA25424E11BFA98E9BB59C04227BBD3221ABF1C62A1ED2E7D4E7CB7351E1F915B92768CD8A62D74419DF2EDA13FFC80C13
Malicious:	false
Reputation:	low
Preview:	RIFF.4..WEBPVP8L.4../..?..Fn.F..E......9.5....?..!-.".@C.B...p.$....p..U.8!......-G...K<H.l...... ..^d.K..G?....K/..9g... .hI..#=?u.G.mUU.r....2..i.....H.G........`I.q....$I..=-.O.....O.R.fI....GMh@.....I.$e..\|W5...N. ..@...^....X...V...U..u.6..Hb.40 .T.Xjo........d2.R.....P.%b...A.{).....]U.H...J.H..i....*.B_9o......@...c[...z....m...%....p..-.....ci.&.....K%.Q.X.p".S.9.T.........u.V..j...R<....:....x.....d(.l.9..q.I....{.....1..L.<.......+.Q....u.....pD/NLB..2Uk......Oc....m;U.p3.a.......W..9Q.....3o.q..k......Dw.d...C.l,..\.._..d..)-..i{.....BO .u.p..m.-{....\...n.6L........v.l.l. .+4.&.h.<..%..L ........c.5..E..4.#...9..3.;..;..z.e. .6m[.c...l.m.m.m..m.....k.O....m.Vy._...m{...3Cf.6C.m[..k...........l..1.j!....\..p..S.P]...`....L..s..?...i...v..3......h...d.b8t.I75..%z......zJ.N.....s8)8.../5l..8.......HaS.....Z.Z...M}..E.T.5.Q.U..F^zwA.$I.....D@.qx#.}.t......_.......c.4.....!N....../.TA...H.,.X....A..<..Q..U.....;..+...W

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10312
Entropy (8bit):	7.978077493567659
Encrypted:	false
SSDEEP:	192:ZZ9O0GzTQJx8I1hrBhBuYUgnORFf7Po/cLyipdDmRqLkBia7mkOJl4KzlRYu:VGY8I1hrJuZgwBkS1LMia7LmvZX
MD5:	48AEFD624535D25098B2666E195C478C
SHA1:	71FF016A958F1AF6B72BB2A7820CF4E0145FB86C
SHA-256:	478052D8E3A1A597646E36658A3634725534437AEE4C4037B16F5DE9120847A3
SHA-512:	80ECBCE481BB3070975E3F81B9C74D3214DF809AB8CD4ABE12D11F479D8186B3D01A826B070753A2C7F6C359AF6F94B20A2712BEF2DCDB52308C0DEB6B4897D0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw
Preview:	RIFF@(..WEBPVP8 4(.......(.(.>A..D.......(....p...\|0......>Yg..q................}.....Y..?.;Z.....o...;..........D...?r..}Y.../....._{?....o...}@...=.3.......9.[......s.../......e_.?/..\|!.....?.......?..q..........<t~.....././......e.O...w..........+.......?...........................7.W.?o....}.?_?...-.b.:..k.lXGT..}....d..v.4....1.Y_}{.j...((..R....uF.0.....JU..<~?....-.%...vPzt.9.c....}..Mr.... ....Wp._@.!..t.T....3\|..C-........O..7u..s"k.n...(.V..K..*a..^0.....x.....%6...G.....4.)....o...4R..K?.H$..B6...B.n.!.%..Z^.T.....o-.Z..../x.e..<n.Io....b...O..C...I`..Q.,4?.U...(w.;l..k..$.h.=i..Rq....]...F$.$..r......=.....oVW..........TKh.N........1.A..,g%.T......h.~...Tf...-_0R"[...F..H.SC....9T.h....?..w.P.........0...%o......7.-c..K&4...R.yB.<x...o......p.>.6 ....by[6#.:f...#........{...).......a[......1...z..&.$1.....[.S.......v..j....[:.9n3......)ii".N...+A.......G(.....nLZ.-...UX.@.a..~...#...)....K...5.,...'?..Z.^.b.O

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10446
Entropy (8bit):	7.973434706139166
Encrypted:	false
SSDEEP:	192:7QwfKpIhWYRfB0p0/aXDCIWV6p4nn9Oss74DNBQI5gA5BP59Q:7PKp5YlB0miXDpWEaletQBY
MD5:	4F18E2DEADB10D605A2F3F89F6B39AF8
SHA1:	C20F2CB04244CC8DAECF90EBFB65FD6D8DBE3CAF
SHA-256:	4BF44BE09670FB94B4DA7343EC5B090A4088069C97D083E787285D4204A98406
SHA-512:	7FDCC54703D9ED2B933415DBA3B02C1FEE84E2C0FEEA0223AEF5A7C2322555FE12E445EDA4A3617A8850790366AE8C0E80BD5C495CF7B68025E7B7B962352745
Malicious:	false
Reputation:	low
Preview:	RIFF.(..WEBPVP8X..............VP8L~(../..?.U....#.e.af..Vs.U%.K...\..Y.Y.f....f...Zf...f..f<[.{~..%=u..m.:(3.....23.J..l..C....13].2d.$.=G..df(..>.A.d..d..P.9.l. ........:G..0.B3(0F.'.....?0.....X..qIf..1.I...e.3.!....v.........{..@.x..`R.].?@g.\|#.-3.]..)C.&rV...Tffv]..l....M[[.6..._...y^\|Mf.Y.e..$...D1..6.D..@...M.C..l..&R.....$.m.3.nG.$A`...j..~.}..}..}...Z...u..#.................2....!.@F.@R.P...\%Zm.ZUu.U.c..B...h. 9YN...h.?....b.AM..1z..p...../g..P.....b...>..e....k..{..k......c....v.$h9..7...H..]..6....i..,B.IB..]i7..z../o)IF.....L ..P.dp..../.o.....d!J.]..C>.=.G....h.......o..g.8..3j...Xb.4.%2.7.yt......3...f..!\|j.Q..V..1..x..+.)....BY.j4.q..sU...O..I.9.A.WJ.....v.I'.....b[..6.h.XE..T-d...vJ.R..l73D.._.v58\.`NW..<.l.C?nb..%#.6.+..fw=..s.3pjK..i.8....K..Z......_v.v.Gr....Z..e._....a.".O...mjpx...b.=.R....e.k.J...=?-Qrk.\AWRx...y..sI.MeN.....$..6......O......`....md.1..n~l].Q. ..#.v..\[.o.m .*E."....I...m.6j.....).<w.`....V..a...

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 160, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6391
Entropy (8bit):	7.925576155945514
Encrypted:	false
SSDEEP:	96:yBOHH4i/VNQ9Z6PSWSzCjDXbh6LTzPAZTMu7EmBOTzB8rl3Y5/T1q04U6xjbM3M:97Q9Z6PSCfl6nzPMVBOfBE3GMp5jbqM
MD5:	BAEA015A2869C38653A857D46D227854
SHA1:	54D9F20EBE2369F3DE5FF260E5660F54A550A247
SHA-256:	B504DD0577136856D78114D514A13139F2D1FB8B05712787019A5D750C811A50
SHA-512:	92D1E731ACA8E1A9E3B9C48695246A941A9D2FBBCC0ACF699593946DFA4DBBF0B6D138EE371AA2A02F4298188AE749579687372DB0449B0EA8B912E2E02C4811
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............%O....SPLTE........................................................................YYYMMM...................iii333.............................!!!.........eee...}}}.........III...ppp%%%...www............mmm<<<BBB...+++(((..........???...666......FFFbbbRRR.........ttt......\\\.....999........UUU........^^^WWWOOO000.............```...yyy.~-y....tRNS.T...G...P.....s.;h........>IDATx...;O.`....8..!9.C'C..".....C.-..HMg..d.....(........yo.=+..b8H..7,..h.......J..R. ?.%../.tV...F.;..e5}82o......F.eqJ..bY...zY..Jc..".19.,....%..p..r...^Lg.K.y....h\|z'..>.......6.r&..f%.>Mx.LN.(.m...#...B....8p{z@y+F.......".Z.._......b.9./.$..].U9..0.-`+h}..,....b...~.<.X.2..r........]CWb.~w.!.....8l...Z.:50j...J.B+.6.g.A.B._.J.,.(T...8..... t.o.h..@.%..........t...;..r.t.t...tW......J?.7.$.(..z..8..v.A`..... .%n^P1E.LM+.....]gv.0%...y...p...g.....q.._E..o...T.Wih..r..L.\.....?y@..N..BJ@.@.X......3...z.V...&X.XNhY.U..R.^+..'Tp......K...Q

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	196724
Entropy (8bit):	5.1354044541422486
Encrypted:	false
SSDEEP:	1536:ejNyqUXiJc25xwftWJc6qTWLwQnQoAkSWZmT6ocTzVqJlOYQA33hodGWXTDvFz8y:8UXiSNtrXojt
MD5:	E904CA2E7AED586F525E59F7F859D238
SHA1:	BD50A1EA868373C2C069B7DE97E702D00805F3C7
SHA-256:	B2A5E50BC93A01B4DD987643CF8EF1E5C60CB32EF061025461B76936F4E0A49E
SHA-512:	48F3CA3190205CBFC51C06052A675506D39FB12FB2441372EBA59883837DFB9D62AD8702C08E88C75E48FC5A021852091BC2EEA6CD25557BF608981AA8B86B8C
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Preview:	@charset "UTF-8";#globalheader{all:unset}#globalheader html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#globalheader body{margin:0;padding:0}#globalheader ul,#globalheader ol,#globalheader li,#globalheader dl,#globalheader dt,#globalheader dd,#globalheader h1,#globalheader h2,#globalheader h3,#globalheader h4,#globalheader h5,#globalheader h6,#globalheader hgroup,#globalheader p,#globalheader blockquote,#globalheader figure,#globalheader form,#globalheader fieldset,#globalheader input,#globalheader legend,#globalheader pre,#globalheader abbr,#globalheader button{margin:0;padding:0}#globalheader pre,#globalheader code,#globalheader address,#globalheader caption,#globalheader th,#globalheader figcaption{font-size:1em;font-weight:400;font-style:normal}#globalheader fieldset,#globalheader iframe{border:0}#globalheader caption,#globalheader th{text-align:left}#globalheader table{border-collapse:collapse;border-spacing:0}#globalheader main,#globalheader summary,#globalheader det

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	18916
Entropy (8bit):	5.57265507591957
Encrypted:	false
SSDEEP:	384:kSDkYvZDeaDoS5vjYeU4Cy9uZJ+rRb1rK+UmFo8dYrcHdrATlEXMIApxFq6YqvQh:kSDkYxVjRjYeU64J+Vb1G+UmFoEYIHdD
MD5:	7FFD93211D5E3E2369393D251B4A8FEF
SHA1:	3D350DB7D1541EC5013FB0DACB62B54C0C93291D
SHA-256:	726AB7B33F13E29086438A288F4BA3072471BD4CD4FD3872411DECA978E55781
SHA-512:	1D800284785806E9CF75BDE8448CF261718E1C9B930B2BFDCB0ACFF9B00A4D93A2D43B14A34ECA74AAAEE3D7A9099320643606B6B770C8367A896B130A9240E7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,DRmmld,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=GjTCAc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var kFb,lFb;var xFb=function(a,b,c,d,e,f,g,h,k,m,n,p,t,v,y,z,C,D,I,J,K){t=void 0===t?!0:t;a.open("div","EjA6Vc");a.ka(mFb\|\|(mFb=["jsshadow","","jsaction","jSjncc:FNFY6c;eUpBOd:pRhyN;OD2uJd:LSNysb;FBWqge:XzoRjc;PfPQGe:E9dKsb;KTLxtc:pXwq6c;r2ouV:FNFY6c;N4OFW:E9dKsb;G25Qzf:pXwq6c;JIbuQc:KY1IRb; keydown:KY1IRb; transitionend:H9K8kb;"]));a.ma("jscontroller","ZakeSe");k&&a.ma("jsname",k);a.ma("class","VfPpkd-Sx9Kwc"+(n?" VfPpkd-Sx9Kwc-OWXEXe-vOE8Lb":"")+(n&&!d?" VfPpkd-Sx9Kwc-OWXEXe-di8rgd-bN97Pc-QFlW2":"")+(p?" VfPpkd-IE5DDf-OWXEXe-uIDLbb":."")+(h?" "+h:""));a.ma("data-inject-content-controller",""+t);v&&a.ma("data-disable-esc-to-close",""+v);z&&a.ma("data-disable-back-to-close",""+z);y&&a.ma("data-disable-scrim-click-to-close",""+y);p&&a.ma("data-is-scrimless",""+p);_.Z(K)&&_.PN(a,_.fO(K));a.W();a.Aa("div","NPq7h");a.ka(nFb\|\|(nFb=["class","VfPpkd-wzTsW"]));a.W();if(d&&C\|\|d&&J\|\|C&&J)throw E

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,appscategoryview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6294
Entropy (8bit):	7.954888158150672
Encrypted:	false
SSDEEP:	192:xnRvykBNBHOY65EWYJRCLDT/lrQo+IHHctEQHG/B3M:xndycf65PI4vFQoJnctxHGBM
MD5:	71FA9F5920145BEDD3FD217312A23549
SHA1:	10FDC7F1BF0F4BC6BB15BB0EB30A81FF4478A2C0
SHA-256:	19554DF472C0CBBB8DDE007BD5E0E5F62463C2C8EAACD03DFD8FC6AFEE979F1D
SHA-512:	0D3064E2F8EC3FA479AE9399702DE593B0019CBE65BEAC92686A8DB296E4ED62F23C5916B0841199621DF9F179C09D7B99B365F6CDF3FD9DC1A8DE5128BAA704
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.,....$g.afl.h.............y>.......G....3..RY.s.S.......jT..3[....Z...E..D.ed.#s.8.jT...fn.V.n@E....].].0g......Z.........J........A.QEeP....r..QA.?.....'W.......(.....l.v.c....m.m.\|~.m.m.b..I....M...,...m.j....k.h.T.......=..i...9.....!\|.6g...?.........u.......g.....eF.l.^....M..~.=+.;L..g...,.8s....~...S?..5.1t..#..9#....S.C..,.'......$qk'94k.;~..hx...B.I..8^_t.=t..f........f.z=....jl.Dg.....W..e..u...<._.........d~..?&.]..2SZKK.a...}S<Nm:h.....x.6..{.,..j.Psv..%6...l...5x..\|.....M7.l)...]v.K.p..J.......PaL.-R..W.[.Yq..t[.b.Ujv.8....a...nRc.{,..ZZ.(\.+j..3.&...."....eOe.9.G..}...=%.8N..!.u.dg.....l1g...].W..kJ......3.o.7.%..\...yi...r0C..,..[.e.~,;.<xZ.K..K.;.i..7h.k......Uky.w..B....s.%k5......U2w.(.Ll..3.u4[."..+....yk....-.,.}.....B.}...6-0".mX.....0..O..,....f..q.XJl......,Y..]'..T...0..".... .B...s.%.YA.6...,....g.gm......_..XV..e.2...j.43.8..C"...M.2o....C:..(9....@..=..A.W.54;.....={..c.D.)t..8...B"..[..o1"

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10446
Entropy (8bit):	7.973434706139166
Encrypted:	false
SSDEEP:	192:7QwfKpIhWYRfB0p0/aXDCIWV6p4nn9Oss74DNBQI5gA5BP59Q:7PKp5YlB0miXDpWEaletQBY
MD5:	4F18E2DEADB10D605A2F3F89F6B39AF8
SHA1:	C20F2CB04244CC8DAECF90EBFB65FD6D8DBE3CAF
SHA-256:	4BF44BE09670FB94B4DA7343EC5B090A4088069C97D083E787285D4204A98406
SHA-512:	7FDCC54703D9ED2B933415DBA3B02C1FEE84E2C0FEEA0223AEF5A7C2322555FE12E445EDA4A3617A8850790366AE8C0E80BD5C495CF7B68025E7B7B962352745
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw
Preview:	RIFF.(..WEBPVP8X..............VP8L~(../..?.U....#.e.af..Vs.U%.K...\..Y.Y.f....f...Zf...f..f<[.{~..%=u..m.:(3.....23.J..l..C....13].2d.$.=G..df(..>.A.d..d..P.9.l. ........:G..0.B3(0F.'.....?0.....X..qIf..1.I...e.3.!....v.........{..@.x..`R.].?@g.\|#.-3.]..)C.&rV...Tffv]..l....M[[.6..._...y^\|Mf.Y.e..$...D1..6.D..@...M.C..l..&R.....$.m.3.nG.$A`...j..~.}..}..}...Z...u..#.................2....!.@F.@R.P...\%Zm.ZUu.U.c..B...h. 9YN...h.?....b.AM..1z..p...../g..P.....b...>..e....k..{..k......c....v.$h9..7...H..]..6....i..,B.IB..]i7..z../o)IF.....L ..P.dp..../.o.....d!J.]..C>.=.G....h.......o..g.8..3j...Xb.4.%2.7.yt......3...f..!\|j.Q..V..1..x..+.)....BY.j4.q..sU...O..I.9.A.WJ.....v.I'.....b[..6.h.XE..T-d...vJ.R..l73D.._.v58\.`NW..<.l.C?nb..%#.6.+..fw=..s.3pjK..i.8....K..Z......_v.v.Gr....Z..e._....a.".O...mjpx...b.=.R....e.k.J...=?-Qrk.\AWRx...y..sI.MeN.....$..6......O......`....md.1..n~l].Q. ..#.v..\[.o.m .*E."....I...m.6j.....).<w.`....V..a...

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1494
Entropy (8bit):	7.855673114226291
Encrypted:	false
SSDEEP:	24:Hd5CJTJTAPUAME518c5CAyxmU2mqt2bkPRYoJ5WyAmzDBv4VA/Sps7oSXZ+dKvs7:HETAcAMLc5CFH2bt1txzDyV2Sp/SoEF+
MD5:	0C8023F37B95AA08269C9DD68B7FB3CB
SHA1:	74C8DA8823B9B49DB4804561CF98D8F09CB9F1A2
SHA-256:	3D4D89F4E5DCEF362E3730ECFCC66BF553BAE7AAA8E7A7AA169C93D0271BACF2
SHA-512:	A70850CBD44BEC4A775BF5CB8B14167A60F74ED6CBA261EF3C6B6B10E9299493F94F92698C546E6FE554DB75F1A0B2796E70E9B7D0346A728DA82768F2768199
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw
Preview:	RIFF....WEBPVP8L..../?....Em.@J...#.(D...8.H...I#.>...6..Y....,....`.m.......A....9..?..x..@..>s\|..x....x2....d...........m.{.>..]rRwww._...dN..C......t.g.../b......n.:EJ\|k...[ON.....Tg...Z..n.e.]........y..m.......vw....6.......{t.......N.Cg...)a...m..wL....]..e..8.4..8.).~]}`....9.Q\|;..3....v~/z..R._......;.L...E..J..Q..8)<.a....#_....A.\..$.(^+....4.._..:.D.k..,.?.?o.)K..Q/.....R...;..~....-a.h.B.8h.....y.\zt.5}G.0.d.,9d. ...x.,Y...../....dC.CYb..}.'.O....U.(.).QT-.l.U..A..z....M.'.....1,.l{.-.R..:..9......!.S./....T.r.^..XO...R5Y.J..S..0.K..&%.\.....Z..V.%z92.,..z7[..yk^.O..sd?.N....k.'e..f...{v.f.9.j..&......;....'.G..C......'......z.Es\|.:..^....._.K.S...].i%)#.S.X.h...cs}...;.>......q..{R.4.q...f.....Y....[$;..<}...o.+...:...l.D.Q$.Ha.P.(wz.j...g..'.9.:.T)E.<P.k..yCLL<@.2~\w.1...x....d..s.!.F..k..B..2O.B...Q,....,a.V.....n/...@....O...3... ..2....<.........V(.....8P!.}}YU....S...R.1...+..0..3'.zy.s...J.^./L.x...h....2<..A.....-..

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34807)
Category:	downloaded
Size (bytes):	980080
Entropy (8bit):	5.672658813850526
Encrypted:	false
SSDEEP:	24576:pLFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmk:pLFI80BM4gxA3svhhuRrBiFpAv6DbgW6
MD5:	AE18B3BB7064D0485CC5D985D77E19BD
SHA1:	A74958DAC14D604334E792E09B55FE696E5A886F
SHA-256:	CDD8E31E6B624D02461CA40F6637B55FBA51D4585F2F623647BE4417DDE53492
SHA-512:	3DA01CC473AF9F1BCEE09ECC8C09B3643CB9BE3F905F9A4398C599F3CEEE7FA8741C3329FCD0AAA13B4FC90D8F915F7B01E2FB206DEAB6E8776C7C9CAF49991E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,fl2Zj,vrGZEc,wW2D8b,j9sf1,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	194
Entropy (8bit):	6.777928192792645
Encrypted:	false
SSDEEP:	6:8Zgxlhoqb+bM8uFqgrBk1uW4spTAw/SOrfCdx:8eThoKJ1FgAUUiu3
MD5:	79E453B72F3470B2C8171356409CAB1E
SHA1:	26A9FD1736BD5899035606756CC61A86C6B0913D
SHA-256:	5E20B59F35EEBDEBEDA7DDA606EE21DB6907A544EB5B82181A9DB787EA9BBC57
SHA-512:	9145DF93042A0FA21305A9818DBB5198FF2ABB57EAE8E7D3A4DB8D8EBCDE4FF2FDD4B8185D8E98500EE3DAC456FFB5D80A8600CA90CD1CA5C345C8E58DCBD819
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw
Preview:	RIFF....WEBPVP8L..../......l.=...$C$-W`......m..U<.C..'..o....$h......i?N........$..#..M].\]S...NDU........=..Y.d.Or.I.....GnO\.........3.../.'.w.LUf<..&S....Oki..Ir...'j...iA.o.....

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9990
Entropy (8bit):	7.964763181222116
Encrypted:	false
SSDEEP:	192:5FwLEVi+Ir5AkxUUgJ78hdL1JBK7n/kp36JIIx0OoYDDifrlYepwrukCIA:I3+InWUg9EhJk7/kp66+0TKDifrlYepx
MD5:	04D389A4467BA76AE8C0623AC9BEA07F
SHA1:	2A12DFF7CC279729B8D0AC71BF552A6A9A58250B
SHA-256:	7D9F877546306975C24D6A72B65B3F4B31816D8712735796D0BBC159DE49FD9F
SHA-512:	E36617ECCAA6F6D069B6AA2DD71D7AEC81F10D13596FC70A9CF707AE8EE3F5F59992966F5AC361AFDE89DA164005086FBA41F7C7280D9900FE7C09D520EA7A2B
Malicious:	false
Reputation:	low
Preview:	RIFF.&..WEBPVP8L.&../..?..X...mj...X....!.v...........1.s1...w...b.q.t...1....[..+RmeF1/.f..F...cS.5.t>.e............7)..}...d\]...D...p.\.Z...v.....~..m$..............F.IJ6.C.P..?....m$IN..DX...QPX......').x..1C.2sq.Xx:.\.\...7s...8..v..p.ff6...jf...1P6.P...t..Ap.O...f603gk.c....L(a.L.GR..F.7Ao...&..RF...9.U.tq8n.H.......c........Zk.?.n.r..m..].t...+w..iy...tn`........M...]...k.v....i..Z.........V..Zk..=..c.9..E........U...a..z.#pS.+..E7...'f.S..}l.~..k}..j.j.;.#.V................Ue.....b.Q.[FFL.....7.m.......b.....\P..!8..9H.d7l.5._.... .....}...c.7s.^..ef.afff...{..2.33..K.f.33.=>..S&.....~...;.#k.Q...G.j........;....N.:U..03.......6.l.V.5k].pw(R.....{....SJ..=....Z..R............J.r:zJ......p....pw.-._.G.,...o.m$..^......m{..l.l+q...tBQ\.._pB....~...A..$C..:...../.....g'.=.#.SA...;.3.j.pD.rt.....:...:(....3.w..+}.>(.Tv._...r.(.6^W.KA.......6E..U.'v..]-......`7..Y.8......f.W.....* .U.Q...e..q%.@`..r...}...R.S..Wy..=.

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8002
Entropy (8bit):	7.975426170230245
Encrypted:	false
SSDEEP:	192:vaaEAeVeRaAQ5EWBzi1xR9lOSJskldqfI8KACyvEPUjPKB:NseRd6Ewzi1vJrdqvqGEsDKB
MD5:	856140824C7B8F250834759E1EF8421B
SHA1:	BCA87B45A030069D4A4418D6537448C06107A38A
SHA-256:	DC3A0E35C1514F143B94271F958255001A5954A7F63179109A2A16BC382537F7
SHA-512:	F4BE351A2013EC730668798DCD81DDABDB4D7DB56E21BD08A6024504B2C77A85437BA4F9F89259E6FA2622BB305AE7B2AE339A6E63000CC8CFB90803D0A44E78
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw
Preview:	RIFF:...WEBPVP8L-.../?...M(l..!.KjD........y..ff..)7.D.H`....Pt...$E}w.._.`f.....$Em...{...?..[.b.6....{\|.3.........\|#~`$......].#...NB.<.].C.!5.4.....s..HCM.....<>.o5.$z...Z#.e...=.[T^lS.yB.....$......+=.....{iV.P....C!"..&y.i6.j...-.....3s..#U$.].af(..3...+T...c...2.B>u.n....mo....f;...x<..FZ.A.w)gU.V........W..a...-].33..e....m[........f..1Hi...6(..(.-..c..-t.v.&....?y...km..r~....].v..J-nf...8cfffffff.a<..x...b.m...7..3....TR.L!G.,.J...`.S...f...}.fF...3..>d.L.,..n.e.....v(S:.)3..`0.u.......m.!I..~.......Y.j.m.m.....w..#....{.4].Y.....m.[g.6.Z.JIf.0.9........0'./fff..03.u..r.6..e...^+r.zr.#A..$....@..[..P...A$A.....ph....\C.......8..S.....sx..`....N..w....K..>........Q.w`....p`....rb. ....jx,~...l46Y....).eI.....N,...uI.EO......o^.K....^...)..."Y\..9Z....... .2..X.n..J.D....s..A.......>....6....%..^....Q...s..&L>-..D8..w...l...N:.=>...y.)l pSq.A/.z.;B...*$....FQH.TFGss.~.......;.}...g.......D4f.gs....!..S.W.;..oz.E.{......~..{~....Q

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	21274
Entropy (8bit):	7.978534674609754
Encrypted:	false
SSDEEP:	384:Rh3sgXgspdsr+ZvTq8VyOTOsVMjlUMN8Gbtp1yeZ6MFIxBqnTaRpUYdiR8Pd:Rh3sgXgspSytTPzOWMjlUmmS6MaGnT6P
MD5:	B315200995FC9114567CE43A84654482
SHA1:	3517BCFC32E9AAD8E9F518294B315F60CE961AF1
SHA-256:	A63B0723FB846995DC71A9DEA8B184E58087B8D0488DCD270CF01671A5E8FEDB
SHA-512:	0AA5F64C8B629EF608306782CD92A3717A2C1274766A38E00481200718724469AE7B1B0DBCE699303C823595C743B635370F7028819F010A452749262EC187B5
Malicious:	false
Reputation:	low
Preview:	RIFF.S..WEBPVP8L.S../..I.M@l.H..R...?..'...O....\..Zjv.0<E.K.+..$A.a....W.5...;.Y..SH8....n....b....H..9..0....(..o....$.< @.C..3....5...q..<.l.Q'!..Q_b>.g..H.....C......_.`.C(..F..x,....Yb.A.W..^h...5.-z.}S..Uko#.L..49...........?F..lje.0..IR$..a...o.=.[...........>.y$.@... (..!S(<..u..........".`.].(..#.<...M5...PH.1:........2.J...$\...2..a.B.L...F..5+Q......>.z..........Gy.....9h.^V.{....3-....i.9...U..fu..p}f....!.l....\|-......z.%j...{'.$.[W..U.JW..G..s..V..ZN.x.T...JWVeU...^rb...+.t2.o.D...m.U....'.....<Og.JV...g....n......'Ib.byc..va..>..B.-......Z...\.f....H2.[..-].t\.ia.h/......./C./...n..k.$.^.k.0..Z..-I-...3C.....7\|g.0...N..\|.!_.....X..+>.......:.7...p../.[.....W,...o.......C...>!u...;../..`.<?.f.$.......k..g.I;.I`.@@.....m.G...+I.~#b.8.9as..L.Cv#.DC\|%.?6&k.....{7m.......m...1.f..0Y.2..{7...{o....d..!`c..o..dk...H:....q.W....UC..Ns.G....Sw...C....I.b.u88QF.m....c...u.^.l..m.VD.....c.ff./f.[.-..d..R0.13...[..$?...m.

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3008
Entropy (8bit):	7.926057879000394
Encrypted:	false
SSDEEP:	48:2gx9k+wslq4eVo2DMgnG5WdpvsqjvL8bgw33dsbhTKayGlGOu1PE/:2gxGKE46oqG5sEqjgbgG3UhtyGEJs
MD5:	E4B704C1858279E8A36F96DA4D88A4F3
SHA1:	AAA8A2F1617FE294FEE71879A6014A5078DF71DF
SHA-256:	F0A7A3B74E026E51F2102FC58905CAE03ADA02331BD673F7519A77EEF73A1282
SHA-512:	AFFC2F4AC891FB123811754765A730E7A095A74904C7770BF445D22DDA4F9031217C4E20718D4C208CF1AD24E27A59EBB00980301BA8F43C01C31B1B29A55CB1
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..P.6..._.1.+"&...4....[.lE...F..."......)o..y<7.ms...=....z.=.m.m;9g.W.....JiW.X9.r.:.l].!$.....t6&v..W.......].J..j.{.1..s.9'...-6..m...+.NF.m.....8._l.6.j..m.m......?..?.rk.Z.....L.k...........Jp._....bG.=..L.......\.f.....9S.m.A...........WO..!....f..R..[Uvik.,...k....8...$.........y....K....E.M.6.H0c<....?.d6w.k......).{..i...=..?.2.c..^s.V..~7J/n3..x..Q.S..`.K...E...@...A..AY..#..c..Y..}......N.H.T..Ez.F9..fs.E...)...J...=...).E.....'..Y.\.;..wh.G.v. /...m...O.x..:Z.m.....]@.wj.L.8R9.....9.P...4.........#.^<.....d...aQ..I..^2w.J...u.a....k/$..).G.;g...g..k2..\w...d{....C.^.S.1..m../..>....... ...U0..\|......!.#...l.\|...1 $._H.5....2.Fo.V.}..K.g..ta.V.W...B.......q......r...C1....V0.F....n.\."C.5"..........Z.Z..Z$n.....J.Co..q~.`..8..._..P}I........6G.X#..{...yw....N.#96`.+......Mw&..O.n..<.5..i).AR%..Y=..s.8.._w2.A..D......Zs.X.l.8.).N#.hZ...'...K..q.K.i..t...I...'!.`zqQE.....+Y.tK.( NR..x/.*..t..SK

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7464
Entropy (8bit):	7.9682966063662946
Encrypted:	false
SSDEEP:	192:rODHsjH90y69hTy9xDf9aiElSYdSyrz5zWfr2/D:rJ0rSXEk+
MD5:	EEAA0D484C86FE8CD50F90F0122DA905
SHA1:	B46DAD7EFA1FEAEE22106625453DC920F76782C1
SHA-256:	D9FD4EF4F1745A2E14849B0FF0E796BFDE82FA490F6F3AFC52F455F2BE89F792
SHA-512:	E490CBA66F680EE461147F1811254FFE3ADAF50313C35D15D134EBDFB90A855CC7222AD41E30B65A97A06C2ED39E8A191588B6015E5B36A003A401CAE2A6815F
Malicious:	false
Reputation:	low
Preview:	RIFF ...WEBPVP8L..../'.I.5..m.....)"..(... F..9.M)..........%..Qs....X.m.m.m..f...==...:...[.{...f.....~bc....Z........m..s.....q.. ^..S...m;.\|...6c....9.........==..9..-... ...._...a$.a#.I.....!A.%A.$.M.t@..Y...;./.l...]'.CsI...................K..V ..4.j3..Zm...8.\|7`...H...$.........'...#0.kg.6 ._BD.....H.2....2d..!..Tim...P.U....gt.2.>.....4/...(...0r..rLT.p....._.".J.#..~.....j.7.\.?2&`k..D{.6.C.g...^`2...%..m.c../....}.-...JK.//G....f1 .Y.2=aS.6u (.<<.[.8..!#.d.....Y...+J.de.y..=......E.'.%V.a0y....I......Eroo......xM.U ............V.;.._.Wl<{.uM.q.a..p+......'.".>....I...bC.s..<.`..h....X6...$K....U....TG...`..w..P.l.. ..@}.,./`C.xH>W\|..t..B.....-T.s...y.@ur.E.?g.)....O..Tm....D.......7.es.q.zM3..T.....A..k.D...q.i...r..S...\|..x.....E.cN.D.9=.c"...~.J..A#.D....]L{.yJ*S..Y?..v.M......a.........@.0Z..1.=.p8...z`Y.&E...5.....7..1.K...F&L&..?..9..[#. .6d.M&.m(..3.T..I....H...=..e2..........C.}3. ..`.[1'.fo......<.`..gp.~.Y.&Ya?

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	458
Entropy (8bit):	7.061920474186539
Encrypted:	false
SSDEEP:	12:3JcWXSom7OiRJNOtqnZBLWsssssssssssssdijHjGBaEgl4:i+SJOWXOtqjWsssssssssssssMHjGBae
MD5:	6C38690E2D4AC20F2352EC9A67FA13AC
SHA1:	FD9961AB0FF195148F4E1DCFC66A4CBCCF1E2664
SHA-256:	79BF41F2F5C98680409453FE1E5557141994107B9CB35126237A9A6E3BECE001
SHA-512:	959D76FF67256F3A1470C00A0127424A9839A3C7D43B70314B217EBD2AD6EC9F4C546F63949E822628A0A9C93E9A542C920655E5F6269F3950510257BC9D41FC
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.7.........!..?...i....{.v.A.....$.I..U*.Hx.2.7......2......X..&..na.C....@..d..GA..e}.l..... .v.6P....\...:%..S...O@.......\|.>lZ/.g...k3k..A..w.Z..X=....M!R..u.B.f..%.a..NQ...Z.(..c.Bt.3..:v.B..u.B\|Z.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.($...\|.>S..Y....av..p]..{5..tu...\.......;]].)...\.............w...\|............s...yfw%..g.Y..{......T..K....<..k.......3[..K(..7G.cs.~Z.......

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3812
Entropy (8bit):	7.922451062209362
Encrypted:	false
SSDEEP:	96:sx3SGYzpNuTh2qDNrGXbgQZHYYh+ITpWXdBYM7bKWY+:sx3SDp8CXbgJYh+xBYAY+
MD5:	3C50577E74966837BE535CFA1BB62E38
SHA1:	DF35010A655CBF896DC5F592C1656410CB83DD63
SHA-256:	9C960DB00934C89DE1A7BE6931C972CB67E9E20C07462A7C870CB93943AB8BE0
SHA-512:	BD86FF5C590F1603E32238D0DB6F7CB17B8C1A46AA78177296D8F6359B3DD73605ABD72EB4BC34A49BF3AB6548947540ABA62E429AE8E428FB6CE67E2C465340
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.M8r.F...f............M?6.n...`]..c....Lp2.;0.$.Y......v.^J.v.....&^...KaGT......m.v.1....z....SX$n..h.._7<\|...H.......K...).?..G.[g.3......0@L...z..z..m.@......)...wa. .9....j....z..$..o..;.B...M.!.vR...0......tV...)...V......^..&.e...z4=.L..d6....[..?....^{7........]......Je...C......R...rW5N3.....K.UR<........[....7.m.V.QX#H..UZ.Lz.....N...}.#..m..\|r.^.......(....vL..\|.......?p.....[.......yo.Q.....&.....v..o......f.WtO.7...Vf..i.).[I.J.v..?./.z.y/{..\..!....+.:.{o.+..]..."\......T........U....S.zD-.......\|..\|.E.......v..$i.....lY.V.I.\......(b.bEQ!5G...].K...Z.f.=.4..s.[WY..i..T.l....kz?......RH.e......$.D...C.i ......n..A.S.P.i:.....ai4......s.e..C.(..>.i...@i.i....".....H.HR`.H.W.BN.=..9z......\Y.sE.;q.P...5i..20:.G.H..tvy.,..kT.........O....2&...i.6.I.!....x.7...8v.$.C3=...r...r.>pC...q%*Q..M.qA`.....k..8..6..43T#..f..7.....y..r[tT.R.k.\,..Fa`.@Hn\..&s.z7&..7.CM......4..@........GQ.n%...4<.+2

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 109628, version 1.0
Category:	downloaded
Size (bytes):	109628
Entropy (8bit):	7.997834372736158
Encrypted:	true
SSDEEP:	3072:I/PVzzcH7zULTR9S41qKYgEtXD/PhU/ffXEMY96gYGWPrInVe:+PlLd9N1qjxhYcZW84
MD5:	67A9B38ABD1F9F80D5ED943760F1C1E6
SHA1:	9C646D28E62FCF3C4A1ECF7043632FAE3DEA6270
SHA-256:	8D73261B2DB18AF30E93ACBC8E8591E0784706FC283C37C465F92012256757D2
SHA-512:	A479BB307B03F74202B24E95D85085E8855C48713E443F5EAE0CABD077D45282F8765BCD6D36733AC336504E1AE1B1C3CA3BB41A428F8A240EE7E7B91FAB39B8
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_semibold.woff2
Preview:	wOF2.......<......xd..................................H.`H...X...4....6.$..$..(.. ?meta.#..`. 8.t[.w...O.....m...ElU6......#..@dc..~.....1D'I@=h...3.m...................w'.H....^....P.P. .("...Y.K..4...i..R..Y.WH1..27..b..J.N.....C.C..'.h...{.f.8.2K9...[&...i/>b_8@..yX..q..=Qw=.......\Li.t..Q.....`Ov1.i.y............q..4#.(a.7...A8n.\|b...{o...Q.0}w.CL..ft...M.b...p...(.s....19...L....l...k.KJ6n...7....FZt....\|oc.n=l......5~!p.1...SOX.+.dn....Be.s..}.T..'.......4y2....,u..+U..]..~~.$..O...z....r.dEg.......<..yN%Q%8}...a.qu..]M...zcGwY...q.!#..,..4......n.X.W..B..s...i...B.`.DD"..b........c1....24w..\G.p....~.4.....M.^x.W.......[.CbS..b4.Q.c..N.."..._....t.-...F...q 'W.O..I......MjBX......?.nF......Ih.y..b.P.S..A..H..l.v}d.m..~...7.<.?..../...,$.).m&.."Tw....?.v..m..k>;v.Hf...c..."k......$;....Z...../{.........K.~."cXa..aQf.6[.U....>...d...P....j.diUI.'1...{.w6w.%.P..U....m.X..).%..K.......Z.Pr.2."...66`#kd.....U...E{.U}..^{..._..;..W).

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2572
Entropy (8bit):	7.831256232573757
Encrypted:	false
SSDEEP:	48:lmN0E3OQ82yrWJ7xyxUQuAFo8nNr8eWzhza/5lMihyzoPLB5kXgDB4ChWc43ljp8:MN0CXVyxd3jo1aLthJV5kXgDzhWc41F8
MD5:	E4ADDD3705A5E68E582D901877DC6075
SHA1:	4BDED5CF4FA4C5FFACAF5DD12636085C6B9E73BA
SHA-256:	0521D8CBFCCEEC71D4CE0F2D24647BC79655060B6B69E5759A4FDD9D3E778E2A
SHA-512:	66AAC972EBE3E56100F9C717398C960CC800BE35A3D8D6EFCA2C34E7F4CD067DD4B69C99C5242A7EB3D97E5F0A34E2A18677F663E0EE0EAC0AF9038A146284BC
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M.D....D.?....m..e...0.l.F..Ly....7...d.(..:.....3..5.KUJ].Hq..b..D.,....#.#. Z..\|.@.<...S$.NV..e...~....033.{.k.9...f..!....W..).....:R..r7...L%....UK-Aj$I.d....-....!;.$E.<..1.>.UxR1.Z'.l.T.9...q...r.\.KXCW.b.F...?.8......7............3{....\|_v...79.o...5..3....].bG.O.q.~]O...G...g'y..}.Y.V...t&7.ua.y%.q&.Ru.^.e.......[R.,..<.....O.D.N...Z.e.P.t..c..'.._...Wf......p....h.F%........M.H...~V....^.~.._._....#).'..v...`.......6..p...1....s....U.,.w[.....s...u#..-l....1...i.C.e.....\|..........SR[...8..X....-G<..0.n...._.....:.......r..q.T\|J...`.D!..c....l0.X...........Z..........e...q.%..C.Z.3(J..q.]<..;'}..H..\|...^../^.r..qs.J.\.a."'..R..C\..=\|>......i...r..2p...........M...9k......6.]..v.wB\|..9...K.......n.....w..s..8.,.....'K....7.P.~.pv%..V*".A2.5.K...v4.,p......\|..%.\n..8...Dr...Wj$l.~].......p.9.G..0Ev.Dc^......&.U......'j....\3.D.hM@....._'Y6..........B..y..r....X2{...i....;.F>]....s....s..;...Gw

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15680
Entropy (8bit):	7.975229262050888
Encrypted:	false
SSDEEP:	192:EGpTLTWWyswxMXRpRLK8XQUiilQmX9lpbkjSKG87yPvW8aPWr65j7C6K8rEbuQeo:rTLqn+RbKeJQc1kjceyXW8aPv7j/Ml
MD5:	9169BC5ECFA9CEF2AF32398DF2EED187
SHA1:	2C324F19341274410D16D12982CA94E485C14349
SHA-256:	131D7DDB7688224460AD47F0E3EAB7BE850DC9E24207951A8D8ACCD7A99ADCD8
SHA-512:	F02A2C2DE34FFFC53335CF86FD47236FF78500543E5CC944BAAE43334F6B6B1811AD1AD827FF3A83787D9E4704FA1AEE6B30F63FF466D85719F35C4A4EC6EA4C
Malicious:	false
Reputation:	low
Preview:	RIFF8=..WEBPVP8L+=../..I.M@.$..........W .......J.($>.....4..5.a..Z.#$ox....`5....Mvh.X..=...^.6..e..d.Kt...%....'Q.'PU.'vp( 4.. r.f.;y!.}.[o..V..<...<.......J...7...Q........({F.....9...+.3'.$.a.nm....\|.NHxC./.....~#.....$)...Mx..g.?X..O..Q..G.V..EqHQ.rCq.!EQ..c..;.8.......&h.#..\|......9.$(...uZ...B.Y............( ......Z;... {.PA......s...`.G.0.y.@A.../.=.{.V...j.`e. !{...ea.?................_+P....'...@.P....<...z..B...`......6t.0g...M...@^.....#.g. ..b-!..@Vt...'....`.i..>...<.\|Y%..W.B.....il..Ef...(...(MKQRB@....D!JQ.B...y..(D!...... ..N<4d"+..m#IR*.Yw.... "&.?.{........0T.&o..9)I...p.y.M?.q...W.%.O....Szl6....r..s.N....9..N,......(.\|..D..#<N.H&&..M.3....m...m.N..m.}...>g...s....{..o..'.fV0c...j5v.U..uc.......s.V.......l.]v$.....<..;-'..eQ..w..{.$I.b;....y_.Kf^3......Y.7.1....?%..m......1.m.m....m.9.}N.i....w...].n..?.....Z=..U..c....=...n...mtl[...m].nnlK..H..~..Q..9U.....L...............~.mO$...y^)"2......ff.a.a..:.1...ryx.P..

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6193)
Category:	downloaded
Size (bytes):	836101
Entropy (8bit):	5.635644956594944
Encrypted:	false
SSDEEP:	24576:2LFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmq:2LFI80BM4gxA3svhhuRrBiFpAv6DbgWM
MD5:	DFF45C1FAF7F2B6A4C853ADA5D8EF6DF
SHA1:	DD8D88E37A5E78300E470BF28B41DD9E8D5F4B83
SHA-256:	84B6206ABBDFD99098C2E7238E186C1C7455D11C505D9F3D7A3FE7B147B5399A
SHA-512:	C8CF1100F147040A8D6D3690067B66A88E83A690D84DBDD2BCE9225416492DFFE7B30FE0CD5CDF414D04ACB761ED1827A6E286550114C658E0182B30D1911245
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,fPcQoe,vrGZEc,TSrO,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	21244
Entropy (8bit):	7.98833258384387
Encrypted:	false
SSDEEP:	384:APzfxTOmFE4w5KxW2ALrGTGa352Rbag9F4gKBo6834AqAj:gFE4xNALrGkR2g9F4gKi683rqQ
MD5:	03B1DC5DEF3A03B3B513FDD42B8F44E3
SHA1:	DA9BE9F8AA07196AB9D43BC9F86EEC8D4D2CDF03
SHA-256:	1D34D1F432B486C70B71E5ED7A74C054BF2EE85F74CE00C5C2954204C340C82C
SHA-512:	60CC6D3D5D953968BC01A503CD5E28D4D6BE32B3B55D5D1EA19F55DE9DC163CE2DE98E6836A04F3618918C7A48F8866C35B09B7704470256394A96DB3935D01B
Malicious:	false
Reputation:	low
Preview:	RIFF.R..WEBPVP8 .R...B.....l.>A..D.....D.(.....H..l..#......o...K.....?.Y-.6/6.s...?..?........w..j?.?.{........#..........{~....f...g.../._._-..?g...t.].............}.......?....u.......O..H.......U.....w...?..?.@?........./1?a.q..O..#.7._2.\|......K....?..E.O.....g...{..?...}.?.................,...c...q.....o..._+.....M......_......8...[.?..}....o........$ q..ZUU..n-..q7..Uj...J..\M.UZ.&...T....t.b...q7..Uj...J..FV..B..O.P..x..J.M/....CO.X.:[~Y.SHm...6...i....Q&.\|.UW........~...5.....m.f..U......f.K9.;j..f.Y`O..Mr?..O.I..^MliiFI).>...o._$..m....v...I...Fk3...-s.$.....T.v........H....O.yh......V;....sEd.F....$.vf.L..T....1.W~.[j5....Ut..:.....0....A.:iV.S.p....5..n?.x..,.Z.Y.M..P........5...{5b...:\|...$...}\|,3Q...{....n..p.....fEz...1.....h+..R.....l.{.z.@.m.z..`M...,..ay...m;N_...7...;...!&M.]......qiR......b.....$L....pr...^..s..;Q.....j.h.z..u0.PB...N..;.i..^9...5R...m..`j.<.:q.a.PdI............I........U..{..`+a../....SL.3.8..Z.:

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1782
Entropy (8bit):	7.837800517110507
Encrypted:	false
SSDEEP:	48:NRC3XiQoY2QQsMdaddhF6nrV0jlLQAuPPhMYSQ:NRwiQt1QaH68Qfb
MD5:	F6F881CA93359D91D7D729EF6AB69C42
SHA1:	E9FCE706133B25EE7C03C3F8B943B5FB8EF7ED50
SHA-256:	A030541D039AB4D9C9881999F4F3DED46179F2A33A073B86553C8761E4BA5CA2
SHA-512:	6398630B9D0D43CFF3478404F465C4291AA91544FC0A075B2A0A0F2D63C0F53652A771D52D1DE17A76D86340ABBE4B859369CAA1402010FE45B41F3700F4B6B6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?....3m.(m..?.u.".?..nQ.<..$.....l"..\|tP._...H..<(n.6..y&m.....G...<.."....8T.........1..0.......\|\|"...O.5;_.f@..<.....m.$'..!1333..l...\|.<....`n..L.8<..FUu..xk.....Q..D.3."..Y%..{.#..C...oc..m.7.m...v..lc...F.v.'..c{.>....Z1......:Ng....m.......Xyp.......?q..B..A..f..6I...?...5...pWI......j.......C........84.ST.gg.3..\..:h.Y_.......f[[L.mU9..V.n1.6......l..^...J.A._.2.RT..U.D..p..heV.t...)J.wQ\..k.....K...DW..E..2...7Q.=.U./...".X.L..q........<.K......._;..{\|u..\|.;.....>.....m:.4.%%...3.Q./?.......].......)1.V.?..Y.e9.....,Hl"....<.M.CXo.q.4f.cw.....bO...O..w..h...F..)o..di...Y..x........H-.m..z{.'_..7O.............i(..f@.:..1..... .(<.n..ya..z....pnh.2<^g.x.,c..).t8..F....Oe.(.0....F..A......P..\...X.=...}@.I.^P.......a..Y.^.IStE...}d......{..k..@.B.E.B......f..K..9......]](a.)].F.}.i.lq....JK...Y-(.......>...qFBQ.e...)z.F!.IHb .>.......f..u.I..h.^P.b....l>...m./kM....=G..p.....M7..I

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9308
Entropy (8bit):	7.974353499824232
Encrypted:	false
SSDEEP:	192:zDg0G2sR8LUmyGDrhXiK2dyteRImDFdLjL1V/0LrSKag:zvGfml5sdzVxdZ+LrSKag
MD5:	996537520A738869CB05986E447E410B
SHA1:	F5BEEB6371D2D6B030E282E31C61AAC9BCD9C835
SHA-256:	8C66F387C174CA6F3990FA128B3F70202A7C52FCC677E0FFB5927A7824E241ED
SHA-512:	5BC3557C167FE06E4D19F3D671D00CE5DEFDB75FAEA6DEA5DC2EA97F82117952C4B9241B4516BD19E3CA758EA70F01EDFDF3FF738642972EA9280EA8CEA97C4F
Malicious:	false
Reputation:	low
Preview:	RIFFT$..WEBPVP8LH$../..?.M8r.F..r....3Y....O..\|..1........jH-Z.N...b..H....+.o7..v.Y....1....cH..&$%.~.xZ.....8.$In......>.....4..6u_s..$.q$.J.8KB8a..$......mY........T..r.e.....@.l...7. ..`g/]+..D..:{Iz ....vY.. >...=.......KCD@..\|R..!.Zcy.1...D...4B+.YD@...../....A..h.p.Y@.i.){ID.D...d1].#R>./$ "..7.4K.&.!Y/Y.o.8.]..#"J.D..m7"....."i..)...).L!.Mh#{...4..I......@. ....h.5..@D.......2e.{R...!..s\|c..'...I.?........X.i~)./..:JS...%.hW.....M7.....4ehe@.8A.....c..lg..........qm..,.Jd......2...L...s.....\#...../+u...~.B<O....7k.aB..;.$..m+...._.%.BH...?p.E......999..q...$.a#I.{w6AK ..........W.HRDd..2..v..........v..w_`..w.......l..N...y.I.2.uY.....64....3.!{:....b.mi.B.x...Xr...6..+..m...s..'...m.m.m.m..JR...{.$IR.X...^.03le..v..\|..6./f..tNw.D.V.F7..!.A@.....'...8.?N...y..?...8...9...?{.7+%.S).g...Mk....`x...f...z........s.n..G...S?v.._.9p...lT.....],.Q\|.Y<`egf^..P....?.@.............d%.....).w..{......r.Bi...p....9.C...3V.."......[...W.\~98.'

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1015)
Category:	downloaded
Size (bytes):	917113
Entropy (8bit):	5.3953864921990276
Encrypted:	false
SSDEEP:	6144:diNd6M1EGJzy7bbOUn8o/L0Kl21E7+oTuOCsPdqWuTjebERuo9qixj9qDNixjaP/:8Nd6eEGJzYbaUnl/Lpk1E7oc+HCXPUBG
MD5:	F7E4F0D782AA7D65A28B01A77784BD23
SHA1:	56AAE8C1E7957107737AC7ACDEEF5336C3CA0138
SHA-256:	4784F949156E9BEAB6C6D15D0448D9C157B37B71F6346583DD0BE5EC2ECF81D3
SHA-512:	7063C09C681202DA288CBF8C4E71B5FC565E6BE537CA0CEBF68F3F9E74356E86FA66AA5BB3DFC861E3C76AB08001B343248344FD21E223A647C4AE668448CF50
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/vendor-f7831efc0f48f466cf3b635d969ac06a.js
Preview:	window.EmberENV=function(e,t){for(var r in t)e[r]=t[r].return e}(window.EmberENV\|\|{},{FEATURES:{},EXTEND_PROTOTYPES:{Date:!1},_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!1,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0}).var loader,define,requireModule,require,requirejs,runningTests=!1;(function(e){"use strict".function t(){var e=Object.create(null).return e.__=void 0,delete e.__,e}var r={loader:loader,define:define,requireModule:requireModule,require:require,requirejs:requirejs}.requirejs=require=requireModule=function(e){for(var t=[],r=c(e,"(require)",t),n=t.length-1;n>=0;n--)t[n].exports().return r.module.exports},loader={noConflict:function(t){var n,i.for(n in t)t.hasOwnProperty(n)&&r.hasOwnProperty(n)&&(i=t[n],e[i]=e[n],e[n]=r[n])},makeDefaultExport:!0}.var n=t(),i=(t(),0).function o(e){throw new Error("an unsupported module was defined, expected `define(id, deps, module)` instead got: `"+e+"` arguments to define`")}var a=["require","exports","module"].

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.8686931658333075
Encrypted:	false
SSDEEP:	48:V2aRqmpBIf+hVY/OTAjZOFbIPvWnEsluViRF68tU:gBfBQovWE3VM4r
MD5:	12DA10D9CC422A583E8809CAAE6171F7
SHA1:	CFA6A1A5369C69D86232267DD887F58809EA2F4B
SHA-256:	A7E96A2C96F56C0F4BD44A1EF8466C697A90D773B8B0B7612B3653BB4D205CA2
SHA-512:	0B6BE79311C3433AE242CB4CC3D818F0408DD3092BB2D1E28D8EEA6605E7D98D7CDE0980620A345BF337BCAC10F90175BF14F18E4C0FB981F79E131ED5EECB0C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw
Preview:	RIFF...WEBPVP8L..../..?..=...m>.%..{..w.......j.N.le..u..xr.Z=..>....F... .....r.%.j...%....~..nG...../._M..........k.tG....3q.`.....:....i#......v...-..1.._...@..U..Jn....w9@..Sq...F..}...y.Tc.0?{...W9/.....J%7..c..+..u...1./."....A);............e.8u\yg.11...........N^)..}A..L.h...:,...c.H.Y.?.a,9_X".g....e.b..7..#}.JM...@..}..>.7...\.L..Y..,.}... b\|&[Z!Y.=..kQ~%!.9......2q9i....l..X....1]...Srak."..rr..Vg.......?.uZ.x..H.Gt.....\|.@..A."#.e.Gt.%.d.`A..5...-vY..1...@...x...-.....$...........@/l.t-...0.\..(b`..K.C.g..X..Y..1...t.......^=....q....}..]....j..\".........#...}.....E.y7t\.........dVr.d.q.w...o.......\|>.M....v..}..a^...../..um?X.Wm...c.N.f.W..V}..K....1.-TI..]p8=..b.H.5.....u.o.1f..%..\|.......b8.L.&.6. .iu....pb6s.Z'.g.{F..o.1b.e.5b8.......m#.d.g.{).{Z...e0K.t2.8..k..Q..C..<N.X... 4.z..#G.-....Z.'....`...}A...B..6h......!).. \|..w..&%.......7m.fI.v..[.7...+G...@....{?.:.S.&Pn..\|..P..E.Q].....3............nt.DX..\dA...N^.,j.[.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/store/images/regionflags/us.png
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15926
Entropy (8bit):	7.9763814812413365
Encrypted:	false
SSDEEP:	384:BIojATJ2VLl+3YhSIAwK7PLOeZg4h7vdi2DxiAnj2zqP:DIJ2VLl+3USIAwK/3Z+8BjfP
MD5:	91F4792A3112373F472011704F368E4A
SHA1:	AEA0CAFB81145614515FE999575AAE4FBC24E402
SHA-256:	D6591E6AFF17AA27B8C03C44041CCFFE9F7821520375E5753B73221FC9AF28D4
SHA-512:	89324CB590B0E10805C81D43CF09B4387DFB83B46451BC3623A6A28BCAA89EC98C3E9819FD4F53628146D1EEBBAC17C9475671395796AAFC43488D67EF3AF280
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/IbuKSWXQKCu1b4KABVBvEtr-L2MZfPyxXrL3AmkEY7CA-ffl2FkXVFmRRYdf_lEdfH8=w526-h296-rw
Preview:	RIFF.>..WEBPVP8L">../'.I.5q....6V.....D..]...Mw.s.. 2M.&...s.9. .r.9G....{.XE...S....\|._E.1K.LwK.j.2...j....I.i.]#&.$...R!d..B...U.............xlV....>g..g..@b..f...6..v/.B.%+...y....%......qo.o.0..N.Xk....}....<f..vi..m.1...c.\.y53...N..yii....6#.af...6. IR.....dH.%I.$I.-bb...Y......{....t.w.?.<(t..C. \m..........T..s...$P3..(..0...P(.pR8.4.R_.pZ..t.?.g.f..B(.xZ.......0>%...0~O..d....BY..8`.O...`...Z.......o..V)....%.j..Q.............#.8*`l...r.....?X......E...3..CL..x.....0..@@.\|X.x{lZ........&.~.... `gp..S.$..C@.p.@...K.................D...0>...R...0~@h.....<..4.1^.x{...O....Hy....A&..P...".qa.......M...O...8S. ......&.o&..9 ..4..c.@u.....T.g.<8Hy...j...m...-. .?c\..Wc....... .A.p.......0......`$...0....`.......?K..(3c\|..h.0n.xF..c.....!..1^O...0......9.......1..8.`l.....oS8.........^... dc.........L.r H..@BGa.xH........P..:..v.R.~.`L..~.d.@.........wa4..W..S..wS..-.~.}....'Ky........o...:..Y....y.....4..X..X.....8.o.z....:.......$..<[..^...

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (527)
Category:	downloaded
Size (bytes):	979
Entropy (8bit):	5.28398324106872
Encrypted:	false
SSDEEP:	12:kRZTFAJ7k3qCF/AfzZ1BS/NC1Fnvxym4mTAooIusuwvY7V6sijk9g1rggRkbRN20:kzOuFeHBS/sv4pyXCspQ7Vvijk96Krl
MD5:	B216CAE936727A2792F21512DC1B205A
SHA1:	9C1EC44C2338C43A5C3230DAF4594DF98998D507
SHA-256:	DEA4AB42996A71AF247B77D8E495190A19D6BB38F19A90CC7C93702EAEAC6644
SHA-512:	2B8C70C1FFEBF713976D098C3CD1172EFD831C0894DACF40B37F7E71A37C92CE9D9A0AB9547CE25C26E593A278D6BDFB4CEB5352EC4E125009E55094428B17D0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=qAKInc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("qAKInc");.var Pwb=_.A("qAKInc");var $T=class extends _.Eq{constructor(a){super(a.wa);this.H=this.getData("active").Sc(!1);this.O=this.Va("vyyg5");this.na=_.hn(_.jn(this).Ce().Nb(function(){var b=this.oa();this.H?b.Eb("qs41qe"):b.Eb("sf4e6b");this.H&&this.O.Cd(b.getData("loadingmessage").string(""));this.H\|\|setTimeout(this.ha.bind(this),500)}))}isActive(){return this.H}qa(a){var b=a.data.ey;switch(a.data.name){case "data-active":this.H="true"==b,this.na()}}ha(){_.hn(_.jn(this).Nb(()=>{var a=this.oa();a.Xb("sf4e6b")&&(a.Fb("sf4e6b"),.this.H\|\|a.Fb("qs41qe"),this.O.Cd(""),this.Wa(_.Ak))}))()}};_.V($T.prototype,"kWijWc",function(){return this.ha});_.V($T.prototype,"dyRcpb",function(){return this.qa});_.V($T.prototype,"qs41qe",function(){return this.isActive});_.rs(Pwb,$T);._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	5.248046245100501
Encrypted:	false
SSDEEP:	6:kRZzRxVvn0kWq/Ax8G/QVf1Fp8DckwdMwQRaNw6JpyxZRNlad0:kRZTFwH/Af1Fp8idRkbRN20
MD5:	E193D6BB8BBBE4641E700622CD059B58
SHA1:	56292548B2AC47306F5C2D8230CCE63F07B25C17
SHA-256:	DCDBD55070BA6F818B59C74031AE43C747E8B367C9680DFB0BC614BFB0CBD84B
SHA-512:	EAABC082F0D27D888D117D35D9F644C0C7A60258C9B39838E02E8A19C0DB7509A4C8886114C16FDD36E24FEF14BB990BCFB444DD84725F61F5F2D6CA497CD2C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=qyd4Kb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("qyd4Kb");._.$q(_.AAa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qyd4Kb"}O(){return!0}kb(){return _.Yzc}});_.Aq.qyd4Kb=_.cA;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7790
Entropy (8bit):	7.974520079977317
Encrypted:	false
SSDEEP:	192:aMGxVR9zg0KP5Par7yq/Zv4r+ehel0Iwty6wU7GPPp84l:CRW0+ta/lghdM6N7UPp8o
MD5:	55E72B3934580C60001803FE316CDA23
SHA1:	14BDEE46669FE7B4A12557094ECA0FCCC5915D89
SHA-256:	729168129821581852178119790231C75653F81C4BFA6281D7C20E16F33BAC38
SHA-512:	D5A3BA0EA6C7694A3EED9E6CD57DD3F21796129ADC466D2E92CC24E2B6D4C36E05BDF47CBE9947C2E7045FAF2E85666F5CC02A0E862F1901D55A26883A8AE6CC
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/j0W5FC6v_GeR-8Z-YnXqrhR3Rw2LDLJQ6yQ6HpnzzRdSrz9Wcl3bylBnjpRnrEQzBQ=w526-h296-rw
Preview:	RIFFf...WEBPVP8LZ.../..I....m.i....#b.8...tV"..rU..9XG..f~.;...Z..i.......i...!.auwwww..E....5.q..uwwwC...g.I.......f.f..J.L.....f.!....d)iSf.CN..v...}.(.H.............{.?..#IR$[.5.>3.............s_.y..Y.=........^6.m.F.6..m..j#.m.M..{:y>'{2..l.m.5}!..R...,....V..:...m.$...H..}.c.3w..}l{.......i.mZ..k.}.}....7.mW]DD.............w.6.".vj.......^.....G.....O~.=T..P..>.pO.._..b.G.fe>X<.\.=C..E.V....~2........(0^T....&.cD..8\.....T..F.BA.q)...G. 2NT. ....H#...#~:.......t..-.Lf.-..3.H...-.Yj..r.....k...~@[..G../....ZX.G.F.j......}..6.PqW..BY.I...."...um.T..~\|..m.m.@.OSTp.............MP>7z.m.f.........R.;)g4D.]0P.....r.,...A"4G..#....X)....u.B..k.:@g....E.W............z.i..Tuqn..D....MAoxB.... pL.'...fv.......#.b-W17.j..G...Ja..N..p8..........^.k...y..Z.j.m.....&..K....m.m3.+E.:.5j.wy...'.(.j.d.X.u=.....K........r.!.Y..._.0.6......"...s....8.A.n.7ugk?...w........OY\]...Z..GxN.>.7.}......+..NY..nj....\..=$l.i..."..q...^...2......KV.

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8188
Entropy (8bit):	7.97315987746307
Encrypted:	false
SSDEEP:	192:XqKdQmquxznJXzDlIROUAHaKl8LfX3ZfWdJvM/+Ctw4VVT1:XqTmxznhzDlfUKaKqL/Swtwqh
MD5:	D678E080423DE82EFA6CC7C3B426D423
SHA1:	C06E34366683C2EB72B426CAA294C64CFD25D627
SHA-256:	9F2537CA549890BAC770EDE0892AB9AE80E9EA94D1467087A5B27F4F1DF12E37
SHA-512:	58210A7DE37F7F5497B06D7CF9812ECBABC3BBB1D27658BEAB966E00B6AAD8EE50F17E4571936144C8A3E76C6DD6BDB4775EE5F801682E6DDCF323DA37816DED
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.U...$Q....]t.E...Z....6u...R..bu}Gv.a........w...Gls.c.m.m..m.=.c...k...:..\|......S...N..U.6..V...C... ...TYk..6:;...GX.].9.m'{..3'..+.t.b..5....n.q....^q...]..8.lN..I..S.(]..@.:.m..T.b...`;...S].....m....`.A..Z.kkS$9.#.A..a..4...i%...\|...R%gdDTfE...Q.m7mnY[...I..0..k....&...3...G.[.Z...@.K7Q.bP....p.Ca... ..f."\|.:H.......U.r..q.a.....ff.7U....z.^(mL....k^..B..l...&.W.b.S./.......@..L.....+[.(......s..A.7.l...X.(..A...0..-~.L..h[Q..%k.....:../.a9....n.7...W.4.,y.c....b. ...F.1.m.m..6..fjw<..d5..?.>D..".G...$I.$.c...^.xd0.un....fX..?+..8x...9..9..]n....~....9..........Oe.R...x.x.....S.f....4.....l.......2X...9...;X...N.R.uk.g.R8..T!X..z5.2~..Q.c.}.L.P.;.s.I.v..vniv.C.w...-.;.4A.U..3..Mi...My...s.,.$M.~~Ys.{....../M...<vJ....m.....;'...U......C........Q.%w.qW.....tKs...3vi.N..VEf.....M..M)./.....q./..&n...?.9..P...Q..un.G.g.T~)k.Ji..;..N/M.?Y..S..g..a.f..+....tJ...=._..\YpU..QJ9J1%

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4318
Entropy (8bit):	7.926634621042285
Encrypted:	false
SSDEEP:	96:bav62OvK9ewKKeUDzs1FTaQ9G9Ijf0cBlZQqv8wg4mcqv:cwv6/sjOKGujfQqvLHmjv
MD5:	87C4B9CB9F28758DE7BEEFD691544757
SHA1:	F882EA8126C3A12CED130902BD103B8D46FA3A10
SHA-256:	B9FB17F6BD1994651311BD2664DC512563D54C24344992AB4B59A0CAE64F6C9C
SHA-512:	7CF00ECCC6BB6CD87180EA7AA13ABD46151FC8D3DF030191E2A04670DE1F1881646C7F78E700BCEB07E84762609B29BDBE104A4D19A527E3EF16CD0C8D81F988
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/BdoYxc0T4Tdh6w-MHTPk9qGpoLKuYIa5x11xysND-TYlQohJgIITN6bYrlgIYYd96E4=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../'.I...m.k......"b.......O.}p(sY.&..T]... ...o...o...........:wwww...>ww..wwww....3..eG...>Zz.8.....1.#..c.F.".......q$.......rpwM.(....._.....k.m..n.m.m.mF.......$.e..7h....'..N..........IR$uA......=.C.m.m.2....k&.(....Q..O@.>..."wp7...<@U...~.f:.....0..pv...t.X~Cg."....g20.B..$.q..Q.H`G$0..'...'1..w..D..0vT&.1\|.i}N.e..a,..b.I...%=.....EQ..6...1$."p.R/....P...D..3.."i..E.jB"....0.c1..+H../".#.....\.8d....'..U$.i....>....q.....!.~..6...9~..t..#s......D..w..l....G..Q8...-.OI.\|...g1......y}....Q....)$........G...f....G.......i8l8.".'4..%..H.r.....Fy...`/.p!..9......bp.P......B+,..'..$p......o9q..z"..jb..~....`.I<...{...[q...4..L..W8....,.4.h.o..+'....{7.]....=._#ic.w......F{37.7L..?C..4e..0.e..x,.........k.g........O.JN.x..!y9..u\CJ.M6......2..l.3-..D..V.Q=F..>NZ.......>....?....X..fA7..G&.....&............i.2@#..f./...>x..B.>...F.H;`4?.}@oQ.o1...c.r+>x.7.L!..X.%I.."....w...G.....!xs........h~DR9^v8...6..~.....#...S.#.

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.831065452203355
Encrypted:	false
SSDEEP:	24:36Vy/TGkU1M4ZFn5I/h+dzrDBTCtlO4Vnl+nIlSaOd/CACYnh0V/v:36S81zb5IJ+dtGKtnIlSh61ghy/v
MD5:	28981D37AC73E33EDE9658BD687D1122
SHA1:	8C11F1D234A6FA760C50EFF51297539D69D58023
SHA-256:	8797F3F07E95DD77CF151AAB850B1662160733C84A5487EECADC9A1DCFAD6BEB
SHA-512:	A9976640118C3A48AB033D53B08D1A0580DDF5C02C91D0492D8CB423F1AD1B4DA30DCFD95D307E2B734582132349897D38ACF0F572286070AE14940D1F1F7A69
Malicious:	false
Reputation:	low
Preview:	RIFFp...WEBPVP8Lc.../?..."......S%UR..=..m..-.:.U...>.m..g&{..RZ...fi.].....I.g.TNJ.W`k?g....m...T.m.l..K..Ul.Vk......qr>....x.$...v.......m....q..n.8......Y.=.D+Y..T.[2J.$}"..........wNz;%=.v.#.............K:.$...........:..LNm.&.....tB...Ny]g..s..........MQ...{e.M.pH.kW....Z...{..n..?qN.p......"...P..GU.f.R.z:i.V>.../,..(,...u..#.{mN98g\.........L.E.[F..e.T9a.... .HB;...79...QF..O..H.(..)&.2.....%.......<.....J.....jE...g..8.>....$WH5....\X...;p...i.@.g6....?...b..;.9&.<S...U[t.T{K/'M.}l......!.f.i..\|.U ....#....ve.....S.J5..@tKI-...)......{.>....pB...!.H\|........"..J...k%..u...8.....!....A.6..8.?j,.e...:..@U./...x......Df..Q..O.......~.._..^.I.{.Kd..G.M.f.AW.".,.. .&.....^Y%..pM..8..t.2.{.~)(,.....;8.mZ...^..H#G].Z.........I......).E...%S\\a!8...'C.........(t..V.-.K1.+.2.....9...2LP.a.dh7..B..M(P<pM?..Vx}.._....&....a..".&..B.H.0P.3.M._...q.K........JH\|...@V.@....J.K.;,....QP..G.q...1..\|^/>.C.,Cb.j).a..w._.?....;..#.&q

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	7.799297445764672
Encrypted:	false
SSDEEP:	24:azlJ+zVAu5cXL9iUYO56HbSlCYvfwU93E7rrL1IkqTl7e0Sw0ePlT/enCLgYYPZQ:GQ5zUYAakvfwU90zZIkgRPSlcTmnCkYZ
MD5:	CCB410D15817F7665022D4BC0A36AF3E
SHA1:	D0A857054F3CD3EE67150A456825C7BDA284E454
SHA-256:	52B9D8F221B438BF8B914425520DB5FAA49B4FF50F8F89C3419BEFE6201BA332
SHA-512:	63BAE64AC6D0C8402E3955EBDB58D5F9ACDE621AF78AE9E55F80414A2818DA7738C5EB0D1478CCE222BE7C899A2443348DEF117AB15FF78E001E130E3E984425
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw
Preview:	RIFF....WEBPVP8Lw.../3....3m.({...;......J.q....,.E..(....\|.u...`$.../...?..P..m..Y>.........F1...@........ ....+..<..(@g.c.s..`..m.....n.1Z..>....Fe...\|.U\|kg.)........~...m.Fes..0..:.2.....ve...\'..U.J.....w.."..R#.b!.J.qX.D...w....?>..]......b.Z-V...V....'.z;....W...R....[....Z% J....{..O'....f.2.......4#...v....N.JRX.%.y%.JPa(A.Im+.+f...).Fs.4A.....)I%.i.....d.D[.v.'P....;P. Gm....D1.....Tp.....m.R..h......hZU...I1...S..T.Whq...Y..bI.. ..U......z....KE6.F...a.aw...^p..77.>...d..........`l.~..>w........FkC.}...)u.$.V".B.Z+3...7w...o......E'...c.O......."X.#...K...1?.j.......=.@.]u...W...2#A..).`!.w.k..f\|..7o}..Q;.P.^\..Z.....y. ....a.1.F...jQr..W\|..]....v..~.../.g^.k...b.D..@.$.,2\.rji.......p.#......)@.V...AM...\|{.....3..10........(.....b...Tm.]g...q...VN.G1...X.....N...P.5.^k.`...^.v..;h..=............_..-........Q...jb!.......Nt.`ym.^x.........Vf..O....>....u.....b.....M..m`..C6.F>....+?...]q..f..).R.,..n...z....vk. .....e....#Gi..

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	16242
Entropy (8bit):	7.9402572379727125
Encrypted:	false
SSDEEP:	384:Xuw19G/c5AIyS87w1YRmRAjkECvcFd/NP5zOoYJw0:P19GU5T587wiAsw0H/NPeJw0
MD5:	6B2CB8AD472A93B0D97FEE592C13E1AB
SHA1:	F40C495C1CA874FE508F6F69059041A5243D9A38
SHA-256:	49CA14F45BE05F2A2CB10304CB6481A9A18E15141819C86D15E8891CF371AEC8
SHA-512:	7C63115A9EA99072CC01CE04D354952C4EEC03B7CB781186199F6D45967A7FD5D7E190B2810D671F53A03A6B3964AB1B7F7A4D84114EF3BCDA7BA4BCABA23C1C
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................'.....'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./../W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.A."Qaq..2RS....#B......3Cbr...c...$...4ds.........................................................!1.Q.A"2.3Baq.#.....$............?...B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..N..N+.P.?...8.n....Z.>H.9.N..N+.P.?...8.yC...L5a.G...t.bq^...}..{..g.a...>.n.......<....N+.....K.\|..sp...W.G..LO...n....i/B.a..a:/...n.....C1>.......a..a:A.N$..yC...Lp....(y..V?.>.f.......<...../.P.?..X......O......3.1.b.>...i/B.#..!:?.x.yG...L>..}.>g.c.^.....Bt..O.....;.6+.P.?....?.>.f.......<....6+.P.?..Xo.g1.....{..g.a....(y..7..........3.0.....<...V....Bt..a.^....a.^..3.0...s0.Jz..c...?.%?.w....;..4

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6354
Entropy (8bit):	7.960700089781389
Encrypted:	false
SSDEEP:	192:7tW8Nc0ZfXfSCFxtCKqEbGO4ADvM0FzD4Hk6rD:7MCcgvuKquGZAhD6rD
MD5:	51B2B08CF48FB14C10A5BC00F7EB3E49
SHA1:	FD547F92F080C9DC6C78BB8CD0CC73E021C61978
SHA-256:	4E0CE59BD28423F000B98ACCDB10FC79F7FBDFB4C536ABC64B35AE17C9CF65C7
SHA-512:	1162EE7C174C160DB1E88538B3E0FA0CA4845FFF919E8DDDD5DEAB2BFC7EDE670B2F491EBCD58BA7C771DC81B300D005F445D3F13742D738986CB91575791DA4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..G..Ma!..Z...f............x\|.......x'...B.("..[f.M......D..j@.......-....(S..6..L.b..L.#seV\...,.;'..{...{8...7......6..`.P.;g....k..3......h...w........H..%O.o..Wh.=gJ.'@..R..4...o..7t...Q.E.u\|.Xh..S....I.....1..B4...lP.........`..s...#.${&.....`P%:A...t&&0:....^.j....&....LT.LTJ.I:.}..........S...+.Z`. :..X..A``.$..4....lO6LL$.l...w.=...8.mn...}...i.h. ...f.M.WG..V.V.V....D=..9..m.Y...;i..1....!Ef .....U.......`...R.n.j.!.JR...z.z.._m[W.\...{..9.9.@...1!9.x......k.c.....X8...6...C..h..........e.n.F7C..~....h&#Ef#WpgUp....W.d..+8)...^...Um........8..@y.......n..}.~...j+c.}.w._w... .....1.v.._'.i.e.a8...3..R....Y.@%O.......gy....o...#lw..K..f....qU..B`.:.`]a...'K.A.J....u.^...._>..o..."K...Ye.1...m.$.@..Q.m.m.m..mu......A..6vt...GV.o"...O5N...^.&.....p...O..".A....{,........eS,.....E.....g.].....k.W.......-..}e@'..y.^...kF....a..oO).x..[.R.5;...d/..1...>..l\|.lh...*..=..Q..6o..g.$@...........y.M.P../....'.........-...

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,appshomeview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3346
Entropy (8bit):	7.927787140499046
Encrypted:	false
SSDEEP:	96:mY+rHnf5AhAsKKecLUsMccj/kRLYe0qxKeyT9FL9I9Vyk:MbsgsCjcr1HQzo9
MD5:	24432E68CDC80B8A42EBE0DEF7EE264E
SHA1:	6FB55525297EFC44D5DB9407AD46297AB2880218
SHA-256:	AEB2EEC5C20F7EFE0EE1E89E1043A19AAC4A77217797ECD839FC52D7DB357A8A
SHA-512:	86BA0C2C40C346D1620577402689A6AF4344FB0BC6F10E29FC455E809208E4A3C547FBF233E0285B50F4CF52F54032109E7620BF328D2E2C97CAD6ECB9B1CAD3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..P..#.?v..oDL...u..v$.9..1.....dT#`R......N:.-........[SE..........w?n3...www9.h.;../.9i..O..".Y.@F.j..n..34....X.K..;.-`;p60..El.Fz..Y.; ..CS...f..Srm.:..T....k.M.L..v..Nm...>.>....I.$..~.m..g..m.m...m....O.....[Y%4A7..g}..............=...n.s.@3...n.G.,.1... u...-&....CdE.....i.r"fN.=.i......g~M....mB.$.m.g.m.9.g.m.m.m}D@h#I..@...::G..dTUw}........^.....:...<....~.ZMf..\|.z.k..h.....y.k6............ ....e.6..........5.o....Fi.....t,..........(.._.......V...;....d ..Z....,TmS... Qk..?...q....W`....C.....o.4jq..".H."@..A....F.%C.;.]..@..j.G..L.....n.-Q..B..`...e4....>..........~..BH.P...Hd.6..g.2)...f.i..6f....Xp.A...@.%..V..0...<Q.y&.....R.........R.r..w..{.%.n=^zn...n.hl..QpI..W.......[..#.Ca...!.6.lfP(..]..K....G.Td.:./..G.7F........3....VuE.(.. o...g.A..\.U..>....XttW..<.......R,.(.<..&Rg....q..&...V._C...5.T..T.=.!.F..k.z\.j...9\|..\|..%.6m..p...En}.#E........INN=.........^...!f.A.#...,.<O"D.s. _I..

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,developerdetailsview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1118
Entropy (8bit):	7.780736815470668
Encrypted:	false
SSDEEP:	24:Xm6cauzAfw9y4TZFmIfNBNLv3fa/d6cQczgfxXJy1b6NEs6:TuzyEBFmIfNzrfa/kcQczgfxZLEr
MD5:	CBCBE041E4A72D5F8B5582E94537B3F8
SHA1:	652A345E7B367ED3097F46FF9F70805E329FC370
SHA-256:	9583879CA91737DB30C7A5255AE3923A4DFD30E02EA66DA251D61E6F871454AB
SHA-512:	6F3474A00648C35E94C72A0AF0B29BB6337FA59636F9F22AD3E9E2A5945D88E88C96C360FE89DA856B817BD72883682D17678862389C6AF12064BC9DACFAA225
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=w240-h480-rw
Preview:	RIFFV...WEBPVP8LJ.../..;...(.dY..6..D#.......m.....s>.@h$...:. ....3..8.mU.'.e'....T4....`...rG..(.0.....T..(P....*.j...5..5E5....q..!..4..R..BD....>....j.!...Q........;..?.._.........@ ..!b..?..+\|......0..&......$...1....-.....!.?<J....AF..X.....y/.d.....!..N.....~..M......8..M....BDL@..bp.?.m.N#...+.:..../PeU'...%.Q.s".?..%IVm.i].......zqw..f.....g.G..1..;...0.._.........S.P....DE..QQ@AT.>...o.s.9.5F._..6r..x.n..s+9....vrng9..-v.s.li.Q..E.[C,Cs07.oD..g.E.f`^.....QD..27....,.f.X.E.l..l..l...".."v."j..%[D.....Q.E.l..l.5[.-.f..e..f.8........Q.E,."j..M..../.0c.....@?.....4......B.HR.W...u.W_.L.N._..2g.P.nx...5.3.]=.....h...O....d.....C..g.H.?..Gq.pS(.1.+.Z.......V.@V..]. .....;;!]..W......z0..R..1.1:@...S.~.......y..)..hT..k...z:.6..'...._........;.w.z..h..x....#..w.x....)mG.Cc.4M..m.......h7.z.g`Mm..t7....T=H..~.;.v....Fq....P............ o.a,...L.&#.n.n`z4........3K.~..+......3(....m...f.. ...E.Q.H..!MAq....i.w.%.B.[>.]....n..K.x..>.K....t....

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8002
Entropy (8bit):	7.975426170230245
Encrypted:	false
SSDEEP:	192:vaaEAeVeRaAQ5EWBzi1xR9lOSJskldqfI8KACyvEPUjPKB:NseRd6Ewzi1vJrdqvqGEsDKB
MD5:	856140824C7B8F250834759E1EF8421B
SHA1:	BCA87B45A030069D4A4418D6537448C06107A38A
SHA-256:	DC3A0E35C1514F143B94271F958255001A5954A7F63179109A2A16BC382537F7
SHA-512:	F4BE351A2013EC730668798DCD81DDABDB4D7DB56E21BD08A6024504B2C77A85437BA4F9F89259E6FA2622BB305AE7B2AE339A6E63000CC8CFB90803D0A44E78
Malicious:	false
Reputation:	low
Preview:	RIFF:...WEBPVP8L-.../?...M(l..!.KjD........y..ff..)7.D.H`....Pt...$E}w.._.`f.....$Em...{...?..[.b.6....{\|.3.........\|#~`$......].#...NB.<.].C.!5.4.....s..HCM.....<>.o5.$z...Z#.e...=.[T^lS.yB.....$......+=.....{iV.P....C!"..&y.i6.j...-.....3s..#U$.].af(..3...+T...c...2.B>u.n....mo....f;...x<..FZ.A.w)gU.V........W..a...-].33..e....m[........f..1Hi...6(..(.-..c..-t.v.&....?y...km..r~....].v..J-nf...8cfffffff.a<..x...b.m...7..3....TR.L!G.,.J...`.S...f...}.fF...3..>d.L.,..n.e.....v(S:.)3..`0.u.......m.!I..~.......Y.j.m.m.....w..#....{.4].Y.....m.[g.6.Z.JIf.0.9........0'./fff..03.u..r.6..e...^+r.zr.#A..$....@..[..P...A$A.....ph....\C.......8..S.....sx..`....N..w....K..>........Q.w`....p`....rb. ....jx,~...l46Y....).eI.....N,...uI.EO......o^.K....^...)..."Y\..9Z....... .2..X.n..J.D....s..A.......>....6....%..^....Q...s..&L>-..D8..w...l...N:.=>...y.)l pSq.A/.z.;B...*$....FQH.TFGss.~.......;.}...g.......D4f.gs....!..S.W.;..oz.E.{......~..{~....Q

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8272
Entropy (8bit):	7.968389434121724
Encrypted:	false
SSDEEP:	192:Fz1znpvVcplikFyTtbpKc1lUmBXZSB2J4l4VAral/dHFR+s2kA:Fzb2plpyThp/1lXB8B2alOWabHFRUN
MD5:	7CEC757DD771EF4AF3FDA19C67C9E8CC
SHA1:	180FB2C1DE0DEF7B4290D74F42093433A9AD75C3
SHA-256:	B0206923AF36B8ACE9A72520F0DE806FCC6083C80F9B5E7DD295B8359B98733A
SHA-512:	A58735725FCB35726BADBDB30579ECA91AEFE42E0367C9DB56F3F397A66E1B7E48A56DBF25A52A47209FDF46F3783C067681106CF68325578BA20D1754871D24
Malicious:	false
Reputation:	low
Preview:	RIFFH ..WEBPVP8L< ../..I....m......... ...Hc....W.....qw..N.w...m.U...w....;.n....-..9.>.....,...<H-..%,...2BX.=J...HJ...O.,d.r..6..<G...m[^.....[...[....0..[....}...mc.....I.,.6u.\.....u..r...$...Ib^Eo.T...s.-.m.R....K..;........e..Uu.E....#.;....Zj...8.p.Z"....&.....:.:h.tww.....lI.M[.>k.X.m....m{....m..3..........<.L.B.u..d.-.]..3....`.Hx.-.(.LTM`7O.$..1wW..b....n.W<+'.zS;A.>.R.Pp....Pn.F..sJ.(.V..)T.v.@.g5.....#W5..1WU15...X.).......'Wo.......1..:......%y.wLi..0..v9.9...DDF...gU...K.B..Rd".n].lNym...P.y2.'y....6.WOi...!.(:....WK...V..Tu.l.2h.''~._u...%....j..4%TO....... .....U..P.e,8..}^X.;.&lO.>sOm..M.G.D..f.q\.<^<u1....}..,..?.va......S.+c.....`...6.~.F..a.#..\R[t".H....2.Wu....r....3.Y{.h....X..]?e._t}<.[......^^.......u........a...Jd0...-.B.~.....w..cX......G[.L..k..5.Q..C........2M>.'..Rj.....'rUs.pj.7.I<.........w..&.D.......t..<......J.d...,g......Lu....GBiy.aq^^...q.k..Q....v.7.._w.(8.x\.lPh.......W....D....6.#.._H.............W....

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3702
Entropy (8bit):	7.937104656961242
Encrypted:	false
SSDEEP:	96:hVlHZ4aIdJfMliUwe0R+qAwLZqDhRVY/oOB5N:hTHZ45vUiUN0LHLaeoOvN
MD5:	EA221EB1F8BDC413DA31D0FDBDC05CA5
SHA1:	E1EB42835453846CA5F9DE12BB395A98394B6B2B
SHA-256:	6C9C866ED2A72E42A8EF956286C88B5B7669371AE810FBDA1E72EE8D9B76F4D0
SHA-512:	4A89B72C5336A1D54306F7925DF7062B53B8844D7F86711634AB1AFCF48B859253EA55E147C70663D2472772EE524DC1DAB02412D8B9084F0754F2CAAE366BE8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw
Preview:	RIFFn...WEBPVP8La.../..?.U....%E?.].]pwwwwww(.............s......e.,..2...........h...X..V..S1......7l...#..".T#w.x... t.:.f..R......j....KK.E.)...3b.mv.>.a....S.Du&r...p....."K.-....j...=...3..d.9.#IRd+.y...W._...@.t%H.m.m....Ga.@.jV.{K...d)...I.4.......^zK..T.J=r)G..~$...+a-.=...K........q.H.`0....Y...1....#B6..1x)..s....`.GZ!].a3F+f.A....c...Y...Rs^....tH..N.u4..8..E....`...N.{..WD..t..]...M..X.lv... .....rj`..\..L.]....i...1..-...b....X_...D..$h2,C..(T.. J2.....o.d....{v.....b.)....\..A.......z.`.A3...Tc.o.......?9?.1m0....E../]..b..Z..x.,.b...j.\y.H...y....EC-.!x.<..=.C.`.J.=D.}D..`.e.J.3..vC..^.....ACu...o.....f.6.....17.i....H.~.'].V...(S.?D}Z.............v....`<...m......W.ck......a.V...d.... ..Z.(q/<9,.a$..D^..g"d.S.o)2V6..n.....<H.j9....%V.?Y.>..(...@....)..d../...(..I.......B..O...h.ne2x.?..LTE...5.).U.6.C....+.U.AS.......<.hBXE..8../.?.gP.3...S..a....<dF.p:..X,.r....i.+(..F."..O...Q4,....\|(.%....2.........A..;2l.a

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4932
Entropy (8bit):	7.946928145289324
Encrypted:	false
SSDEEP:	96:MiV+u1u/FTCaDV90JQ7WOAuUM0CSY6+4vSNjAKoDhPA4SC5s:TIu1+VwvpuXSY6+MSVFotEos
MD5:	9C4D937F97530545BCCA9B4A91C2A5AD
SHA1:	2B95E133938E1066654D4A6AB0975EF32BD956ED
SHA-256:	D9B747411D8665D613DD401B4C683E8A1F2B6BD0FD14C289A9F3BFF38552A33C
SHA-512:	101ECF27F8D0DEDD3B398F1F16BC87119994ABDFC034E7F5D6BDC3F34B169D865355D04B9D3990D1757CBF119883C5ABF37152A64371576D07356035CD3E22A8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw
Preview:	RIFF<...WEBPVP8L0.../..?....$I.v..7.?b.2..D.....%..g.F....+...n.ip.Z........j...K4...$...N..\|k"e}.E.`....LY..-....i..m{...........F..Hy\|"?...Io...6.$E......5aM....?..>..M......CL.C{}_..h...n:...r.~.Tm...&.f.7....w.w..j..Ar]3H..Ca@.C6..D.o....y.O].A.m&DJn%DC...!!..l.........().X"?.Y...D0.....$NL...&...A..j#Q.M.:T..]d.~.f.Cq..............p.'.0<i..ci.O.v..w][q.AP.s,s......7"r.@.]N.X........:...Q.......L......I..s:.......^.:....Br.%F@.k&@w...m.N....+.0....Ac.B?...<...@.$I.U=..?....4<{_.3.B.,H..Y......$!..7...I...##2..VwA3cA.................;(....)K.z.A..4.y.Y..k[..Ac.'........<:..-...\|..._.....p.q.A.u2.t<...S.f[.+}........I..jk..sm.m.}h.m...v....J...F....x..)./..?.p$....d./e:...^.!..E..F(...$...Qw.o}..5....S.=..o.dv3U....8.}.Q..y...O...E.G..f.[.../.....x%..6..\|.y.L..+...Q?.^Ybw...B..wp\....S.3...;....8f:...@(.0.s.:......./N&."2.$.......D..!...........9O.....F{...nY]X.'{a.]g..V..^..X./m.N+mnZmoC.NI.a..*.n.=.3k..T...J.f...B..K...

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2196
Entropy (8bit):	7.903352074253317
Encrypted:	false
SSDEEP:	48:A17BRcX4d/54k9kTYtkJ4oTzfwo1nGzV5b24fwp45m:KTmZt2s08uV845m
MD5:	CC16F1781CB55F8A72A01137B6858055
SHA1:	E8795092CB6CFFE1BEAE50651C8668DF6CF92D75
SHA-256:	3BEBC5B2415254D0A88AA1DAAF00AC69F2E98D6B6936918462F9AC6DA35C129B
SHA-512:	2472814001D47CE40BE0A50F05072E34B908AC4E4AE588CFA0040909E467A8D4A0031F0E9E2043B4F436ACCCEDB4CE1EC8AA770306D00A041440192C3311E8DA
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....m.F..'.p.;D......d..(.M...$.P.F....O..?.O..m......N7...m#9..z.{.....+..t...\|..5\|...i."le.......>Ev..W$.95s.^33.3f.#.^."Gv....33333./Cw..F.../z....:I.....#.F.Yz0c...{..;..o,..TvU.w`=...q....m.V5.>....[.$D..@..[...;...j...>..p........ ..%v: ...p.....j.@....i..x....=.U..[.....c........t.[].f.8....&0.H....(..LB.` ...12].%._^469.B.\|.........ro.y5.. 0.].&b.@!.4.E.3..B.S.....\F...)....M.:.0. ,x..<..._.D. B.....j... ,.b.{BE.k".....6.......0..!.`..TQz......8...)".!4..C...(}O.....'..Q`.!.a..)..l\|#.5...^...P.,7.....4.(.A..:.0........Z.......F.B..Im......b.@o..)T.. ..$.8RQ.a[.....F../Y.$K....7z.+x...T.b!9.."....>M8o.A.......x..b...>.).....S...".B..j..l...#...^..\..e...a.r..6..ez.GX..V.S......5OO.....p..<...MTr%G..qd.<..tY..5-.6O-#......x.(=.s.:.N.1.+\|....w..R...}m.Z...}..>.Yd'.....=U..P^(..Lg..%.~.)%M..p&.\..7....p..^..........M.a_F.p.1%.}I..c.p....B.dAA...7zzQ.A..6M.!.)id...Y...u.....@NG..l5.*..d.<8...o.;.i......

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2070
Entropy (8bit):	7.864485372164771
Encrypted:	false
SSDEEP:	48:d/wu0b4B+mbxo6SMsT/zllswHeztVJTqqKiTRAtp9g/:dXU6xgl/he5fdC3i
MD5:	E2B81851FF866572E97F2A6ED8F3A87D
SHA1:	EC7EA23254A38C5777FEFFE98AC98C042F762EC8
SHA-256:	592923F8744D20C59F2ACCB1B816F2C3106617F59DD33AE623A770DE0765D9DA
SHA-512:	65DB4EFE0F3A633DD6977B1F8FAC6ED5EC8A0EC60855621140EA07D6E3FBDE7826D3B5ED63198A9B7F1191D09008D98505F88009315F330ACFBF71B71FE9CF4F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?...9.$ER....XE.c.N..$)R..o...f..d..$j.o.~.._m...Sf.gA.....2....".0.~.!...~..A@Z.......B..B...J..A!L!.A....P..Dq..i.L. -..a.q.0.B.?..a......Q..../_EA.E..&...X......6y...J.....oP...F.....D.7...`......+..i....(\...VZ...........yE.q....~_.....>lD.!.p.!...2... Y....A.g......u......t...w.eH#G..?..b9...sl....0...Vf;m3..q..dO.[.."..O NQ..DQt..R.....\|1C..S. L.96G./R:.~....[..l...{..$s.....k.....a6...bQW..q..:E..p...+....{....$D...>.b#9ls.[q.5.7W..(N..\.............P.......6L..nl.g..:mB..r(N.)j\|...I..B.{z...ES...8....d......v~.&!...1....t]L..y.-8./...&!..r5I.).....QG...C.{z.^O........6..IO.x....MY...rJT5............w2.7.......9..i.bJi.......E..+k....z7.^..fN.WRG.B1S..'t...1.Dd!.p$.....NB.8e..S..].F...o:.~OS......-..(..N...Dvrem........Sf..S>t...<=..JsT.f.....u.O...?..w1.4/..yYT>1J.. N......."../..E.W3m..@qJ....:..5.....,.Bq.....;o{..{..."$9...5.!B.=kZ....6XOF...:-.z......kf.z.Ru....l8o...........1.5...;..........

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	48322
Entropy (8bit):	7.9925923618023305
Encrypted:	true
SSDEEP:	768:3tbqdESEHUPdAzlINODPguMRR/OC8ipneWj5tMb+K/ZeG6G62sc2fVAAdgIseEeq:9W6SSCAMOcuwxOr0nnXMb+KRtiztdgZF
MD5:	76497700655681491A9BA6D4BAF13B64
SHA1:	C8DF276FEAF8A43717EC0F9B1EA2DC4AE71C188C
SHA-256:	BBFC9CB7F900979F318D15A59045CB7236636E11B5F8A441E309D9E3F08B9139
SHA-512:	D16D03A8B7D3DA893463A7DA05F7D018CAC6399E6FFFB8535BB8B07114B5B8F3ECB7457C5DD46B3EBD27CCBC14FA79949A74240C3AA1FD7A0335FCABE14B0DE0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8Lq.../..?.M8l.6l.M.#._.4m.........mI.l.{..@..m.........d...I$....N..l{a.Jb.I....,..O.9Z..N.DR.a[I..ND..gC.....$..6.h.I..?...X\|...Wdm..5^....zh.V..8aE.!........k./..... /..H........^..^@.$.U...7..g.E../....$I2k.>.c.d^..](..FR....<.......AN.....Df.(...........P..".........WB.)A.. .q.....1.....!"7."2B).. .....d.+...8.#.8....)"....#.. s..G.g....G......~...........1f...I$.....H0.f....T.lIR.dI..%?[..L.PE.D.'"..q.....Tc].PE.=.4..K.H........,R.D..\|.Y..........I=1..3...G "&.............k..^....d.U.J.%9.........>...\lA....I.>E..]...R.>FHg..B..V.?z.RQBo.....bz...<.KY..."f.C.0..Y3.....m.\|.=...C..{u.w.s..?._.g...{...Y....lk..{_g....N..[t.......gu.2,._.p_.7.#.l.<.8vY.l.....+..p.#...o...U.....7.;.P..fX.99W..}.7\|......DH.;.m.m...c..s.fF......5J.\.j.m.....1..f0[.Hj...l.X....-.....-.r.].....d.g'9T..~.<k.........c.a.x-.'.m..CY...+.....+..=O......Z.Z7F`XS8.)..G$...c.=....@x..w\E.<..H.......A.G7.C....".C^.n..D.q.....(T'...C7.!

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	41480
Entropy (8bit):	7.984382119800143
Encrypted:	false
SSDEEP:	768:aHHQZTU84STKu1gLXOCLa/FI+y+rW2NIeLq9wTqjrlWRd7OjSRTdXjuq4/G:S8CSTHkPLcFr1ww9TgM9dCqcG
MD5:	F0216C5E6F3164CA18EEAD137A37D41F
SHA1:	C6C7FAA47A3F8426A12041AF7961927CFB605612
SHA-256:	4ED0BC7515E91E83DAB8605FC80486996624880FB4D0C065F26A79DE18615524
SHA-512:	7093E020C1362F28AA15C5B203D2D0F4A99AB630715B9A712157D979BF2C6CC5CE7D3AB0B63006651CD1E96B6B6C159F4AF49E45CA3596B6A8F7396E722BD072
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw
Preview:	RIFF....WEBPVP8L.../..?.....m.........................3.L8.Dd&33.l.!{..C..LfnNBf.H......[Of.18...1m.=...........c2;...{....f.9..D..p..;'...5F.8v....G.....L....]. .y....E.2.<.......v..NJ.....O\|..m...m....<..u..<bw.c....I..Bb.....l{.=...v..vE.....N\...~..v.c.2...yh..=9....G.._{.f./R=....=s.".........~m....^$...mGT..../.......f....U..?."B.. ..ND...H..l/.s^".."......C.[..MwH........WwK.....H....{...r\[...d&.Bx....JU..e._.L.%0C....-.um[.2r.\..pJjj.....~...E.l....W.......53.qh.n....((.JA@).J.@.........R(@A).............C.....+.3PB..J).P.P.@...P..6..BP.L3].<.q&.P.H]....J!.......C...T....RJ.!..g.#..<..@...6B...Ea8..u$..;..m)..8...p...p..i.".P....8o....\.. ...........Q8.@....f`=8oj".4k..!D.a..W.x.'...?..}.S....;5.6e..^.l>...,.!......<..L.r...Cl. ..s...D..vLy..j...qG.,....~............N.~..F..Y:.PJ.(...@..4..Mzv.Y..q?..<..s...(.......3..B..^....F.u1n..Y<..........;~.p..h...-...>XM.......%.! .......{.a....J-........@...1..a..F#].'....c

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4416
Entropy (8bit):	7.94177891589712
Encrypted:	false
SSDEEP:	96:KDCeQjdXQvkXJ3GMRTLo0TAsN3YzZcBkJojedAZaUnEMX4CzvlMM:+MjdgvSdVTdTAsN3ocYyeSx/B
MD5:	E6A1A5EF5377B178774BF38CC5B0C0B9
SHA1:	F5D8C0A4E259D1D7AA265CC1FB19108949F63D3A
SHA-256:	19ADB2816B8C83892EF1735C8EEB67FA32FDDA93962D3FAB1FC9C31E4AC78E98
SHA-512:	C8E05C42661FE265B1293C04A5F31FF7AEF950C40DD75D4D663BD04B0BFB5141BB199CFD2030DB5A45F37EE6F6CDD7E1FF71E5370F9A514665006EE6B10A38CA
Malicious:	false
Reputation:	low
Preview:	RIFF8...WEBPVP8X..............VP8L..../..?.U.._.e9gx......033333333C33s.cffl.6..k.sN..L........z..B_z..x[d.j0...v...xb..q..SX..#.5.0.....9.,.w..9.t..S....O...'..Y...X>....S..JK`.$p.+f:U....^...?..b.Ka..Y......V.d..N.e..N..7.<a[.uW.7..'Q....fu6.%ig.ms:..p.{.m.g.....I..I..........n.........V...r\....Ll#....f.\|l=...w...Z....=....'...b...6.()N.f(%..biK.......\.Y9..E...Ig........^).6vbW..e.U......JU+.S`'....Vs9..f2....`Y)/..'.i}%#..f..-M.%..&.0C../`.p....by.!.\......d"}.k..g.0..xl/$.`..L]............9..D....6w.{p..+T..].....6p.' A..O..{O..........G..q...vq.$u.1...x..hd.K.-..3.`..{.'w./.(U.#.ZY.G..v!.$.2.^+..5.B$.Y...Z...<'....hv...>..._.>{....+........oa.x..r.e.[.q{...... .X.%.....H.+.....M..l.K.}../.m...%.H...6d....6p.U.."..gg..ZZ.z...r..P....0.x.._.0.F6.P.@.f.\......Z'.8.....c<^Y.@ ...Q.@.fR."......EK..B....{r.y,..{..d!9..C. :.P\...5..xL.....0U,.v^.n.W.zt.$H...&6m.=..GI..3.`#...hO.gP.i.Jx..F).....l..;....5k[Z4:.H....hO...sJ.....@zf.Jq*.J.z.....

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 6956, version 1.0
Category:	downloaded
Size (bytes):	6956
Entropy (8bit):	7.9301019807594955
Encrypted:	false
SSDEEP:	96:f1e/kvt6gM3QbPUKG6JPhlVrql6qKrPIaM4SUQ6rrLk6aa9qf4zZ260qv6Qo7HvF:deEo7dyVhlIDerrLZ9tzqqpoLN
MD5:	CE6FF493B5FCDD0A6B6545A6A51A9DB6
SHA1:	D1D22FBAAF1C286D4008CD63BC3CCA0B14E38EFB
SHA-256:	58253AE21FD05D80B422BF5538140E1E6B3D96D8D35DDAB958519FBFE25E302F
SHA-512:	B6AA2A36E512B4E79306546CBF93C5B9807F1413EFC62AC826AAAFCBAEA8D439BD1F2374397A900ADA1C5672FCD8E9EBEC61FDE7A2B969315ABDD677DEB20E7E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/webexp-iconfont/fonts/webexpicons_text-ce6ff493b5fcdd0a6b6545a6a51a9db6.woff
Preview:	wOFF.......,......).........................GSUB.......3...B....OS/2...<...C...VG.P.cmap...........ri..glyf.......+.....>head.......3...6 r..hhea....... ...$./..hmtx.............#..loca...8...L...LlVs.maxp........... .O..name.......:...v..P.post.......J...5.<..x.c`d``.b.c.a`tq..a.``a....cNfz"P.....i. f.....#.O.x.c`dY.8...........a+.f.c.g.......XA@.k...[......=`(a.....f.......C.x...YN.Q....Q..ypdr 1...].......Z..C.ex..t_....G@=<..T?T....._.}.o...mN.QSK3m...A....y]V......u-2..OM...V\|wJ.3..K.>....3a.K....n.c.%+.....u..-w.\|..m..7..lWE6.".W..":BE......9..Zt.z..S._4.h..-:G##3.FfL....132cnd......+#3.Ff.[L.z..5.h1u..b...b...b&..gy3.,.F.......\9_....x..Y....u...{f..9v...cwfvf.....E+V'..!...I...G..E....eWbs..0....#....G.6.W.6...E q.........]$.H..3.........{.{...C.w.>..\|..9..2Od..K.........(..\|.....5.....!...g)....38NFB..mc..jz(.D.n?zar......T<..F.X<iXtfhL...J%..p...Or.p3.\/K<.s.A..Q.K....I..m....n.[..~....z...!.{A=....n?.dj@%...+.........L....hD.._........2..

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	214
Entropy (8bit):	6.859588302730998
Encrypted:	false
SSDEEP:	6:+d1ZwlZtG/yn1tCddfE8GhgsuzBQmSKdGJcA+/n:o1sWx/cIimDaun
MD5:	7CCE1B46A8F79A1683F90BD496D3F1C6
SHA1:	AAED0D0E51938901BC33E69A535DFB0E03736B31
SHA-256:	9E74CD6FD2F4C03A7F559C67A3534DD7ECAF28226E90960E4B1ABBB1B2E14989
SHA-512:	6A6F8FEF9D14BC63C42B512C1AFDABC7061E77832DB8AF2448F23B6CEA20AE606CC39821767FBB5C405F0DD4F6E1BC5405236C4C4FAB48DB7F8AEE246F20CE2B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?....t!...........F...~.!f....H....]..>..l#Ir..66E.:.Pt.Z.....v...:...}%..m.0...O...[.........H^.......t.c....I.r.Obu.......7...oO.`..LK..S.._.+.Z<.]..}.gg.6......../8[..bd.(...........[..

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	896
Entropy (8bit):	7.574658091098493
Encrypted:	false
SSDEEP:	24:pl5ZWw96EdiCvH86u3kT8kfl42Q2BAQbOKgaQ:pl5ZWuRdiV6iilrRA4pFQ
MD5:	A09C4FC40A9C597CF2D7C3965850FA28
SHA1:	0A9E6F625E373CF509180F37011C1D2E10C09B14
SHA-256:	D04A1E303595F131CEA2D8FE94BAD1565E2F6080DF3AD5C8EE29F422A9A3C532
SHA-512:	4E420B90A57923C9457B4675AC528DEF236794559CDCE4A6C5002C9C24A526DCF15083BDD5A6DA10CB9C5F4B4250A33B2D5187D3D38492F8D06FB91D290B717C
Malicious:	false
Reputation:	low
Preview:	RIFFx...WEBPVP8X........?..?..VP8L0.../?....%....j%y....Z.m.m...].;...........^Z....]..R.{...T.)....y."..~.>.{...1.#.\......\.0..w?.^{2Wb.mg.....e....,....;......<...5...kw...3..LO..{j0.>...wg....c........Xe....9..@.....4~.x.A.t.C...g'........l.}..m.E..+........YK...h./...$ $U.q........<^m...n.@.\|.3Z..K......I.`....m...e.......3..p....x...Q.=`.. ..^@^..G.N}.u......lI..L.HE....6..Gd.t.vZ.)@g'i .u.y).R.E......2....Z?.1...34.p..V....9..?.8....C...y....D..r\:.<4..............E..A.q.p...hHM...........i...L.H;...[.=A...N.a.Z....c6..bNvX..E....<.......N...#.......uc.\|...@(.L.u..p`..k.\|.+....R....+......+..nf.JI.y...C..iYo...&.....6a^_"kf^5:. .. fQ.8X!.v.q`:..W....hZ...~......z......pk.L._..@....+e=b.^.....i..98%.P.Q..w...Y[_4.z.....(pH.......N..'.......+.XnH'.....^S...,......<.....6f.r....}/......ej...]........EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	976
Entropy (8bit):	7.81733189819035
Encrypted:	false
SSDEEP:	24:rZJFAFJ+e6vmR0EuiQGFV8HzsSm5nTOAsU5:rZJFAFJ+vmR0JXBTnW/sU5
MD5:	5E02310E9B5BFD0E7E17C4AFAC5E0A31
SHA1:	16E26E87D896A0C25C9F66B69DFEC313AFF50C58
SHA-256:	060A662AA44127BB61267BF77C885272A5C3177C20FB67330646550553859C96
SHA-512:	AE8DC1F897AF8CC8BE4BD69E9E602B29506431259A2ABF511B99ED447BDAFCE27975203E4247DAE9BE137CB54537E0E9B537964699FF9ACBD162758472D31BAE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.......O..Zw.q.........A..x...kNN..wp..w.jgX.......@...+.%..m.......Cd.eg....<.....m.6.;......F6...k.v.m.5.[[...VwHfR./Yo..G..R&.es......v.~.(>.q......'.....7..\.O.!...3.A.....q.......ly...o+2\|..6R,..ML`{..S....r.^&I.F.O..g...#=.Z.n.f............%.u.7...c....{.......%3O.S..I_..6~y2..ve...~H...=t.Q..k3..!\<..!..1E.1..=E6..!.N.2Y..iT..-...i....M`....0.%K.#.7.rn.h>7....3..d.%.U...z$;&Z.-....;q...9;.n.e..9.\|nA.....`p.n.e8.B.=.Ej_.SpT\|.G4..C.>..M..(..E..B.5..J..s.....Q.B..{...g`....nR+%U..I4q. .C.=p?.v..u.J......&@..O......B..;f`.XGd_.K........F...s......2..%.RW...{a.$g...p.D..M..'...+~..$w.)=..'Z....G..8.3@....._k..r.Ds.>./.h].EV.l..t.(..C.;PtW.L...0M.%.`&..$....1DSY.?..x.a.}..{.=......d..4.......V@>.."...&...!.........Q..m.:'u.1F....i.Sp..$;..S.2".8^u.KV....2...}..3..C.C....._.b.~f.8r.pO./.{.h..^A._...'K*g....YBe......m..H.S..1.}.1"Q.L`...V...N#...N.....A.q....j....lo&k....\.\.r..b.X.GN..4

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2850
Entropy (8bit):	7.919481037115899
Encrypted:	false
SSDEEP:	48:hR92luUPRm6mUWYskqzMuUvqRCvG5Ibs67rIawAyoli9kO1k5aWL4TWm86z:nUluUJm6gpiigOSbs6n3w9GiH65uWF6z
MD5:	745EE717C69C0DC477BFE2DA7DC7C73A
SHA1:	77FC31D2800C3ABEAAE41402E3E90F11ED484EE7
SHA-256:	55D1F535B9A9502FBA5FE0299FCC636A8C08B17373886B66521E89687ECA07BB
SHA-512:	8EC7F468AF2CC46FA4C1935E0129D9B3A0464DAC48AE600100ABE4EE46AD71410F64082975DF2347B89173E071877AB26F6FCD74ABC370514F6594189CBC1E5B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/IDOtRhsZLSG3EFxWxmWREMPa42_SNQvl9-x4FBu5dn9aJMjpVtMx_GoNdnQwEIp_7gsV=s64-rw
Preview:	RIFF....WEBPVP8L..../?....Dm.H..O.r.".?..,k.q{.BC....H..4Z......&. .6n.9.r/.......d.I..y..[..O...?........ pK(..f.8Gox......3..p.sq.^.3?1..jg.X.Q~........O......q.....b...{ D.....z2..:.q.......m...\|^.....9H...?.....@g{...u..t.g.:..[N.j.`x...$)....x.}.....m$I.R=..6...!c...........]e.....>-........ci....J..+..{o.h..r...................a&I......._V.....t..J...je..dfX.JUaN...m.me.........[F.4.....CHE...K...E7.m.v3...Z......`iW......90.z.Ik...{.......{.....pv........%.....>r ..._k...Xpl...C........99.t.k"..@&.#a...V[. \}._.q.V8@.D......P...Y.0%.\|.....d...).@.......`...q!..Z&.13...hh..(;..IO.. %...)..d.4F.@8...I.i..h..&..L...Zk..."..h.).........(.p.7......l.o....q.`F..q .J<..@.C..Q.0 h..'f&UA..CI..)a.YP)..h$E.../...N-T=...gO;wk....ri#...(M.;.y:........i.liU....^.....?.i.bq..}A%fD.........3....~>:..<.v.."....[{.'_....=.y... *..?...)il+e....T.'...I.....n.D_._..,..U.8..y...R#Qk..........$G..u....].h>..@.1.....?2%..}..R.../&HaBa..w.....?.k..7...

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9060
Entropy (8bit):	7.976507557570821
Encrypted:	false
SSDEEP:	192:YrL4HF6Tj4qE56uPel70Ps1y+O/m4lYAOtjSdUpW1yU2yRx/qXu5uj2UjGU4qM:YrvdE56ueIPTaAKjSdgWF9RfUjGUs
MD5:	61916AD8B9C0A3FC8413D347446FBBDF
SHA1:	3C8C57695675DE18CDC76E506D1E13EDA857E1F3
SHA-256:	F1D3C5464C5708E948DF88738979DBDC822732226B2B99C4A78DDE55E173545F
SHA-512:	8409675C0FB5DEB030AF87B5075EE1C3489D98C6BDDD33880E449A28B07C2F425EA74E7582892D51115ECF5C883BC056D9C290D68C4ACFB221EB1C8912826346
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/d0/99/00/d099001a-0f42-0414-f655-2b81dff4201e/da8ab394-b67e-4de7-9785-915ea0fe254a_APP_IPHONE_65-2.jpg/230x0w.webp
Preview:	RIFF\#..WEBPVP8X..............VP8 ."...........>.J.I."!.LUL4....~.Kn.....`/.5`..d......0.m...\|......yr.1......N...o.i...'..m.....8.....>t...O...>....5.....O.....~.^......W._.F.#.7......=:.%.}..._...\|..2...3..._...o.......?../._.^...?v.....w....CW.6....Cb..'.n.o..%..j...oA.......%+..o(.v#.h.R+......@..s.....,.......iR}.S.....a..X&l...@..T5.\..._..).Z....hf..q....O..Zh....+.z..DB........L.'.}H..el.....5.&.Q.O..(.l.#./EM3..QU..Qr\.68.b.....k.....iDE.......~(....=....<9ooS.x..M.b.#.,{.Q.."r!..2...d......b.Bv'..\.._.;..j..v..?...xK3."..$M..Cd...47..Ev...M.5.v.....P.@..L...wn........n..y......?....o.%{.A..x.....Jm20...Y..`.#.+.MBG..{.Yk.X/.M!...x...Q......IE(...........z....En9............Pt3..H@...Q....2........7..a4/.B.^i...}.-.e.f..o).8Z.q.~.Eb/..q.)......4l*.".........j...F'.z;.G'..G[[x...x...Z..=...e..y.....K...>m..V..b..#`/P~...3..=YG.SB.I7~hyUQ...!.U.I.;lbg....J1..PT..W.Y.3..$e5F....._....i.U.qJ..4.....v._...j...v.U#YH.c=..._{.N...JCN..5.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	414
Entropy (8bit):	7.343024686301996
Encrypted:	false
SSDEEP:	12:dxBfTFw3VuoWWeGj75Cx0dU33Gv0BH/QRYlu1n:LwlLWGGnDB4Sl6
MD5:	BBAA019A294CD6ABEC878D45EFA82948
SHA1:	E844CD5AB2B380AB549A98CF41C3120915FC487B
SHA-256:	87DBDC9AB64B8755632322D0DE8DE5E03ED7CFBA415D649009806875CC8CEAF8
SHA-512:	EA1ABB6B6672AAE67949DC630A1A7962D7F35323B65DC20D34DC8276117DA1CC5BC8DF0FBC5BE393C0882CB8E085CA0AEFC87022D068B44938904B2A7C938721
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ZvOdCQjZm7PU-1Qrdn_m9ksg7RAAbXL4iW6QSCoYmkHcl4lopAjeOMYiESyXCQFfRjN5f1mRb1un=s20-rw
Preview:	RIFF....WEBPVP8L..../....O..$E.._,.C.p..#..f.}.9l#I...?V.{(..m..Al.s............D .......A.....'P.0...E+.._..~.....0.R..~.....E.u.......R......\..gf!.=....3...M....~.o~p?.u....Q..y......k..._E(/............i..8.$...m..\|>...~.......^.......]v....2..h......m.6mM[G...5.m.K..R..K...e....gW..._..:.k.).>..E...H.JD..J..T."""aH..%.F.R"..#...z....?g.xa;Q...C.jb....zo_..u9z,...q..%...Lq...p.....B..!...p..

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10268
Entropy (8bit):	7.976305561250909
Encrypted:	false
SSDEEP:	192:u0okuRcas/S9gZj9R47fOxjzVbfF/j2o/81TB8rvrrDSnIAT6kTwh:u0okuRcV/S9gh9e7E3VzFbCorrDosz
MD5:	6CA37269D896136472A6A0ACED9B04B4
SHA1:	C0FAAF416776C9B0528EA82CD6BB9D0574C26273
SHA-256:	FCB702F59C90EA20D70FE8EB4B56FB631CE38C4D89C6F067CC7109FBFCDF2DCC
SHA-512:	A56E7416C08A4F2743C7429503DC3ECB6746B044FB9D4DFC32F4C68F23EDE80899E8D26D4085EC0F5EFCD64571DDF030AD7C83B1454B6D1BF797109BB26730C9
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4d37d6/6720fe7e-df24-4815-a8f4-b0aef0659a33_APP_IPHONE_65-1.jpg/230x0w.webp
Preview:	RIFF.(..WEBPVP8X..............VP8 .'...........>.L.I..#...K.x...n...4..et!...U...s...E..}.............Z~......=.9.......E.O@...e.../^\.../...\|f..D...U..]?..O....5....W..<j~`^..w.O..B~.~.\|.~....[.......h.....w........?.....}..........@....^.........]...^/].IG...-.:....U@.B^._XE.S?{,........^.Z.....(..BQG....}~..1.F.i.o..%v....ho...7..5..B;;..ln.O...R.....e.#S.\....98:..0x\=>...~.z.&.{.....1......`E'.c....@X.l.M.Z0.3_(..<..M....7...e..E.T3.".M...Pu...0......^]t....R.....I7....B/.`a...(......=...I..qh.x..V.F$.Xp.....m.\|..C"+.^.........qw.\|LQ.d@{.;..9.Wa.V.......A%...6f&..."Z..h...=][Ci....$..4Fb...s.......Gw.{..n..Z.w}p..BGg..Y...#YOu....Y.7....dm(.......a........`Av..]rK.w....O{......7-.ub@.PX..?.].=..Emk...,....;....g....'.R5#.._<..4...'#.`..'T.....f....fI..~....+..[........U.>.B%W.PH@...c...X.2.j.{.h4."..m.5m.^I.,e..-.....-.^rk..B....ZW.l.}..1.$.?$.......%j.TOE..:gnXI.z..._q.F.I.......7..l7R.....-A.E:.'./...]_{...#..#v.B...\|.

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	23302
Entropy (8bit):	7.958321172488076
Encrypted:	false
SSDEEP:	384:LPli1P8wO0SgCkQbkgRqxucKTBbhvEGux1zpWDVGBuHpYxivQjajswlrkut:LQP8wzd9xDKT1hIzp8VGBGq5EPt
MD5:	9BBCE8B93B48E802C8150A155C8A02C2
SHA1:	2A71F550EDE725B2244CF6CB47B0D4B2D19A7D44
SHA-256:	99330868605BE6E93BDC2D4702ED59831C9474F4CAE6DCD2D86DACC40EB2A131
SHA-512:	FBA0E2BE102B79557D5116B3A24FA04F61F9A2ABBBC983D19C2BA53AE82287737AA28D14E93BBEEE35359A6ACAC7EFA430DB1794E9753E33BB8DAA803067E311
Malicious:	false
Reputation:	low
Preview:	RIFF.Z..WEBPVP8L.Z../..?...m.....i.....U.?!D.......'..X@.V1.....?QN.....=b.......,.39.E...W.;...=IN .n.'v.r..2...T....P...2..<(%..;..o...............j......@.{.LG.......a.._...J].,..^U..9....U.c..%......o@.q...v"o.-.{K.....;.../.......}C....+K..r#...M....1..d.p. E@.mS.#.....F....,..n!.....(.......@,.KF....G..G..r....^....@...@...%.D..$.@....fI..6.eY"....$...@8^\~@.......#.. 7e.@.pq.....5i.._z..1.1.....x#~2M.......J.......H..4.2`. ...M.....&....4.)..........i.q.,..@.i....;..).w....."@.....@...E...]..-a...GD.0..$`.....#bD p...c....0.. . ......}....n....c............\|:......1".1.1". ..#........G ..3.# ..m.92./{..{G.../....{C....R.K`.V.5.-.'I.@.tm...HN..II.m.....B.$E..V.4..r..v&...w.s..zmm.m..v....;....Z.<..z....F....u.i.cA...Uv.b.f'....4..q..fF.b.N.m.?.}!..Nt......_....F.A.Clkp.`.....2ww.....nO.9=,...o.j....S..].TM.xH...AWg.S....H....."....$.U.l~.....nc.V.{q.....:......L;p...!r............._Ct.?..._3.k.W....r..r9..v.&.Wuxe....#..

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	37564
Entropy (8bit):	7.962934539665607
Encrypted:	false
SSDEEP:	768:OwoSQdgxtwSFVcBULLwPSwwtTdiqsS4QhabMUNHzNJ:wd6uSDcBULjHTdiSXhfy
MD5:	21EAC75763F5C2012DDFEEB866FCD348
SHA1:	526E0BAF20277F985072DEBDAD9CBD7A20B44144
SHA-256:	7D91F09A449207296941E6E5AADA5FCA26942BAF69591DF1936B9EA28C59FC3F
SHA-512:	DF9D6E9F47F3D71FC709906B72760EE2A696881A30E29CBCE0F7F1C97F4B0B35C9583B94169037175E9D0846DFD80838532CF96743D833B7283DF66D1D79AED6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M8l.F.FNn/Y.._.<.BD.'.....n.....z..w.T.....0.]u.T.......A,..].ou7.......l........Zd.&@...... ..#"...."bd:sIl[..!I............K@.".......%.8/...6`@'i...XZd..K\.%b1.A.)q?.'...N.U...1.l....=..-0.D_.i..}6.........0.V..$.p.W.....#....YHR.=.....K"2..WU..1?F.a.&nRK..l{.F....92s....Y....#.0".&.#1.m.....D....;.s...i.'..t/I..1.e.Yf.$.93...g.X.c.d.W.5..u..\.oI....%...E...Zl-....)nO..A.....I.Z.T.R.I.-Z.......,..o..c...;.V.Yk..T.J....B-N.?jq...g.......7..u..V.J.4.%..4,.?.J...K.....K.R.fa.%I....]..W.~\.$iY..U..4.)VZ.IHQ.I..C>d.L.r3..J..r..W...y.B...Z.}mo.....]..x..._.n%UEJ3....o>..x....E...am...@(3.. .8&>..dr8b..X..#.b8.Xb..F..b:.x.....!........Y...~,..%z..o..g.qu..2.^k......b.\9..t~....;f.........7..@mL..~...b....8Y....V.l..'...@.z....V.q.#.n..:i...!.o.~.. . ....j?....H....n;.......Lned@.k.}8).1`...bO.....5`..........22..............@...`..t..u@....x:V.........W.....2....kw.....J..}S:\|...4/W .............}$......v.

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	774
Entropy (8bit):	7.690416168441072
Encrypted:	false
SSDEEP:	24:P2hPcF73K6fiB1G+VSZ8NsSNhKd4lgzKsDdikPjfsX:P26RxKTG5ZZSNhKd4lgzPxTPjEX
MD5:	0C69820B6574F95F7FA350B9F0537C65
SHA1:	8680D902CE9493D480AE551C06FCC883857535C0
SHA-256:	9694EDE45707D541967FC7B25EAD7FBD09B39DE54099665718ECF46FEDC14112
SHA-512:	12F12E57F7233F11372EC52FCBE148023E978D7312E300CD0D26F87220D71B2CAA6CC08E93426A9A8FA5DC7EC794143CE37593C6B59E857BB569FB385BAEB73C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?..... .dW...H@....p.K....$IU...D.n\|.v..m$IJ........wf..2...B!.P.p..B.B....!@.......".Q ..S.4".R..B.V.Y.(..B.e...7.ix".(T.TaGD7.!.@@ bt...@....m...T ..Z%b z..<..j....{I.m...>#.mE..Q....96.&......f.&r...o9-..O.@....(P.......0.......$.......4h...l.aw=..e..AM.(.um.Ew5..i....m;]w6.M/>....~z..ND.'..........,....s\...6....X=J.WU%@..{t..,.<3....f.7.LR..kH%1.~.N(..c...c.....bP.Uc....M"8.T..?,..oK6......=.rrrrr...V..Q.......wg....7:0.VCd.+y..HeG..q.q.... ..H;..(i+C...4.n;8.K..,......2B...T.A.o>~.....;7 .\.....Wb.Q.$.] ..4.kp.L....4.....).?.X,.....}..$}.......U ..~..h.f......M.._j...N..o.(.+V.g."D4...d.%.HD.........D...u..3.....z/.s[..M./.".....K..Q.....M`o.z.6{..<...!..E..j&Qy...T..F....v...3.6......I.)O..0,..t.v....+G.PU

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	22996
Entropy (8bit):	7.96937716263766
Encrypted:	false
SSDEEP:	384:qve2krs7aF7Dy6V2Ek11J+MAQ8OI2vWqJHhUNCCcjDOdouzxFoScfiT+5Xq4O:qPkwWP0EiL+NQ8OlnJHyNCNjQouz7cYX
MD5:	FCEB7F55997CFA489E583ABDC5452272
SHA1:	EC29BC7D6376D47485A346AFB8F050BEB9B36A8A
SHA-256:	9E2E668F4F7DCC79738B05D8EEADE33704D1B1610520EE85ECEF1FB695E46BCD
SHA-512:	94553EDCF64B843C2D6667D0D49374AA9D0FE8432695A9C015FFBE9FD244537FAD888DE86CD80810F268AABED1513621ECF68998B49D3D3B360265A1D615D94A
Malicious:	false
Reputation:	low
Preview:	RIFF.Y..WEBPVP8L.Y../..I.M@l.H.T.........{......O.'.Q.Vj..q.\..$.J..#D.....~..a.......,.:d..r..]..S...4V........+....".I......\|..&..d..Y'.n...$.I.h....E......].8...`....... ....G.a....!z.b.6a..$.J....F#>]....znw.!q.I.m.V5....\|.$.v.[c.a...h.<.H..H..];.Ac....@...............X...k...Kvx.......>.q.v8.(..#v..=..c......#...V.F.9FN........<.@.E...vu./.$....9.......)..).2...7...D5../$....VN.e..Q@.&..%LaJ...S.5..o_...N..{.. ....[.4(....g..L%.S.?F.....a0D.P..3.g......C.).P(..@....2.W.\|o...._..T.....C...C:,4....L7..r[n..G....Z..g.H...M....j.I.t.....K..d..;.;.63....>...r......YC)&%@..a.....RM......Z=...G.....h......C.[/V1...b......T\....,.....;.F....[.v.......S].Q...\......._E.&j.(.. A.@.....p....qk......`~+.b........... Vb#6;..o...$.bC..A.2.....)A)....e....m.....?...{...1...C....T.M..V.....R.9.../d<...3..J...../O4..T9....0..MXEO^.Q.\|D...h..{~..m_..x.Q'&..y..b..<..B.M3...i...*wu..../...3f.U;v..>G.J..`ffv...]u......u..033...d..E......koI....[.m.>...m[..cT

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23302
Entropy (8bit):	7.958321172488076
Encrypted:	false
SSDEEP:	384:LPli1P8wO0SgCkQbkgRqxucKTBbhvEGux1zpWDVGBuHpYxivQjajswlrkut:LQP8wzd9xDKT1hIzp8VGBGq5EPt
MD5:	9BBCE8B93B48E802C8150A155C8A02C2
SHA1:	2A71F550EDE725B2244CF6CB47B0D4B2D19A7D44
SHA-256:	99330868605BE6E93BDC2D4702ED59831C9474F4CAE6DCD2D86DACC40EB2A131
SHA-512:	FBA0E2BE102B79557D5116B3A24FA04F61F9A2ABBBC983D19C2BA53AE82287737AA28D14E93BBEEE35359A6ACAC7EFA430DB1794E9753E33BB8DAA803067E311
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw
Preview:	RIFF.Z..WEBPVP8L.Z../..?...m.....i.....U.?!D.......'..X@.V1.....?QN.....=b.......,.39.E...W.;...=IN .n.'v.r..2...T....P...2..<(%..;..o...............j......@.{.LG.......a.._...J].,..^U..9....U.c..%......o@.q...v"o.-.{K.....;.../.......}C....+K..r#...M....1..d.p. E@.mS.#.....F....,..n!.....(.......@,.KF....G..G..r....^....@...@...%.D..$.@....fI..6.eY"....$...@8^\~@.......#.. 7e.@.pq.....5i.._z..1.1.....x#~2M.......J.......H..4.2`. ...M.....&....4.)..........i.q.,..@.i....;..).w....."@.....@...E...]..-a...GD.0..$`.....#bD p...c....0.. . ......}....n....c............\|:......1".1.1". ..#........G ..3.# ..m.92./{..{G.../....{C....R.K`.V.5.-.'I.@.tm...HN..II.m.....B.$E..V.4..r..v&...w.s..zmm.m..v....;....Z.<..z....F....u.i.cA...Uv.b.f'....4..q..fF.b.N.m.?.}!..Nt......_....F.A.Clkp.`.....2ww.....nO.9=,...o.j....S..].TM.xH...AWg.S....H....."....$.U.l~.....nc.V.{q.....:......L;p...!r............._Ct.?..._3.k.W....r..r9..v.&.Wuxe....#..

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	4.952963038414406
Encrypted:	false
SSDEEP:	12:UXv7Fc4DpWNRKL+BK/sgl9hrIYerznR3zueIDRTLG9fkVlF38LG0DAvYodXotHNu:u6oTTlrIYevhTuKtLG0MAodXcNu
MD5:	2DFF575911FD65E601AC64F87F07D5D1
SHA1:	AE28A08E8E333C9234AD0D024D0865E5E36C5B2C
SHA-256:	7DF89772DEFA309D97987A7D985ED3F0DA91D81180FE69BB11DA8A8B181B418D
SHA-512:	3E6530272A6497738135CE998D2221588C487A27F20BD3745224F3FA43FDBFF8A2C8DDD42709B01B1CBF8FCE8EB6DC1EC9FADFE5FCF1AAEF0DE5B18CAAA6CBD7
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-42d04e97.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const n=function(){window.MusicKitComponents={version:"2350.1.0"}};export{n as g}

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	24734
Entropy (8bit):	7.989220634720192
Encrypted:	false
SSDEEP:	768:Wn/UZZAPjZWKhquQDmo9BSv8PJLR4gnr6CODy:WnhtWKMaCSevOm
MD5:	A3D5BF1609455BA96B672C1B43A17921
SHA1:	AEE2172F613F47722E9E763B1CD827C94FA611BB
SHA-256:	49F3861FADDCE7B94ED6B3B27534B8E2942A66C78DC1F62B9694ADA23CA218FF
SHA-512:	38A05D14D1C74893EA5229728319CB4FADECF12EC64DA07DDF1E4D5D2653E90FFE544AFBDEC83BEF5020D8B190BA66E5445B06B94056F07932B1B9263924CD46
Malicious:	false
Reputation:	low
Preview:	RIFF.`..WEBPVP8L.`../..I..I.$.md.Yl....?....f9F........Y.7.&.&.W._o.............t....Y..moB.)o.B......OL\|..)3.!..F.@.)I.#.a[B..k...;.........{....$..C.S0.@.U..e...s.m..n......;......o.1..$E.Z.....ZPt..$U.......B. .....iT]D@V./=.{/..F......9ms>.[...>..[w...y...n?.1.c.!.W{...q..8...u.F.G...1.c~..!^xa..9.l}Mw.(.......d.U.Y........n......./.anxm...\.L..4.......9..p...[.@.$[...]p....w...]0rw'.?.._5...,N..+..!.J'..S..Wf..p.....e.9...6aB....K.. ...Lx...m..._..F.m.......No./... ..:CG..;!"W S".B..p.F.m.).0....&G.....A!@!t..HO.....Td.@._.0.p{ty.k...v.....C..,>J...H. ...""AD......w..]....P.2w...6..H...2@.G.H.D.@6.H.L.....4.g.Y6Cht>."y0...R_U..H. ..D@z:D.GzfI..k....N.&.... -..t...RC..2.......\|....D`.K@45.`~.......CD.2...B0.. ....-.M..@..b.@....Z..&....!.q.:...;.'..o...X-.. 2%..#...H-.).<.;"..u.i...Af..H_..H.k7..2.....(...........R.h@..<.9.NZ.`.....i.%..b.....k.{.<.8h...IX..03..Y.Q.1..b..@.&MC........D`..h..B.4.....j.`/...{.....2..D....cs PM...[....U{.@...g..

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7606
Entropy (8bit):	7.968834443085747
Encrypted:	false
SSDEEP:	192:eOB8RrBODxvJ+HYUF6JL+eH+NWVBAFZtlLs9kE:eOSOA8JLwNaB0ZtlLsl
MD5:	3CC42A65872643FB9592A1E22E70A726
SHA1:	47CB8E7D51A5D512EF434345BDFFCE4FADEA1551
SHA-256:	843993BCB6577347FF1B60DA450DF22DEF3CD3D08EA7AF14EBFDF6473C8921EE
SHA-512:	2F6E0ABFBDF076AE490E7AD0324B4868818A32060B541A7932C89F71533D91B03F7A5A249311DC03F50F9E5B78F91DF818835EFA64C5EAC033125153CA84F802
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I...........?"&.G.....E.^.>.%Z......]s.#.\.g......2.F.....m..FJ91..a.237.fff.)33..afff.23.....;?x.......f)N6P.(..b.....3..&....HN....A9.d3..0.=.'Y......a.x...u7.).t..]w(..Ir$E.Cx..?.?.o.(G...V....5..2..a.....X....$..W...g.m.m...=.m.....=8'..5+.8Y.6....Y.ve.s.dm..'N.vg..=..-.U..J13W........6T..,....e.Mk..sm.}..z.......m..]..!~..RM...../.rN.Q.E..}.c...^}.........9.R..2B.x.g..v'..^ ...Z._xx..aD%..,n.'....h%.A..(3R.1Bz.N.B]...._w....B.^$.4..#.L"H.. `D=bPU..q =h;..=.;.y1..%VpO......YbB.3.bkI.x...R!#..2!.\J.......Bj..A......T....6.....1....H..M.Qu...U...$.....H...0=..{....Z.1...@..[+-C...x....;.Qui.H..f........?..?Q.y.u..=&...F..J8bp..F".a..Qcmc..[.8.}..@\.w..>r....d............}.X.gbL..@.T0.1.>...3...._z.....o.t.Tk.].....-..O.k....v....QH...D.@.IV.D*...TS...G..Z...hw..%.Tyk...o\.. ......R...x....<....H]%...P{-)....a.l...k...Co.....?.c..J..0\|_..j.g."nc.....(..s..W...OUU./.+.N3.T.....o.IcFo.{...1z8...`)....d...

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8086
Entropy (8bit):	7.96079286623829
Encrypted:	false
SSDEEP:	192:C/p2NUmgrtCLI4+vUSf31ESZLaegozslnytMWa7TkDcop:C/UNzgrtCLI4GUaESpzsgA7TKZ
MD5:	7BFC640FA12EC8BEAFFFF8CA1CCD9BCA
SHA1:	1AA8C0219571A38E8C1600E4A1862FE5B4190B54
SHA-256:	9BDE6D454CCD3BDFD0CB82052F4B559F91BCDE1ACD09C200B25CEAB5D8441178
SHA-512:	BF5A9BE7E0D4F221CD0CA7C9C13F07997507762F6AB48CDC6E69030635867281CC3DA8154B28FDC89A3670EC27F61099F7C87CAD55D0EEA2394E5EC9157908D3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M0h.H...{...xID.?...,.0...<L.....6.`.I..).p.(...sz.u..$.I.#,.......u$.........g...BKu.D.....i.&...........a.n@..wU..#y"BDE*A.....t.. ....o..... ...........Ir..#5..g..m.U.m...c..k.-i.,..N.effff...<.....en.....,.........).../R.m.....gf.[.F...v44..H...pwwwwwwwww..nqO...(.X`agw...'Z.N.m.y../.6w.[.m...2l.m.mN......{k..R.7..m.t..p.7.....&....`..@....!a..d..b<....7d9..}.....0.f......~).x.g.Fe....K.RP..,2 ........q....Rc{...a.m...@..ET .@. .S..Y.#}..?.{x+.Ad.k.2.k....Vw.6..l.9...:..."@...".. .)R..... .....)..........V.A...0<...{......IW...[...=1...\|..;.t.]...8...A....[5....W.._.'...~.?z..b$..)....B..!......T1"R` ........9....]+>.g?[_}.V... E#P `.f.......N....Uw.:........y.a(..A.:[.B..3.9.....^...Y.C{.og.w9..".HQ.P.x.Vy(.....dG......t......y.'.q.o.9.d@A....\P...S..&%pQZ..Oq.5OD_C.rm.e..6d.+8.P)..@...z...u.....J0b.$......T....C......V7.J.....{....../.!.......6(...>..T.$:o..N..tW..x..V...,......1;.....,F.....k..!..T....

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	334
Entropy (8bit):	5.264573531903094
Encrypted:	false
SSDEEP:	6:kRZzRxVvnGlUu6CQAx8G/QVf1lKy8ZpDMwQRaNw6JpyxZRNlad0:kRZTFGlqCDH/Af1V8XRkbRN20
MD5:	DEEF7F1143EF11F0A2E218CF3420FE38
SHA1:	BD2F6A5B506FF66C5B05AB951B0ABE9AB12B3CF9
SHA-256:	7FB650C42E05BA7364F274CCEB4937043BEFCEC5087261565FCA24311225D031
SHA-512:	5BA09540D16F3A448E212656DF34778D442A36B219FBFD2D10B4A092615B1DC3502775FAC6EF7DEFA9706B8E2A7BD1A35D38D6A4593C634DC9A2A6E98FFCE47C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=C7s1K"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("C7s1K");._.$q(_.bDa,class extends _.ar{constructor(a){super(a.wa)}H(){return"C7s1K"}O(){return!0}kb(){return _.V3}});_.Aq.C7s1K=_.SC;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	9946
Entropy (8bit):	5.303383252274076
Encrypted:	false
SSDEEP:	192:NdbWsWxwiKpBpVyPPjg9bt9MVzclvs4oRL19n3kufDi/9secuFjel:LbWsWx3KDXR9THl1iL1l3kufG/9sebjS
MD5:	9BB28E4E947B15C91F9178EFF5B23264
SHA1:	87F5AC3AE29A7455DD00F79435B1D91F664F0395
SHA-256:	9FEC8921027F561C8BD0FDF17C244E35F26ABA8E336571597FCCCD9D42D7A0CA
SHA-512:	4566D611CDC37D0F4C34D36ABA45AF69036C4A9E155FAAEC80D70B20C24555A319C8227377D9AA7E7EF02077C2E83C050DB8BACCDBF48417D8772F64818AA7A5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.722.c70bd733e7b77d8198f0.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[722],{32722:function(e,t,i){var n=i(24178),r=i(76588),o=n.SC.attachDelegate,s={setDelegate:function(e){return o(this,e)},localStorageObject:n.tO.localStorageObject,sessionStorageObject:n.tO.sessionStorageObject},a=n.SC.attachDelegate,c={setDelegate:function(e){return a(this,e)},makeAjaxRequest:n.L5.makeAjaxRequest},l=n.SC.attachDelegate,u=n.SC.hasAnyKeys,p=n.SC.isArray,h=n.tO.saveObjectToStorage,d=n.tO.objectFromStorage,g=n.P0.exponentialBackoff,f=n.EE.valueForKeyPath,S="noTopicConfig",v={blacklistedFields:["capacitySystem","capacitySystemAvailable","capacityDisk","capacityData","capacityDataAvailable"],compoundSeparator:"_",configBaseUrl:"https://xp.apple.com/config/1/report",constraints:{profiles:{AMPWeb:{precedenceOrderedRules:[{filters:"any",fieldConstraints:{clientId:{generateValue:!0,namespace:"AMPWeb_isSignedOut",expirationPeriod:864e5}}},{filters:{valueMatches:{isSignedIn:[!0]}},

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9730
Entropy (8bit):	7.977292533251305
Encrypted:	false
SSDEEP:	192:b28inkc200rlUTT0TNPfp2PIHU6MZl2/GZ1uSM9ukgbgKV3:bZikc2ZU25p2Q/M+/GZM01bgKV3
MD5:	C14D3871A3CD2A351D3CAE466421E99A
SHA1:	BE92013D01CA1A7293DB6F4037A1A0EC56AA34F2
SHA-256:	4F757E61AAC42D9E543EC4F724E80B842E36AD3CD53A25AB31567715BCA23408
SHA-512:	28F4DC3C5EFB92B8A6CCB7CFFD4E0E6175EB6A5A34042206383BFDEEA26B09576D865BE550648D1A7B45CBB0620867968F781B58EC1641D4206E63D154030B1C
Malicious:	false
Reputation:	low
Preview:	RIFF.%..WEBPVP8L.%../..I.5..m.{.....3"&.M.#..P..i.}{..o..FO<..(.......;qw......?....Q...{.......&.0s.9....4FOw..O.nI.Y.T....g.&..]J..Tb+.!2d..Pf.,.6LY#...a.!...D.T!g+..9k..^..{.2.z.MN;..T....Y.2U......N.......P".Xhg.n..)T`r..6..Ir.8...oOg..$.$..DDo..fn._...?....(Ir.6s.{<@._..U>...../g..m.m.m.m..{3.....W.[tQ......f...r.R.....n3.FuzV.w.&...im.c.m3)s..t.....-S.Rk....l.....R..F.l.m..v..w.............m..S.M...m.m.l..3p.H...........7'...U5.?5.N...QGA.AS......Rk<G..{z.l*f....vuGG..I..\|..xq..`.?~...D..y.IP'K.......... cQ.s..?.:......4.....d.]S.k.......%..S.......'b..x.GE....Gb...DtrD............j.(..AR.$..jo.u...s.Ln...0..)PT.......'.....4....{dc`..j.......w@............wW....L. ..HK+\..R....j..!...[0W^.9.V.V..-.qmK....z~/..._]]N.).[...`c.7.sm..m.{.P@../.$..j7.T.z.9I.....a.5..>\.u..>K..0.}......",IY...{.h...hc.%O..4s!H.....+?....G..o.W.\|.@...0......RR.`p....M.;.vF....45...Ch...0..].[..sIzfR........m..Z..pgy..bZZf...........aw.].p.."../....K...

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	11258
Entropy (8bit):	7.847770069025951
Encrypted:	false
SSDEEP:	192:INqfUfaNNMfiWyCtescqvtnHrB8yDQWJ5Rj34yaEkCBLsY7UXTTHEoLNQF:X4oHmciHVNT7RVa5C5LCTTkSNQF
MD5:	16ADA80965BE7D202D4097C02E38DA64
SHA1:	7A79BE8F463124C104C2021FD95163F9F2A7CFEA
SHA-256:	FFFFBF93550764FCD667CF954B3E7DB27C270D2925796C35D1D1193763E9D382
SHA-512:	8AD31BDA1C87DAC3A22CC004A3C362E5DC1E9023A21EF05CE28C0D8A8615C66E4D32FE906BFA81A7B5F536BA097580F3D43FFDF810A32A634C074A16AAF3BA96
Malicious:	false
Reputation:	low
Preview:	......JFIF............................... ....%...!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W.......-..-W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................E........................!.1AQ.."aq.2R.......S...#3Bbr.C.cs....%4.$...............................'........................!1AQ.2.aB..Rq............?...........................................................................................................................6..g.\|..~.8...k./.@m..8.....>q..!....P.....>o.?g.\|..92.............7...8Y.M@m..8....W`V..Wr..m...on..H.C......K.~%^.\....q>0./..p..p.g... e..q.C...O/.`.....<.1.....#.Bx.J..szNI......A..... d._q..d.g.m....p..................7.L.5...".8y..g.j.........t..J.i7..w...}...k.../..92..}..<...Gk8..J..+.Cp......5V.....E].V...c.!...\|s.....WR..r..}.......Cp.....=.VR.....Ilz.YsB./.9...<.Z...U....F...<..sC...7'.g..>o.Q`e.>o.7....:./..qU.8T..Z.NRY.,....,E..-9J_H.N.[..o..R..<..].(o./.7...>;....\|. g.

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	15512
Entropy (8bit):	7.94238830224228
Encrypted:	false
SSDEEP:	384:mjfpnSj/q8g10wKLg6B8XW7l4CUYLmWWbxd:wnS7vgSLgO8Xcl4CUfW4
MD5:	7744F5AC69419F5A2B6B6C9A21F8F307
SHA1:	38DC8DD4AF99B44B73BEE5025FA1114AC15DD5AF
SHA-256:	B417A3C865819CC87799E5FA4A5C190057D3935AFF7659609B2EBF4F642858A0
SHA-512:	BF368CC50E928A6370A9BEB331DF36E152D3DA2F1F9068AC5C11E426AFDEF923C1ADD1D6E3A54647072AB2891C6A3FDE8623929372D810FF8FEF15B800D87749
Malicious:	false
Reputation:	low
Preview:	......JFIF............................."% ..%%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./..0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................B........................!1.AQ.."aq.2....B..#$Rr...b..34CS...cs.%.............................-......................!.1A.Qa.."2q...#Rb..B............?...B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.G.G./r\|..G.'p\|.h.(.G.....O.X#...._g=DZ.0....'r\|..#...>P.O.X#...>Q{.....%...N..E.8IE......@...en...dn.....%.cn...cn....^.s.n...p..-.(IE...a....0..+u..F.>.h.BX.F.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. ....}a..}b.+.X.6.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. .....O.X#..P'._fn.-..I.......DZ....+u..V.". ....Q...Z.P..9.p\|.."....Q...Q...$...D=.....a&.f.!...E.HE.".`3..!.....)..B..G.....)&...Y..y..t....9.Tn0..XFN...ibV.e........V....1>7.:._....b...

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1750
Entropy (8bit):	5.375464639583497
Encrypted:	false
SSDEEP:	24:OPKqj24ApyxNb7JuyjNqe84OuGO8JbgzVQy4oZ4y4WzcaT0sklUMK:o12bpAloqNqe84OuDgkzVJ3vlNFkl+
MD5:	8833FE5AB5ACC2D38797AA624B6C6F71
SHA1:	FD23CE5EBDA0AE8AF153C6D1C6F823D7864E3576
SHA-256:	B93B5AE4977743FECFC202C300CFFA3361D2CF0BDC66A968F8E06160399366A8
SHA-512:	17B67E1061B32D2D99CD9F01E40E2F00D1E60F295CED676097C12AFD4FBB34106891EEA5EF459E1A510125470735A612477F8521B221A48EE0402E7EAA8FC2CE
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/redirect?id=lxDNVZKK
Preview:	..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://krs.microsoft.com/completeRedirect/lxDNVZKK?correlationId=0eb9bac7b89eba1d42ca7d0628a379db&platformSelected=iOS">.. <title>Outlook</title>.. <link rel="SHORTCUT ICON" href="https://c.s-microsoft.com/favicon.ico?v2" type="image/x-icon" />.. <link rel="preload" as="font" crossorigin="crossorigin" type="font/woff" href="https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2">.. <link rel="stylesheet" href="/css/styles.css" />..</head>..<body>.. <div class="container flex-column text-center">.. <img id="icon-img" src="https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw" alt="icon" style="max-height: 128px" />....<h1 id="title">Outlook</h1>....<div cl

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8956
Entropy (8bit):	7.972053517151453
Encrypted:	false
SSDEEP:	192:UlbCKATseTe8r8oy/zF7Ntufqluv4rPoxSYlOK5cbFBOmAq:UlbCKk3rg7haylKxSAOwcbFhl
MD5:	377CF0E1FE167DE18CBDAB4B67D2E326
SHA1:	ECA8A9C29E2AE14A1DED33160286057C424ABE70
SHA-256:	24566A4C7B24A46CB1B156E593AB4C98E40791CC5E4A49A410A2AC5860509A22
SHA-512:	A86583215D6A29E00068FEFA905B94FCCF8C53F95409849D23F88EEF0DAC463D2F130684ECA77917BFC27DA1D8336FDE7C817C825B4A228BE1835DC981F8D9CF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw
Preview:	RIFF."..WEBPVP8 ."..P....(.(.>A .D..!.i5.(....p....C....}+....w..3...?`."..?r?C....._..a......~......{.........P.......I...............~@?......k...^.....1........./....p.R.V..v.....?.>C...../.O.<.t...D?.}..........x...]./..}A...[........(....../.?.?.}......C../........_.].......>>.j.......w......~......{..._........7.#.....................3.......bOk.G.m.G...k...vg..>.8...+.k.y...9...........\|?&........^x.."w.w...T.Y............"At..r.b.a...vr!.K.nFQK4.W,....Yc/#.c.R.....;1P.+"..>.3......'....A.......O.7...r.Ou..36,.o?IrE8.g.V......#1X.X.D....f%...O._....V..DMi...".n.L...ee...r..HW...R.....&..\|..{..U....p..,.rK..D....f....N8..n...c..v/....l.H#..mT..N..0&WG!.......~\.I.)P:.u...{#.Y.......I...#.J.2D.0..bD=`#UnZPgd..>w.?.....O.......#.t(f..Qs>[....[.L.W\..D..9-....H..W.U.%.....O9K...M..6.T*'PJ.C..9...;+5G..O.ITE%+.p....~..W..2.Z...7..F!.......s6.[<.p.`6..s.X.!...x..({.. ...L.m"..o.a..a....W..<.t.....c........E....K.P\|P.v2!GZ......S..U..N..(

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	40644
Entropy (8bit):	7.989683828799069
Encrypted:	false
SSDEEP:	768:9ALe12qaOKZw6Md4iF7CWrx7LZLKsjiCCvryGLKeoKGYVIoKIg:9ALtqaOKZwl4ivrlZOs2CAbWeoKGYVIH
MD5:	9D9A28DFE5CFE510C0E17D3990D8FE4A
SHA1:	969D7269198571814924D52DBEC15339A67E2908
SHA-256:	1C324A06CE457154BD370FFB15EB6F7F3A0258786138B75823BF6752594B2248
SHA-512:	6A680B135D11C9E223306F6397DBFFC22DDCD9D57E2431D883B657750B029F5739AFE42218246A8F7B7957C218A299A4911EBEAF99D37A10CB82D2BD4C3C91FD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.MH.$Il.t..X..?..........._......WGe$9dA"....%..g.. .........wF.q...'.......HU.?.1R#.H9.3-dJ]i.h..\|R...f....$.Kl[@..... .s.l.WI../_.........Z.o..T........;.....l6.0..9.7.$,;p.].A...Z..`!..R..Jmy..H.C".LUZ.2u......a.Z..iX.U.: .d..r.".H.8_...FM.......:G..>.L.Yj...8..[...#u'.-oo......i.i..m)IL.z..E..o....S@.S..A..`}5...8.o<&...9...A..#.$$.$.9....'....oFX.[.q$I...MqE..=..b.h$... y-x_.U]..EH.m)..AP.q.\J....[.mA...9.m..2......o....[.....^....._U.$C.!dH..!.!..!IB.....1..H.i3..dF.u/_m.q6.l...2..$!$!.Y.0.$ic.F&0.....c.$A..$...I....}.$F.$.`..c.c."..I.....}Y.e.......nc6f.0..1.0.0.I.,..c&.......o..P.B..;...!.......h...i..d....S.,c....@.1qu.R.(.....Q:@~.@.n..B....2p.I.~.u.u.u.u.YQ.......?.E7.N....qR..:...!.gB....z..BPnN......PHHB...=@.PKL\_..g..........u.$.e..TS.$....(...+.Zf..4.... .0...6.`.X#.1..$......._...b.....c2KLar"1.1...a....oWH.0..I....T.`..!.......b4...H.NI..-...g...!..{.^....~.l?.Z C.DfIb*$&1&1.$......../~......8....8.

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4004
Entropy (8bit):	7.921213566288204
Encrypted:	false
SSDEEP:	96:pkHiDU35dDOAfHekbrRE5D9/EfTKECuk/5s:2h5Ye+eeD9sbKAkBs
MD5:	708900440644413321CCD0376724277C
SHA1:	C4B13DEB7753B8CBBCE953086239EF7C2CFC8006
SHA-256:	6EE43498CE91D71E442C035FFC0E818E033857DA143558AFDB14943312098E0B
SHA-512:	668736001E2D34BAD8A361C82B602AC61119A48ED126C40AB19251FCD44EB2E34A13076FB1D278A2DDA1B804100CCD1533569690F99CCCE79CABD52FD9B5A0C4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?....?.v..<B....O.{...r..9Gp..2s..........5.)..2J....9....Re.3MX.H.d[.Ui......3.>...@v$I.d....S.I..}.13.....H.L...m...m...m.m..y..$[U.s....e..(\.S../..O..%3]................@... y...f^..7....Qw.Q.LoD.d5..^.. By......a.+....EV.&b..7...E..v....);.A..1........S3iw...!.lo.y.+`E..:!.LAa.E..f....5.[..L...,.....@Rs...W...6......}A.jU.....v..i6..ZU.....aY6W! ....\2. 3....MYD.2...dV.r.H.e..Q.1.K...i.G.$#...>.wyD.n.......j.h..q.h7..n.r.....:.....G.MH......r..o_.XiU)($.......t......DP...k\+{.(!T.A..l...GKc.Av...(.....!Z..A.+..q.....q.:..X.@...C.k.l.H.v..B.b.M..b\2.... 6...B...7........Y.<..%sJ....]'L#..uo)..K...E#..j}.?Q...Y.h.f...(MJ...G......&....y...1s{..'.^...QE;3...aK"k.D..q"5.j.&....[w\|........n.....g...Y.......e.t.._...fUNY.3..s...F.....,4^..R/...... .Z.\2....e.j.....^.@...^E90IO.J.0...c./w .......r..D...F..]..z.........x.^.c....h......V=(.K.Cno..b5.p8....w.d(..-...."..r......Y V.".'.iW....r..C.....GH

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (800)
Category:	downloaded
Size (bytes):	115601
Entropy (8bit):	5.704801017453952
Encrypted:	false
SSDEEP:	1536:bvF1eT6vnYyTemNGVy+z6NBnDnWHA5JBNTS5nFFXqcZ:buTKnVTbYI+z6NBnDnWHA5Q5FFXqcZ
MD5:	E184AFF4E29D210E6E6AFA3D4BAA3791
SHA1:	3F9B4C3269C48F5026BCB9AB4133D7AC6337AAF7
SHA-256:	3AEA04C7A2D7C5C4618747CC00D14F778F76043D2C7DDB30C84FBF9D4758E1B3
SHA-512:	92C76644619D31B6E6D7B02FEE55329B909F8FEA9F84209167F1B4950FA8AE9F971DB3516637213DD790959B4E1DCC1C3DA7433DC8D975D42F762247A4A3C0A0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,Z5wzge"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.wX=function(a){return"Rated "+a+" stars out of five stars"};.var iKb,jKb;_.gZ=function(a,b){b=b\|\|{};_.fZ(a,_.oo({Ha:iKb(b)},b))};_.iZ=function(a,b){_.hZ(a,_.oo({Ha:iKb(b)},b))};iKb=function(a){a=a\|\|{};const b=a.Vg,c=a.Kh,d=a.De;a=a.Dv;let e;e=_.jZ();e=e+" "+(null!=b?b:a?"cKScvc":"IfEcue")+" "+(null!=c?c:"HPiPcc");return e+" "+(d??"")};_.fZ=function(a,b){b=b\|\|{};const c=b.content;a.open("button","J4hqjc");jKb(a,b);a.W();a.print(c??"");a.Ga()};._.hZ=function(a,b){const c=b.href,d=b.target,e=b.content;a.open("a","BDhSBd");jKb(a,b);a.ma("href",_.zo(c));d&&a.ma("target",d);a.W();a.print(e??"");a.Ga()};.jKb=function(a,b){b=b\|\|{};const c=b.Ha,d=b.Of,e=b.We,f=b.ariaLabel,g=b.jscontroller,h=b.jsaction,k=b.jsname,m=b.jsmodel,n=b.jslog,p=b.id,t=b.attributes,v=b.hidden,y=b.disabled;b=b.autofocus;f&&a.ma("aria-label",f);a.ma("class",(c?c:"")+(null!=e?" id-track-click":"")+(y?" hf6Ybc":""));null!=

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6438
Entropy (8bit):	7.962532855941252
Encrypted:	false
SSDEEP:	192:uoIjRkriJCEqyo/J4/efNcy7NIPBQFn7ci2WGSOEqM8p:mjRkmQQo/fcy7NIPGcSOBM8p
MD5:	85DC87478C1A43485A97BE67420532E0
SHA1:	2946EA409D9E66A559F275E5A472470F9CB142F4
SHA-256:	9426C1CB54B6F8B4334CED56F6B4DF85E3D16AA52348A4022E5788C75F45FFB6
SHA-512:	A9ECAB0707DD44889EBE40CEB013B0FED713F7EF0ABB88C7213556CDC2CE52696C86B1C77CBEE006A32DFC4C825C4A3B3C87EF9F0BD249C823C95AC7E9DF5E00
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M0p.6n4..#.....f......c.<.B+G......?.`.(.$E..B-._..).....6.$'.....l...u..H......O.....u...z..V.W..&....Y.S<x$f1..y........s.M..[...E...Vk.....G.=...k.}91.;..+.^.....^.:D.9\.....>C....#"YlOw.h.....p..m.6~.m.9f....YffF<....c...[...$=..GdTVe..\S.c.m.Gk...m......Uf".....)7..=....A2q.w.zo.k.m.m.v...I.[#I.r...L....z=...F...0..?..x............z....~..xs.%.............9?.vHn.f.?.........\.!S..%.L.y...1.{........G...p..V..qv....sRnJ..23.z....{.........zS.?......^N..I{...^{..,_..=E..Y.{F.C...x.NDQ.8..Z.14....Pp.Q..o........../."..Q.\|S.Z...Y]..i.....n.....:..s.pY!y[.......'.%w.\z.Rr.P....F....%..........\_...g.......V.........b.....m.....u..s..=.. &.....c.'.$...n.rW.].................[....5.bg..%..+a.A.......5.t...8......O.:C..-@......m.'.....%.c.).$.ebb:^G.N<D<B\|`......}.z.p.2X..N...5.-o....r...7\|.i.VX.0i...6;.m.....EF.!..(@.(..`...%...'....B..K.G]^(X;........US.....(.U.A...T......Y/.6>..B./p.....K.{G.)&k..

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10942
Entropy (8bit):	7.957006422703397
Encrypted:	false
SSDEEP:	192:YMY2AuhnJ2aKIHabY9G9uEpaoIEtSvrb467R4n6x9yQ6+xne3rQ/QzyPlj5XwhX9:aQhJiU9G97Czb46V4nkLne3GRPlxOt
MD5:	50D7B3BFBBBE0D627C40710B7A50B3B2
SHA1:	9ACBDF856DCB7814FE77D55C69AC51C403C33322
SHA-256:	CAF84F0C4AEE337CB0DC13903528C599C9090739FC0A25DC887CB0897A2D2350
SHA-512:	68F9EA5F32A12C3CA045317AE82F9CFC6DA928EBD0C2BD69AE949F87AB7CCC4C260A9C78937A4FA8ED1544B3D1D5FF3E6482E3E4DA9A9D8C0ED1DF95E7D2A665
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw
Preview:	RIFF...WEBPVP8L.../..?..Fn#IQU5=@.......O....d\0K.b.../ .L.E.JW.].-.....J{.!.C.m.u.8.$5M5...$.SM...............p......6l......rcs#.$N.}...3/.~.9.$E.....^\|W....S...@.$...&\....S...$I.$_..5.q.X........6R.9.Q...8CQ.0.1~..#\.`.Ku.7.>../?.T....`.......%I....p.Ps..z$...(....U.2...\)......!.........#C@4.Z..[...P..u!c.......H........s.Ps.s.\...U>y....^.Qw.7Z..1......f........S..w~.....R...-.p...w~8_X.....5Mza....%\...e.@...D..,.B...@+.....ilF..........i...'........z.+.2+......z....H.O.....t.{t\|. .3.....@...q...N......7u.........j..n...-...b....V.e...l..so...#.S.s...D....Y.....A.W....?"+3.E.I..#).+(.C".6.I...JjSk..h.K..+(...[(..2.Ljei.v...Z....]P..C.tC...NH...o.$.2...E........{..-......k..P. )..4.."I..<.Y-;=>..;....p.....n..........].*.........9..I"..k..I.!.vLL$:G.p...P.hb.!:.....+...T....:.......W..j.{{.F..}.2;.]v...m....z.....F...v...w.g.G..J.<....Q..A....3.{...m#E......'......@.....p1..P"...:..Pp....\DW.Y...jX.T.c.....Xd[.E9.

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	179240
Entropy (8bit):	7.988894279260863
Encrypted:	false
SSDEEP:	3072:bU0fv2bXl6ABM7Me/fBwILHrMIjcgEXe0Czq/hI1hagswlQ7N8WAVPu:AwIl6xaILHYIg7X4i2agswlQG3I
MD5:	47BB815C40A19EEFA2EAFDB66AA679A8
SHA1:	4D1B601F178A658E42A6B7F534D80CC0ADEE0181
SHA-256:	E3D077DCE75D0C3AA12A656FAB50252AE70E4C38E157C55171EACF714A01B979
SHA-512:	17AA1B0B7C908A991623AF3EA760ACED520B2F5D388EABC56AAB2C29ECB5668F1B172570E59EC0A15473C8B9271D0A6FFA8E149A2AEAA318201CBF1BFEE48F6F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw
Preview:	RIFF ...WEBPVP8L..../..I.M@..6ls..b..?l;.....O.$%^%).Y.\|).......R...C^9....W..DN.....'...3.$.f.H.%R.O.'..;g).'....u..Q..d}.x..........Y..G...In-..(Kw.q..c)3..$Q.D.z."I...c..)i.$%..8..V.H.}7K.....B}K..G...].(.8.w..qhfv.....K...~..l.!Zn[.EY...$.).7.1..<0.m..@.m..0..I,9.n.g......O).tl'H..F.(..j}.$w....lk'VlI~..9+....k.-Fk+.\|Gz.?.eK.9OR.e0. H...8...${$I..f.vB..$.....C....ha..t..9..A.0.X.D..9.g...H...lGR..wr........v.<..;.m.N.8{.h{}"Ek"..H.........P../b...+...E.t..j.-Ws?..{E_. .. ..l.vi..@.@[...........v).........../......+..=.\J...\|..O.........^....\..-....$Y.$.....Z.{....E.g.......q }.....\...f.,0.......7....d..m.V,....O..4..B..h4..Fg.....-..Uks$G:$.H.B...E.z.......IS.b..$..~...m..$.{.....bf.....3..!....m.&....@.4...t.8.0...B.J...@.(...B'C............9..a8L.H%.BL H......p........A0J..I..U......@.t...:. .@...M.)..`..C..0$R.....1.Q.... ..A.....P.`.&......!.!..!}..b..0........S.......(i....9.)RP...)&.8..E#.@.RP.+.a.D..B1...Q..n......)... ..P... f...R.......

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/supports/supports-Siri@2x-24823d6579e391abe63d240af5ed42d2.png
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	185044
Entropy (8bit):	7.991321469571043
Encrypted:	true
SSDEEP:	3072:aEkU4FyMb0zgDkoisNMXlQ+dvfKnGEM0iZHQpQOTa6xSL8S8YOcyj6i2j3D2:acOIzTG+dvSjixQpQqQYS8YOrCzS
MD5:	E70DE46FCAAC21C65B893402F9A30C35
SHA1:	9FB4642A6896F3EE15626AADAE7357A4931DEAE7
SHA-256:	771C842FDB5385FBFB848C028BA13F35EDFD29A0A9136D58E14387434641D264
SHA-512:	82FB3828419E37B5DA06DBF2954675FF8A6DB7F3F217FEFD765BC6F7D68535EAD35E9D6E5EEB8B705832CE7961D30797841A9865C52747161F97C6601CBE08A5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@..6l3p..t..l;.vAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R.o.'.&;{).'.....I.+K)..L.$i..S"MR.H......X..e.Ds..r....m.GRl."..g.lJ...7kf.3.-`.fS$...6h....o.V-G..dY.&\|.!.W.WdI.,I.,q;.....%#.Nd.0f..]..."A. Zt................o.g.;N....D:.3.p.o..l.d..J.(.J...IB.....H..3.E.DGY.$.bO.s..c:.F..'.U.`.%.D:../.%..d?.......oY.d.c!e..m.e..cK..Dvd9....%....A..@)'9...;N./.... &...$...;iR..&..........I.....\|~.......]}]..r...Y.....\|>........@[.-.j.....$...GO9........xu...Cp.....\|`......$.....bM......`.,X. ....(Z~Q.`.x...?..8.9....b.......\......j.nl.............t:.1.B.`"..F...E.....H.m.@$A.4I..6/..._.a.y..IS.".b!..(.j..m.RZG.bc. &....._1g.cvd.d.Dzk....m.t.;PL.v..-...N\. Jy...+.....f5...\|Z.1.b.A..(..Ln....B.X........X1.B..I`.A.0.f.Aq..R.*z/JQ..a.B1..5Cj.`..aU...V..#......b.J. .....BLL..[...RdB ..b...".f..B35.....D-. .D.j.`6.....Y.`..E.7..Z`..(.......SM.......Y. ..jT.R...[J...F.f.abb%.j X)....`.p..R-J.4..H.&..

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1670
Entropy (8bit):	7.8767527471024845
Encrypted:	false
SSDEEP:	24:ph192w/y3IssGoCogO+MaZfU9LHAPwUtxrRiEEe/i0GI9E0cApv7R:/FEIsMaVogYsRiEEYGI9EzAx9
MD5:	4261C35A4740D97B2EA62DC1E730DE55
SHA1:	220A025A6B18C577508B7374741A9A58C2240022
SHA-256:	604C0FD6A3EA399AA08158490E254D25C68B0A89D2944C8E7BB9E00F4AC389FD
SHA-512:	5F7A46303F14AB9AD32353BE06DA9147EDFF298F09E02FD24F52322586383EDB8A42BDC821F603F11401FCE48778E492B4D04231260AD6B735F63E62A3A2867A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw
Preview:	RIFF~...WEBPVP8Lq.../?....Em.1..].?.E!....3...0v..\|...H...q./..."....AI#IR...0...=.Q$I.s.`......0..T.......@..j.P....{.....J.$..xx....<..\|.-.#........hv......;..\|.G...13333..Z..U...8.I..z..E..#..^.P)..l9....J.;.Ft.3;..wX.rh.6.g....m....6+;UR.m.Ie.......m[.........d..BF...p...H.]...=;..m.IJ....u..#..{...... .]..~...x.x.S..T...\@..Ep..Yr.J9\|..C:..0..[_....g.... .4X..~xd.z.K1V..65...!hs@....`....i;O=.U.Q.......q..V[u..6R..XM.....t:.5...hE....fX=......r.`....UN- .Y...U!....N.......3_z^...!.....(.J..................\.^.p.T/f....4...Y3.(.x9.s.+=.B..}...&z.-&..FQ........:.i.@.B.0z.=;.=..[.s_..St.(.+.....H....%....wF..&..C>.9..J..(l..E.I3.......B.<..+."~).....#.3Zn.%..J=P..hM...........q....NP.u.t.vo.{.Tg...`...v.A..j&E........f.^H.R...xRX..lB...CK....Fi[9.8w\|.".E.:T.E..`.........b.......jX.F^@.N.........z.4#...X..%..!...K.bc..,.(.2 ...)..U..XI.o...H=i&..+#.SF......F....`..%.!.[.....x].....a(.A.S.N.uRg:._.@.Z..>.n..N..BR'..$/...`TF...

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	7.283977070466249
Encrypted:	false
SSDEEP:	12:85sAWAvQ2Zb4GGt49trdImK9K9K9K9K9K9K9K9K9K9K9K9K9K9Cnt+dT5+rYI78v:86ArVZ0s9trdI99K9K9K9K9K9K9K9K9o
MD5:	22B41D7243F0BD9F96DFBE91BF838128
SHA1:	83E6CB1C51CAFB53A20C7CEFE6E731A380F98E19
SHA-256:	1BBED35B227E80E4532D92E8DA97B044311739957C2797D2B25017AC5567E849
SHA-512:	E9B94847AFC16F21E4E3D5911AF509007018E6763365BFFA23FCE253EEE0653BB3C5B3E346C37B61A380012B28D48B2B0AB1E506D601F6D429FA588598427826
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.?.*..Vs....C@x.......4...\|~:....n...c....ji.........l .....H...'>.O<~.:_...~p.%%%.H@(. p_......Y.2\...E.@.$J.......6.R.:...I.J....##.?.........o..>.r.l..c.R......n.X..9.V/c,...PK}..@..iu..D...S..5.f..".F..\...X2B-tS4B..b...O,.!....!....!....!....!....!....!....!....!....!....!....!....!....!....!....!.\....K...G......Yq..v..7.r.).r..X.mS,.yx.r.).r...r.M..aJ.....s....m.^..aJ......].......o..@...]......jw..[.^...6l..=.5K.]..okv.j..}......X..k..T....k...R.IJ..ZwM.y=.z.W..m.....\|D

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 97812, version 1.0
Category:	downloaded
Size (bytes):	97812
Entropy (8bit):	7.9978966269531435
Encrypted:	true
SSDEEP:	1536:MxlNoV+iuaRqgnUJ9gPxMZXFwme9Xvaw8aeyH17mP4bTJagZcXU4N/42Y/4g2H4O:MLNoVXuaogUQyZVPeB0yHB9bhoU4NrYc
MD5:	FCF85E1007388C2707C982FB27D09163
SHA1:	1329D694C10F4F8DC05AEF70257E93D0481ECCB5
SHA-256:	878C9752B9A516DDE472D30E4E5C57172B2E766CF21F336DF168E2302382CA0E
SHA-512:	B1ED620469C913144DEB20BA1984DAC483112554ACE2320ACFA0F17CD529D3A0CA2F9B06AE0F7F819136842C798F05DECB16A2DCA77D126428FB0FEA9401344E
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_regular.woff2
Preview:	wOF2......~....... ...}............................$..H.`H...X...`....6.$..$..(.. ?meta....X. 8.t[.,.......?...t.!.......F..R.~..CL-8..C.F4..UW..3.m..u..1..[9...........\|y...o.......b.Z.....D..1.EL%E..".....iS.Rb].y..j...YBX..R05%3%..$..ZF..Ok7.~......lSR......6.e.....yz...F<..FU....Q..H.)....p".m.+..".~..Y.......@#.........tQ.y~..q92.c..GO.`..x..p.\|RD....7.....T.......b.+u\@.W:....T.u.... .AB.$>. E1.A......?.,.!m..).~e......gd.....v.4..i......<......^e.3.R.J.V4;_..{....tV..Q.._.l....E..,F..\.b.. ..............{..(......C.".......z{...g...F...h+A^...<..\..c..MP.J*..... ....Q+v.5.9E\.q...h..D..%"...p......}Z._..#..8A..w....5[.<\|@v&..1C...m3?w...n...r\|0d{....d./...[.-A.Crre .Ds.T....F.5U.Ly....#rs..?...7%@......a2.B.b7L.....>.=.. ...~..2..o........mo. \C@5W.6....6.i....w...@s.ww+.F..D..h..0....k..........H...l......AR...l.X...n..d....1`T..b`$`...........i....?@s..#. .A0..c..e...6j.....="[T.B.......W?.......}...7.,...5...n..6...Z..

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7s1K,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1219)
Category:	downloaded
Size (bytes):	147015
Entropy (8bit):	5.703092584621022
Encrypted:	false
SSDEEP:	3072:D5JaeJBu5HqHxueUSh0dU/kYmkUELrCGNUQTvZcRl3p66/DB:zJI5HqHxu1Sh0dU2kUkrZDAH7B
MD5:	53300B9163364FB2C8C04A4C6470A780
SHA1:	700393CCEA7509C29ECE8A8AB0481B6FDE29CBA7
SHA-256:	35781FC3D2BC46E1FF7ACA3D4862EABFBD36AA23643EED4F0A7F940424C6CB87
SHA-512:	F67EDF396BF20CCB7AC5911E4B68CBFB12E5A625B43BDDA851E901D6FFC1F1DB75B348FD61E788CEEDBF924021D3CD00028DEB2AFB87D3A3DCA01166E8344AEC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,RjJvI"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var ypa;_.ln=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");-1===c&&(c=a.length);const d="-"===a[0]?"-":"";d&&(a=a.substring(1));return d+(0,_.Qf)("0",Math.max(0,b-c))+a};.ypa={eO:["BC","AD"],eU:["Before Christ","Anno Domini"],AU:"JFMAMJJASOND".split(""),TU:"JFMAMJJASOND".split(""),vO:"January February March April May June July August September October November December".split(" "),IO:"January February March April May June July August September October November December".split(" "),FO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),JO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),PO:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),.WU:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),HO:"Sun Mon Tue Wed Thu Fri Sat".split(" "),VU:"Sun Mon Tue Wed Thu Fri Sat".split(" "),BU:"SMTW

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2840
Entropy (8bit):	7.8803852518960795
Encrypted:	false
SSDEEP:	48:r724o8WCI7otjpJlgP8pMjdg8XgFxi5HyC+slXUutOVletFxksBuN/X+cy2FgVSv:mf8WdotjpJlgPcMgissf0V2F6N/6ZZY
MD5:	D1A7C5BDAE96E3CEF5D2EA33660454F5
SHA1:	A208B8BB9D376CDE199CC48D75EBC3E60CDEE75F
SHA-256:	83153E7F75101015D69EB7EF66BBA3500B6EC29A1DC6B889DB5D1A2E7F314956
SHA-512:	144E1D2FEB5B5203E7A39C7F41298009BAD98F4088DB823E2BE7F98D232052C89C58BB790E97A35C2BCF76F033F23753CB4E0CC3F6B7F8E68F25F6879E5EE2DD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M(n.6....t....".?.\|..`....b..t.u.....m+.^D.T@D.E.....6.$'..0.0/.....m#I..3..#bf6......Z8....9.3l.jL....{.g%: W%.....W.P.W$kU}......ke..>..,m.vL.t.....U.c.m......fi....m.m'#...{/2...X.....m..m.V...1.m..m.m.m..i{..V(.m..\..s..m.T.hQ...Q..#.H.m...{..k..........r.....Te1j........={..[L..<..8.4.}....1..>E......,.,..k......y..K..r('>M..=.i..jH..K...e.v.^q.?.;......f.....N.6..U.'........I.X.d2....6....8pc..=.....W.........`b$ ..b.,F..LmRKG....Em...}g....:.G>:...u..A.3.@.FJ...H..d.Rv.@R.f.u5.....~....v.'/[.."......I.38.,......@..3..nmy\z.y...m.y.y..A.`@.DY.L.S....p..h.. JLR.Rv._8{..'N..rN..o.g@D......nhd....(..B.....)-MP.......k..`..<p.:[P.(....!s..34b....if%(.A..PY.K%....W.s...._..wN"B-..\y.cM..!.......]. ...A.C. ......A..V...[...]ZA..E.Ht2..........v(..$.J..t.....f..!@bG.@. .0iNf.D.?T.......f.s..bi..o...Ken..9..D..b..I...p.....OC.......$..0s.e....j].VR..t.~w.._;..[E%.f....`b......5.Pg}z179E..0....

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	466
Entropy (8bit):	7.19935230016322
Encrypted:	false
SSDEEP:	12:PZPTEM9qg1sckUnCQSX8rUXTlt9FwkPqXlLwTPx11z1lZUCKFvkGQTta/:RHYg19kUlxrUXhtwrUTBzzZYhkD8/
MD5:	337EE8725B3D9E4DCAB7167906BE4052
SHA1:	0A9943ECFC4D9B3C2ECF7D9AAAC91CACBA345C1F
SHA-256:	59832E77A40F12A4209B7C5B4C9067EF40060E0DC1EA7EE79B3726D8C76EEC50
SHA-512:	EE8575DF8B2BAA7532BA57C97DD9DD8AF5E63B7765287C57B8AF1B760139E6640A564AFE576543439B70A58E30F492D54CCA4A9FD82965786069EB482196635D
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 .........* . .>u2.G...!(.....h../l..R.h...u.P...F......:....s.Mb.1.........t..M..xA..g..?........._h.t...O.^.b.,.t]..o..^....k..#tO..Xh..l.l;^.....\N\|n.........k"....\|W.......V.U...`:(....(...>.E?...(..._....7.mK;..<...&../.k.N..(....>".....L.~H.{......_.T....+jd!.:.Cq._~...l3....4kW.....%.;U.....;%....#.\|\|...(.:k..Y.g...o.Y3b...i..K..;.............\....x....:-......EXIF"...II*.......1...............Google..

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10602
Entropy (8bit):	7.9529391117564465
Encrypted:	false
SSDEEP:	192:T0hh3kXnWQNYV6Q4MtjuGlPUBwc7k9GueRJvaWZRFrMcBs8U:whhUXWQNYYX2lPQ4UXtZRiJ
MD5:	27903BD5B9AA7C3ABAB807AB493ADBD3
SHA1:	8D19C7DEA760EB480A0508FDC22708C80223E7BE
SHA-256:	5FFD3C8D248CB815E2194F28C8D1A7E8031E3301FFC09BE727D9E42D6D470731
SHA-512:	7ED5DFB90E3C059B30D5EE4C41A7969A18A5E66EDBDE18499209F188AE1C8D92C38592346D61ACB7A7347609E9083AFCF9349AAED0BDB54BEDC20231717F2A74
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw
Preview:	RIFFb)..WEBPVP8LU)../..?.M@r.H.... .....g.......:b.....-..dC.Gp.....m<;...~...+.v&...j.e.MK.....L[]..%....A...M...6z%......e.^z.l.5......+".......}.s...rd..F. ...m..?.2.SH.m.j...]^.:..K.....I.#.gz...d!........Us`../,.....3..Fe..=C..C.....">....-.N.....\.%.H...E.?.......zt."!Q]J....f........YW..~.@.....X.z. ..V.s..L.1...X.....i..t.v!.,e.....k..Y....@$..];."}i.]C>....A?)E.k..)H).kQ._......@".2u).K$.QTJ.i...(:..B.R..R'...ED......?....)}.....R.P.TSGx....+.m.EC...c..K.#".j>...\.......>...c..+..+.8....HRU.Qo.s...n/..3.w.=..D5+..$qr.......U.T6.b.A5.B.4...$YI....@Wv.B...v....,%.JW..>b.....R.R.....6..W.r..g...a...M.3"...!...k......h..'R.\.W...^....k ....^...NF....*8..F........y<.._..$)..K...g.1....K../..dV...............vswww.uw.....:.LOU..s..:......"V.].........~...'..$Z.....S!.".}.9.l.A;.$E..Q={.133.......j.xB03.s..LWR.m.$..>....2"r...m..3s.#......V..p..........".v2..e...~.zD......3..g&s.39Uuh.5.......Ui.V./."....^...J.2.Wf.

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	185044
Entropy (8bit):	7.991321469571043
Encrypted:	true
SSDEEP:	3072:aEkU4FyMb0zgDkoisNMXlQ+dvfKnGEM0iZHQpQOTa6xSL8S8YOcyj6i2j3D2:acOIzTG+dvSjixQpQqQYS8YOrCzS
MD5:	E70DE46FCAAC21C65B893402F9A30C35
SHA1:	9FB4642A6896F3EE15626AADAE7357A4931DEAE7
SHA-256:	771C842FDB5385FBFB848C028BA13F35EDFD29A0A9136D58E14387434641D264
SHA-512:	82FB3828419E37B5DA06DBF2954675FF8A6DB7F3F217FEFD765BC6F7D68535EAD35E9D6E5EEB8B705832CE7961D30797841A9865C52747161F97C6601CBE08A5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@..6l3p..t..l;.vAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R.o.'.&;{).'.....I.+K)..L.$i..S"MR.H......X..e.Ds..r....m.GRl."..g.lJ...7kf.3.-`.fS$...6h....o.V-G..dY.&\|.!.W.WdI.,I.,q;.....%#.Nd.0f..]..."A. Zt................o.g.;N....D:.3.p.o..l.d..J.(.J...IB.....H..3.E.DGY.$.bO.s..c:.F..'.U.`.%.D:../.%..d?.......oY.d.c!e..m.e..cK..Dvd9....%....A..@)'9...;N./.... &...$...;iR..&..........I.....\|~.......]}]..r...Y.....\|>........@[.-.j.....$...GO9........xu...Cp.....\|`......$.....bM......`.,X. ....(Z~Q.`.x...?..8.9....b.......\......j.nl.............t:.1.B.`"..F...E.....H.m.@$A.4I..6/..._.a.y..IS.".b!..(.j..m.RZG.bc. &....._1g.cvd.d.Dzk....m.t.;PL.v..-...N\. Jy...+.....f5...\|Z.1.b.A..(..Ln....B.X........X1.B..I`.A.0.f.Aq..R.*z/JQ..a.B1..5Cj.`..aU...V..#......b.J. .....BLL..[...RdB ..b...".f..B35.....D-. .D.j.`6.....Y.`..E.7..Z`..(.......SM.......Y. ..jT.R...[J...F.f.abb%.j X)....`.p..R-J.4..H.&..

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9368
Entropy (8bit):	7.967843375396012
Encrypted:	false
SSDEEP:	192:I8124WLEuOrcUr2Rs2lb2v55XKHvjqLIy659HPmWiE7mO9OhQu:P84WLOrz2Rs2Rc55ocdiNOWDmOkN
MD5:	FDB6C15DFB99947131D47468367100CC
SHA1:	292FE749F194AE3A4900B342CC14BA835672BE5D
SHA-256:	2816C1549257D21C7A99D8E12012987EE26E9821295760C51E8D766BBE5B4180
SHA-512:	7A97CB6079FDB5B8208A3CF839DE45BBF83858A22E2A8125898DC80EBEE310433CC0DA5D42E7D2DC5654ABCCFA90F489EB7CC91FE7D4600D2D57C0F60BDE793D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/SUFtSwDL7N33qHh-o0lRr7Gy4QPeMQwWafVAKyeIyWrl7O1gTl5E5YQ8TyExGUatUbdW=w526-h296-rw
Preview:	RIFF.$..WEBPVP8L.$../'.I.5..m....K.....Q.x\|../ ..u.,.......w..f..&...Ib..:..^..;.>...[v....x.\..\.m.m.m.9....}...s.sR..mNS...v.....~....g.m[.+..y.t.\.]gn1u._.IWc.ggV&u;......_...m0we...d.N..&..SwV4.r..R...<%rw2..Tk..'k.}.y........X,......Rp.....m#G..5y.js.....M[.n...v..W...m..]u.Smw...g.w..:'.k....z&T...h...F..(7+..Dc........Yc..J.Yc7..'.+b..7<.S....g...x.{..0..J..mI,....QB........u.e.C.D.......v_`cw...l.mo.{.m..?$...IR..P..;\..M.4i...^.Y....U.0..D....)....s7I......xt..Z.h...+...d..X.........E.)...ZR.T.Dc....HFQE./)..<;M..[...I$..Ll.K...I.........."i..&.h.Bw$..!.q....#.4..Z#:.[.....m..v..GGi.&..I.k.8.6}K.dj..!.Nr..H.......&....1.gno..S.ID)tR...L.._!.sL........\R..Uq.=E.ME.F.....n.....&x>a..z..#.gl.......n..&.Ol.c...h..Q..".n..%..kRH\1p....0}..F.X.kCj.B.......'.$wm.7-.......B7..J...x,T..\H..v2.G.../&......:*U`...S......D.IQ?;..\:..L.%...{.Y....4j.......gu.7..'L%<DZk... .X..X.8f..!..)..Q.7....O.>....[Q..N+q<.wS.O0.\|1..D5........

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 16:05:54.527115107 CEST	192.168.2.5	1.1.1.1	0x5623	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.527264118 CEST	192.168.2.5	1.1.1.1	0x2c89	Standard query (0)	aka.ms	65	IN (0x0001)	false
Apr 19, 2024 16:05:54.891628027 CEST	192.168.2.5	1.1.1.1	0xf6b7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.891727924 CEST	192.168.2.5	1.1.1.1	0xef71	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:05:56.317810059 CEST	192.168.2.5	1.1.1.1	0x6057	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:56.317976952 CEST	192.168.2.5	1.1.1.1	0xe994	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:05:56.895364046 CEST	192.168.2.5	1.1.1.1	0xa29f	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:56.895615101 CEST	192.168.2.5	1.1.1.1	0xb04a	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:05:57.108561039 CEST	192.168.2.5	1.1.1.1	0x95a5	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.109513998 CEST	192.168.2.5	1.1.1.1	0x7371	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Apr 19, 2024 16:05:58.376497030 CEST	192.168.2.5	1.1.1.1	0x4233	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:58.377223015 CEST	192.168.2.5	1.1.1.1	0x2f7c	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:08.473789930 CEST	192.168.2.5	1.1.1.1	0x82f0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:08.474342108 CEST	192.168.2.5	1.1.1.1	0xce18	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:10.083326101 CEST	192.168.2.5	1.1.1.1	0xf6fe	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:10.094960928 CEST	192.168.2.5	1.1.1.1	0x15ea	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:15.277009964 CEST	192.168.2.5	1.1.1.1	0xb443	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.277630091 CEST	192.168.2.5	1.1.1.1	0x3f70	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 16:06:15.985285044 CEST	192.168.2.5	1.1.1.1	0xfd6d	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.985501051 CEST	192.168.2.5	1.1.1.1	0xd376	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 16:06:16.324764967 CEST	192.168.2.5	1.1.1.1	0xc4e5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.324934006 CEST	192.168.2.5	1.1.1.1	0xb56	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:16.970726967 CEST	192.168.2.5	1.1.1.1	0xb9b7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.970951080 CEST	192.168.2.5	1.1.1.1	0xf621	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:22.076256990 CEST	192.168.2.5	1.1.1.1	0x6c0d	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:22.076663017 CEST	192.168.2.5	1.1.1.1	0x1aa6	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:22.078391075 CEST	192.168.2.5	1.1.1.1	0x35e2	Standard query (0)	is2-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:22.078701019 CEST	192.168.2.5	1.1.1.1	0xb208	Standard query (0)	is2-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:22.197480917 CEST	192.168.2.5	1.1.1.1	0xb24f	Standard query (0)	is5-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:22.197760105 CEST	192.168.2.5	1.1.1.1	0xb748	Standard query (0)	is5-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:22.257096052 CEST	192.168.2.5	1.1.1.1	0xbee3	Standard query (0)	is4-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:22.257318020 CEST	192.168.2.5	1.1.1.1	0x19ac	Standard query (0)	is4-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:22.350513935 CEST	192.168.2.5	1.1.1.1	0x3120	Standard query (0)	is3-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:22.350807905 CEST	192.168.2.5	1.1.1.1	0x3f5	Standard query (0)	is3-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:22.979980946 CEST	192.168.2.5	1.1.1.1	0x56c4	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:22.980328083 CEST	192.168.2.5	1.1.1.1	0x30c7	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:39.545336008 CEST	192.168.2.5	1.1.1.1	0xe137	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.545504093 CEST	192.168.2.5	1.1.1.1	0x16bb	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:44.241365910 CEST	192.168.2.5	1.1.1.1	0x5953	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.241653919 CEST	192.168.2.5	1.1.1.1	0x91b0	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:59.419398069 CEST	192.168.2.5	1.1.1.1	0xb73a	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:59.420253992 CEST	192.168.2.5	1.1.1.1	0x1075	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:07:10.288639069 CEST	192.168.2.5	1.1.1.1	0x6f9b	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:10.288909912 CEST	192.168.2.5	1.1.1.1	0xc4b4	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:07:16.250531912 CEST	192.168.2.5	1.1.1.1	0x8936	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:16.250689983 CEST	192.168.2.5	1.1.1.1	0xee18	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:07:24.405082941 CEST	192.168.2.5	1.1.1.1	0x8589	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.405678034 CEST	192.168.2.5	1.1.1.1	0xcb67	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 16:05:54.631942034 CEST	1.1.1.1	192.168.2.5	0x5623	No error (0)	aka.ms		23.54.202.151	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.996217012 CEST	1.1.1.1	192.168.2.5	0xef71	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 16:05:54.996608973 CEST	1.1.1.1	192.168.2.5	0xf6b7	No error (0)	www.google.com		173.194.219.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.996608973 CEST	1.1.1.1	192.168.2.5	0xf6b7	No error (0)	www.google.com		173.194.219.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.996608973 CEST	1.1.1.1	192.168.2.5	0xf6b7	No error (0)	www.google.com		173.194.219.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.996608973 CEST	1.1.1.1	192.168.2.5	0xf6b7	No error (0)	www.google.com		173.194.219.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.996608973 CEST	1.1.1.1	192.168.2.5	0xf6b7	No error (0)	www.google.com		173.194.219.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:54.996608973 CEST	1.1.1.1	192.168.2.5	0xf6b7	No error (0)	www.google.com		173.194.219.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:55.553474903 CEST	1.1.1.1	192.168.2.5	0x220a	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:55.566428900 CEST	1.1.1.1	192.168.2.5	0x7f7f	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:55.566428900 CEST	1.1.1.1	192.168.2.5	0x7f7f	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:55.566428900 CEST	1.1.1.1	192.168.2.5	0x7f7f	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:55.566428900 CEST	1.1.1.1	192.168.2.5	0x7f7f	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:56.422375917 CEST	1.1.1.1	192.168.2.5	0x6057	No error (0)	play-lh.googleusercontent.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.000068903 CEST	1.1.1.1	192.168.2.5	0xa29f	No error (0)	play-lh.googleusercontent.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.126013994 CEST	1.1.1.1	192.168.2.5	0x4f34	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:57.195272923 CEST	1.1.1.1	192.168.2.5	0x5c2a	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:57.195272923 CEST	1.1.1.1	192.168.2.5	0x5c2a	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:57.195272923 CEST	1.1.1.1	192.168.2.5	0x5c2a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.195272923 CEST	1.1.1.1	192.168.2.5	0x5c2a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.213989019 CEST	1.1.1.1	192.168.2.5	0x95a5	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:57.215219021 CEST	1.1.1.1	192.168.2.5	0x7371	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:58.481589079 CEST	1.1.1.1	192.168.2.5	0x4233	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:58.483308077 CEST	1.1.1.1	192.168.2.5	0x2f7c	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:08.578574896 CEST	1.1.1.1	192.168.2.5	0x82f0	No error (0)	play.google.com		64.233.185.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:08.578574896 CEST	1.1.1.1	192.168.2.5	0x82f0	No error (0)	play.google.com		64.233.185.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:08.578574896 CEST	1.1.1.1	192.168.2.5	0x82f0	No error (0)	play.google.com		64.233.185.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:08.578574896 CEST	1.1.1.1	192.168.2.5	0x82f0	No error (0)	play.google.com		64.233.185.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:08.578574896 CEST	1.1.1.1	192.168.2.5	0x82f0	No error (0)	play.google.com		64.233.185.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:08.578574896 CEST	1.1.1.1	192.168.2.5	0x82f0	No error (0)	play.google.com		64.233.185.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:10.188721895 CEST	1.1.1.1	192.168.2.5	0xf6fe	No error (0)	play-lh.googleusercontent.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.381283998 CEST	1.1.1.1	192.168.2.5	0xb443	No error (0)	stats.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.381283998 CEST	1.1.1.1	192.168.2.5	0xb443	No error (0)	stats.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.381283998 CEST	1.1.1.1	192.168.2.5	0xb443	No error (0)	stats.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.381283998 CEST	1.1.1.1	192.168.2.5	0xb443	No error (0)	stats.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.090209961 CEST	1.1.1.1	192.168.2.5	0xfd6d	No error (0)	stats.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.090209961 CEST	1.1.1.1	192.168.2.5	0xfd6d	No error (0)	stats.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.090209961 CEST	1.1.1.1	192.168.2.5	0xfd6d	No error (0)	stats.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.090209961 CEST	1.1.1.1	192.168.2.5	0xfd6d	No error (0)	stats.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.429174900 CEST	1.1.1.1	192.168.2.5	0xc4e5	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.429174900 CEST	1.1.1.1	192.168.2.5	0xc4e5	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.429174900 CEST	1.1.1.1	192.168.2.5	0xc4e5	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.429174900 CEST	1.1.1.1	192.168.2.5	0xc4e5	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.429174900 CEST	1.1.1.1	192.168.2.5	0xc4e5	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.429174900 CEST	1.1.1.1	192.168.2.5	0xc4e5	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.429476023 CEST	1.1.1.1	192.168.2.5	0xb56	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 16:06:17.075285912 CEST	1.1.1.1	192.168.2.5	0xb9b7	No error (0)	play.google.com		173.194.219.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:17.075285912 CEST	1.1.1.1	192.168.2.5	0xb9b7	No error (0)	play.google.com		173.194.219.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:17.075285912 CEST	1.1.1.1	192.168.2.5	0xb9b7	No error (0)	play.google.com		173.194.219.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:17.075285912 CEST	1.1.1.1	192.168.2.5	0xb9b7	No error (0)	play.google.com		173.194.219.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:17.075285912 CEST	1.1.1.1	192.168.2.5	0xb9b7	No error (0)	play.google.com		173.194.219.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:17.075285912 CEST	1.1.1.1	192.168.2.5	0xb9b7	No error (0)	play.google.com		173.194.219.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:22.181143045 CEST	1.1.1.1	192.168.2.5	0x6c0d	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.181276083 CEST	1.1.1.1	192.168.2.5	0x1aa6	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.183701038 CEST	1.1.1.1	192.168.2.5	0xb208	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.184820890 CEST	1.1.1.1	192.168.2.5	0x35e2	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.302762985 CEST	1.1.1.1	192.168.2.5	0xb24f	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.302829981 CEST	1.1.1.1	192.168.2.5	0xb748	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.361557961 CEST	1.1.1.1	192.168.2.5	0xbee3	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.361568928 CEST	1.1.1.1	192.168.2.5	0x19ac	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.454911947 CEST	1.1.1.1	192.168.2.5	0x3f5	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:22.456552982 CEST	1.1.1.1	192.168.2.5	0x3120	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:23.084615946 CEST	1.1.1.1	192.168.2.5	0x56c4	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:23.084894896 CEST	1.1.1.1	192.168.2.5	0x30c7	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:39.650047064 CEST	1.1.1.1	192.168.2.5	0xe137	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.541985989 CEST	1.1.1.1	192.168.2.5	0x8f8d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.541985989 CEST	1.1.1.1	192.168.2.5	0x8f8d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.345740080 CEST	1.1.1.1	192.168.2.5	0x5953	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:59.523853064 CEST	1.1.1.1	192.168.2.5	0xb73a	No error (0)	play-lh.googleusercontent.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:10.398499966 CEST	1.1.1.1	192.168.2.5	0x6f9b	No error (0)	play-lh.googleusercontent.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:16.355061054 CEST	1.1.1.1	192.168.2.5	0x8936	No error (0)	play.google.com		173.194.219.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:16.355061054 CEST	1.1.1.1	192.168.2.5	0x8936	No error (0)	play.google.com		173.194.219.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:16.355061054 CEST	1.1.1.1	192.168.2.5	0x8936	No error (0)	play.google.com		173.194.219.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:16.355061054 CEST	1.1.1.1	192.168.2.5	0x8936	No error (0)	play.google.com		173.194.219.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:16.355061054 CEST	1.1.1.1	192.168.2.5	0x8936	No error (0)	play.google.com		173.194.219.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:16.355061054 CEST	1.1.1.1	192.168.2.5	0x8936	No error (0)	play.google.com		173.194.219.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.509891033 CEST	1.1.1.1	192.168.2.5	0x8589	No error (0)	play.google.com		172.253.124.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.509891033 CEST	1.1.1.1	192.168.2.5	0x8589	No error (0)	play.google.com		172.253.124.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.509891033 CEST	1.1.1.1	192.168.2.5	0x8589	No error (0)	play.google.com		172.253.124.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.509891033 CEST	1.1.1.1	192.168.2.5	0x8589	No error (0)	play.google.com		172.253.124.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.509891033 CEST	1.1.1.1	192.168.2.5	0x8589	No error (0)	play.google.com		172.253.124.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.509891033 CEST	1.1.1.1	192.168.2.5	0x8589	No error (0)	play.google.com		172.253.124.138	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49716	40.126.29.9	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:39 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-04-19 14:05:39 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 14:05:39 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 14:04:39 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C509_SN1 x-ms-request-id: 92e6dbc1-22fd-4c94-a63a-492c1d97c7e5 PPServer: PPV: 30 H: SN1PEPF0002F03F V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 14:05:38 GMT Connection: close Content-Length: 11390
2024-04-19 14:05:39 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49718	40.126.29.9	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:40 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-04-19 14:05:40 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 14:05:40 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 14:04:40 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C509_SN1 x-ms-request-id: 97bd407e-6dcd-4159-b682-f769e466c232 PPServer: PPV: 30 H: SN1PEPF0002F07E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 14:05:40 GMT Connection: close Content-Length: 10877
2024-04-19 14:05:40 UTC	10877	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49719	40.126.29.12	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:40 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-19 14:05:40 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 14:05:40 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 14:04:40 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: 1bcde0d9-782d-4312-ad05-d2d970c1ff6c PPServer: PPV: 30 H: SN1PEPF0002F9DF V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 14:05:40 GMT Connection: close Content-Length: 1918
2024-04-19 14:05:40 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49721	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:41 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4b 79 4e 59 55 31 44 46 62 6b 6d 5a 54 6b 62 70 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 37 33 31 65 66 64 36 30 34 34 63 35 33 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: KyNYU1DFbkmZTkbp.1Context: a6731efd6044c53f
2024-04-19 14:05:41 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:05:41 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 4b 79 4e 59 55 31 44 46 62 6b 6d 5a 54 6b 62 70 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 37 33 31 65 66 64 36 30 34 34 63 35 33 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: KyNYU1DFbkmZTkbp.2Context: a6731efd6044c53f<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:05:41 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4b 79 4e 59 55 31 44 46 62 6b 6d 5a 54 6b 62 70 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 37 33 31 65 66 64 36 30 34 34 63 35 33 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: KyNYU1DFbkmZTkbp.3Context: a6731efd6044c53f
2024-04-19 14:05:41 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:05:41 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 35 4e 33 32 5a 51 50 59 55 55 6d 39 55 45 66 41 50 66 7a 66 2f 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 5N32ZQPYUUm9UEfAPfzf/A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49722	40.126.29.12	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:41 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-19 14:05:41 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 14:05:41 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 14:04:41 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C509_SN1 x-ms-request-id: 9ae78cac-dc58-4771-ab53-1ec496b96e98 PPServer: PPV: 30 H: SN1PEPF0002FA14 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 14:05:41 GMT Connection: close Content-Length: 11390
2024-04-19 14:05:41 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49723	40.126.29.12	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:42 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-19 14:05:42 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 14:05:42 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 14:04:42 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C509_SN1 x-ms-request-id: dd6f2032-0f4c-48e8-8561-c5d3e3f6f95f PPServer: PPV: 30 H: SN1PEPF0002F98E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 14:05:42 GMT Connection: close Content-Length: 11390
2024-04-19 14:05:42 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49724	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:50 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 34 41 73 38 41 59 4c 44 4a 45 32 65 73 30 57 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 63 62 62 62 61 37 30 37 33 65 30 33 64 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 4As8AYLDJE2es0W8.1Context: 6acbbba7073e03d0
2024-04-19 14:05:50 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:05:50 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 34 41 73 38 41 59 4c 44 4a 45 32 65 73 30 57 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 63 62 62 62 61 37 30 37 33 65 30 33 64 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 4As8AYLDJE2es0W8.2Context: 6acbbba7073e03d0<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:05:50 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 34 41 73 38 41 59 4c 44 4a 45 32 65 73 30 57 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 63 62 62 62 61 37 30 37 33 65 30 33 64 30 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: 4As8AYLDJE2es0W8.3Context: 6acbbba7073e03d0
2024-04-19 14:05:50 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:05:50 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 45 49 79 49 51 53 6d 6c 61 6b 65 51 59 75 38 6e 65 36 4a 7a 66 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: EIyIQSmlakeQYu8ne6JzfA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49725	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 51 31 6b 57 59 6d 41 69 6b 69 44 6e 61 71 71 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 30 61 33 34 62 30 34 30 65 34 38 64 63 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: sQ1kWYmAikiDnaqq.1Context: a10a34b040e48dc7
2024-04-19 14:05:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:05:53 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 73 51 31 6b 57 59 6d 41 69 6b 69 44 6e 61 71 71 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 30 61 33 34 62 30 34 30 65 34 38 64 63 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: sQ1kWYmAikiDnaqq.2Context: a10a34b040e48dc7<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:05:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 51 31 6b 57 59 6d 41 69 6b 69 44 6e 61 71 71 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 30 61 33 34 62 30 34 30 65 34 38 64 63 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: sQ1kWYmAikiDnaqq.3Context: a10a34b040e48dc7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:05:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:05:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 36 4b 4f 43 46 71 43 4a 52 45 75 47 74 65 32 77 52 4d 63 35 65 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 6KOCFqCJREuGte2wRMc5eQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49731	23.54.202.151	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:54 UTC	656	OUT	GET /AAb9ysg HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:55 UTC	436	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://aka.ms/krs?id=lxDNVZKK Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Fri, 19 Apr 2024 14:05:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 14:05:55 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49732	23.54.202.151	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:55 UTC	664	OUT	GET /krs?id=lxDNVZKK HTTP/1.1 Host: aka.ms Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:55 UTC	452	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://krs.microsoft.com/redirect?id=lxDNVZKK Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Fri, 19 Apr 2024 14:05:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 14:05:55 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49734	13.107.246.41	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:55 UTC	680	OUT	GET /redirect?id=lxDNVZKK HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:56 UTC	596	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: TiPMix=99.36680174381405; path=/; HttpOnly; Domain=krs.microsoft.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=krs.microsoft.com; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140556Z-15497cdd9fd7xqjqsvryefhbyn00000001z0000000009zk8 X-Cache: CONFIG_NOCACHE
2024-04-19 14:05:56 UTC	1757	IN	Data Raw: 36 64 36 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 39 35 31 39 33 37 35 39 36 2c 20 61 70 70 2d 61 72 67 75 6d 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 6b 72 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 Data Ascii: 6d6<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://krs.microsoft.c
2024-04-19 14:05:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49737	13.107.246.41	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:56 UTC	625	OUT	GET /css/styles.css HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://krs.microsoft.com/redirect?id=lxDNVZKK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
2024-04-19 14:05:56 UTC	430	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:56 GMT Content-Type: text/css Content-Length: 555 Connection: close ETag: "1da8c5a0d5d162b" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140556Z-15497cdd9fd28c6zhavqxs647w00000001q000000000pz66 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:56 UTC	555	IN	Data Raw: ef bb bf 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 65 67 6f 65 20 55 49 2c 53 65 67 6f 65 55 49 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 34 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6c 65 78 2d 72 6f 77 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: .container { font-family: Segoe UI,SegoeUI,"Helvetica Neue",Helvetica,Arial,sans-serif; margin-top: 64px; display: flex; flex-direction: column; text-align: center; align-items: center;}.flex-row { display: flex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49739	13.107.246.41	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:56 UTC	688	OUT	GET /images/GooglePlayStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=lxDNVZKK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
2024-04-19 14:05:56 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:56 GMT Content-Type: image/png Content-Length: 9371 Connection: close ETag: "1da8c5a0898449b" Last-Modified: Thu, 11 Apr 2024 21:48:48 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140556Z-r1f585c6b65st2g883d87btgwc00000000ag000000004rgv X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:56 UTC	5315	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 a8 08 03 00 00 00 c0 6e 84 20 00 00 00 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da 6d 50 d1 0d 43 21 08 fc 77 8a 8e a0 80 0a e3 d0 be d7 a4 1b 74 fc a2 60 f2 6c 7b 89 27 1e 78 22 e9 7c bf 9e e9 36 00 85 12 d5 ce 4d 5a cb 06 12 12 50 0b 38 3b 74 72 c9 34 79 02 29 43 a8 9b 9e 74 5d 02 93 70 54 fa 91 9b ef 65 e9 71 61 ed 45 2d aa 17 23 7e 44 e2 be 27 84 c2 9f bf 8c 20 3a 1b 1d 8d f8 08 23 09 23 04 4f 94 30 50 ff 56 6e c2 fd fa 85 fb 99 77 b0 af 34 88 78 6f fb e7 dc 6d 7a 47 b5 77 10 e0 c4 82 d9 18 91 bc 01 1c 0b 13 aa 05 75 b2 8c 42 2b 53 63 9e 4a 0f 33 1b c8 bf 39 2d a4 0f 31 ad 59 4f 0b 2b 4a 7e 00 00 01 84 69 43 43 50 49 43 43 20 70 72 6f 66 Data Ascii: PNGIHDR4n zTXtRaw profile type exifxmPC!wt`l{'x"\|6MZP8;tr4y)Ct]pTeqaE-#~D' :##O0PVnw4xomzGwuB+ScJ39-1YO+J~iCCPICC prof
2024-04-19 14:05:56 UTC	4056	IN	Data Raw: 17 d9 9e d1 e8 f9 84 99 f3 67 d3 fb 0d 3c a3 9b 5e 20 81 e8 0c 40 c3 d3 33 9b 34 b5 19 da a8 2f 27 61 4c 16 56 28 c6 c9 0b 96 d2 1c 34 d6 46 2e d8 35 12 f3 b2 7e 79 7c 81 24 40 7e c5 06 68 d8 7a 75 93 ae d3 af b6 f6 cc 67 92 f7 de 22 39 52 1a 84 26 b9 df cb c4 fd 0c 2f f9 96 31 86 e6 62 6c 6b ba 06 40 c3 d4 a5 4d 96 4e b4 14 da a8 b1 77 f0 2f 33 7e d8 00 34 56 7c bf 75 9d 62 ec 2e 8e 2e 70 ca 88 fd a3 73 16 a0 61 4e b6 37 39 7a ad 15 1f 75 25 0b 7b 5b 81 e6 2c ed 7e 17 e3 6f ae a5 17 d0 ba 29 2a 00 4d 51 df e3 41 b3 79 fa 91 16 1e 39 09 28 2e b7 08 cd 5a 3c 57 2a dc 4f 7d dd 71 5e 57 d3 0b 7c 3f 4d d6 00 34 45 bd f1 03 2e 35 9b 97 9a cf 11 c7 9e 61 c3 e2 41 43 5d 0b a8 0e cd 63 d4 fb c5 b6 e5 82 96 5e c0 f8 e1 38 59 03 d0 14 f5 e6 d5 12 6a 36 4f 34 3d fd Data Ascii: g<^ @34/'aLV(4F.5~y\|$@~hzug"9R&/1blk@MNw/3~4V\|ub..psaN79zu%{[,~o)MQAy9(.Z<WO}q^W\|?M4E.5aAC]c^8Yj6O4=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49741	64.233.185.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:56 UTC	767	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:56 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:43:38 GMT Expires: Sat, 20 Apr 2024 12:43:38 GMT Cache-Control: public, max-age=86400, no-transform Age: 4938 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:05:56 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-19 14:05:56 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-19 14:05:56 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-19 14:05:56 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-19 14:05:56 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-19 14:05:56 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-19 14:05:56 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-19 14:05:56 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49738	13.107.246.41	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:56 UTC	686	OUT	GET /images/AppleAppStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=lxDNVZKK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
2024-04-19 14:05:56 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:56 GMT Content-Type: image/png Content-Length: 6391 Connection: close ETag: "1da8c5a0d5d0cf7" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140556Z-15497cdd9fd59hhvs7xv2babrn00000001vg000000002kt4 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:56 UTC	5315	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 a0 08 03 00 00 00 e3 25 4f 7f 00 00 01 53 50 4c 54 45 00 00 00 a7 a7 a7 a6 a6 a6 a8 a8 a8 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a5 a5 a5 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 00 00 00 ff ff ff a6 a6 a6 59 59 59 4d 4d 4d 1b 1b 1b cc cc cc 04 04 04 fd fd fd fa fa fa f0 f0 f0 a3 a3 a3 69 69 69 33 33 33 94 94 94 bb bb bb e3 e3 e3 aa aa aa 08 08 08 ee ee ee a0 a0 a0 81 81 81 0c 0c 0c f4 f4 f4 de de de 21 21 21 d9 d9 d9 16 16 16 88 88 88 65 65 65 10 10 10 7d 7d 7d f6 f6 f6 0f 0f 0f c8 c8 c8 49 49 49 d2 d2 d2 70 70 70 25 25 25 9a 9a 9a 77 77 77 1f 1f 1f fc fc fc e8 e8 e8 e6 e6 e6 6d 6d 6d 3c 3c 3c 42 42 42 98 98 98 2b 2b 2b 28 Data Ascii: PNGIHDR%OSPLTEYYYMMMiii333!!!eee}}}IIIppp%%%wwwmmm<<<BBB+++(
2024-04-19 14:05:56 UTC	1076	IN	Data Raw: 56 b6 36 44 c3 c6 22 32 1e 93 c6 a9 16 32 ae 32 f5 ee 6f 37 8f 91 91 5b 27 82 25 09 81 58 3b c5 7c 6d f1 ff f9 0c 7c 16 0c 7b 0f be 9c 45 3a 46 f2 cd e2 1c f0 aa 49 f0 e3 34 97 a7 91 03 8c 8d 82 5f f7 15 6a da 40 e9 97 54 04 0d 8c 76 6a 07 db f7 c6 df 8c 25 4d 33 6f 4e f9 aa 1c a1 af 30 d1 a6 8f c7 ef 27 e9 90 84 0a a6 3b 26 d4 fc 50 38 fd 3d af 22 23 92 f2 5d 30 54 26 d1 01 2d 47 c7 72 f0 7a 68 0a af 8f 8e e9 a6 d5 a4 8a 86 94 48 00 2c 82 b3 47 28 a0 93 00 19 eb 4b 68 c3 c3 29 90 12 4a c6 12 30 8e 16 a5 77 a4 af e0 44 1e c5 4c 36 c0 7f c1 b0 73 89 16 46 6b e1 93 85 6c eb b0 8c 56 ae 61 30 b8 80 70 df 92 92 a6 49 30 dc a8 74 59 71 1d 88 60 88 23 61 2e 05 72 92 d3 28 e5 67 c8 fc 30 e4 44 82 e1 2f 71 c5 de 09 f4 17 0c e7 35 14 51 0e c1 5b 08 86 3d 53 3f 1c Data Ascii: V6D"222o7['%X;\|m\|{E:FI4_j@Tvj%M3oN0';&P8="#]0T&-GrzhH,G(Kh)J0wDL6sFklVa0pI0tYq`#a.r(g0D/q5Q[=S?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49742	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:57 UTC	530	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:57 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:05 GMT Expires: Sat, 20 Apr 2024 12:46:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 4792 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:05:57 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-19 14:05:57 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-19 14:05:57 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-19 14:05:57 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-19 14:05:57 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-19 14:05:57 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-19 14:05:57 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-19 14:05:57 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49744	13.107.246.40	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:57 UTC	430	OUT	GET /images/GooglePlayStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
2024-04-19 14:05:57 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:57 GMT Content-Type: image/png Content-Length: 9371 Connection: close ETag: "1da8c5a0898449b" Last-Modified: Thu, 11 Apr 2024 21:48:48 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140557Z-15497cdd9fdrsn2z8f5p1u9wmw00000001p000000000k9vf X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:57 UTC	9371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 a8 08 03 00 00 00 c0 6e 84 20 00 00 00 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da 6d 50 d1 0d 43 21 08 fc 77 8a 8e a0 80 0a e3 d0 be d7 a4 1b 74 fc a2 60 f2 6c 7b 89 27 1e 78 22 e9 7c bf 9e e9 36 00 85 12 d5 ce 4d 5a cb 06 12 12 50 0b 38 3b 74 72 c9 34 79 02 29 43 a8 9b 9e 74 5d 02 93 70 54 fa 91 9b ef 65 e9 71 61 ed 45 2d aa 17 23 7e 44 e2 be 27 84 c2 9f bf 8c 20 3a 1b 1d 8d f8 08 23 09 23 04 4f 94 30 50 ff 56 6e c2 fd fa 85 fb 99 77 b0 af 34 88 78 6f fb e7 dc 6d 7a 47 b5 77 10 e0 c4 82 d9 18 91 bc 01 1c 0b 13 aa 05 75 b2 8c 42 2b 53 63 9e 4a 0f 33 1b c8 bf 39 2d a4 0f 31 ad 59 4f 0b 2b 4a 7e 00 00 01 84 69 43 43 50 49 43 43 20 70 72 6f 66 Data Ascii: PNGIHDR4n zTXtRaw profile type exifxmPC!wt`l{'x"\|6MZP8;tr4y)Ct]pTeqaE-#~D' :##O0PVnw4xomzGwuB+ScJ39-1YO+J~iCCPICC prof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49743	13.107.246.40	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:57 UTC	428	OUT	GET /images/AppleAppStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
2024-04-19 14:05:57 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:57 GMT Content-Type: image/png Content-Length: 6391 Connection: close ETag: "1da8c5a0d5d0cf7" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140557Z-15497cdd9fdjvlbfxhrrthhyb0000000021000000000ay8s X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:57 UTC	6391	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 a0 08 03 00 00 00 e3 25 4f 7f 00 00 01 53 50 4c 54 45 00 00 00 a7 a7 a7 a6 a6 a6 a8 a8 a8 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a5 a5 a5 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 00 00 00 ff ff ff a6 a6 a6 59 59 59 4d 4d 4d 1b 1b 1b cc cc cc 04 04 04 fd fd fd fa fa fa f0 f0 f0 a3 a3 a3 69 69 69 33 33 33 94 94 94 bb bb bb e3 e3 e3 aa aa aa 08 08 08 ee ee ee a0 a0 a0 81 81 81 0c 0c 0c f4 f4 f4 de de de 21 21 21 d9 d9 d9 16 16 16 88 88 88 65 65 65 10 10 10 7d 7d 7d f6 f6 f6 0f 0f 0f c8 c8 c8 49 49 49 d2 d2 d2 70 70 70 25 25 25 9a 9a 9a 77 77 77 1f 1f 1f fc fc fc e8 e8 e8 e6 e6 e6 6d 6d 6d 3c 3c 3c 42 42 42 98 98 98 2b 2b 2b 28 Data Ascii: PNGIHDR%OSPLTEYYYMMMiii333!!!eee}}}IIIppp%%%wwwmmm<<<BBB+++(

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49746	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:58 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2f 6d 63 6f 45 66 6f 39 2b 45 32 6c 79 63 33 66 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 64 35 62 31 61 35 38 30 39 66 39 65 64 39 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: /mcoEfo9+E2lyc3f.1Context: fd5b1a5809f9ed93
2024-04-19 14:05:58 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:05:58 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 2f 6d 63 6f 45 66 6f 39 2b 45 32 6c 79 63 33 66 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 64 35 62 31 61 35 38 30 39 66 39 65 64 39 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: /mcoEfo9+E2lyc3f.2Context: fd5b1a5809f9ed93<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:05:58 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2f 6d 63 6f 45 66 6f 39 2b 45 32 6c 79 63 33 66 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 64 35 62 31 61 35 38 30 39 66 39 65 64 39 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: /mcoEfo9+E2lyc3f.3Context: fd5b1a5809f9ed93<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:05:58 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:05:58 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 59 32 79 53 7a 31 37 37 55 69 63 7a 48 6f 55 6d 31 2b 53 74 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: tY2ySz177UiczHoUm1+StA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49747	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 14:05:58 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=147443 Date: Fri, 19 Apr 2024 14:05:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49751	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 14:05:59 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=147463 Date: Fri, 19 Apr 2024 14:05:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 14:05:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49753	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:05 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 51 4f 53 2b 4c 75 30 46 55 65 50 55 6f 58 59 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 38 38 63 36 39 65 36 32 38 33 37 33 64 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7QOS+Lu0FUePUoXY.1Context: ef88c69e628373dd
2024-04-19 14:06:05 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:05 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 37 51 4f 53 2b 4c 75 30 46 55 65 50 55 6f 58 59 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 38 38 63 36 39 65 36 32 38 33 37 33 64 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 7QOS+Lu0FUePUoXY.2Context: ef88c69e628373dd<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:06:05 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 37 51 4f 53 2b 4c 75 30 46 55 65 50 55 6f 58 59 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 38 38 63 36 39 65 36 32 38 33 37 33 64 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: 7QOS+Lu0FUePUoXY.3Context: ef88c69e628373dd
2024-04-19 14:06:05 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:05 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 4a 70 52 53 6b 55 77 56 45 61 71 69 30 51 57 34 37 58 61 71 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yJpRSkUwVEaqi0QW47XaqQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49754	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:05 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 65 57 6d 6c 46 50 6a 48 43 55 79 6c 54 57 56 4a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 32 36 36 33 65 32 63 35 33 33 33 31 33 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: eWmlFPjHCUylTWVJ.1Context: fc2663e2c533313f
2024-04-19 14:06:05 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:05 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 65 57 6d 6c 46 50 6a 48 43 55 79 6c 54 57 56 4a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 32 36 36 33 65 32 63 35 33 33 33 31 33 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: eWmlFPjHCUylTWVJ.2Context: fc2663e2c533313f<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:06:05 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 65 57 6d 6c 46 50 6a 48 43 55 79 6c 54 57 56 4a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 32 36 36 33 65 32 63 35 33 33 33 31 33 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: eWmlFPjHCUylTWVJ.3Context: fc2663e2c533313f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:06:05 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:05 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 69 77 66 6e 33 34 34 69 62 55 4f 2f 7a 73 43 76 45 62 4d 74 63 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: iwfn344ibUO/zsCvEbMtcw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49755	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:06 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713535535006&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-19 14:06:06 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-19 14:06:06 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-19 14:06:06 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B524E7F03D2940DB943240371EF135B2 Ref B: LAX311000108023 Ref C: 2024-04-19T14:06:06Z Date: Fri, 19 Apr 2024 14:06:06 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713535566.11726bb9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49756	13.107.246.41	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:08 UTC	795	OUT	GET /completeRedirect/lxDNVZKK?correlationId=0eb9bac7b89eba1d42ca7d0628a379db&platformSelected=Android HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
2024-04-19 14:06:08 UTC	504	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 14:06:08 GMT Content-Length: 0 Connection: close Location: https://play.google.com/store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d7a2d2814-5fbb-eade-40c2-b208f1a4ddad%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140608Z-15497cdd9fdrqvh24s6x21e5vw00000001sg00000000gvh1 X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49758	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:09 UTC	792	OUT	GET /store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d7a2d2814-5fbb-eade-40c2-b208f1a4ddad%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK HTTP/1.1 Host: play.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:09 UTC	2643	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:09 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-oUcEos80zgg0o4k_-7TfdQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/PlayStoreUi/web-reports?context=eJzjitDikmII1JBikPj6kkkLiF-sZWV-B8T6x1mZjYE4-hQrcxwQr33OyrwZiL--YGX-CcRO6TNYQ4DYp34GaxwQt948xzodiJP-nWctAWIhbo6LXzo3sgk0bL9fDABSkygg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; expires=Sat, 19-Oct-2024 14:06:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 37 32 61 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 66 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 Data Ascii: 72a5<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://play.google.com/"><link ref="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><meta
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 64 72 65 73 73 65 73 5c 22 2c 5c 22 61 69 72 2e 63 6f 6d 2e 52 75 73 74 79 4c 61 6b 65 2e 43 75 62 65 45 73 63 61 70 65 42 69 72 74 68 64 61 79 5c 22 2c 5c 22 61 69 72 2e 63 6f 6d 2e 52 75 73 74 79 4c 61 6b 65 2e 43 75 62 65 45 73 63 61 70 65 43 61 73 65 32 33 5c 22 2c 5c 22 61 69 72 2e 63 6f 6d 2e 52 75 73 74 79 4c 61 6b 65 2e 43 75 62 65 45 73 63 61 70 65 43 6f 6c 6c 65 63 74 69 6f 6e 5c 22 2c 5c 22 61 69 72 2e 63 6f 6d 2e 52 75 73 74 79 4c 61 6b 65 2e 43 75 62 65 45 73 63 61 70 65 48 61 72 76 65 79 73 42 6f 78 5c 22 2c 5c 22 61 69 72 2e 63 6f 6d 2e 52 75 73 74 79 4c 61 6b 65 2e 43 75 62 65 45 73 63 61 70 65 50 61 72 61 64 6f 78 5c 22 2c 5c 22 61 69 72 2e 63 6f 6d 2e 52 75 73 74 79 4c 61 6b 65 2e 43 75 62 65 45 73 63 61 70 65 53 65 61 73 6f 6e 73 5c 22 Data Ascii: dresses\",\"air.com.RustyLake.CubeEscapeBirthday\",\"air.com.RustyLake.CubeEscapeCase23\",\"air.com.RustyLake.CubeEscapeCollection\",\"air.com.RustyLake.CubeEscapeHarveysBox\",\"air.com.RustyLake.CubeEscapeParadox\",\"air.com.RustyLake.CubeEscapeSeasons\"
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 2e 67 6c 6f 77 2e 62 72 69 63 6b 73 2e 62 72 65 61 6b 65 72 2e 62 72 6f 75 6e 63 65 2e 62 61 6c 6c 7a 2e 70 75 7a 7a 6c 65 2e 66 72 65 65 5c 22 2c 5c 22 62 61 7a 69 6e 67 61 67 61 6d 65 73 2e 70 6c 61 74 6f 2e 6c 75 64 6f 2e 65 73 6d 66 61 6d 69 6c 2e 6d 61 66 69 61 5c 22 2c 5c 22 62 67 2e 78 73 73 6f 66 74 77 61 72 65 2e 6c 61 64 79 70 6f 70 75 6c 61 72 2e 66 61 73 68 69 6f 6e 61 72 65 6e 61 5c 22 2c 5c 22 62 69 62 69 2e 70 65 74 2e 67 61 6d 65 73 2e 61 62 63 5c 22 2c 5c 22 62 69 62 69 2e 70 65 74 2e 67 61 6d 65 73 2e 65 78 70 6c 6f 72 65 72 2e 68 6f 6d 65 5c 22 2c 5c 22 62 69 6c 6c 69 61 72 64 73 2e 73 68 6f 6f 74 69 6e 67 2e 62 61 6c 6c 2e 67 61 6d 65 73 5c 22 2c 5c 22 62 69 72 64 2e 73 6f 72 74 2e 70 75 7a 7a 6c 65 2e 63 6f 6c 6f 72 2e 62 72 61 69 6e Data Ascii: .glow.bricks.breaker.brounce.ballz.puzzle.free\",\"bazingagames.plato.ludo.esmfamil.mafia\",\"bg.xssoftware.ladypopular.fashionarena\",\"bibi.pet.games.abc\",\"bibi.pet.games.explorer.home\",\"billiards.shooting.ball.games\",\"bird.sort.puzzle.color.brain
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 6b 72 61 69 6e 65 5c 22 2c 5c 22 63 6f 6d 2e 41 6b 68 69 72 50 65 6b 61 6e 2e 54 6f 74 61 6c 6c 79 4e 6f 74 41 63 63 75 72 61 74 65 42 61 74 74 6c 65 53 69 6d 75 6c 61 74 6f 72 5c 22 2c 5c 22 63 6f 6d 2e 41 70 70 67 65 6e 65 72 61 74 69 6f 6e 2e 53 75 64 6f 6b 75 5c 22 2c 5c 22 63 6f 6d 2e 41 72 74 49 6e 47 61 6d 65 73 2e 41 69 72 41 74 74 61 63 6b 32 66 5c 22 2c 5c 22 63 6f 6d 2e 42 52 41 45 56 45 2e 63 61 66 65 74 65 72 72 61 63 65 2e 67 6f 6f 67 6c 65 5c 22 2c 5c 22 63 6f 6d 2e 42 52 41 45 56 45 2e 73 65 63 72 65 74 6d 61 67 69 63 73 74 6f 72 79 2e 67 6f 6f 67 6c 65 5c 22 2c 5c 22 63 6f 6d 2e 42 53 5f 50 69 61 73 2e 74 77 65 6e 74 79 6e 69 6e 65 5c 22 2c 5c 22 63 6f 6d 2e 42 55 4e 4b 45 52 69 6d 2e 44 43 5c 22 2c 5c 22 63 6f 6d 2e 42 65 61 6e 73 74 61 Data Ascii: kraine\",\"com.AkhirPekan.TotallyNotAccurateBattleSimulator\",\"com.Appgeneration.Sudoku\",\"com.ArtInGames.AirAttack2f\",\"com.BRAEVE.cafeterrace.google\",\"com.BRAEVE.secretmagicstory.google\",\"com.BS_Pias.twentynine\",\"com.BUNKERim.DC\",\"com.Beansta
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 73 5c 22 2c 5c 22 63 6f 6d 2e 4a 6f 73 65 56 61 72 65 6c 61 2e 44 6f 6d 69 6e 65 6e 45 73 70 61 6f 6c 5c 22 2c 5c 22 63 6f 6d 2e 4b 61 63 68 73 6f 6e 44 65 76 2e 4b 69 63 6b 74 68 65 4b 61 72 6c 73 6f 6e 5c 22 2c 5c 22 63 6f 6d 2e 4b 69 64 73 47 61 6d 65 73 2e 53 75 70 65 72 48 69 70 70 6f 5c 22 2c 5c 22 63 6f 6d 2e 4b 6f 6e 73 6f 6c 65 4b 69 6e 67 7a 2e 42 6c 61 63 6b 53 70 61 64 65 73 5c 22 2c 5c 22 63 6f 6d 2e 4b 79 75 7a 61 6e 49 6e 63 2e 45 67 67 72 79 70 74 5c 22 2c 5c 22 63 6f 6d 2e 4c 6f 6f 70 47 61 6d 65 73 2e 42 6c 61 73 74 5c 22 2c 5c 22 63 6f 6d 2e 4c 6f 6f 70 47 61 6d 65 73 2e 44 6f 6d 69 6e 6f 5c 22 2c 5c 22 63 6f 6d 2e 4c 6f 6f 70 47 61 6d 65 73 2e 46 72 65 65 63 65 6c 6c 5c 22 2c 5c 22 63 6f 6d 2e 4c 6f 6f 70 47 61 6d 65 73 2e 48 65 78 61 Data Ascii: s\",\"com.JoseVarela.DominenEspaol\",\"com.KachsonDev.KicktheKarlson\",\"com.KidsGames.SuperHippo\",\"com.KonsoleKingz.BlackSpades\",\"com.KyuzanInc.Eggrypt\",\"com.LoopGames.Blast\",\"com.LoopGames.Domino\",\"com.LoopGames.Freecell\",\"com.LoopGames.Hexa
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 22 63 6f 6d 2e 54 77 6f 50 6c 61 79 65 72 47 61 6d 65 73 2e 4d 69 6e 64 47 61 6d 65 73 5c 22 2c 5c 22 63 6f 6d 2e 55 6c 69 61 46 69 73 68 65 72 2e 53 6d 61 72 74 4b 69 64 5c 22 2c 5c 22 63 6f 6d 2e 56 4b 47 61 6d 65 73 2e 4c 47 42 54 46 6c 61 67 73 5c 22 2c 5c 22 63 6f 6d 2e 56 52 53 74 75 64 69 6f 2e 63 61 74 63 68 75 70 5c 22 2c 5c 22 63 6f 6d 2e 57 69 6c 64 53 6f 64 61 2e 4d 69 6e 65 53 75 72 76 69 76 61 6c 5c 22 2c 5c 22 63 6f 6d 2e 57 69 6c 64 57 6f 72 6b 73 2e 41 6e 69 6d 61 6c 4a 61 6d 50 6c 61 79 57 69 6c 64 5c 22 2c 5c 22 63 6f 6d 2e 59 61 7a 65 65 64 53 61 62 69 6c 44 65 73 69 67 6e 73 2e 48 61 72 65 65 67 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 53 74 61 72 45 4e 2e 41 72 6b 6e 69 67 68 74 73 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 53 74 61 72 4a 50 2e 41 72 Data Ascii: "com.TwoPlayerGames.MindGames\",\"com.UliaFisher.SmartKid\",\"com.VKGames.LGBTFlags\",\"com.VRStudio.catchup\",\"com.WildSoda.MineSurvival\",\"com.WildWorks.AnimalJamPlayWild\",\"com.YazeedSabilDesigns.Hareeg\",\"com.YoStarEN.Arknights\",\"com.YoStarJP.Ar
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 65 72 2e 68 6f 73 6b 69 6e 68 64 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 65 72 2e 6f 6b 65 79 31 30 31 2e 68 64 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 65 72 2e 70 69 73 74 69 68 64 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 67 2e 62 69 6e 67 6f 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 68 61 71 75 65 73 74 2e 6e 61 75 74 69 63 61 6c 6c 69 66 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 68 61 71 75 65 73 74 2e 70 65 74 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 65 6e 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 72 75 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 72 61 63 69 6e 67 2e 74 6f 64 64 6c 65 72 73 Data Ascii: e\",\"com.alper.hoskinhd\",\"com.alper.okey101.hd\",\"com.alper.pistihd\",\"com.alpg.bingo\",\"com.alphaquest.nauticallife\",\"com.alphaquest.pet\",\"com.amayasoft.bookstorem4.en\",\"com.amayasoft.bookstorem4.ru\",\"com.amayasoft.cars.kids.racing.toddlers
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 64 69 61 6e 61 73 63 69 74 79 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 69 61 6e 61 73 7a 6f 6f 5c 22 2c 5c 22 63 6f 6d 2e 61 7a 67 61 6d 65 2e 61 70 70 2e 70 6f 6f 6c 63 69 74 79 5c 22 2c 5c 22 63 6f 6d 2e 61 7a 75 72 67 61 6d 65 73 2e 5a 6f 6d 62 69 65 4d 61 73 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 61 7a 75 72 67 61 6d 65 73 2e 73 74 61 63 6b 62 61 6c 6c 5c 22 2c 5c 22 63 6f 6d 2e 61 7a 75 72 69 6e 74 65 72 61 63 74 69 76 65 2e 61 6e 69 6d 61 6c 73 65 76 6f 6c 75 74 69 6f 6e 5c 22 2c 5c 22 63 6f 6d 2e 62 61 67 2e 66 61 72 6d 2e 64 61 79 2e 76 69 6c 6c 61 67 65 2e 66 61 72 6d 69 6e 67 2e 67 61 6d 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 61 69 6c 69 65 6e 67 5c 22 2c 5c 22 63 6f 6d 2e 62 61 6c 61 6e 63 65 2e 72 6f 79 61 6c Data Ascii: dianascity\",\"com.awardsmediagroup.dianaszoo\",\"com.azgame.app.poolcity\",\"com.azurgames.ZombieMaster\",\"com.azurgames.stackball\",\"com.azurinteractive.animalsevolution\",\"com.bag.farm.day.village.farming.games\",\"com.bailieng\",\"com.balance.royal
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 6f 6d 2e 62 69 67 63 6f 6f 6c 2e 70 75 7a 7a 6c 65 2e 62 75 62 62 6c 65 68 6f 6d 65 64 65 73 69 67 6e 5c 22 2c 5c 22 63 6f 6d 2e 62 69 67 63 6f 6f 6c 2e 70 75 7a 7a 6c 65 2e 62 75 62 62 6c 65 73 68 6f 6f 74 65 72 6b 69 6e 67 64 6f 6d 5c 22 2c 5c 22 63 6f 6d 2e 62 69 67 63 6f 6f 6c 2e 70 75 7a 7a 6c 65 2e 64 65 73 69 67 6e 62 6c 61 73 74 5c 22 2c 5c 22 63 6f 6d 2e 62 69 67 63 6f 6f 6c 2e 70 75 7a 7a 6c 65 2e 66 72 75 69 74 64 69 61 72 79 32 5c 22 2c 5c 22 63 6f 6d 2e 62 69 67 63 6f 6f 6c 2e 70 75 7a 7a 6c 65 2e 6a 65 77 65 6c 5c 22 2c 5c 22 63 6f 6d 2e 62 69 67 64 75 63 6b 67 61 6d 65 73 2e 66 6c 6f 77 62 72 69 64 67 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 69 67 64 75 63 6b 67 61 6d 65 73 2e 66 6c 6f 77 68 65 78 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 69 67 6a 61 Data Ascii: om.bigcool.puzzle.bubblehomedesign\",\"com.bigcool.puzzle.bubbleshooterkingdom\",\"com.bigcool.puzzle.designblast\",\"com.bigcool.puzzle.fruitdiary2\",\"com.bigcool.puzzle.jewel\",\"com.bigduckgames.flowbridges\",\"com.bigduckgames.flowhexes\",\"com.bigja
2024-04-19 14:06:09 UTC	2643	IN	Data Raw: 6d 61 73 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 62 6c 6f 63 6b 2e 70 75 7a 7a 6c 65 2e 63 6c 61 73 73 69 63 2e 66 72 65 65 2e 62 6c 6f 63 6b 2e 70 75 7a 7a 6c 65 2e 72 65 74 72 6f 5c 22 2c 5c 22 63 6f 6d 2e 62 6c 6f 63 6b 2e 70 75 7a 7a 6c 65 2e 67 61 6d 65 2e 68 69 70 70 6f 2e 75 63 5c 22 2c 5c 22 63 6f 6d 2e 62 6c 6f 63 6b 2e 70 75 7a 7a 6c 65 2e 6d 6f 72 65 5c 22 2c 5c 22 63 6f 6d 2e 62 6c 6f 63 6b 6d 65 72 67 65 2e 74 65 63 68 6e 6f 6c 6f 67 79 5c 22 2c 5c 22 63 6f 6d 2e 62 6c 6f 63 6b 70 75 7a 7a 6c 65 2e 63 6c 61 73 73 69 63 62 72 69 63 6b 67 61 6d 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 6c 6f 63 6b 70 75 7a 7a 6c 65 2e 67 61 6d 65 73 2e 70 75 7a 7a 6c 65 2e 6a 65 77 65 6c 5c 22 2c 5c 22 63 6f 6d 2e 62 6c 6f 63 6b 70 75 7a 7a 6c 65 2e 6a 65 77 65 6c 2e 62 Data Ascii: master\",\"com.block.puzzle.classic.free.block.puzzle.retro\",\"com.block.puzzle.game.hippo.uc\",\"com.block.puzzle.more\",\"com.blockmerge.technology\",\"com.blockpuzzle.classicbrickgames\",\"com.blockpuzzle.games.puzzle.jewel\",\"com.blockpuzzle.jewel.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49760	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1106	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:10 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:05 GMT Expires: Sat, 20 Apr 2024 12:46:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 4805 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:10 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-19 14:06:10 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49759	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1117	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:10 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:03:05 GMT Expires: Sat, 20 Apr 2024 14:03:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 185 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:10 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49764	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1105	OUT	GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:10 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51228 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3476 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:10 UTC	721	IN	Data Raw: 52 49 46 46 14 c8 00 00 57 45 42 50 56 50 38 4c 08 c8 00 00 2f a5 c0 49 00 4d 40 8c 24 39 6e 53 b3 b8 07 c4 82 f9 07 0c 50 76 08 11 fd 9f 00 fe 28 a9 d4 f1 0f ad 9e c8 78 48 b2 a5 b8 68 02 d8 18 db 92 6a b6 72 82 2c 24 6b 0c 90 32 05 cf b4 8d 4f 40 99 a9 c5 33 9f 47 11 61 03 18 03 54 3d 55 10 82 01 50 04 51 f9 3c 63 8c 90 10 88 06 18 63 44 55 09 71 8d 00 f1 1d 02 83 cd ef e6 aa 5f 0c e8 f2 c7 40 3b 82 f9 00 ba d9 b2 85 80 04 49 c5 69 23 3e 23 2a 00 83 f1 88 38 26 b0 c2 40 6f 10 3a ee 16 e0 e3 1e 07 60 ce 01 0c ae 7a de b2 6d 50 f2 ed 8d b9 5a e8 a3 eb b2 e6 2c 31 3e 36 97 bd 35 65 7f 78 6f cf b4 73 4a 82 71 a9 2a e7 de 7b 4b 2d 87 8e b7 ab 6c 78 7b 69 29 00 89 88 ee 7e 33 7b 6f 83 00 37 a0 ee 99 69 db 60 43 77 81 dd dd 8e 32 30 05 ab 4d c3 21 09 6c 0d f5 Data Ascii: RIFFWEBPVP8L/IM@$9nSPv(xHhjr,$k2O@3GaT=UPQ<ccDUq_@;Ii#>#8&@o:`zmPZ,1>65exosJq{K-lx{i)~3{o7i`Cw20M!l
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 30 44 a2 be 97 f9 d8 ff ec 0e 65 d4 4c fd 62 96 00 09 90 24 49 bc 11 6f 22 81 b8 cf b5 4e f7 f0 1a 1f 64 78 7b dd cd 09 6e 01 40 80 24 df 38 7a 43 00 d8 c7 11 81 de eb 63 87 d5 01 ee 25 49 14 6f 4a 82 0c 06 f1 60 b4 6d 2d 7f 5c fe e8 17 33 00 ef 78 0f 90 43 92 8a 8f d3 c6 62 86 2b 74 46 0a a1 dd dd cf 2f 33 7c e6 fd 8d f7 00 49 0e 49 02 a3 fc 1a c6 b2 0b 9d 8b 6e 0e fd 2c 3c 28 09 58 f5 38 a7 f7 b9 e9 d4 d4 52 53 b4 74 ea 23 fd 64 3e bd 6e 7e d4 01 10 79 56 d7 62 36 b7 f9 bf e8 54 b4 b5 35 fc 79 b1 8b cd 6d b9 6a 5e 59 03 c0 1b 51 97 a8 f4 5e 87 ce b9 cc a5 b5 2f 1a ad b2 ce fd 01 e3 d5 04 49 02 c4 4a ef 6d 4d af 55 2a bd 55 20 42 c1 89 ef 66 02 00 4c ab 24 ec eb 25 8b b7 7a ad d7 ba b8 74 89 63 19 31 f6 16 f7 f3 d1 f4 db c9 4f 3f 9c fd 26 a0 24 2b 0d 26 Data Ascii: 0DeLb$Io"Ndx{n@$8zCc%IoJ`m-\3xCb+tF/3\|IIn,<(X8RSt#d>n~yVb6T5ymj^YQ^/IJmMU*U BfL$%ztc1O?&$+&
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 30 67 02 60 0c ee 3d f7 ec d9 62 02 f8 bf ff bf de 72 23 e9 f3 f9 e2 a1 cb 54 b7 b8 5c 66 b6 43 4e 1c 70 b0 bb 43 cd 1c 98 66 66 e6 ee 34 c6 ed 4c 27 1d 68 ee 0e 33 74 da 31 87 13 33 c4 50 55 76 95 8b e9 56 5d be e7 dc 03 5f f8 7c 3e 3f d4 b5 dd f4 07 bc 67 54 6a 69 e0 6a a8 c1 9a 74 66 16 4b a3 a3 d5 99 89 ce 82 7f f8 2a 3b 5e b2 6a 19 bc 50 83 d1 d5 e8 0e 7c 17 4e 4b 74 16 06 2d 79 18 bc d1 69 28 45 b5 e0 1f ce 40 2d e7 2c 43 14 a5 87 a2 5a b8 9a 39 03 a5 11 7e 35 62 b0 86 67 32 50 6a b9 c1 3f 54 7e b8 6a d5 62 74 96 a1 b5 c3 63 c9 ea f5 ae ee 28 f2 42 69 75 06 bc 9c 5a 06 77 d4 e0 55 69 78 a6 06 6a 29 7b 96 b9 14 35 95 9a bb 4b 91 b3 7c 17 ee 72 ee 0f 1e 89 79 c6 1a 6a b0 26 db 50 8a 74 b7 55 d2 0a 03 b6 6d 87 25 49 7a df ef fb 23 e2 f8 a4 2a 2b cb 55 Data Ascii: 0g`=br#T\fCNpCff4L'h3t13PUvV]_\|>?gTjijtfK;^jP\|NKt-yi(E@-,CZ9~5bg2Pj?T~jbtc(BiuZwUixj){5K\|ryj&PtUm%Iz#+U
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: e1 b8 c1 8a 1d f3 16 20 dc 33 bc 3a 88 43 82 8c 7b 20 00 27 d8 9a 42 22 ca e6 75 02 ec 47 67 f3 90 80 00 5c 01 88 ec c2 09 0f 35 76 41 2c 05 64 29 7a 75 04 90 14 80 0d 0a 19 7b 92 ed 56 8d 9a 78 7a 52 33 d3 ab 5b f2 5a 80 41 6b b7 d6 46 aa d7 47 54 5f 94 74 b6 07 5b 53 48 49 f6 57 54 d8 35 d1 42 71 c2 39 6b 6c 49 49 61 f3 71 4a 0a b0 e3 90 02 0a a6 70 e0 74 0f b6 ab 31 ba 8c 8e 99 1b 90 ac 86 25 c7 1d ab 1b 54 37 cf 6c 56 47 28 37 a3 5b e6 04 60 9e 90 7b 52 00 62 ff 25 25 11 d4 00 c5 2b 21 9c 31 e5 b4 ad 01 34 08 b5 5d c2 06 5c 81 00 48 b2 0b 24 25 25 41 f2 14 61 f7 25 91 36 65 a3 ba e3 e6 ea 20 50 1d 92 0a 64 15 8e a3 4f 34 69 dc 42 05 47 47 f6 63 42 4a 4a dd 8d ec 03 27 05 92 ed e1 04 48 82 a4 50 77 54 f0 00 21 05 48 61 33 9c ab 0d 01 ae 38 a3 b0 79 65 Data Ascii: 3:C{ 'B"uGg\5vA,d)zu{VxzR3[ZAkFGT_t[SHIWT5Bq9klIIaqJpt1%T7lVG(7[`{Rb%%+!14]\H$%%Aa%6e PdO4iBGGcBJJ'HPwT!Ha38ye
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 3c d7 ab ff e0 73 5d b3 5d ee cf 7f d1 e5 6e ab 9d d0 0f bf f9 2e e7 5e 62 7d ad de fb b8 c6 16 87 fb 9d 21 67 9a 69 00 e4 29 45 64 0b b0 08 72 ba 4a fa c1 d9 27 13 9b a6 0c 60 ec fa 82 11 83 31 06 92 51 35 24 8b 93 bb c1 6e 3c 53 ce b2 1d b9 8f c6 c9 0b 36 72 6d 71 73 55 10 09 ea 33 f8 b3 43 7b bf ab 9e 5c e6 63 ef b9 e2 b7 bf 57 60 28 7c d9 db 7e ff 04 cd ac aa a5 dd a5 b3 71 97 f4 00 e7 f9 3e f0 07 10 f5 32 bf f6 39 2f f8 9e 3f 68 83 5e f2 07 3f ed 46 a7 1e e4 93 f3 60 5c c8 5a ff b4 50 11 81 9e 67 b6 56 87 c7 10 87 33 ec c1 10 70 4e d1 1e 37 3e 37 01 c3 e7 6c de 7c d3 b9 02 84 02 0e ec 2f 52 1b ad 04 1a 02 0a 3c 03 9e f6 62 1d 49 96 9c bf d9 38 86 a8 6f c6 36 6a e2 f5 d9 3a 5e 7d b4 55 94 a2 e0 99 67 5b 25 32 0e c3 1e 19 77 a6 82 ed 7c 14 40 07 67 55 Data Ascii: <s]]n.^b}!gi)EdrJ'`1Q5$n<S6rmqsU3C{\cW`(\|~q>29/?h^?F`\ZPgV3pN7>7l\|/R<bI8o6j:^}Ug[%2w\|@gU
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 11 b8 4a 1a 27 6f c6 33 90 7e 83 8b 3d 9a 09 f9 08 b5 cb 57 4e f4 78 74 72 03 b0 f1 80 60 1a 1a 6e e9 00 00 78 d3 e8 9c 26 1f fd fb 3f f8 58 3f f9 c1 e5 be fb 63 ef aa 09 00 91 46 80 16 e8 00 00 20 22 66 3c d3 2b fe ec d3 fc db 5f 7c 5a bc de 5b 7c 24 b8 cc a0 15 5c ac 80 4e 00 e8 04 23 64 c1 8a c8 54 00 5c 1c 86 7f e4 0c 11 0e 09 28 0e 1a 7b a8 fa b1 22 85 49 dd 85 cb dc f1 ba 73 b5 ac 86 35 a1 1d 25 26 85 46 55 c5 2e a5 83 df 58 6b 39 d7 85 91 46 f3 cb be bc bc ec 9c 27 67 6d 61 22 00 80 16 00 30 ef 9e 50 7f ba b7 fc fe bf 99 2f d6 04 98 34 06 93 76 00 04 9b 5e ec 9b 57 ca 74 a3 8f 04 80 72 13 b8 78 29 66 a6 41 c3 2e 30 a6 6a f3 20 db 60 20 4e 0d 20 26 15 27 4d d7 43 8a 54 79 ee 68 4f ed 81 9d d3 ab 64 55 59 ad a5 59 57 83 75 c6 43 fa 88 93 45 83 5d 19 Data Ascii: J'o3~=WNxtr`nx&?X?cF "f<+_\|Z[\|$\N#dT\({"Is5%&FU.Xk9F'gma"0P/4v^Wtrx)fA.0j ` N &'MCTyhOdUYYWuCE]
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: d9 be ee d3 60 d3 af f4 dc f5 67 98 ae 03 8f f3 e1 3f a3 02 97 f2 5c ff fe 47 46 50 eb 4f 75 fd cd e9 46 5f dd 0d 1c 4e b7 a0 de 18 00 82 30 10 b6 16 a0 23 04 98 50 0d bd be be 16 01 01 13 aa 69 75 a6 5a d5 52 8a eb 2a d7 f3 62 49 94 b2 c1 9b f2 9b 7c f2 29 a9 34 7e 8f 2b 4c 2f 9f 5d 52 02 ad c0 c6 e6 79 7d ba 54 23 db 3c ee 79 0f 74 1a 55 3d fb a1 db 8b 52 63 c9 e3 7d f1 57 54 53 23 c4 97 3b 7b ba d9 8f 7d 81 4c eb 8e da 10 18 46 bc 06 bc e8 03 7f f5 15 7f ec 37 af 0c 47 3d c4 09 3a 4f cf a6 6a 13 43 af 3f fe e7 5d 1d bc 6b 84 b2 dd f8 fe f3 cd 2f 67 49 ed 19 67 78 b5 fe 0b 3e 88 17 33 f1 73 76 f4 98 a2 db 4a 6e f0 85 95 a7 b7 8e 5c 30 5c 3f 7d 13 22 1e e5 d4 2d 1c ad 1c e8 66 df ff b1 8f e3 ba 70 e2 22 f9 f5 7e d0 f3 f7 b6 dc eb fa dc 27 00 88 00 a4 71 Data Ascii: `g?\GFPOuF_N0#PiuZR*bI\|)4~+L/]Ry}T#<ytU=Rc}WTS#;{}LF7G=:OjC?]k/gIgx>3svJn\0\?}"-fp"~'q
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: f9 2d de 9b 0a 1a dc 3c 9d 30 d4 cd 04 60 ee 80 86 73 61 5a 63 c2 f1 74 10 18 39 1d 10 05 41 68 58 23 11 48 9d 1e 32 22 99 a9 00 d0 79 0c 74 e8 02 40 10 20 b2 b4 23 04 c0 7f 0d 2b 10 ec d8 54 03 8a a0 40 01 ae b8 62 27 44 e6 11 aa 65 46 5a 00 b9 14 1c 12 d5 e4 7c 30 9c dc 77 a5 25 cc 52 27 8d 46 3d 46 c5 11 3d a0 60 c8 c0 82 37 3e f4 23 20 0d f1 c5 70 22 91 c1 bb 3b 9a 3a 00 00 d2 d0 60 b0 a1 06 0d 00 80 4c 10 00 a0 a5 03 82 00 00 c1 d8 62 80 14 80 d9 03 76 75 07 14 80 1d 50 00 84 cd ab 20 6b a5 1e ed 88 5f dd 90 74 15 66 98 a5 23 4c e1 11 59 eb 3c 7b 9a 32 0b e5 2a 1d 8e 7a d5 6a 26 c6 77 13 63 f1 a6 05 27 5a ad 1f 4b 19 0c 43 8c 48 3e e2 e4 39 1c dc 84 3c 66 2c 12 44 e4 75 01 22 60 ce 0c c2 a4 41 68 0e 4d 92 86 49 53 60 66 34 50 90 01 40 0d 04 b4 80 80 Data Ascii: -<0`saZct9AhX#H2"yt@ #+T@b'DeFZ\|0w%R'F=F=`7># p";:`LbvuP k_tf#LY<{2*zj&wc'ZKCH>9<f,Du"`AhMIS`f4P@
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: af 59 f5 ff fe 17 ab 6f b1 ea 3f b7 fa b6 cb ff 8c 15 ff c2 19 0f 79 06 ce 6a 13 f1 e4 ca fd d2 57 c7 d9 1a 9c de 11 f7 39 05 93 ea 50 5b 9c 22 06 98 66 08 26 15 bd e3 34 6d 76 cf 24 ed 8e af a1 b9 f0 b2 f7 3f 0f af 41 3b f5 e1 79 be d0 44 92 37 3d 6d b2 11 4e 77 80 04 4c 98 84 cd ba e3 4d 33 78 de 87 fa 79 de f2 09 2d df e4 61 4f 2b b6 b0 0b 82 d9 65 4f e1 8c bf f1 6b df c1 fb df f3 d1 5f 74 ce 1a 9c ae 66 8a e9 fd 98 34 05 00 10 82 06 43 46 08 fc a1 c4 3b 48 e3 38 7e f6 f8 8f 3c 6b f3 7e 84 31 47 46 b2 0b 04 e4 e8 40 8f 56 84 81 c1 02 30 03 ec a0 aa 55 ad 00 69 98 06 82 68 a7 0d ae fe 63 23 1f b8 6e 42 59 a1 d7 77 4a 2a d8 fd 1f 75 a1 17 ab 6e 83 fc fd fa 33 6e f7 d2 3a c7 9f 74 47 47 b6 39 6a 4e f3 2d ed ef db 3c 71 fe 69 b6 ab 05 77 ad 60 e8 7d 39 a3 Data Ascii: Yo?yjW9P["f&4mv$?A;yD7=mNwLM3xy-aO+eOk_tf4CF;H8~<k~1GF@V0Uihc#nBYwJ*un3n:tGG9jN-<qiw`}9
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 79 8b 4a fa f0 5c 78 db b7 f6 ba f6 e5 fe c7 1e f8 9d cd 36 d5 00 38 02 d7 bf f5 97 3e ae fb cb 7a cc 97 f1 fb 57 ac 62 ef 53 b0 58 ed 5b bd 31 4f f6 8a fd b6 ff b1 9c e3 fb e6 ed fe 61 7d dc e7 ec f6 fc f4 b2 d5 ef e2 00 81 d1 0e 01 bb 0f 00 f0 f0 0a a0 12 32 61 6a c2 b4 1e a1 d5 b6 c4 84 75 15 a9 83 e8 24 23 e3 f5 bd 64 62 9d 42 25 2e 80 b6 71 68 c8 38 bd 91 d3 78 6c 79 39 f5 22 48 a2 e6 c1 20 62 91 e1 27 a3 8e 70 78 31 15 b2 5c 79 37 a3 27 69 d3 ea 7f e2 92 20 00 a6 d4 80 53 dd ae 75 35 64 e3 ec 98 b9 70 bf eb 5f 5d f8 f6 37 fa bd f4 8f 73 5a 15 ac 95 88 10 c0 65 bf d2 37 be 9d e3 c7 39 6e cb e7 fb 12 af 60 a7 b7 e5 dc bf e8 17 7f d6 7c f9 af ff fc df fd 26 bf bf 9e f7 2f 6b f4 1d 39 c7 0f 4d 9f 74 bb 5b d6 e1 ff 41 60 b6 de a7 ed 1d 7f c2 58 68 10 c6 Data Ascii: yJ\x68>zWbSX[1Oa}2aju$#dbB%.qh8xly9"H b'px1\y7'i Su5dp_]7sZe79n`\|&/k9Mt[A`Xh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49763	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1106	OUT	GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:10 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 36974 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3476 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:10 UTC	721	IN	Data Raw: 52 49 46 46 66 90 00 00 57 45 42 50 56 50 38 4c 5a 90 00 00 2f a5 c0 49 00 4d 48 6c db 48 90 24 d8 53 ae b2 ab 71 f9 07 3c 3d fb 1f 42 44 ff 27 a0 aa 22 cd 64 24 f9 ec 4a dd 52 f7 c5 96 7d b4 92 7d db 91 f4 a2 2d f9 91 ba b3 a3 48 12 f5 36 ee 23 d9 6b ee f6 ac bb 77 07 df 07 f7 da 9e 77 4b 18 4e 77 db 70 92 9e 19 48 bb dc dd 75 03 ec d8 33 91 ba 5f 01 80 62 d2 dd d1 4c 53 1a bd c0 7c bf 94 99 09 98 99 24 9b d1 a5 07 40 91 d3 c9 ee 36 47 d2 8e 01 30 f9 92 d6 33 04 00 f7 5e 86 6b 33 58 a0 0e fb 00 c0 39 07 d7 c5 bb a9 2b 29 49 9e 4b b5 50 96 e9 0b 00 02 f5 f0 8f b6 99 7c bc 8b 27 91 48 bd 96 17 e0 a0 6c 51 b2 0d 64 a7 80 da 75 2e ab c6 77 d6 34 bd 6d fc c2 1d 5a dd 92 1a 48 be 8e 39 73 bb 12 e4 1c 1c bc cf 47 e1 00 33 94 1d cd 07 70 50 bd 54 92 cc f3 22 00 Data Ascii: RIFFfWEBPVP8LZ/IMHlH$Sq<=BD'"d$JR}}-H6#kwwKNwpHu3_bLS\|$@6G03^k3X9+)IKP\|'HlQdu.w4mZH9sG3pPT"
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 15 8b 98 c0 56 e3 0b 0b e5 a6 06 e7 b9 bc 95 cf 27 20 86 61 b1 9a e8 21 fe fc e0 2b 00 0c 58 5c 5c 5c 3e af 19 00 58 2c 10 41 5b 57 f7 d0 3b 00 16 02 02 7f 6a e3 e2 45 b7 1b 00 01 24 fe fc d8 06 76 b7 9b 6b e1 9a 42 44 14 c0 08 80 cc 33 cf 9f 56 be 53 f1 6b 3d 3b 65 ed cf 36 d0 5c 0b 57 fc 1c b1 28 cf 1f d7 73 67 cf 1f 1f b2 93 4c be 57 d9 45 26 71 77 64 b3 5b 75 70 32 39 83 01 15 20 41 02 01 56 7c 5f ec cd e0 f7 14 f9 dc 33 57 ec 78 12 42 21 49 0f 62 cd bd ba 61 cd da de d8 07 b7 07 5f 1d be af 38 53 67 e5 c9 bc ac 79 e7 c9 bc 98 28 8a e2 f7 ee 74 67 e1 6e e1 61 ea 49 8a 61 60 ea 4c 9d b8 cb 48 3c 19 46 67 52 8c 8b 27 cd 11 62 22 a5 38 71 b7 70 97 99 b8 c6 ae a5 6b 38 7c eb d9 79 de 7d 67 bc f2 02 ea dc 48 23 3d c0 50 8c 7d 4f bb 5e 76 0d 38 c7 08 8c 50 Data Ascii: V' a!+X\\\>X,A[W;jE$vkBD3VSk=;e6\W(sgLWE&qwd[up29 AV\|_3WxB!Iba_8Sgy(tgnaIa`LH<FgR'b"8qpk8\|y}gH#=P}O^v8P
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 0a 81 63 0a b3 7c 9a 70 03 48 2b 9a 18 87 8e 4a d3 7a 72 13 40 23 80 e1 81 ab 0e 5b 66 95 10 0b 4c c5 ec d4 2c 4d 16 a0 d9 81 d5 6d 18 61 96 88 29 64 5b 00 8b 49 78 28 26 ad cc aa 41 30 0d 40 10 80 60 04 0e c4 51 16 41 d1 d2 07 07 22 64 c4 11 11 31 10 c7 21 23 62 1c 21 43 96 21 08 2c 47 07 30 10 5b a1 52 b6 0a ab 10 dd 5a ae 08 84 c8 48 62 a5 00 aa 32 a6 62 57 39 30 4a 19 02 4a 0b 15 4a 24 56 a5 50 8c 72 d0 2a 26 ac 00 7a 15 43 a2 8c 11 94 00 89 31 15 91 d2 28 65 83 48 33 82 00 30 1e 66 18 3c 46 03 6c ca 10 49 24 8f 21 03 05 08 20 20 01 00 51 46 60 44 c4 65 94 18 07 a4 11 40 40 a9 32 54 a3 24 8e 43 a5 f1 74 4a 65 b5 3a 0b b4 02 11 62 a7 83 34 40 c0 34 03 80 26 20 14 89 88 5a 8a 56 6d f9 b3 b1 c4 b1 1c 38 22 14 90 ad b0 9a 62 52 40 0b 31 12 c4 b6 02 80 00 Data Ascii: c\|pH+Jzr@#[fL,Mma)d[Ix(&A0@`QA"d1!#b!C!,G0[RZHb2bW90JJJ$VPr*&zC1(eH30f<FlI$! QF`De@@2T$CtJe:b4@4& ZVm8"bR@1
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 70 48 ad 04 44 a2 c1 08 01 06 ca 80 48 cc 24 4a 81 0c 95 ba 72 9a c0 59 f6 84 22 c7 cd 2a 22 90 0e 44 95 c0 42 dd 6a 45 44 60 8c 23 01 23 23 b4 6a 14 4b 91 08 2b 89 c4 12 88 81 63 89 b1 a2 03 28 51 56 d0 b1 95 52 71 84 12 04 50 22 54 13 2a 81 41 a0 0f 0e 03 37 00 64 a0 c1 21 28 62 10 41 55 e0 d2 a0 84 00 12 31 62 09 a0 50 6a 0c 00 14 12 40 1a 9f dd 50 73 4c 37 6d ec 84 41 b1 42 8b 94 ad 59 47 37 a6 c4 12 26 6e 02 63 80 11 33 a5 85 63 5c 4b d3 51 3b 96 6b 52 64 05 00 07 e2 56 49 71 a3 ca a8 d2 02 34 29 10 8a 9a 0a 45 42 85 2a 88 96 24 a9 88 0d 00 6c 62 19 07 cc c5 04 04 9b 63 01 04 40 09 1c 62 ca 10 09 8c 71 d9 14 a0 0c 88 10 09 6a 45 33 0c d4 67 28 b5 12 d7 56 49 94 60 95 2a 6d d7 95 d2 c5 8d a8 40 40 16 29 e3 12 c4 40 4a a4 88 bc 42 4d 93 da 1a 6e 58 04 Data Ascii: pHDH$JrY""DBjED`###jK+c(QVRqP"TA7d!(bAU1bPj@PsL7mABYG7&nc3c\KQ;kRdVIq4)EB$lbc@bqjE3g(VI`m@@)@JBMnX
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 20 8e 4c a7 20 0d 42 0b 21 b5 4a 55 cb 31 84 88 4a 85 ca 88 32 5a 22 b1 8c 03 40 34 72 98 21 80 11 23 82 30 cb 54 0d c4 d8 84 00 47 84 00 32 4a 80 74 41 1d a6 ab 5a 4d 2b 01 50 01 91 8e e9 56 c4 a3 d0 0e a2 28 48 f3 aa 11 d5 b8 91 c0 90 52 06 66 90 b1 08 a1 59 42 5d 56 58 9d 56 a7 d5 14 38 46 c4 88 a7 12 b0 6a 84 e1 b4 16 33 59 2f 2d 01 60 b5 40 80 ba 55 41 62 a0 44 31 e3 88 71 44 8c 10 e0 a5 98 28 05 65 20 a4 e0 22 80 94 e3 72 e0 22 12 81 02 41 b3 90 e8 32 2e 73 96 40 53 02 61 51 aa 39 00 04 c5 02 34 43 51 53 b7 3a a2 91 5d 81 88 30 a3 41 d9 9e 89 46 20 21 b2 76 53 55 af 54 3a a5 11 a6 4c 81 db c6 01 84 a2 0a b3 0c 2a 42 98 90 92 45 95 a8 08 65 90 95 a4 51 19 05 05 81 88 81 03 18 08 14 31 40 c1 4d 13 62 2e a6 c1 22 28 e3 28 18 08 2c 87 3a 84 a8 c6 17 2a Data Ascii: L B!JU1J2Z"@4r!#0TG2JtAZM+PV(HRfYB]VXV8Fj3Y/-`@UAbD1qD(e "r"A2.s@SaQ94CQS:]0AF !vSUT:LBEeQ1@Mb."((,:
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 00 58 02 0c 61 08 30 48 0a 4b 82 9c 42 33 d9 fa bf fc e6 37 ff b7 7d e6 11 66 48 1f db df f8 c5 47 fe 36 a7 2c 65 0c 20 98 25 26 48 50 30 aa b4 96 24 5c 02 17 fa b3 7f 34 95 77 6e c6 b4 20 56 2b 25 27 c4 d3 9e 44 a6 a4 6a 15 91 25 78 63 35 42 9e fa 3c c7 e6 d1 18 03 e2 14 f5 a4 08 86 91 68 19 40 4d 62 89 45 90 34 62 85 19 15 0c 20 8c 2a 4c 40 04 04 00 60 90 30 80 24 58 68 81 53 09 03 0c 31 02 82 31 e2 78 6c 9a 9e 6c fb cd 6f 7e b7 df 7c 6a f6 e4 06 ab 9b 0f 3e f2 6b 7e f1 31 d7 22 45 46 29 49 d4 12 4d b2 48 3c ea ae 64 2e 29 2a 88 df 75 4b 96 69 c4 34 6e 40 41 ad 58 05 ca a2 d6 1d ab 31 9a 99 c9 0c 5a e3 a1 11 34 82 b0 ae 56 32 a0 62 ea 6c 5a 2a 7b 15 16 55 9b 55 02 6d 6b 56 b0 4d 50 8a 5b 02 60 62 95 12 00 22 06 50 30 22 02 f1 08 14 41 2c 11 11 cd 18 28 Data Ascii: Xa0HKB37}fHG6,e %&HP0$\4wn V+%'Dj%xc5B<h@MbE4b L@`0$XhS11xllo~\|j>k~1"EF)IMH<d.)uKi4n@AX1Z4V2blZ*{UUmkVMP[`b"P0"A,(
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 25 d3 7f fe e5 1d 27 02 b8 2c 82 28 11 05 62 62 20 46 04 06 16 48 8c 51 8c 34 45 00 2c 01 20 46 c4 05 62 ca 08 81 51 91 29 2b b2 92 21 49 8d 5a 55 13 c5 4f ab 6a 1d 21 ad 6e 56 0c 2d 00 98 13 4a 82 dc b2 9c ca 03 59 ec 1e 94 19 37 2b 2c 56 33 3a 06 1a 89 05 18 31 ea 50 46 19 8a a9 b1 82 59 56 58 64 36 90 d4 eb be 9c ad fb 7a ee 4f c7 e7 fe ec f6 71 5f b0 bb f1 ea fe f8 7b a5 a3 b7 fa c7 9f 3a 5f 4e 00 2c bb 2c 81 47 04 0a 70 c4 00 24 8e 11 82 88 21 08 41 44 8c 88 88 81 80 20 ca 40 00 02 21 80 2a c4 2a 56 ad 30 d1 20 eb 6a ce d2 56 d5 44 b5 c9 94 86 d8 3a 49 cd 3b 24 ab 48 8d 42 a7 2d b0 5a 06 81 ad ea 16 19 0c 46 d9 56 8c 22 80 31 a8 8c 58 ca b6 15 c6 58 60 43 d8 08 6c b0 cd 07 78 f0 03 bc fa 72 cf fc d6 f8 d1 c7 3f d3 3c e9 6f 7d c9 76 e9 17 a3 0e 5e fe Data Ascii: %',(bb FHQ4E, FbQ)+!IZUOj!nV-JY7+,V3:1PFYVXd6zOq_{:_N,,Gp$!AD @!**V0 jVD:I;$HB-ZFV"1XX`Clxr?<o}v^
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 80 22 a9 85 64 21 ad 55 03 21 33 b1 35 84 09 26 b5 a9 58 a5 b3 38 28 9b 08 a1 92 0a 85 0f 52 81 43 a9 50 5a 95 a2 22 6a 4a 5c 22 ab 92 b2 01 40 62 cd ad 1d ba e5 99 27 b7 91 c5 b9 f1 ab 5b ce 51 42 48 cc 7e f1 f8 02 3b 10 24 48 81 18 18 88 01 00 03 8d 04 02 21 88 11 8f 88 18 12 c7 90 a6 8c 18 88 90 51 8c c0 88 91 51 e0 6d 60 00 2b 34 78 b5 00 28 15 22 48 2a 15 0b 93 88 aa 19 14 44 69 45 50 55 75 4c 91 62 75 88 8a 88 38 e4 50 37 11 37 37 ad 4a 09 c2 15 54 2a 00 80 ae 0e 3c b8 b6 5d ac f1 ab 5f 3d b5 fd 72 9d 29 0b 00 42 fa fd ef fc fa 3a 08 00 10 0e 09 60 00 40 a9 49 c8 a5 8c 81 31 80 08 00 23 22 80 28 b2 41 08 02 00 ca a6 c0 40 e0 75 04 02 00 a2 08 06 42 d3 98 08 54 0b 4b ac 32 a6 59 4b 09 a0 49 ae 64 ca 13 98 52 d3 d2 20 12 29 fa b6 74 33 10 ef ee 84 aa Data Ascii: "d!U!35&X8(RCPZ"jJ\"@b'[QBH~;$H!QQm`+4x("HDiEPUuLbu8P777JT<]_=r)B:`@I1#"(A@uBTK2YKIdR )t3
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 00 50 38 81 43 01 5c 67 04 00 b8 74 de 6d dc f9 9e 4f d8 1c 06 e4 12 4b b9 bc 19 40 60 a0 80 ae 44 70 09 1c 61 10 28 31 02 82 00 46 2c 21 80 a0 09 53 0a 42 8a 88 84 57 09 bc 46 53 22 80 08 b9 91 22 cb 22 4d 34 32 d5 ca f1 21 47 1c 61 a4 44 7c c4 74 30 3a 96 9b 8a aa 43 57 15 4c 1f cf 2a 46 cb 07 05 a1 00 40 e2 43 9f 3d db 67 dd 79 c8 de 73 b9 f2 9f ea 5e d7 ff 37 cd 0b c4 e3 ed bd 88 1b 7f 1f 05 00 15 40 00 66 2e de f0 f5 4f db bc 10 e3 88 08 d1 10 cd 88 52 96 61 62 c0 c4 18 11 32 04 02 44 00 8f 08 20 10 0b c4 14 44 0c 41 88 29 12 00 44 13 8c 80 00 42 88 20 a0 08 8d e1 e6 5a 2b 24 9d 5d 02 91 d5 b4 f3 e2 e3 90 48 91 12 90 ae 74 91 ce e8 a6 ac ee 09 e9 dd e8 a0 8c 00 2e a3 04 00 13 f9 aa 9f e8 d1 3f ad 0e 06 ef 40 fb 84 bd 8b d9 78 ac dd 53 23 bf 35 a7 5b Data Ascii: P8C\gtmOK@`Dpa(1F,!SBWFS"""M42!GaD\|t0:CWL*F@C=gys^7@f.ORab2D DA)DB Z+$]Ht.?@xS#5[
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: f1 e1 ba 02 10 52 c8 a3 1a 49 28 01 44 28 23 29 a3 b8 25 8d b4 30 aa b4 03 bc e8 5b 1f 2d 1b 06 80 40 08 80 81 c0 18 80 08 8e 88 06 80 19 88 28 82 26 36 01 34 58 40 56 52 12 01 01 00 82 26 6a cd 19 4e 45 55 92 45 a8 6b 25 6e 5b 97 be ed 2c 25 45 a9 12 a9 93 10 42 20 8e 11 81 e6 00 ba 9c 5c 25 06 08 bc 52 55 94 71 83 4c b3 a2 b5 42 86 97 d2 7c 92 b3 f0 20 20 80 26 70 00 01 60 8c 18 0f 88 60 20 42 80 40 2c 05 88 1e 89 40 29 00 35 00 18 28 15 05 10 89 28 4d dc 1c 87 2a 25 9a 2c 5a 47 43 0a 37 b8 22 3a 21 70 d4 65 e9 46 8e 23 99 22 87 d2 45 c5 22 55 81 11 91 c9 12 a1 a1 9d d4 76 12 1a f5 47 24 10 00 80 28 c0 ea 63 25 08 00 0c 91 30 e8 72 1c 47 c4 e8 82 01 2c 12 45 a2 08 30 20 90 01 40 a4 08 29 92 29 b8 45 37 ad 10 29 75 29 21 67 b8 c9 54 49 d9 11 1f 57 1f 52 Data Ascii: RI(D(#)%0[-@(&64X@VR&jNEUEk%n[,%EB \%RUqLB\| &p`` B@,@)5((M*%,ZGC7":!peF#"E"UvG$(c%0rG,E0 @))E7)u)!gTIWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49765	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1106	OUT	GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:10 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34150 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3476 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:10 UTC	721	IN	Data Raw: 52 49 46 46 5e 85 00 00 57 45 42 50 56 50 38 4c 52 85 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 22 67 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a bb bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd eb a5 2f 24 75 49 ea cd 5b 5d dd 03 39 6d 5b 9b ee a5 ab fa be 96 ea 7f ab bb 1b c0 00 66 2c ef fb 0a cc d9 06 5e ec 99 1e f9 cf 14 d7 d6 18 a3 98 12 08 09 10 ca 91 43 99 c9 b5 0f b2 e2 48 38 33 87 33 93 8c 30 52 cd 8e 58 06 36 30 39 2f 5f 5b 0c a6 15 fb cc ac af 24 1b 91 5c 3c 2d d9 c6 9c 0d 74 4b c4 f5 92 58 8c 18 63 6c 7e a1 83 15 41 1c 37 92 22 22 00 2e c0 9b cb 25 d3 b2 ee 06 22 2d e2 d2 21 49 0c 89 48 ce 63 02 cf 98 26 e4 8d 40 4b 95 4c 04 e7 98 18 49 b6 e2 98 68 fe 7e cf 12 11 c1 46 96 be da d8 5c 86 3e 27 03 11 11 76 f8 f3 63 c3 29 22 6c ad 36 71 54 84 bb bf Data Ascii: RIFF^WEBPVP8LR/IM8lF"gn/Y_<BD'*nzw/$uI[]9m[f,^CH8330RX609/_[$\<-tKXcl~A7"".%"-!IHc&@KLIh~F\>'vc)"l6qT
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 8f cf 00 8f 04 00 1a e6 23 56 97 56 97 00 7e 77 9d 15 a9 86 b0 dc 4c ab 61 b3 fa b3 07 00 cc 77 6d 83 35 77 6c 98 50 0d 61 31 03 50 cb 00 00 ee df 03 bc 2f 77 f3 fa fa 8e 9b e9 0b 2f ce da 1e 80 c0 e4 1c 9e 29 10 7e d9 f7 59 7f 46 18 36 a3 eb fd 01 13 a6 06 00 51 27 6f 7b 77 ba a3 b2 66 82 4b 80 6a 9a ff ef 95 61 35 87 db f5 31 2e 4e 2a f0 44 13 2c 6c 5e f3 d0 02 58 30 01 c0 05 f2 72 f8 cf 01 9c 2c e2 7c b9 8f 00 40 fc b6 bd 34 33 58 0a 00 75 db da df 99 2e 2a 8c 8b 67 8f ca e2 7e 0b bb 4a 0b 8c 2e 8a 27 9b b2 ac 59 93 c6 25 84 1d 97 c0 4e 6d bd 80 44 d1 77 b6 5e 93 cc f1 ef 65 b9 52 77 00 d0 b4 a9 0c 48 08 46 c9 ff fe a3 a2 a0 00 33 e6 05 4e 22 c1 e6 6f 6b b7 30 48 7d bd 50 76 dd d8 81 45 01 eb eb e3 fe 66 84 9d 82 72 f9 a1 ec ba 53 07 88 84 71 1f ec 80 Data Ascii: #VV~wLawm5wlPa1P/w/)~YF6Q'o{wfKja51.ND,l^X0r,\|@43Xu.g~J.'Y%NmDw^eRwHF3N"ok0H}PvEfrSq
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d 00 04 00 e3 01 dd 85 14 d0 27 52 ea 40 a5 d2 9d 50 a5 10 25 25 ea 28 91 24 2a a4 52 05 3a 45 a5 a2 82 4a 9d 42 49 29 75 2a 15 89 54 2a 75 0a a5 8a 0b be 0b 28 51 a9 54 aa c6 69 cc 48 57 ac 37 a7 23 c5 06 ab 9d 6a 24 64 5d d0 d1 51 8d cc 29 08 2a e7 14 36 95 a2 5a c5 48 81 65 b8 26 65 cb 5c 43 1b 60 ae c9 1a 05 9b a9 1b 14 80 46 30 20 68 33 03 e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 16 06 d6 a6 6e 3c cd 60 eb ae 14 45 d4 29 67 4a a5 b4 9c 96 a5 8a a8 13 db 18 42 ad aa 29 15 35 56 69 21 95 9c eb c4 99 91 94 96 99 02 75 ed 5c 5d 98 14 07 d3 d9 06 a4 6b 3a d3 42 4b 92 ab 97 91 ec 5c e9 8c ca 40 54 64 50 14 57 1a e7 ca 02 d1 5a a4 83 30 6e 49 a2 43 b3 2b 46 02 07 d3 ee ed 14 97 67 6c 0f 14 21 27 b6 82 81 Data Ascii: TDTD'R@P%%($R:EJBI)uTu(QTiHW7#j$d]Q)*6ZHe&e\C`F0 h3XT\n<`E)gJB)5Vi!u\]k:BK\@TdPWZ0nIC+Fgl!'
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: da c8 d9 25 9b 0c b2 b7 ac 29 75 c9 91 b3 a3 b4 0d f0 02 43 39 77 51 81 33 e0 b5 88 73 87 ab 6e 31 e3 8d 57 0d 68 b7 2c 42 ac 5a 8b 76 ee 54 a5 ea 7a 19 55 89 1a 57 4a 31 8c 54 8c c0 20 33 63 10 32 a1 0c b9 43 5a 45 c4 58 0c 85 ab 8d ce 42 d2 25 15 58 56 55 c6 9b 1d 30 b8 0b 39 8f 97 d7 52 9c b1 4a 65 b3 0a cb f2 c8 15 12 83 a4 b2 c8 42 ac a5 c8 58 96 89 2e 54 2a 8b 31 43 49 94 50 fc 97 53 95 43 f2 2d 37 42 2e 54 8c 0a 16 4b 48 4b e9 2c 97 dd d5 8d 10 14 30 53 a8 43 26 dd 8a 0a 25 30 a5 24 89 32 81 31 45 6d 70 52 24 51 e7 ea 42 91 4a 69 50 23 42 70 4d a7 a4 52 d0 24 53 ba cb 5d 2e d5 dc 51 e9 52 a9 14 49 29 a9 81 9a 4e a8 d2 a9 52 90 0a b1 29 29 a8 94 8e 2c 11 b1 19 32 a5 52 a9 94 91 92 e8 a8 06 98 52 54 29 98 52 a6 42 92 8b 1a a1 d1 24 35 72 52 29 55 9b Data Ascii: %)uC9wQ3sn1Wh,BZvTzUWJ1T 3c2CZEXB%XVU09RJeBX.T*1CIPSC-7B.TKHK,0SC&%0$21EmpR$QBJiP#BpMR$S].QRI)NR)),2RRT)RB$5rR)U
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 92 19 98 ad 24 58 82 b9 e8 51 24 ab 32 32 ea 6a 43 43 15 ce 17 c5 5a 1a 55 19 75 c5 50 14 ba 46 30 a4 a5 49 4e 8f 92 28 78 07 18 73 c1 54 a5 81 44 2a a6 20 05 d8 a9 ea a6 a3 a8 c6 74 c8 58 0c 4e b9 26 14 e9 61 6b 68 ba c6 68 49 11 d4 29 19 33 40 5a 04 6d 2a d5 08 9d a8 52 29 aa 1d 99 4a 94 36 b7 de 14 55 0a ba a8 29 75 6a 6d ca a0 8a 0d 4e 9b d0 a5 d2 e9 38 a3 24 ad 31 3d 4e 98 a0 13 6b 04 4c e7 a2 8d 2d b6 a9 9c 50 c9 50 d9 05 93 34 e5 b4 6a 03 40 6f b6 53 ca d4 60 4e c1 90 0d 4e cc 89 2c 96 72 35 c5 68 96 ea 38 ab a5 2e cc aa b3 a1 d4 b1 af f2 48 e9 65 49 5b ab 76 26 93 c8 db b7 94 e9 2c f8 c0 1c 70 93 47 66 27 99 9a 51 be 52 35 92 ae b7 5c 83 d0 39 85 1d 0b b1 88 b6 0b 25 aa e4 94 33 02 d4 29 1b 17 cb d6 53 ed 2c 2b 04 74 5c d5 48 e0 66 8a 16 04 f9 ac Data Ascii: $XQ$22jCCZUuPF0IN(xsTD* tXN&akhhI)3@Zm*R)J6U)ujmN8$1=NkL-PP4j@oS`NN,r5h8.HeI[v&,pGf'QR5\9%3)S,+t\Hf
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 90 0a 09 05 b5 03 ea 52 92 2e e7 48 a5 6e 96 79 0b 06 76 b4 b7 15 3d 48 b7 5e 8b 5d 68 2c db b2 57 a6 41 6a 2f ce b9 0f 72 86 ca bb 51 53 38 30 92 cd 0b 0f 6d ea 4f 06 09 84 17 2f f5 47 bf fc 2c 5a cd 6f de fc f1 b2 2b 53 84 46 12 68 24 2a 35 77 5d 1a ff 7f e7 6b 91 04 30 18 4a a0 05 10 a8 85 90 2a 00 b2 84 04 fa a1 50 b4 04 b2 a4 cc af 7e f1 f1 a5 6b 97 37 46 e7 5f fe cb ca 54 06 c3 04 98 28 24 47 98 3a f8 f8 09 07 3a 85 6a 14 a0 56 58 03 b4 65 ca bb fe f3 a7 91 24 85 29 49 21 38 6a a1 a6 40 d5 a8 78 e6 6a b3 e4 68 6f e7 9c 20 65 53 75 0a c5 42 d9 0b 0c c2 bc 55 39 1d d2 f5 4e b5 6d aa 21 72 db 55 b4 d8 60 cf 65 af 39 b9 93 a3 ed a2 22 a4 b3 5d a5 7b ae dc 5e 2d 4e 91 b6 b8 6a 5f 2a 6d a5 b1 67 dd 69 41 d7 d1 5d af d4 35 33 65 1f 48 0b 75 36 ab bd c8 c6 Data Ascii: R.Hnyv=H^]h,WAj/rQS80mO/G,Zo+SFh$5w]k0JP~k7F_T($G::jVXe$)I!8j@xjho eSuBU9Nm!rU`e9"]{^-Nj_*mgiA]53eHu6
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 82 f0 04 b0 f4 db ca 9c 86 11 5f 79 f2 3d 5f 3e f7 bd 89 a9 ba 9d b3 b2 23 12 df ff 97 57 f3 3f e8 62 07 48 10 82 a8 26 0c ad e3 b3 cf be e3 47 be fe ed 7f c4 8e 4a 5b 8d 8c 6c 0c a5 fa cc 80 56 18 0d c8 14 bf a8 1c 59 0e 5a 32 18 50 45 50 03 a0 89 56 a2 ec 0a af 86 f8 0e 09 a6 da 00 0d c0 68 29 23 7b 96 77 30 c9 a9 ca 29 4a 67 ba b2 ee 9c 29 85 bc 14 07 05 5a 55 47 24 35 54 3b 45 da 00 db a9 b6 8b ca d5 ac 6b 17 ec 13 57 f5 50 9a 3e 75 73 b7 a9 f6 ed 92 ee 70 95 3f 40 57 86 fa a8 ea cd 90 d2 54 fb c5 e9 cd cb f9 ed cc 29 4f f2 d5 e2 75 31 e0 05 d7 2a 9c 20 f3 e1 ff f5 fb cf 1c fe f8 a6 d7 fe bb 8a 11 89 fe ee ef e9 72 76 df 75 63 7d e6 bf 00 24 a7 53 4b 61 e3 9e 45 1b b2 36 2f bc 2b 45 fb e3 6f df fd df 93 be fc 47 62 8d d2 47 52 76 bd a3 c2 64 e6 f5 c7 Data Ascii: _y=_>#W?bH&GJ[lVYZ2PEPVh)#{w0)Jg)ZUG$5T;EkWP>usp?@WT)Ou1* rvuc}$SKaE6/+EoGbGRvd
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 9b 2e aa 7a 6d 85 e2 b2 a9 7e 4c 37 79 0a dc 97 9a 2d 66 5d c9 55 e4 b8 61 53 8b a4 1a c1 aa 75 b9 d1 f4 97 6b 06 7b 50 3a b3 e5 7c 3b 72 ee b3 8e f7 51 e5 2d 5c d7 9e ea 7d cc 35 92 94 d7 5d 1c 95 52 ef ba f8 4a d5 d5 6b 5d bf cb 3a 20 71 ea 4a f4 0e 15 6a 9b 53 48 8a 90 a2 15 11 11 d6 a5 11 0d 85 2c 99 78 9a d2 49 01 6b 18 af 2c 25 71 65 48 1a aa a4 ad 91 a4 a9 c0 57 59 85 eb e7 95 05 47 4d 40 e0 61 48 71 85 4d 98 6a 45 92 a4 0c 81 16 4c 88 ba 32 8c 0a 08 e1 e9 4b 1b 93 10 52 0c 13 60 9c d6 b2 86 18 1e 93 24 a8 ab 35 ec f8 92 c0 80 2f 6d 48 4a 09 9a ca 62 ef eb b2 5e 90 6e 4f e5 3b 54 33 e3 3c ae 88 44 ea 75 57 5e a9 66 6f 54 f9 2e d7 51 9c da 77 57 5b 3b 95 ea 5d 8b 6f c1 74 b3 99 8f b3 36 9e 4a d7 85 8c 4d 89 2e eb 01 e5 47 cb 4e 67 e1 2c 27 ee ee 5c Data Ascii: .zm~L7y-f]UaSuk{P:\|;rQ-\}5]RJk]: qJjSH,xIk,%qeHWYGM@aHqMjEL2KR`$5/mHJb^nO;T3<DuW^foT.QwW[;]ot6JM.GNg,'\
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 1c 95 b5 bc 29 27 31 ab 0d 55 ca 82 c0 2a b1 36 64 4a a2 a9 03 8a 11 a5 a8 96 2e c2 b5 87 5c 60 77 95 ba 32 b1 5c d5 6c 4e cc 1b 86 1c bb 4b c2 22 50 09 97 c1 50 ad 4d 91 37 45 9b 3b 8c 2d 37 df 06 d0 11 d8 c4 d6 46 94 c4 99 a3 a8 54 d5 3b 4d 99 a6 e6 34 58 77 b2 a0 e2 de 39 3a 89 42 eb d0 4b b9 d3 69 73 a6 94 14 9d af 86 bd c1 1d d5 9d 6b 3a 17 35 66 af a1 14 55 a5 a9 33 55 ff 47 5c 2a 97 38 de 45 2f cb e5 e8 82 75 5a 2b 8d 93 a4 56 4e d8 76 22 5d cf 5a 79 46 d5 d5 ab ec 57 ba eb 4e ce f6 5f 42 ad 48 f9 ac e5 9d bb b1 49 8c ea 08 37 77 5c 7a 77 8c d9 e5 d1 f5 59 8b 07 65 4c a2 3e 3e ea 18 2e d7 57 4e 47 2e 79 54 7a b7 d0 35 8f f3 91 6b 3a b9 c9 e3 6c 07 95 dd 2f b6 e3 93 32 4f ad fa a2 4a 4d 98 4f b7 34 4a 62 0f 4b ef 8c 8d 4e b7 f8 16 e9 69 43 5f 6c 6f Data Ascii: )'1U6dJ.\`w2\lNK"PPM7E;-7FT;M4Xw9:BKisk:5fU3UG\8E/uZ+VNv"]ZyFWN_BHI7w\zwYeL>>.WNG.yTz5k:l/2OJMO4JbKNiC_lo
2024-04-19 14:06:10 UTC	1255	IN	Data Raw: 1c 53 b9 68 2e 4a 6e 4b e1 4e 30 66 ad 8b 93 85 a7 da e2 d4 5d a6 b2 56 f8 cb a9 53 27 cd 56 2a 4f 2e 6e 09 eb 22 65 8b 4a d1 e2 36 6e a3 aa 55 6b 6f 31 73 5b b0 c6 e2 36 54 2f 97 03 b5 4d 7a 15 29 1c 8f 4d 6d 4c e0 31 ad c5 a4 8f 4e 77 dd 55 b7 ab 46 e9 ce 5a 83 2d 04 9f b9 4e dd f5 86 9c a3 4a c3 a8 02 69 b7 08 74 b9 7a a0 cd 60 67 ca b5 19 55 b4 6c 1c 1a d9 39 7b d0 28 51 76 29 dd e9 82 d3 39 1b 25 1a ab bc 05 2d dd b9 76 91 8d 6c f2 c6 f9 8e da c9 a0 f3 dc 15 2f 89 ae dd 9c b7 a5 cd 19 59 8f e9 9a 0a f0 e2 eb a0 8a f5 e6 bc e8 ca 35 8e bc a6 6a 05 9d bd 60 27 88 8a b2 5a 8a e5 89 26 5a 23 ae 6e dc c8 82 b2 8b 6d aa a9 eb d1 aa 53 0c 59 a2 56 ab d3 e9 a3 67 72 dc bc 10 dc 4e ce d2 3c 4d f3 e6 a4 b6 98 ea b4 33 97 fd 7a 30 26 fa 35 27 a9 86 e9 5e 5b c9 Data Ascii: Sh.JnKN0f]VS'V*O.n"eJ6nUko1s[6T/Mz)MmL1NwUFZ-NJitz`gUl9{(Qv)9%-vl/Y5j`'Z&Z#nmSYVgrN<M3z0&5'^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49766	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1107	OUT	GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 31756 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3476 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 04 7c 00 00 57 45 42 50 56 50 38 4c f8 7b 00 00 2f a5 c0 49 00 4d 38 8c 24 35 6c 72 87 e2 40 20 fd 17 2c d9 69 21 a2 ff 13 50 55 95 19 55 95 4f b7 ca cc aa aa cc fc 56 56 9d ea ae 9e 2f 6c e8 8e 53 56 a6 cf b7 aa 5c 72 f5 0a 04 88 2d 2b b3 b2 fe cd aa e2 f1 da be df af e0 dd 74 03 5f ba 49 5f af 97 80 7a 1a e9 06 6c 60 ac b5 56 32 f6 da 8e 63 ac 58 46 d8 0a 6e 31 5d 37 84 dc 4e 47 c4 ea 08 47 1b 04 da c3 a2 9b 50 ce a7 4f b7 13 36 c4 83 fc a8 af f0 78 77 95 4a 08 d0 c0 74 03 55 da 2a 6b b5 30 b3 05 2d 2d 7b 80 e3 1d 73 00 ba 0f ba 05 c4 36 6c d0 db 70 9e d9 22 0e 7d ea 6e 17 72 5a eb 40 b7 2a cb 2d 38 8f 03 5c 6b 1a 46 22 36 0f 99 76 2b b7 e3 d0 a8 12 6a c4 a6 fe 7e d7 41 b9 55 3f 1e ae b0 6f a6 7d 3f e0 6e 7c ff d8 78 e2 78 0b 01 08 08 56 7d Data Ascii: RIFF\|WEBPVP8L{/IM8$5lr@ ,i!PUUOVV/lSV\r-+t_I_zl`V2cXFn1]7NGGPO6xwJtUk0--{s6lp"}nrZ@-8\kF"6v+j~AU?o}?n\|xxV}
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 3a 81 40 00 20 31 de f0 c5 4c d6 4b bc 3d 96 31 12 61 ff 29 ad c1 17 13 7b 64 bd f6 15 2b 9a 75 b8 06 80 d5 1e 66 f7 88 cd 93 79 f1 93 5f 2c 75 00 02 69 0d 66 26 be 0f 9c 3d 1b ec 37 8f 33 2e f9 66 0f 98 f5 8d 97 0d 1a 60 81 69 00 40 da 4e 81 86 09 b0 c0 02 06 40 be 5c cf 01 68 c0 e7 1c 9b 4b be 4e fc 87 17 c0 0b 2e 31 01 00 2e f7 72 f5 f2 03 c9 94 7b 00 1c 02 d0 d6 e4 c7 8e 59 5e a6 00 e2 30 1c ee fd 18 e1 d0 e8 05 c6 2c cb d4 4e 58 ce 4e c3 69 00 07 6d f4 43 90 f2 d4 fe 23 4c 68 07 00 48 63 3d 5c a3 7a ec 29 d0 97 1a 0e 01 18 18 1b f8 af 34 07 da c1 21 a0 1d ba 4d 07 96 be 00 1c 12 22 44 f3 df 01 52 17 a4 0e 8c 10 8d 1b 90 6c d7 39 4b 4b ae b3 49 19 5d 71 ff c3 5e 1c 9b 00 53 0c 7f e9 17 1e 0d 42 23 71 4f d2 d6 43 0e 31 c4 50 e3 76 4c 62 52 93 a7 99 39 Data Ascii: :@ 1LK=1a){d+ufy_,uif&=73.f`i@N@\hKN.1.r{Y^0,NXNimC#LhHc=\z)4!M"DRl9KKI]q^SB#qOC1PvLbR9
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: d4 cd 53 35 ab b5 ed 09 d1 cc de a6 36 94 0d d2 ee 6d 8a cb 13 db 03 8d 90 89 ad c1 c0 24 d8 04 33 c4 93 6a 0c 49 8b f6 cc 45 d2 48 db d4 5e 1e d2 2b b5 89 84 44 f7 ca c5 c5 65 6d 9b 60 42 68 d1 6d 89 b1 25 b7 a5 c0 63 ed 79 aa e5 0d da a6 ee 2d cd d8 a8 7b 3d d5 32 d8 e6 61 cb 58 3d 93 43 84 08 b9 d7 a8 12 83 4d dd 58 5e d4 e8 26 17 d8 d0 9e 5c 1b 63 68 53 b7 12 c4 42 29 64 ec a8 14 12 21 51 9d 84 a0 58 96 11 0d 46 2d 0a 49 aa 05 55 e4 65 45 28 85 90 a2 22 30 38 08 05 b1 6e c5 31 08 28 0b 21 64 22 f0 a2 2c 45 2c 44 bc f3 2e 62 89 09 06 2c 09 84 50 26 68 19 b1 12 2a e5 41 5e 90 12 2f 0a 25 62 19 64 49 3a 65 28 19 2a 2f 2f 2b 61 4b 2c 24 92 f2 b2 2c 2b 45 12 05 76 64 ca 20 63 52 02 9e d4 14 58 16 4a a1 94 08 85 52 b0 bd ba 13 cf 3d 6c ad 3d 5e 17 68 7a cc Data Ascii: S56m$3jIEH^+Dem`Bhm%cy-{=2aX=CMX^&\chSB)d!QXF-IUeE("08n1(!d",E,D.b,P&hA^/%bdI:e(//+aK,$,+Evd cRXJR=l=^hz
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 7b a9 05 00 d0 06 55 2c d8 b2 16 04 c5 5a d0 d2 aa 3a b2 31 9b 55 d9 44 a5 c0 ed 52 5b ed aa ed 64 49 da 15 dc 4d 6a cb 86 3b c5 da 54 d4 8d b5 f1 da 6e bb 76 f7 42 ab 76 b8 5b d6 ad 76 e8 38 bb ed 60 bb 4a 56 a8 42 5b 6b 68 2d 91 56 74 62 61 1e 74 4f d4 78 c1 c9 d4 86 2a bd a5 8e 79 35 02 6f a5 bb 05 e5 d4 d4 89 59 b6 97 7a cd 14 28 af 97 6e ab 6c 6e 2f 75 8b 0e b6 59 37 14 43 60 9b 6e d3 6a 11 75 25 18 49 ae a7 00 d0 9e 5c 2d d2 6a a5 6e 0c 21 e6 9e 54 cb c8 3d a9 2d 64 7a 4b bd 37 8b 34 e8 58 ba ed 7a c1 c9 b0 01 d8 93 bc f1 0e 48 bb 7b a6 db 58 d8 bd 92 37 a6 29 ea 6d 03 60 d5 b1 87 0b 05 35 eb b5 50 28 eb bb ac 2d 53 ed 49 bd 78 41 af e4 bb 92 62 8c 67 a8 33 90 9a 6a 89 99 8a 5a c3 24 15 bc 0d 8c 21 53 61 cb 98 94 ac 19 c8 1d 85 a5 a0 05 24 05 c4 2b Data Ascii: {U,Z:1UDR[dIMj;TnvBv[v8`JVB[kh-VtbatOx*y5oYz(nln/uY7C`nju%I\-jn!T=-dzK74XzH{X7)m`5P(-SIxAbg3jZ$!Sa$+
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 71 e3 b6 2c eb de a5 3b a0 65 2b 75 b0 b6 7a 67 1d a5 8e e8 50 19 dd f2 5a f6 c0 69 c9 0d d6 da 33 eb 2d c1 bc 37 fa 0a ba 27 21 6f 1e 5e ad 56 4d ee 7e 82 d6 12 eb b7 f2 3a 65 5b 7d 25 f5 aa 5a f6 42 3f 03 b7 08 93 2c 83 2a 0c 12 c4 21 f7 73 f7 f6 8b 1b 57 74 a1 85 84 d9 45 6a 00 30 28 94 51 85 94 44 c0 19 75 99 5a 28 81 23 a5 2c 16 13 53 92 12 75 a0 02 21 6b 12 43 75 91 9a c2 b2 e4 22 0b d4 94 a4 04 0e 45 20 a0 12 38 cd 11 52 43 a3 4e 93 90 d8 28 64 39 cf 98 a2 01 f3 f3 4a 96 c4 3a 65 b5 40 85 ad ce 33 0c 95 46 7e 92 5c 61 f0 e6 d1 2b b3 9c a4 be 84 0a a8 2f e6 9c 41 ad 97 d1 b7 54 c6 b2 1a cb 52 c8 5b 9a 95 62 a5 8d b3 0c 24 71 5b 29 2b 69 51 53 88 ae a4 9e 30 74 ed 4b a5 56 41 a4 a2 52 2d 40 1e 27 24 24 8c a1 eb d5 5b ee 7d d9 99 4f bd f0 91 9f fd f1 Data Ascii: q,;e+uzgPZi3-7'!o^VM~:e[}%ZB?,*!sWtEj0(QDuZ(#,Su!kCu"E 8RCN(d9J:e@3F~\a+/ATR[b$q[)+iQS0tKVAR-@'$$[}O
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: e2 8e ef a0 09 68 77 f6 46 6b e6 ec 82 e1 d9 1c 5a 87 ad 5e 99 e9 ec ef 7c f5 55 dd be 90 aa e3 41 fb 9d 7e e6 8d 4f 79 f3 27 df 69 cf 75 31 51 f0 e9 3b ff 9b 0f de 33 fd 51 0d 09 a5 f3 4f 67 84 17 76 9b e6 79 fa 3e cc a2 c5 f4 bb 93 92 19 8b c3 1b be ff 91 d2 a2 31 9e aa 08 35 cc b6 37 7b e3 f8 0e 5d 51 a5 cc 62 17 a1 da 9d 4c dd 82 b2 cd 6a 88 20 31 e2 94 51 d0 76 ef 99 fa 2e b4 95 a3 0c 51 29 c8 72 3a 11 2a 43 2d 64 67 87 54 57 46 4e 27 05 36 84 3d d5 8e ce e4 ce 08 28 c4 76 ee b2 84 ca c4 5e d1 94 85 03 7c cc 16 30 c4 44 16 b2 2a 0b 29 5a 25 48 6b 92 ba 49 cc 88 41 16 d4 19 8a 0c e7 fd cc f1 d9 6f 9f fd 70 66 ea b3 f2 0d 4f 79 f7 bb df c1 8f e6 f3 ef f8 ff f7 de e3 b2 2b 9e 72 f8 f9 03 f7 41 b3 5c 97 01 a0 94 b3 45 1d 51 6a 31 a1 4d 19 9c 5d d2 5b 06 Data Ascii: hwFkZ^\|UA~Oy'iu1Q;3QOgvy>157{]QbLj 1Qv.Q)r:C-dgTWFN'6=(v^\|0D)Z%HkIAopfOy+rA\EQj1M][
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 57 2d ae 44 4b 5b c8 c4 31 95 c5 b4 29 49 e8 38 dd 02 55 c1 65 99 45 e8 92 ed 9a 8f dc 54 5b de 58 5d a2 e2 d0 14 0a 28 16 c0 6a b9 34 e2 51 28 1b 00 34 32 45 3c 90 82 76 19 71 b9 14 8e ba 62 4d ee 1a eb c0 10 92 11 eb 33 c5 32 43 20 d6 31 45 5d 0a 47 29 43 31 1e 0d 88 10 51 57 55 95 42 ac 9a 10 7a 53 6c 15 63 94 d5 ab 48 c7 c8 51 9c 3e 35 86 46 e4 2e 77 9e 8f 8b 4a 59 0f 7d 2b 19 1c 1b b3 ea 9c dc 4d 52 d3 3e bb 26 f1 b2 69 24 8e c6 30 c5 63 e2 a6 e2 68 3a b9 d9 06 dc d9 16 8f 13 54 10 9d b2 5a 1b 66 15 2b 0a 9d 6c 21 b2 10 9c c2 12 38 59 65 84 0a 01 14 59 91 8a 3a 84 32 12 12 72 42 c4 a7 64 48 1d 43 ca 60 21 21 11 24 00 00 19 a0 1a 06 ce c5 08 a0 84 18 00 c0 22 40 a0 2a b2 aa 96 15 50 55 2c c4 8c b2 0c 2d 31 40 a2 2c 80 52 a5 96 08 18 88 9a 51 10 30 55 Data Ascii: W-DK[1)I8UeET[X](j4Q(42E<vqbM32C 1E]G)C1QWUBzSlcHQ>5F.wJY}+MR>&i$0ch:TZf+l!8YeY:2rBdHC`!!$"@*PU,-1@,RQ0U
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 15 87 9f 9e f2 3e 3e 7e dc 73 67 a2 dc fc d2 55 37 4f 7b cf e1 f4 77 72 9b 33 70 fd e9 92 fd b1 7f 7a d7 13 ff fc 2e 17 9e ba 4d c4 dc 70 6d be 79 c6 ed 7e 40 6e 3d ee 08 6b fa b7 33 2e 7d e3 9f 77 7d e8 1d 2f 38 fe f8 73 d7 5f 75 58 77 95 97 7d fb 71 ff f8 e1 3f ae 7c c5 9f f3 70 fd f6 e4 9c fb 86 3f 3d eb 97 b7 e6 a6 3b 5f 74 9a a2 d1 9a 78 2a cd a7 77 e9 5c a5 5a 9b 8d 25 c1 d9 72 c6 6a 9a 48 45 bc 36 a6 2f b3 9a 42 71 f2 44 ab cc ac 04 2d ba 5e 44 20 84 25 b5 82 75 6b 30 c0 21 ed 06 ab af bf f4 a9 bd 39 f9 51 4f ff f8 bd b6 d9 9d 6f e8 d4 20 99 df 78 ef f2 b6 5b f9 da 57 2f be c1 5b 7d f2 c3 17 df d2 8c d3 f5 be b7 7c e3 c3 fb dd 19 1f ff e6 f7 dc 79 fb c4 27 bf 6f aa e7 9e ab 37 72 dd f0 eb 27 7e fa 4e 2f 7c e6 ad 0e 5f fb e5 cd 57 bf f0 a1 8f dc ee Data Ascii: >>~sgU7O{wr3pz.Mpmy~@n=k3.}w}/8s_uXw}q?\|p?=;_tx*w\Z%rjHE6/BqD-^D %uk0!9QOo x[W/[}\|y'o7r'~N/\|_W
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: bf b9 fb da 4b 1f b8 cb 4b 5e 7b ca fb b7 fa c9 fb bf fa 88 b3 de e9 93 b7 7c d5 c2 f5 7c e0 eb eb 45 8f 3d 9a 5e de 7e f6 89 7f dc f7 c9 1f 7a fb af fe 55 9b 39 1d 6e be 2a b4 5e 41 6a 45 90 b4 3d 2b de e5 43 1e 71 f7 ec b5 b7 56 1d f7 9a 73 1e 9b 9b b6 dc f1 b9 af 6e 0f bc ff 5f de fc ef 8f 39 f9 c3 1f df b1 e7 bd fd cf f7 bd ff bf dd fe bf 0f 79 d5 eb bf ea 11 fb bf e4 cb ff 7a cf ad 97 4c d8 38 fd 8d bc fd a1 8f 1d e5 ac f8 d0 fb ed 73 cf b3 83 f1 e9 9f 8e bd f7 63 77 79 ec 9f 4f 7e 28 8d f7 cf bf dd 0b 56 6f bb 78 ec 3f cf 3e f1 96 d7 f6 3e a8 27 fc 7d fb ce 9f b7 a6 f5 c4 bf 38 9c f0 8f ff ef 7f d7 ff f3 1b 3a cb 2c 12 62 d1 42 76 2d 28 5c b3 ac 16 54 5a 89 36 4a b5 8a 2a 1b f2 9a 77 75 d6 c9 51 ee b0 02 4e e5 ee cc 66 49 59 c7 d6 33 e1 5a 39 57 b3 Data Ascii: KK^{\|\|E=^~zU9n^AjE=+CqVsn_9yzL8scwyO~(Vox?>>'}8:,bBv-(\TZ6JwuQNfIY3Z9W
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 29 09 32 59 2a 51 25 35 10 ad 54 c4 81 38 a6 3e c9 12 88 2a 83 61 91 68 0a f5 aa 20 d6 63 01 4a 1c 49 4e 64 5a e4 04 41 59 02 3b 59 f6 fd 98 2c 4b 96 3a de 95 f5 64 29 b8 88 9f 90 27 50 2a 55 9e 15 6e 33 25 5c e7 f2 9c 83 8a 8a 65 76 17 ee a2 83 93 7d 16 15 2a 21 fb 72 6f dd a5 65 8a 00 9b ac c4 20 2b 11 82 1a 02 24 84 72 32 8c 46 6c 22 00 03 8a 72 5a db 1e 8a 3a 0f 9a 26 09 a4 00 8b 42 0e 03 b6 26 42 49 a8 e8 d2 61 d0 4f 32 f5 22 a6 b5 66 48 c5 90 ad 23 84 e2 82 6a 24 53 82 36 44 d6 a8 80 0f 46 74 a0 19 0d 29 d2 60 34 6d a0 46 69 c3 aa 9c 11 07 06 09 15 3d 1d 49 1f 13 cb 23 20 69 4f 46 d8 51 53 81 4a 46 a4 c7 88 02 1c d4 32 60 1a 71 84 44 24 c2 50 7a 46 a9 a9 d7 46 4d 45 99 1a 2d 40 31 59 28 74 85 d8 97 f6 62 38 dc 0e 3a 73 50 d9 9d ab db 2e 2a b7 92 b5 Data Ascii: )2YQ%5T8>ah cJINdZAY;Y,K:d)'PUn3%\ev}!roe +$r2Fl"rZ:&B&BIaO2"fH#j$S6DFt)`4mFi=I# iOFQSJF2`qD$PzFFME-@1Y(tb8:sP.*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49771	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1106	OUT	GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9646 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3477 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	722	IN	Data Raw: 52 49 46 46 a6 25 00 00 57 45 42 50 56 50 38 20 9a 25 00 00 f0 8d 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 12 7a 7d 58 28 04 04 b2 b7 7c 2f dd 83 78 17 1b b8 97 db 96 8b d2 cb a2 fe c1 e6 ef 45 fe 8f af 1d 0e f9 27 f2 0f fc 8f b8 ef 78 df d8 3d 80 7e 43 ff 81 ee 01 fa 6b fe 77 f9 3f f8 0f 68 cf d0 0f 72 3f af 3f a3 be e0 3f 95 ff 6e fd 8c f6 22 ff 63 fd cb dc 6f eb 47 f5 ef e4 bf e0 3e 40 3f 94 ff 3d f4 18 f6 00 fe 55 fd 67 d8 03 f8 8f f2 ef bf ff 94 2f f0 5f b1 ff 02 ff b0 df b2 3f 00 9f ce 3f bd 7f f7 ff 67 ee 01 e8 01 d4 3f d9 3e c3 3f b1 7e 44 7f 6b ff 67 eb 9f e2 ff 23 fd 27 f1 ab fb 8f fd df f2 9f 21 ff d7 78 4e 89 07 c5 7e be fd 4b f1 ff fb 17 fe af f6 bf 79 ff 92 ff 7b f8 29 e6 ef c2 ef e9 ff 28 7e 00 bf 1f fe 4b fd 4b f2 63 fb bf ed 2f 1b Data Ascii: RIFF%WEBPVP8 %*((>ADz}X(\|/xE'x=~Ckw?hr???n"coG>@?=Ug/_??g?>?~Dkg#'!xN~Ky{)(~KKc/
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: af 5f de 8d 8e 61 28 c2 f8 6f 08 af 97 2a 86 83 d2 04 91 49 db 38 1f 55 6c 9a 88 0a c5 ed 2c c6 4a 33 4f 4b 65 99 d0 68 15 20 f2 02 eb 16 74 a5 db 09 8f a4 19 b2 d0 fd f4 14 67 b6 fb d7 ea 1b 92 90 b1 4d c0 3a 91 4a b0 39 f6 f2 be 67 59 80 7a bf 30 63 2c 70 bb 23 70 e8 83 87 a2 a9 84 df 39 e5 1a a6 46 5c f7 e2 eb 45 a3 e8 13 a8 88 85 38 e0 c7 90 1e a5 38 7f b4 85 4e 6a 90 d6 ea ce 52 20 c3 a1 f8 a5 b2 e9 9e 59 dd 65 82 e5 49 d3 4f bd 8c 7b 95 42 c7 5d 24 ee 41 f4 f1 67 4d f3 75 e7 70 9d 12 22 bf aa 93 4e 88 b8 7b 4f 55 25 48 3d aa ef 99 84 7d d6 a1 de 29 97 8c 09 a9 3b e2 85 5e 3e 9b 64 88 86 6c 82 70 57 da 9b 75 c4 0d 5b a3 9d 94 13 76 5a 90 c0 92 59 2e ed a9 12 64 1d 24 8f 6d f4 fe 07 44 31 77 8b f8 67 d9 88 1d dd 0b a5 97 e2 0c 96 e4 9a 3e 31 7e 1a 7f Data Ascii: _a(o*I8Ul,J3OKeh tgM:J9gYz0c,p#p9F\E88NjR YeIO{B]$AgMup"N{OU%H=});^>dlpWu[vZY.d$mD1wg>1~
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 29 6c 20 5e 0c 07 95 9c 33 a3 9a 8e a5 4d 5f 4d 05 8e ee 8c 2a 1d ef 19 51 14 22 4c fb dc cc f6 a2 29 2b 8b 23 cb a2 bc b3 f9 50 3d 1a 02 6e dc 3f 94 7a a3 2e 0e 80 2e 12 0c 18 ef a2 c2 fa 95 0e 7b c9 43 f3 3e d3 a6 97 24 8e 7b 8b 18 d5 55 1e 39 88 89 e1 e3 3b 10 f8 66 13 4f 9a e0 4a 58 1f d6 11 07 5d 02 b0 5b 44 d8 9b f7 8d de c1 f4 62 cf de 66 4e 67 b4 4d 23 db 01 f4 eb 96 ac e8 1d 91 70 72 d2 e1 99 06 50 87 ed 1f c9 61 f9 ff 66 d6 0c 6d ba c3 cb 5e 39 1a 57 05 5e bf 02 c7 03 c5 b0 eb 7f 20 29 b0 1f ea 05 cc 5b fb db 73 d8 d5 d2 9d 9c 50 30 03 9d 27 eb b3 56 1a 18 1e 40 ff 66 df f4 86 b2 70 4c a3 a5 67 9d 5d 04 f7 55 f5 f8 b3 14 46 a7 ad ce 91 2e 92 de da c1 39 e6 2f e8 98 ab 75 27 08 2b 84 d4 6c a8 8a 82 6e 49 4a a8 59 0c 6f e0 5f 9e 6e 4b 21 59 37 2f Data Ascii: )l ^3M_M*Q"L)+#P=n?z..{C>${U9;fOJX][DbfNgM#prPafm^9W^ )[sP0'V@fpLg]UF.9/u'+lnIJYo_nK!Y7/
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 78 cd 57 64 bc 74 80 fa 7d 8b 10 dc f4 15 0c 7f a3 72 5c ab ac 74 26 0c 25 66 e4 67 24 f6 3d 56 52 7d 43 6d fe ca 7b 3e 99 77 62 e2 ed 98 b1 f0 cc 41 2f f8 7e 57 4c 10 e7 50 b9 fa b3 0d 65 05 a9 41 2d ac 81 d8 18 2b 5f 2b 42 52 3b 86 d1 90 6e 89 b6 1f df 2a f2 4a 5d c6 6f dc 23 5b 61 bc 9d ee 26 00 83 5e c9 8e a5 db 98 06 8b fd 98 80 3f 59 22 4d 6d 45 80 eb 67 01 43 da a6 f0 4f 18 7c b5 92 29 8b 5e 06 8b 8b 40 de 6f 7e b9 53 35 5f 3b 3d 53 97 3f 75 3e e8 ab f6 60 ef af 80 41 c3 1f b4 3c d8 e9 e2 d3 23 6a f4 f4 8f bb ab 5b 9b 56 1e b3 98 f9 34 1f e3 ca 58 76 7a 4b 32 e3 28 ab c7 7c 18 4f 88 f5 77 32 c5 24 f1 6e ea bc 96 a7 37 33 55 11 9c 5a ba 80 58 64 23 bd 62 1c 89 5b 74 0c 79 b5 12 2c f8 06 03 4a b7 7c d0 99 04 24 b5 bd 1b ea e8 46 ed 52 34 3f 5c bf 95 Data Ascii: xWdt}r\t&%fg$=VR}Cm{>wbA/~WLPeA-+_+BR;n*J]o#[a&^?Y"MmEgCO\|)^@o~S5_;=S?u>`A<#j[V4XvzK2(\|Ow2$n73UZXd#b[ty,J\|$FR4?\
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: dc 95 85 3a c0 36 2a d4 e3 68 13 ca 23 be 2e fe c6 cd d3 b9 8a d2 24 93 8b 2c c1 1e 9f 03 39 e0 17 ab af eb 06 59 97 aa 31 df 5a 91 d9 d1 eb 31 23 6c c7 d2 e9 ac 48 8f 56 23 0e 61 d2 15 55 e0 88 2b 87 53 9e a4 58 fc 4e 29 06 c3 ad 28 55 95 d6 f9 37 26 0f 2c 9b ae 51 b7 ce 34 5c d8 e2 42 17 2a 11 a5 98 89 bb 7f 30 b5 79 8f eb c2 02 03 a7 4d 2d 6e ee 95 32 d1 e3 a1 6f 62 59 f3 08 d6 70 a3 fa 80 0f 86 72 85 1d 45 10 03 9b 2f 0b 20 66 99 81 ad 21 73 6e dd 4b 43 f5 06 15 7e 70 93 8b cd 28 7e 95 15 2e 66 30 24 4a be 28 7a 6a 7e 66 d7 3a 51 4a 2d 64 a4 22 ef 23 b9 24 4b a7 85 8e 21 1c 45 d6 46 ee 31 35 d9 f4 27 9f fd 53 3b 52 60 cf 17 44 c9 1c e2 11 93 51 12 08 84 6d 26 c5 76 bb 3b 67 17 21 d0 b4 16 d2 da 92 00 d8 e2 60 b5 e6 c9 f6 98 77 50 b9 ed 91 0f 06 51 c0 Data Ascii: :6h#.$,9Y1Z1#lHV#aU+SXN)(U7&,Q4\B0yM-n2obYprE/ f!snKC~p(~.f0$J(zj~f:QJ-d"#$K!EF15'S;R`DQm&v;g!`wPQ
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: d4 f0 4f c3 cd d2 6b 9c d3 62 2a 01 7d de 57 df 2a eb a2 1f 4b e1 f7 24 2a aa 3b 9c 01 0a d4 70 a9 94 b3 08 bb f2 41 a3 5d e8 7d 6d 5a d5 e2 7d 88 2c 78 4f c5 b9 7e 09 9e 93 c5 8b 1d de c1 43 06 bf 6d c9 4e 87 4f f9 aa e8 01 5d 88 e7 75 db b8 af cf 59 3c 6c a9 94 f7 ee 70 d2 b9 3f 94 79 51 89 76 f5 77 6d d1 8e 35 57 c3 c6 47 22 b6 db 3c 6f 50 65 43 4f 6f bd 38 76 7e 7c 06 9f f4 50 df 1c 16 7f 48 4f 0a 2d 18 68 42 c9 d2 b3 fb 11 09 f5 ea 5e 4e f4 42 9d cc 2a 8d c0 18 af 3f 47 99 f9 ff 37 7d f8 f2 2f 17 5c c7 10 8a d0 b4 c1 43 4b ed fc 35 b3 d7 65 37 de 6c da c7 9e 34 21 c5 ab 95 f9 c8 aa 7d 2e c3 f8 83 e8 09 fe d2 86 74 e4 7c a8 d6 82 9e bb e2 21 9a 61 6b c8 26 06 67 6f 60 9a 03 1b 4b 20 1b a9 eb 30 6f 6b a5 98 a7 db 5b e4 a6 04 85 1f 47 bb 97 90 b5 7c 2f Data Ascii: Okb}WK$;pA]}mZ},xO~CmNO]uY<lp?yQvwm5WG"<oPeCOo8v~\|PHO-hB^NB?G7}/\CK5e7l4!}.t\|!ak&go`K 0ok[G\|/
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 14 df 0a d2 77 bf 13 4f 01 69 0b 2d 66 69 bc 7a 6f c3 ba f9 a5 73 a5 f8 c8 97 82 e8 01 c1 09 0a 4b 69 32 62 c5 c3 4c 52 03 75 97 a8 e4 40 a5 59 f0 2f 2e f1 cb 38 12 aa 1e 82 4c be c9 b3 4d 37 fb 60 bc 06 f7 1e 79 87 a1 29 6c 29 bf c3 57 01 58 fc 00 0d 6c c6 35 80 00 3a 1b 3a a8 49 38 71 9e 68 a3 cc 4f 9b d5 d1 e2 39 b7 03 6f 92 78 62 09 04 eb 7a 5a 55 b9 97 2c 1b d5 a0 f3 7e 20 16 ff 2d 4f 35 e7 b3 f0 0d 3c 5f 25 a8 81 69 87 fd d5 54 ed 25 58 ff ed 36 3f cb ea d3 e9 4e 10 f9 83 f3 15 18 07 27 e9 bb ed 0c 83 9c 82 0a cc cf d5 f3 5d 60 53 86 ae e5 76 73 8f 1a 4a 0e 59 a6 d0 cc 20 65 74 fc bb 0d e7 f5 0c 99 45 de 43 5a 96 e3 b5 6a 2e 84 fd ae 29 7a df ac a2 44 c4 ac 62 08 1c cf 0f 8a 5d e6 12 a7 20 9b bf 4f f7 25 68 19 f8 64 6c b3 22 65 bc da 1c 62 36 19 f8 Data Ascii: wOi-fizosKi2bLRu@Y/.8LM7`y)l)WXl5::I8qhO9oxbzZU,~ -O5<_%iT%X6?N']`SvsJY etECZj.)zDb] O%hdl"eb6
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: f9 76 4c d3 c2 d7 11 a1 ca 8e 00 82 32 14 c4 b4 df 25 34 53 34 a5 8b 05 1b c8 dd 9b 6b 26 d4 09 e6 3c f3 96 5f 89 20 40 c0 c9 80 2a 40 fd d2 fb 3e 0c 68 06 f8 c0 a9 cf 84 ff 70 53 0c 47 8a 03 4e a7 68 c0 e3 69 fd 84 9f ff b9 3d 70 0f 74 ef 7e d0 ae 1f cf 21 94 c9 c0 3b 62 0f f8 30 15 78 87 24 39 7a 16 3f 11 dd bd c4 12 1e 2e a0 82 27 46 19 8d 66 e5 11 2a 69 64 00 36 33 5b e3 09 08 df 8d 4a ba 0f 83 03 05 62 10 aa 14 a6 4c e8 d0 a0 4a 37 ba 07 03 53 02 d4 5e 46 0f 6b bd e3 fd f2 a7 4c ac 50 40 55 61 b8 0d 42 57 0c 38 22 c1 f3 18 4b 7f 9e df a5 6d 11 60 32 db 00 67 b3 ae 35 67 be 35 79 64 22 ba c0 02 c1 91 c9 c3 bd 3b f2 d5 3f 38 c9 5c 2d 89 c4 cf c9 27 f5 8d 69 fb e6 a1 37 77 ab 96 c7 58 ac f4 de 06 8d 14 e8 83 11 ef 9a 25 b0 66 5f 20 bf 03 c9 80 cf 5e 5b Data Ascii: vL2%4S4k&<_ @@>hpSGNhi=pt~!;b0x$9z?.'Ffid63[JbLJ7S^FkLP@UaBW8"Km`2g5g5yd";?8\-'i7wX%f_ ^[
2024-04-19 14:06:11 UTC	139	IN	Data Raw: 6a 36 4a 38 1e 85 7a 1f 1c 85 e4 8d a7 9f 70 0c d3 3e 10 b4 af 64 fc 6f a4 fd a8 66 e9 10 41 ab 87 d1 68 38 ad dc f8 f9 51 85 f1 39 ed be 34 f9 9d 3c cc 54 79 13 09 d6 e3 3a 14 40 1d eb 4d 4e d5 97 8b 85 13 e6 2d 51 8f 3f ee f9 13 48 06 96 ec c0 36 f6 3b 5c 4f a3 f5 c2 1b a1 14 0b 2c 01 5e 6c ff 91 b5 9d 95 61 4b c9 84 5a 66 9a f0 08 b4 e2 7e 44 00 ea 24 e9 4e 0e 7e b2 e1 96 19 00 95 b0 36 fa 3a c0 62 e6 66 00 00 Data Ascii: j6J8zp>dofAh8Q94<Ty:@MN-Q?H6;\O,^laKZf~D$N~6:bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49773	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:10 UTC	1107	OUT	GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 37564 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3477 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 b4 92 00 00 57 45 42 50 56 50 38 4c a8 92 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 4e 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a ba bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd 54 b7 ea ed db 02 30 8e 5d 75 b5 54 92 14 92 b4 e9 c5 80 00 41 2c d5 d5 5d fd 6f 75 37 f7 cb fb be 02 ef 12 6c e0 c5 06 ed b8 98 e2 da ca cc 5a 64 03 26 40 91 91 8a f0 ca f9 20 18 17 23 22 d2 11 8a 11 22 62 64 3a 73 49 6c 5b b6 a4 21 49 cb d7 d6 18 01 91 0c c6 c8 88 a8 af f6 4b 40 a4 22 9e 96 04 f3 04 06 ba 25 81 38 2f 81 c5 bd 0e 36 60 40 27 69 c7 9c cc 03 58 5a 64 db 87 08 4b 5c 18 25 62 31 eb 41 12 29 71 3f 81 27 a7 7f 9f 4e dd 55 c9 00 be 31 92 6c 8e 02 f4 fb 3d 92 e4 2d 30 e7 44 5f ed 80 69 b0 01 7d 36 b6 0d 0c c0 c6 9f 1f 1b 16 02 30 b6 56 9b 00 24 90 70 f7 57 Data Ascii: RIFFWEBPVP8L/IM8lFFNn/Y_<BD'*nzwT0]uTA,]ou7lZd&@ #""bd:sIl[!IK@"%8/6`@'iXZdK\%b1A)q?'NU1l=-0D_i}60V$pW
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 71 75 bd f4 80 b3 32 b1 5e 6b 07 81 c0 80 8a ea a8 62 d9 5c 39 fb 9a 74 7e 98 e8 f3 8e 1f 3b 66 00 1c 80 fb 9b cb b5 9f f6 89 37 04 06 40 6d 4c ae 96 7e e8 e4 ab cd 62 fd 9d 0e b0 38 59 1c e9 eb a2 00 56 9c 6c c9 d6 27 02 81 00 40 c3 7a 00 00 e6 f5 56 df 71 87 23 eb 6e f1 07 3a 69 de 92 de a7 ad 21 1c 6f d6 7e 04 00 20 03 20 03 db d1 de 8c 6a 3f 1c 03 c0 e2 48 e6 9c b2 fb 1b dd 6e 3b 00 10 98 ed c1 ff 0c 4c 6e 65 64 40 e6 6b 83 7d 38 29 b3 31 60 98 01 a0 62 4f fe a7 e3 0c d8 35 60 80 d8 c8 80 0c b0 b2 19 bb dd 04 32 32 00 12 b0 9d fb 2e c8 00 80 be ba d9 d1 aa 07 40 06 8e 1b 60 cb e2 82 74 01 1c 75 40 c7 de b1 0c 00 78 3a 56 f6 fa 19 ca 0e 00 a8 9c 00 57 00 d4 89 b6 1c 83 32 82 0c f8 e2 88 6b 77 e1 ea d8 d9 1c 4a a5 0e 7d 53 3a 7c 91 00 8a 34 2f 57 20 a5 Data Ascii: qu2^kb\9t~;f7@mL~b8YVl'@zVq#n:i!o~ j?Hn;Lned@k}8)1`bO5`22.@`tu@x:VW2kwJ}S:\|4/W
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: f7 29 2a 25 52 14 25 05 4a 2a a5 80 a2 a4 d4 90 a2 24 8a a2 c3 28 ba 45 09 a2 4f 4a d4 90 a2 e8 26 29 09 10 91 52 23 52 2a a5 80 a2 44 34 95 a2 90 48 51 53 11 91 a8 29 0a 15 14 45 4d 45 94 58 e4 5b 04 29 45 51 94 96 ab 65 0d 3a 71 bd 73 75 89 b8 91 69 53 06 49 ae 83 ba 74 29 83 75 82 22 c5 75 82 9b 24 a4 29 0d 2a 65 e2 74 23 61 04 dd 54 83 a2 d3 8d 4c 93 94 c1 6a 54 89 02 03 1a 01 6a 67 8d 90 4e 84 6b 81 02 64 82 46 4e 2a a9 4c 9c 24 a1 ba ec 26 3a ca 34 ab 61 72 46 76 dd 8a 10 c8 89 6b a2 a8 1a 57 63 94 40 4e d9 8d 03 68 2a 13 85 8c ab 6a 40 91 39 a7 5c b3 84 aa b1 26 48 ad cd e9 e0 44 0c 4d b3 1b 81 ce 34 ab 81 85 70 7a 2c 61 73 d2 2c c5 42 a1 94 05 21 56 8c 39 19 24 35 4b 69 28 1a 5b 08 1a cc 56 1a 24 4c b1 f5 56 d2 62 dc 66 94 40 44 81 05 35 05 8c 5a Data Ascii: )%R%J$(EOJ&)R#RD4HQS)EMEX[)EQe:qsuiSIt)u"u$)et#aTLjTjgNkdFNL$&:4arFvkWc@Nhj@9\&HDM4pz,as,B!V9$5Ki([V$LVbf@D5Z
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 1a c9 bd 31 13 b5 d4 c1 b5 4b d5 6e 84 5e a1 51 99 5b 28 61 16 f2 2c c5 dc b0 6a 4b b3 bc e3 a9 85 b4 2d 17 80 a9 59 6a 73 53 8a 6a 3d 96 52 90 b1 22 61 b1 44 69 40 16 58 b3 2c 00 2b 2a 07 6e a0 29 05 96 61 11 ac 76 34 03 e2 42 41 c6 54 b2 bc b3 21 16 76 49 e6 e5 f1 2c 62 96 29 ca cd 94 8c f1 92 95 04 0b 44 b9 60 80 59 04 cb 18 2b 5c 52 14 c3 b2 46 85 54 40 fc 97 29 65 20 df b2 01 1c 28 0d 25 86 91 c4 22 cd 38 b6 ab 0d 80 4a 68 56 49 0d ac b4 55 0a a4 d0 44 95 4a a9 a6 d0 38 95 ba 91 2b a1 52 6a 4e 07 82 a2 6a 41 4b 8a 22 67 9a 2a 49 50 2b 35 d1 2d b7 1c 65 6e 24 2d 49 12 2a 51 25 23 32 4d 52 d2 94 04 25 51 dc 44 44 8a aa 4b 2e 25 c5 cd a2 26 8a a2 a8 06 55 4a 97 32 42 13 95 92 a0 89 6a 12 a5 72 c8 00 c3 54 32 b8 92 44 69 67 8d e2 52 e3 c8 c4 c4 25 ea 1a Data Ascii: 1Kn^Q[(a,jK-YjsSj=R"aDi@X,+n)av4BAT!vI,b)D`Y+\RFT@)e (%"8JhVIUDJ8+RjNjAK"gIP+5-en$-I*Q%#2MR%QDDK.%&UJ2BjrT2DigR%
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: c0 04 2b a6 84 84 14 96 25 a7 a4 46 de 94 71 81 28 99 04 4b 11 66 a2 04 39 8d 99 92 0a 0f 8a 2c 16 30 a8 32 cb c8 59 68 76 85 c4 48 ac 4b bd 54 c2 54 0d 96 5a ed 60 54 c1 7c 08 b3 18 2a 60 ac 59 ab 54 3a 03 1a a5 4b 27 5c bd 54 29 15 de 11 1a e7 a0 49 55 0b a5 44 69 82 12 84 3b a9 36 8d 90 96 d5 45 8d 8b 43 27 ce 14 a1 7a 71 8d 49 e2 16 45 26 2d 01 20 40 62 56 32 4b 24 0b ca 60 8d 1d 00 88 60 f6 06 24 12 c4 68 64 20 99 88 a2 7a b1 03 24 00 56 94 22 34 08 b0 97 80 58 02 b2 22 85 23 51 38 00 38 f0 45 9b 98 28 05 b2 97 49 1a 43 90 19 60 74 93 88 40 ac ae 4b ed d8 c5 6d 55 9d 22 a9 51 d5 0e 9a 4a a7 3a 5d 75 23 84 7a 67 77 a2 9a 8c ac 13 34 ca 0e 9d b2 4e c9 a9 92 aa 16 6b 32 a3 1c 33 8d 5a 34 53 d7 16 51 63 5f d5 83 aa c7 88 cd ca ae a9 a9 e0 dd 37 aa 69 06 Data Ascii: +%Fq(Kf9,02YhvHKTTZ`T\|*`YT:K'\T)IUDi;6EC'zqIE&- @bV2K$``$hd z$V"4X"#Q88E(IC`t@KmU"QJ:]u#zgw4Nk23Z4SQc_7i
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: f7 e0 a9 67 bd 45 a9 8f d8 f8 ba c4 65 72 81 ac df 99 2b 3f f2 c7 47 fd e1 0b 6c ca 09 cf bd e6 bf 8b ff fd 88 2d af 3d 67 ee 7f b6 77 f3 f1 a0 6f ff db 9e 40 a6 7b e5 f1 21 73 8e 0f fb d3 33 de ff 4b fe 89 4c 2a 9b 69 06 40 55 16 ae 65 97 02 55 bb 64 92 46 4d a9 a6 94 44 e5 6e 14 97 28 ae 76 aa 71 2a ea 14 49 54 3a 71 54 e2 24 0a 1a a1 24 27 57 f0 79 a5 93 26 a5 36 74 01 52 7b d5 1a 94 f6 7a 4a 6f b9 da b1 52 4f aa ba 61 93 d3 ea bc 42 a9 a3 ea be 31 23 d6 5c 6f ab ec 52 cd 19 34 f6 82 24 91 c8 b8 82 07 96 5e f2 be ab f6 b9 5a 7c e2 d1 d6 fd 9f 7b c6 eb ce 1d f7 f0 cb 7e 71 ca 85 29 53 09 90 32 3d f0 78 42 79 df bd 20 2f 6d 5a fe e2 72 c9 d9 0f ed fb d1 77 22 ca 14 b5 cd ec 29 d7 a8 7b ef ee a7 ae fc c8 77 3f f0 9c 03 d7 f8 bd 97 f4 d8 43 79 ff b1 fc f5 Data Ascii: gEer+?Gl-=gwo@{!s3KLi@UeUdFMDn(vqIT:qT$$'Wy&6tR{zJoROaB1#\oR4$^Z\|{~q)S2=xBy /mZrw"){w?Cy
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 4a c9 aa ac a2 ad 72 59 8e 59 85 aa 2c b3 3a 65 c5 42 76 64 39 3b 39 76 68 95 62 59 06 87 96 aa dc 74 8b a5 db 06 9b 49 d7 59 ae a7 d2 9b 9a ad dc b7 7c ba 84 ee 3d b5 ba d7 45 93 59 d5 fd 06 d7 68 87 fb a3 ca 09 4b 77 4f 96 de 26 6f 6e 69 f0 05 1d 30 5d 56 d1 8e 17 a4 c0 71 92 46 9e 18 ec ad 14 4d 38 b1 44 14 d3 1a 31 58 53 e4 76 92 06 81 54 c9 32 3a 5a 21 a8 ac 88 70 a2 84 98 25 91 15 4a 35 45 be e5 6c 51 58 88 53 87 1a 52 da 20 96 bd 64 a8 44 1d 6a 64 16 20 20 0b 91 9c 4a 06 58 66 29 70 25 96 90 81 09 4b 81 2b 0e 01 c2 70 a4 6d 90 a3 59 98 da c8 fa b8 62 50 54 bf 54 8e e4 54 cf ae dc 23 55 a7 77 ca af 9c d3 58 a9 87 72 2f 51 f2 f6 ad f3 34 d2 8c 74 f7 09 bc 51 5a 4f dc 7d 33 9d ca d8 0d 96 5c 49 99 6d 11 d5 1a 37 2c 32 cc c8 e3 5d 53 b0 8a b8 5e d7 0a Data Ascii: JrYY,:eBvd9;9vhbYtIY\|=EYhKwO&oni0]VqFM8D1XSvT2:Z!p%J5ElQXSR dDjd JXf)p%K+pmYbPTTT#UwXr/Q4tQZO}3\Im7,2]S^
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: c8 e6 38 87 64 2c 9d c9 79 1a 2c b6 fc e7 6f 2f eb 19 db 5d 36 be 7d e1 7f 5e 7f d1 dd 2f fe c9 3d 5f fe f8 b6 cd a5 0f ac 7e f3 97 97 5e fb d4 76 9d 78 6e d7 f6 8d 1b cf 9c f5 d3 47 be fd c4 3b ef be df ca 60 74 e1 8d d3 6f ee 79 ee 92 fb 5e fc ee 0b 8e e0 01 d7 6d 65 7e f1 83 d7 5e 2f 5d bb ee 91 f7 fe f7 df 3f 3d e7 05 51 e8 db ee f1 99 1f ff cb 23 fe 73 73 c5 f6 a1 90 e7 6f bf bd 76 cf bf 39 fa 93 f7 1f f5 c9 a7 a5 91 db 33 77 3e 75 f9 9f 8f 3e 72 af 3b 10 62 ca b8 de 8b 39 ea bb f7 1f ff 2d 5e d9 7e 1d 99 7d 58 d6 ed d2 19 ff fb a6 63 fe f3 ad e7 7d f7 d8 55 a5 8c 65 cf fb e8 fb bf f3 98 5b 3f ef 86 7f 2b 67 3a e7 9a 93 ee c1 11 61 79 e5 85 f5 fd 8f 96 ca e6 53 6e 7a e5 6d ff 7c c9 71 7f 7b fd a5 37 be fe 99 0d cf 3a f9 2f af 3d f3 13 2f e5 aa 4c c6 Data Ascii: 8d,y,o/]6}^/=_~^vxnG;`toy^me~^/]?=Q#ssov93w>u>r;b9-^~}Xc}Ue[?+g:aySnzm\|q{7:/=/L
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: d8 5d ce bb 65 d7 6e 28 59 17 d5 65 5d 52 96 1c 73 79 e3 52 69 d4 c1 d5 28 ba 1d ad b3 9d 13 d7 56 b5 c1 8d 03 aa 97 dd 71 55 10 61 d1 53 23 52 a6 65 4f 54 e4 f1 df fc 31 5f 0c 2d ff ff 7f 91 8c ae a9 2f 24 22 72 ef e4 e7 00 91 f2 e1 5f 1f 3d e7 52 d6 fe f3 ff 76 7e cb eb bf 7b 6c 0d 8e f8 f4 4d cc 3d f6 85 6b 6f ff 8f af 7c f6 4d 5f f8 c3 9f 7e f8 af 9f 47 5f 76 3e f7 87 fd 7f e5 e3 6f 3e 5f ff fb fe fe 99 3f f5 b5 ef 9f f0 c4 49 f7 9d df e5 54 8d 0e 7a fd 5d 9f 3c e7 54 8e bd a5 7e 79 96 1d 72 d1 b6 0c 3b b3 16 f7 0d 6b fb d1 75 77 51 88 4f 65 c2 72 e7 bd 2f 7f ed aa 9d 69 47 c9 0d a6 6d af 7c 67 ff 87 5f de f8 b5 b7 ff ea e7 16 1e f3 7b 2b 6e ff 92 a3 ce 7e 79 7b d7 e5 87 1f fa 86 a5 97 7c df f4 43 76 87 ef f8 d0 f1 17 f9 cd 67 ef b8 75 ed 66 c1 91 ab Data Ascii: ]en(Ye]RsyRi(VqUaS#ReOT1_-/$"r_=Rv~{lM=ko\|M_~G_v>o>_?ITz]<T~yr;kuwQOer/iGm\|g_{+n~y{\|Cvguf
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 89 c9 8e 1b 9b b8 9a c5 a2 a4 dd bf 10 2c 2f 9d 35 e3 49 13 3b b6 e3 6b cc 5b b6 c2 68 f7 97 3b b6 64 5b 54 ed b6 34 a1 46 cb a5 5c 8a 59 de c4 95 b2 56 37 aa a8 96 28 b4 22 ad 1d 58 35 b2 b4 01 1a 86 4c 0d 85 42 a9 cc 4e 49 52 92 08 a1 00 20 93 a4 3c 02 ce 1c 78 9c 4a c9 f0 88 50 2e 0f 5a 8a 94 cc 63 84 a1 97 47 82 cd da 49 a5 10 58 c5 44 cb ce 5b 01 ab 14 b0 43 00 10 87 04 c0 13 23 a7 c2 20 2f 0b 28 c9 ba 02 24 04 12 e1 44 0a 85 47 4a 82 c7 49 81 6c e9 50 c5 84 04 bb c4 81 87 01 88 1d b8 e0 f2 a0 15 4f 89 14 10 0b 46 62 49 81 20 27 42 d9 91 40 62 f0 8a a1 83 37 e5 d6 29 5a 29 37 95 52 d5 aa 6b 52 7f 54 50 19 14 e3 2d 3b 85 41 97 0e 5a 57 b3 aa e5 4a 25 ab 4e b1 db 15 74 9e 59 f5 2c a5 d3 53 ee 17 dd ba c9 ec fe 01 34 41 f5 99 e5 9d db b8 a9 1c 9a 27 70 Data Ascii: ,/5I;k[h;d[T4F\YV7("X5LBNIR <xJP.ZcGIXD[C# /($DGJIlPOFbI 'B@b7)Z)7RkRTP-;AZWJ%NtY,S4A'p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49775	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1106	OUT	GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32634 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3477 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 72 7f 00 00 57 45 42 50 56 50 38 4c 65 7f 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 ce 3e f1 7a af ff 82 67 76 ae 85 88 fe 4f 80 6d 77 97 ed de 9d dc dd b6 dd dd 8f db 5e 79 e5 c9 5f ad 96 0f d9 5e 3c ed b6 bb 22 29 89 16 f6 64 b7 f7 7b 6a ff db b6 d9 0c 8b e7 79 04 59 5d 90 00 0f 09 55 2b c7 5a bd 61 3b 3e 8e a3 79 35 d5 57 1d 75 a8 2a d3 f7 ab 95 38 24 69 a5 aa 3a 32 65 8c 91 5a 30 1d 24 20 55 55 cf 8b 3b 11 19 83 8c c1 18 41 55 7d 4b 8b 91 64 00 d3 e5 09 c2 77 00 7b b1 99 a9 c8 1f a8 4a 8b da 83 94 24 c4 c0 5e 44 cc 11 fb 53 55 34 20 40 00 a1 03 51 11 3f 36 35 73 48 ec bf c0 75 bc d9 cb d4 ad ff 82 24 5d 7b f9 fd ae 29 03 5e 91 31 34 86 6e 2d d8 7e 75 ae d6 2b 72 fe 98 80 97 7c 45 4b a8 82 00 82 d8 f7 ea 3b 60 eb 92 74 6d be 21 e7 f9 bb 16 Data Ascii: RIFFrWEBPVP8Le/IM8lFF>zgvOmw^y_^<")d{jyY]U+Za;>y5Wu*8$i:2eZ0$ UU;AU}Kdw{J$^DSU4 @Q?65sHu$]{)^14n-~u+r\|EK;`tm!
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 38 01 75 b6 c9 dd b2 2e c6 47 8f cb d9 4d b7 62 12 08 87 00 40 c3 7a 41 c0 3f 6e 7a 2f 4c c6 86 2b d6 b5 87 be a3 69 46 35 87 03 00 2c f6 00 06 bd a5 e4 f8 c2 9b b1 5d 00 10 98 4d bd bc f3 50 01 73 ea 03 37 04 8c cd 36 00 18 f4 72 1b 00 00 15 db 33 bc 66 a7 62 c3 06 e9 4c bb e3 df 45 87 ae 3a 70 71 5e e3 cd 1b 42 ff 3f 1a 6e 8e 6b d0 79 e4 0d b0 35 ce 18 ec 2d e5 c7 41 4e 5b 43 0e 06 d0 8f 1a 00 f5 bc b7 bb 03 9b 5c a1 6f 6b 49 3b 78 d2 43 ae b4 c1 da 64 db c1 06 80 96 f5 be 34 90 0c 67 84 c7 70 1f 1e 47 2f 20 09 4f d3 dd f3 f8 e4 01 c2 43 b8 1f 1f 01 a0 d1 f4 b9 cd c8 1f f5 9f 86 fb b5 a1 71 72 c5 7a 01 67 a9 9d 4a 93 4f 68 79 b1 2c c0 d2 3b 34 e9 14 3f 5a 5e 9c 17 c0 b0 ea 0e 0f 12 d0 1f e4 ca 15 48 36 bb 55 59 a0 5c 7a 53 4d 91 ac 62 5b 25 30 d2 2a 35 Data Ascii: 8u.GMb@zA?nz/L+iF5,]MPs76r3fbLE:pq^B?nky5-AN[C\okI;xCd4gpG/ OCqrzgJOhy,;4?Z^H6UY\zSMb[%0*5
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 2d 9d e5 b4 14 45 51 ca a2 2a 00 01 09 00 b2 ab f8 a8 ca a2 a8 a6 58 14 b5 d8 91 62 57 23 fc a3 08 55 28 8a 6a 14 d5 34 94 a2 a8 86 4e 28 aa 45 51 7c 2e 8a bf d2 12 7b d0 a2 13 8a e2 0f a8 96 b2 50 43 67 41 d3 50 8a a2 8a 1d a1 28 ab 50 74 c4 42 2d 3a 8a 32 15 45 d1 11 8b aa 2b f9 2b aa a1 28 8a ba 24 97 b0 e2 ab dd 2d b9 41 b5 25 ba 8e 5a 01 76 4b 6e 78 d4 2a 9c 92 42 25 a7 b4 ad 96 75 35 ac 08 b5 95 ba 9d 55 2d 6a 19 72 80 59 26 6c 40 ad c2 15 69 51 6a 25 8b 92 6b 61 11 be a2 5d 14 a5 ac 2d 59 52 4d 6b 6a 2b d5 6a 99 9b d8 16 1f b5 5d b8 72 f5 5b 62 b7 1b 55 95 75 2a d9 a2 c8 55 72 15 51 95 75 12 5b 53 ea 6a 6a 8b b2 d6 26 57 8a c2 a5 4e 92 1d 44 ae c2 96 d0 5d 97 ba a5 a1 3a d9 2e b6 28 be ed c2 95 7a 84 52 77 05 14 97 6a 17 a8 20 d5 d0 51 55 dd 68 5d Data Ascii: -EQXbW#U(j4N(EQ\|.{PCgAP(PtB-:2E++($-A%ZvKnxB%u5U-jrY&l@iQj%ka]-YRMkj+j]r[bUu*UrQu[Sjj&WND]:.(zRwj QUh]
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 46 6d 56 c9 fb d4 55 69 9d 24 27 56 db 2a 79 0b db 2c d8 b7 a2 2d ba e6 28 79 43 ae 2d f2 45 96 71 e9 aa 41 17 24 eb a1 2e 9d 6e ba 87 9d 6c 5e 33 c2 ee b1 4a b9 66 3d 5c 97 8e 1a 4d 77 57 a0 46 d6 ba 51 cb 71 d0 b0 92 a0 c2 4e 50 2a 94 31 95 4e b1 86 ca 89 1c 4b 37 9b 5d a4 d0 47 94 44 d1 54 27 5b 9c 38 ba 0f b8 4c 56 d6 a3 ba 10 8d c6 76 0d 51 94 c1 0d c8 51 68 ac 8a 94 eb 51 15 a2 28 54 1f 28 2a 72 c2 32 82 91 aa ff e3 a8 71 0a ef 71 2b 95 52 c3 6a 70 b9 00 3d 6a 17 a5 e2 3e dd 4a c9 20 3b 03 9d 0a ed 9e 50 aa 91 2d d2 34 64 23 6b 84 b6 24 2d d3 d0 a5 6e a9 8a 22 17 75 81 52 52 db 91 56 4b 2e cd 16 7f fd eb 47 ed 9f d5 ae d5 6a 99 16 69 2d d6 76 40 b5 a3 5a d2 2a b5 2d 54 28 72 83 35 50 db 31 5b 14 45 91 15 69 78 d4 22 5b 84 6a c9 16 d9 2a 4d 3f 6b a5 Data Ascii: FmVUi$'Vy,-(yC-EqA$.nl^3Jf=\MwWFQqNP1NK7]GDT'[8LVvQQhQ(T(r2qq+Rjp=j>J ;P-4d#k$-n"uRRVK.Gji-v@Z-T(r5P1[Eix"[j*M?k
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 6e 23 70 81 f3 e1 0e 41 d1 64 15 e8 66 53 cb 94 2e 9f e5 7a b4 9a 0a 74 c3 32 0c 7c 2b 59 da da 50 72 87 34 44 df 41 d6 52 b2 35 b9 48 83 86 2d 69 89 76 6a ba ed 2c eb 12 6e cc 5a 4d 4e a5 36 96 b9 e3 76 b1 f1 ad d9 9a a1 d0 91 4e 58 a4 ad 92 6b 14 b5 52 27 54 ab 65 5d 67 b6 1a 72 2d ed 6e 84 6a c9 2d 6b 8b 8e 76 8d 2c 54 6d 49 ae 01 1f c5 bb 49 56 4d db 25 dc 49 ca 46 9d 44 2b 71 6e 3e 5c 73 ab bd 4c 4e ac 66 99 bc 25 9b 36 72 da b4 45 e4 6e b1 53 64 6b 09 a7 64 e9 26 27 e1 04 ab b5 52 97 61 b5 8b 3a 2e ba a2 2b bb e6 bd 58 74 ee 4d fe 44 ee 8a d0 ab a7 de 6c 36 55 b6 df 22 db 45 f2 0f e7 a0 db fc 29 bc 69 b6 76 c8 af a8 0b e2 fb 56 6a 01 de 29 ed 58 a9 55 b6 b7 54 43 35 a7 92 95 a8 9b b1 75 b5 6e 77 a6 9d 15 95 a2 8e 9b 5a 81 6e 67 b8 92 82 17 bd 13 21 Data Ascii: n#pAdfS.zt2\|+YPr4DAR5H-ivj,nZMN6vNXkR'Te]gr-nj-kv,TmIIVM%IFD+qn>\sLNf%6rEnSdkd&'Ra:.+XtMDl6U"E)ivVj)XUTC5unwZng!
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 85 6f c9 e2 ce f6 6d c3 1d c5 2f 96 31 8a 4a ab cd ac 2b 5c 14 ed 4b 72 fe 49 1f 95 bc db a4 d1 c5 1d 5f 5d 6f ce f7 d5 cb d7 47 f3 94 1d 2a 40 b1 1c 2a b1 c0 18 ad d4 11 61 61 d6 f6 85 fc e9 67 3f 64 0a 00 05 a1 84 41 80 c0 20 8c 3e 00 aa aa 12 a9 62 b7 39 de 22 51 75 ee 40 a1 51 54 28 05 db 0f 5f fe d5 47 6b a3 aa 50 32 81 c5 4e b0 00 68 30 4c 9c c2 00 54 19 9d 25 a3 94 94 c0 47 8d 13 28 90 5a 0d 7f f6 c9 0e ce f6 ed 92 13 45 5e a6 4e a9 5a 19 fb 22 0b 84 6f 4d 4e a7 f8 be 33 ed 35 6a a9 d2 de 1a ae dc e4 9d 8f 7d 2d e9 1f ce f6 96 55 29 de eb 26 b7 2f d5 df 57 0f a7 cc b5 ba 69 bf 4c ae 8d d2 8e d5 12 22 51 53 ad be a2 bb ec 8c fd c3 5c d1 91 3f 1e 36 ac fa f6 6e 74 25 1f fc 74 2d da 90 13 8b fc f2 77 7f 95 73 ca 78 18 87 d2 b1 f8 16 a1 f7 43 dd 0e ba Data Ascii: om/1J+\KrI_]oG@aag?dA >b9"Qu@QT(_GkP2Nh0LT%G(ZE^NZ"oMN35j}-U)&/WiL"QS\?6nt%t-wsxC
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: c6 17 fc 82 9a e7 6f f8 99 af fd 3d ff f9 73 fe e9 96 df fe e2 e7 ff 7f e5 de ad 7f aa 14 49 1b 0e 2d 05 8a 2c cb c4 aa 51 11 29 4c e8 7a d3 e9 bc f1 ee d7 d7 5f c2 57 3e fd 52 48 30 8a 48 a4 2b 81 a8 af 9a 92 00 e9 ee cf aa 32 3e c3 79 26 15 1a 40 b2 6a 00 02 c1 98 a2 4b 25 c3 b9 14 7c 39 5e 71 5a a7 ce 08 88 1a 5d 55 40 90 a8 82 42 39 41 41 40 dd 04 00 be 1a 6f 7d 06 75 05 85 31 63 cc 9b 08 95 59 9a 59 2c 9c ec d4 a2 93 6c 11 f3 65 38 10 09 69 4d 31 55 89 b6 59 e6 9a 68 6f a6 bd 65 d5 15 d8 35 8a 8c 53 37 f5 c7 68 7b 74 fb f7 32 ed b7 6b 6e a7 9b fc 07 b9 d5 b1 fe 69 ea 9b a5 85 d1 76 47 12 9b 2c c9 bd 13 66 c9 54 76 19 dd 95 b5 ed 0c bf a4 28 94 ee ba 0b 9e fd a3 cf bf f2 99 eb e6 eb 6f e2 67 fe c1 af 3e ef 1b 77 cd df fc df cf 6f 5a 23 3e f7 0b be f2 Data Ascii: o=sI-,Q)Lz_W>RH0H+2>y&@jK%\|9^qZ]U@B9AA@o}u1cYY,le8iM1UYhoe5S7h{t2knivG,fTv(og>woZ#>
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 22 01 6a c2 28 2c 42 b8 69 4a 08 30 b5 42 95 10 6a 96 19 a5 82 04 9a 25 22 14 09 40 51 41 81 18 55 ca 20 55 4a 18 62 d3 9c 6b 8f 2f 44 94 d2 2a 05 88 03 50 e0 34 18 64 d8 48 32 9a 28 f7 e0 51 d2 a2 49 c3 c5 d2 5e 98 82 a4 62 d4 ff 30 7e f8 88 b4 0b 4d ac 4c e4 a9 4b e9 4b d3 b6 1e 9a 69 86 a6 2d 4a 1a 1b de fa ed 68 7f 90 9b dd fa 7e 3b 73 fe 45 c7 f7 4f 93 6f e9 6e bd 33 7d ff 2c b5 42 48 77 ce 94 aa aa 2f 67 17 2a 2a 96 5d f7 25 9a 20 de 97 1f 1d 61 eb bb 43 50 53 05 0f 1a 03 5a 53 80 a7 46 95 94 79 4e b9 28 dd 63 0f 9a 2b b0 0c 5b e9 59 b1 ea 5a d4 dd ba 15 9c 00 c2 0a 62 59 85 35 24 88 a8 42 0d 91 a9 94 40 59 41 19 0b 4d 20 88 12 82 52 53 f4 40 04 59 e7 8a 38 14 9c 13 2f 84 05 20 53 b1 12 ac 12 02 35 4e 53 70 42 20 e0 24 c2 c2 1a 08 14 56 d6 9f dc 62 Data Ascii: "j(,BiJ0Bj%"@QAU UJbk/DP4dH2(QI^b0~MLKKi-Jh~;sEOon3},BHw/g*]% aCPSZSFyN(c+[YZbY5$B@YAM RS@Y8/ S5NSpB $Vb
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 5c 6d 28 91 6c e2 1a f1 ac 89 84 a8 f3 23 e4 96 89 1a 31 5a ba 89 16 97 ae a1 32 29 d8 4e 2a 09 32 3a 0b f9 4c c1 9e ed f9 16 ab 21 4e 25 c2 b6 da 74 86 38 93 66 74 46 96 59 1e 6b 12 2a 7a 7c 59 92 8a 60 2d d1 42 0c 86 58 01 db 28 61 51 99 3a 94 ca aa 50 a1 4c 4e e1 7b 94 14 89 fb 14 dd 18 3c 6e 6a b7 01 73 4b c3 7d 88 8b 83 c8 c8 50 3e 26 89 5a 34 04 5e 16 5b de 69 6e fd e5 b7 08 0f b4 4d ec 9a 21 4d b2 8f 50 d4 f4 9d 46 b6 d1 92 8b 76 3b ac 50 bc 37 0f 4e 05 61 8b b0 57 25 1d 4e 98 24 0b a9 b2 cb 77 71 df 92 ce ba 9d 54 76 52 ac 34 f1 02 16 82 d2 04 7a b2 f4 fd 98 2c 4d 96 74 bc 2b 6b c9 92 e0 22 76 42 96 40 52 a9 b2 cc 70 1b a9 f8 fe d6 93 bf a1 6e dd a5 76 17 ee a2 83 13 7b 11 15 2a 21 db 32 6f de a5 65 6a 29 b7 e2 96 1d 47 bb 9b 84 51 32 b8 b6 65 1c Data Ascii: \m(l#1Z2)N2:L!N%t8ftFYkz\|Y`-BX(aQ:PLN{<njsK}P>&Z4^[inM!MPFv;P7NaW%N$wqTvR4z,Mt+k"vB@Rpnv{*!2oej)GQ2e
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: a5 10 4c f7 d4 29 90 4c 5a 74 96 40 c8 56 5d 23 c2 47 cd d8 5e 1e 5a 43 1a e4 56 66 d2 dd b4 26 34 f3 54 f9 9f bb 2b 6d 98 36 ba 7c 40 43 66 69 2b f7 11 71 64 21 90 44 32 da fa e4 56 e2 70 16 c5 a8 e3 68 9c e0 c3 28 ed 51 f9 49 09 82 2d 67 c6 90 d1 66 cc 6a 25 68 6c 15 ab 43 a7 9d 98 8d 93 6a 70 f3 32 57 5a b6 c2 a5 70 3b 6d 29 2d 2b db 33 72 9a 15 66 84 db 4a 90 c9 42 e6 26 de 28 01 57 ca d6 30 aa 2a 65 e9 50 d5 c7 0e 77 d1 69 37 4a 07 89 ce 6c 16 ad 82 3e eb a2 f4 2e 36 4a 32 a5 09 38 54 31 d7 3d 14 bb 7e 31 24 4c a0 cd 51 17 16 a8 ea b1 75 6a 15 27 19 43 a5 2a c8 28 e4 16 4f 4e 25 af 48 b5 36 f9 96 5c f1 97 7a 8b 19 c0 32 3d 92 7d d0 4e 16 de df df f0 a5 e1 1b 4d d2 5b b5 3c 29 d1 61 7c 5b 45 be e4 3b 50 65 b1 49 3a b8 ea 4a c7 74 43 85 0a 9c b1 c8 48 Data Ascii: L)LZt@V]#G^ZCVf&4T+m6\|@Cfi+qd!D2Vph(QI-gfj%hlCjp2WZp;m)-+3rfJB&(W0ePwi7Jl>.6J28T1=~1$LQuj'C(ON%H6\z2=}NM[<)a\|[E;PeI:JtCH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49776	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1106	OUT	GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6842 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3477 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	722	IN	Data Raw: 52 49 46 46 b2 1a 00 00 57 45 42 50 56 50 38 20 a6 1a 00 00 90 6e 00 9d 01 2a 28 01 28 01 3e 3d 1c 8c 44 a2 21 a1 11 99 cc c4 20 03 c4 b4 b7 77 30 68 01 e8 a8 65 a0 f9 00 03 d0 03 a4 93 21 97 cb df e3 3b 3f fe b1 f8 f3 fb 8d eb 4f e2 7f 1a fd 43 fb 27 eb d7 f6 ef f8 9f ec 39 94 f4 af fb 3f 41 7f 8b 7d 80 fa 57 f6 3f d8 1f ec 7f b5 7f 79 7f 6e ff 45 e1 3f c2 5f e8 bf 25 3e 01 7f 18 fe 3f fc f3 f2 0f fb 77 ed 2f b9 7e cb ad 73 f6 2f d4 17 d3 5f 92 7f 5a fe f3 fb 41 fd af f7 5b d9 4b f6 bf cc ef 72 7e c6 ff 80 fc 80 fa 00 fe 2b fc 8b fb 47 f5 ff d9 cf ee 1f ff fe b1 ff 5b fd 3f c6 f3 ea 7f eb ff 62 fe 00 ff 8f ff 3b ff 2d fd fb fc b7 fc af f4 5f ff fe d9 ff 8d ff 57 fd ff fc 9f fe 9f f2 9e d9 7f 36 fe ef fe e7 fb e7 f9 df fc 1f de bf ff fe 02 ff 22 fe 75 fe Data Ascii: RIFFWEBPVP8 n*((>=D! w0he!;?OC'9?A}W?ynE?_%>?w/~s/_ZA[Kr~+G[?b;-_W6"u
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 8f 8b 8a ff eb 89 82 d5 8f b8 cd 57 aa 38 39 2d f7 4e 73 82 66 30 59 89 a0 c2 96 c2 25 5f 36 e7 b1 77 08 ef bc 32 5c f4 4b b7 82 39 68 5a af 86 b5 6c a9 2e 8f 25 53 05 78 98 9f 38 e2 87 7b 53 ff 52 09 9d 12 e5 3b d8 e8 10 f4 80 83 98 00 80 23 7a 93 7c 4b 52 cf 7c b1 49 f9 6c c5 5a ad 1a ef 81 1f f9 30 76 62 72 3d 1a 0b 4a ad 9b 6c 39 76 6e 7c db 93 b7 2c 1d 77 b8 26 7a 16 4e 6d f5 8a 3a 88 48 12 83 24 62 36 f7 7f 85 3c 13 b3 94 df fe 47 d7 00 4e 6e 4a 5e d7 75 3c 0f f0 b1 c4 5b 98 00 80 93 6b a0 70 36 22 ce a0 b1 3b e1 86 fa 09 b1 83 08 ca e1 b3 f3 0c 9c 48 fe b8 00 00 fe ff c1 6c 80 bf 97 78 b1 ad 22 28 c8 84 59 f3 a8 a5 5b c3 af 78 8c 59 4d 8a ac 1e 37 23 bf fc c2 51 28 ea af 84 15 21 c7 07 ff e2 cd 30 64 79 fd 1f d1 08 65 5c b2 24 bb f8 c9 b2 b4 8f af Data Ascii: W89-Nsf0Y%_6w2\K9hZl.%Sx8{SR;#z\|KR\|IlZ0vbr=Jl9vn\|,w&zNm:H$b6<GNnJ^u<[kp6";Hlx"(Y[xYM7#Q(!0dye\$
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 2d f6 9c f4 09 07 b0 88 91 a3 92 a1 23 00 3a ca 8b 94 67 20 43 41 79 68 71 03 6d 7b 3e 5a 21 86 f6 a2 1b a0 9f f9 a0 fc ab 9c be 80 62 08 e1 f7 f6 39 c2 ed cb 0e 45 03 41 b0 81 73 5d a5 13 c7 34 f8 1b c1 89 5c 76 7c 29 88 16 9a cf 3c 96 2f 55 65 15 3f 22 f6 bc bc f7 01 d5 df 8c 7a 0a 93 00 b2 3b b4 7d 2c a0 f0 85 27 ba ae 65 de 87 1e d5 13 dc 6b 5e d3 58 2b 60 30 d7 9a 5f c3 78 20 db dd 5a 35 a4 03 b2 1a e1 68 c9 67 7d a4 28 5c fc 7f f4 41 fc 2a 1a 16 2f 00 5f 83 5a d4 d3 06 30 8d 98 31 cf 79 3c ea 06 a1 d7 5a 13 55 88 ad 45 80 3e a5 e3 37 8b ac b7 5e 57 96 ff f9 da a6 4c 6d b6 11 d2 c9 3f f9 04 1e c3 3b 2c ac 8f 5f 8c df b7 ae 81 97 3c 91 15 54 94 d3 8c f0 8c 01 35 c2 59 9d 08 c3 c3 92 b1 8e b2 86 56 e8 be a5 df e1 5f 48 15 0e b4 39 dc 69 3f 5f 82 7b 04 Data Ascii: -#:g CAyhqm{>Z!b9EAs]4\v\|)</Ue?"z;},'ek^X+`0_x Z5hg}(\A*/_Z01y<ZUE>7^WLm?;,_<T5YV_H9i?_{
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 0d dc 78 0b 83 fc 35 63 08 a8 a5 b1 7d a9 f8 6c 1c bf c1 c9 d3 75 14 80 fd 22 c8 fd 07 5d 5c 84 45 7f d2 76 eb 1c 24 3d 12 01 27 9f 45 cc f7 ff 51 77 69 05 bf d2 d6 e5 24 71 da b3 ed 43 37 24 03 e7 c0 54 9d a6 36 c3 cd ff ec a7 ff f8 ca b5 f0 61 95 5f 9e c7 b6 80 0e ea c5 7c 67 a9 c7 9d 5f 8e c6 51 79 84 54 45 cc e5 b4 77 e5 0c 7f f0 06 4b e4 0a fa b2 e4 87 55 07 9e f0 f3 c6 72 44 1d d1 d0 86 6d 9f 45 2d de 18 17 ce 76 db 2e db a8 6b aa 55 56 dd 76 cb c9 4a 77 5c 84 0c b0 69 c5 7a 61 71 62 48 74 04 15 45 c9 4f f0 8d 30 1e 72 6f 4e 02 a5 32 fa fb 01 5f dc 97 9c 0c 70 3a ca 8f dd e8 2c 86 cf d5 cd 44 a3 09 42 c9 35 54 12 71 59 e4 5b 1f 81 b3 64 3a 2a 1d cd 89 94 56 20 4e 91 c7 0e 24 9d 32 78 c2 3e b1 bd a1 a2 99 4b 4b 96 5f 42 73 72 ad 5b ee 14 41 90 0c 42 Data Ascii: x5c}lu"]\Ev$='EQwi$qC7$T6a_\|g_QyTEwKUrDmE-v.kUVvJw\izaqbHtEO0roN2_p:,DB5TqY[d:*V N$2x>KK_Bsr[AB
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 57 36 49 d0 7e 64 00 8b 84 0b e3 4a 83 31 e9 78 13 c5 1c 1b 38 f7 5b 42 c5 06 20 3f 0d ed b6 32 52 a7 4c 92 45 0b 09 db 21 6a 8f 1f 33 ae af 15 b4 9e ac b6 ca 19 16 d4 fd b3 be 99 4e 18 95 87 f8 13 a9 e4 14 38 b6 e3 bf fa e9 d4 c8 a3 04 c0 e3 b0 22 0d bd 7c 86 2c 69 b5 e4 fd 38 af 70 6f c5 48 f3 e2 4e 30 a9 61 bf c2 07 4c 0d f5 a3 d4 9c 7f 35 f9 99 ad 31 23 05 de 0f 4f 05 70 f7 ba aa a7 57 18 34 f2 b0 5f d9 1f 9a f8 25 06 70 1f 16 1b 73 6f 14 65 08 fd 79 dc e8 58 c3 1e 84 6c f1 9e c7 ca be 27 b1 9d ef c1 ae 12 dd e4 63 4d 7a 08 32 0e ea ec 65 48 c9 53 10 38 75 a2 86 7e 28 43 34 c3 2e 64 fd 17 6c 64 16 fb 22 ac bf 1c 8d e3 60 11 bf cb 44 6a f1 75 02 88 99 b4 50 1d 50 63 38 c6 31 5e 4f ca 3b ec 17 c6 8c a4 67 8f 1f c9 09 7d 0d e4 17 62 d1 fd 8d ed 19 12 46 Data Ascii: W6I~dJ1x8[B ?2RLE!j3N8"\|,i8poHN0aL51#OpW4_%psoeyXl'cMz2eHS8u~(C4.dld"`DjuPPc81^O;g}bF
2024-04-19 14:06:11 UTC	1100	IN	Data Raw: d7 8e b4 96 52 4d 0c 18 80 39 33 02 db 32 bd 25 0b 8e b9 d7 31 d0 f5 d6 16 fd 79 6f a3 11 b5 ed 5b b9 24 a1 ef 51 a5 3f f6 ab 8d e2 78 db fa 21 ec e1 3c 0d 00 26 a3 0f e8 ab 09 a6 19 d9 34 f1 8e ab aa 52 cd e6 e1 6e 89 e2 b2 66 16 89 ce 58 1c d7 43 c7 47 7f c3 16 ef 81 32 e4 be 93 e9 83 d2 0d 56 ed c9 f6 1d 4a 38 d4 c7 b1 7b 14 7e 96 c2 1e cd 7e 4d a9 68 c6 68 ae af 6b 47 bf 0a 66 44 69 32 49 34 93 aa e4 b9 f3 85 d9 0b 45 bc f8 cc 4b 18 87 cb 20 6a 29 4a 14 1f e3 1f 4c c7 b5 cb f0 0d c4 ef 51 e7 82 d8 07 65 c1 17 b6 6a 87 98 6e f7 74 c3 5a e4 b7 09 3d 03 89 3f 3f 39 b1 48 2d 10 c4 80 dc a2 ba b9 be c1 64 37 a3 a0 43 64 1d 7e 57 5d 37 a2 ce 66 a6 7c 10 1b 1e 3b 81 e4 e5 05 f0 ab 31 98 d0 bd 24 2a 39 79 ff 7b dc 2a 17 d3 0e 2f d7 c7 c0 31 f7 c2 8a a5 a6 55 Data Ascii: RM932%1yo[$Q?x!<&4RnfXCG2VJ8{~~MhhkGfDi2I4EK j)JLQejntZ=??9H-d7Cd~W]7f\|;1$9y{/1U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49777	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1105	OUT	GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10312 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 40 28 00 00 57 45 42 50 56 50 38 20 34 28 00 00 10 95 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 11 aa 9d d4 28 04 04 b4 b7 70 b6 e0 8f 7c 30 c0 de 07 cc 97 e2 bf 00 3e 59 67 80 e7 71 fe bd fb 19 c0 81 ea 01 fb 1d ec 01 fa dd e9 a3 ec 7d fb 81 e8 97 ff ff 59 0b ce 3f d5 3b 5a fe d3 f8 e1 e7 6f e2 bf 1c fd 3b f1 93 fb bf ff 1f f3 bf 0b 1f be f8 44 ea ff b3 3f 72 7f 8a 7d 59 fa a7 f7 2f d8 1f ed ff b9 5f 7b 3f 9c ff 0b e1 6f c7 ff e3 7d 40 bf 1d fe 3d fd 33 fb 07 ec 8f f6 ff da 0e 39 9d 5b cc 17 d4 7f 98 ff 73 fe f1 fe 2f fc e7 f6 ef dd 7f 65 5f da 3f 2f bf b7 7c 21 f5 df fa f7 e5 3f f7 7f b0 0f e3 1f cc 3f b4 ff 71 fd 95 fe fd ff e7 ea ff f3 9f e9 3c 74 7e d9 fe 9b fc c7 f9 2f 80 2f e4 7f d2 7f c8 ff 65 ff 4f ff a3 fd 77 ff ff b6 8f e5 7f Data Ascii: RIFF@(WEBPVP8 4(*((>AD(p\|0>Ygq}Y?;Zo;D?r}Y/_{?o}@=39[s/e_?/\|!??q<t~//eOw
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 8d 54 66 c8 0d d6 2d 5f 30 52 22 5b db a6 d4 92 85 46 ef 0e 48 b0 53 43 b6 f8 a6 1a 39 54 82 68 a3 be 17 d5 3f 90 85 77 15 50 0e 0f fa ac f7 07 ac 0c 1f 30 04 d2 da ae 25 6f f6 f3 11 ad d9 ae f5 37 06 2d 63 7f a9 4b 26 34 08 0a fc 52 d2 79 42 16 3c 78 f0 e8 d8 6f c7 f1 d2 de e9 c4 94 70 b7 3e 16 36 20 08 f0 a3 d9 8d cb b0 62 79 5b 36 23 b2 3a 66 df a4 16 bc 23 a9 d6 9c 8e bc c7 09 fa a5 7b cd f3 e3 29 1f 11 85 d4 b6 dc fb 10 61 5b b1 13 b7 9f 09 9c 31 93 a2 d4 7a a8 cf 26 dc 8d 24 31 0d f0 b1 c2 90 18 9f 5b 06 53 f8 02 b1 eb 03 8d e2 9c 76 8d a2 6a f7 1c 8d ff 5b 3a ae 39 6e 33 91 b7 08 1e 13 c2 29 69 69 22 96 4e 0e cb 13 2b 41 c5 fc cc d0 c6 aa cb 7f 47 28 07 ef f4 0f 8f 6e 4c 5a b1 2d d5 ea df 55 58 97 40 c9 61 b5 99 7e 09 f6 c3 23 9e e0 d4 29 b6 11 8a Data Ascii: Tf-_0R"[FHSC9Th?wP0%o7-cK&4RyB<xop>6 by[6#:f#{)a[1z&$1[Svj[:9n3)ii"N+AG(nLZ-UX@a~#)
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: a3 cc 72 ca a4 f3 ec 7f 9b 1b 7e eb 75 28 34 a9 d9 fd 64 bb 7f ac ad 2c d4 8e 79 27 9b 30 c5 83 31 fe 57 55 44 a3 ef 4e 7a dc 31 c3 fa 2c 74 d9 33 d8 b7 a6 87 c4 92 4e 0d c8 a2 34 ab 58 45 77 f4 9b 44 ed fc 86 65 79 56 ce 21 a8 33 c7 79 64 83 b8 91 f7 af 62 e0 f1 ec e9 a4 9b 4d 55 79 4b 01 0d da 56 7a 19 a1 33 99 a6 e4 d3 05 a1 09 4d b6 8d f8 a5 96 41 f3 70 cc 8e c4 ed 90 37 7e 13 a6 86 5f 6b a8 e5 4b be d1 c1 13 ea b5 6f 36 3a 4d ab de 80 4f c0 ef c0 ff 31 1b a9 d9 7b d1 d8 9d 79 97 68 3c 43 42 56 98 f5 1a 8a 44 e6 37 28 af 56 5d bf 2a bc ba dd 00 1d b2 6b b1 0d 31 b3 76 13 e8 cd b3 3c 1b 7f c2 5d 51 23 8d 03 8b c5 32 25 5b fa d9 0d 99 e9 27 bb c7 ec d6 18 53 19 0e 0e 5f 0d ae 23 b0 02 d9 81 98 8f 89 20 4e b2 36 eb 80 c4 b6 a2 f0 00 fc 7f 66 72 1b 67 11 Data Ascii: r~u(4d,y'01WUDNz1,t3N4XEwDeyV!3ydbMUyKVz3MAp7~_kKo6:MO1{yh<CBVD7(V]*k1v<]Q#2%['S_# N6frg
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 83 88 af bf 35 6f f9 37 cb 92 1c a8 ad 4f e1 a0 e0 b2 7f cf da fd f0 6a ed 57 97 a9 d3 88 42 d5 d1 7b a5 25 56 e8 13 b3 01 74 c1 54 47 20 e1 51 68 b9 98 c4 be da be a2 03 ef b2 b3 17 5e ab 78 12 5c b9 19 9d 78 57 e3 19 51 29 d6 60 25 24 fe 7f b0 2f 08 49 a2 6e 90 bd 8a a2 0e b5 41 a7 71 1d ef e7 c3 45 e7 e4 63 d2 3e 7a 5d 4d 3a 39 3e 90 dd 4c fa 63 37 97 a0 ad 34 48 96 7b ec 49 15 cb 73 c7 54 87 7b 49 03 84 8a ec 01 c3 f4 a6 6a 01 69 0a 0c ca cc 82 73 ef d8 58 da f0 87 73 41 33 58 3b 8c 3b 5d bd dd 95 75 41 56 64 9b 57 0a 00 c0 55 1e be f0 77 ca a0 4d 50 03 0f 06 bd d9 fe e9 c6 d9 d9 0b 68 e6 d9 9d 4c 0c eb 87 9a 83 f6 77 d7 df 21 8a 6f 5f 34 ff cb a5 91 08 66 61 d1 4f 76 e6 41 91 1d 2e 1f 06 8f 08 f6 9b ff 3d 83 ad 5a 3c a8 b9 21 ad e2 a2 da ce f1 9c ad Data Ascii: 5o7OjWB{%VtTG Qh^x\xWQ)`%$/InAqEc>z]M:9>Lc74H{IsT{IjisXsA3X;;]uAVdWUwMPhLw!o_4faOvA.=Z<!
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: bf 2b 35 f9 2f 51 43 2a 11 9c ab 5a d0 70 45 37 12 01 5d 4f 71 aa c8 b5 77 33 1e 9d 22 23 ad 02 15 de 1c 59 71 76 39 58 fd 66 c3 0c ec 11 ea 2a 76 e8 dc 12 eb b2 56 06 9b 90 b7 ca d3 67 ee 1f aa a6 a6 cf f4 46 89 9a 86 dd 70 10 0c ff 72 6c b2 72 31 bb 1d 44 2c 27 6c 84 7e 76 cd 8a 9f 3c d7 af ad 61 87 57 e0 ed 54 f9 38 91 4f 00 c1 ee 51 10 da 08 f6 a0 ed cc d1 e6 e8 e2 fd 0a 90 7e 35 3a 7c 0e f1 e2 38 1d 5e dd a6 0f 02 66 fe b8 bd a4 ae 87 ea b6 af e1 ad 66 98 f7 0a 1a e6 99 72 93 09 dc 8a e9 50 80 77 31 4d 9b 89 13 d8 16 ad 65 cf 53 e6 09 b4 38 ec 99 9d 4d c7 a2 4f 60 34 25 15 dc 59 a7 3c b7 b3 db c8 bd 39 39 f1 fe f7 c3 c7 f3 b0 75 0f f1 b9 5e c6 a5 3e d0 dd b8 17 4e e8 ea 8b 3e 9c a9 da 7e 2f f7 ea bd c1 50 22 08 c2 7f 14 a4 61 75 13 fa 58 b6 c2 12 8d Data Ascii: +5/QCZpE7]Oqw3"#Yqv9XfvVgFprlr1D,'l~v<aWT8OQ~5:\|8^ffrPw1MeS8MO`4%Y<99u^>N>~/P"auX
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: a9 c9 de f0 bd 0d 1a 4f 56 c7 68 a3 ec ed d7 78 d4 1e 8a 6f 8d 62 8c 6a ec 79 14 1c 1b a5 26 25 87 57 38 b0 4c 00 dc 8d 22 e8 89 94 84 56 5b 5f 36 79 28 12 b5 85 3a 0a f9 8b 9a f4 99 0c 21 9a 21 40 ed 93 5e 71 87 a6 21 6c 57 4a e0 1e 04 42 73 04 96 9d 2c 67 f7 67 e0 67 ad ff 8b 05 ca 87 f5 dc 0b 36 63 2f 9d 24 01 21 e5 b8 85 14 1e 8c bf dc 4f 71 f1 5e c3 c5 91 10 c5 6b c3 11 5c 01 a7 0c 84 27 db 55 95 e5 63 84 96 c5 bf 4c 6a f5 d9 83 4f ff 92 a4 d2 25 99 4d fe 74 d9 cf 20 c5 53 83 ee 60 ef 0a 7d 57 60 0b db 2a 1a 5f 84 ca a6 18 11 7e 98 32 5e 3e c1 ab 39 c0 81 17 a8 4a 7a 04 04 4c 13 c7 9c 53 03 b0 40 7d c3 cd 24 0b cb 04 fb f1 75 98 6a e0 24 1a 9b 3d 2e 00 0b 79 28 c3 73 63 80 4b 26 70 19 9e 29 43 0b 26 1f 90 54 72 c0 e0 6b 04 d7 e4 43 56 10 b5 e8 cf 3f Data Ascii: OVhxobjy&%W8L"V[_6y(:!!@^q!lWJBs,ggg6c/$!Oq^k\'UcLjO%Mt S`}W`*_~2^>9JzLS@}$uj$=.y(scK&p)C&TrkCV?
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 17 cc 7b 1f cd 47 58 9f 81 ea 81 ee 6e 7d 21 4d 77 ae 42 b2 98 5e d0 1b 4e 41 6d 4a ba 49 51 6d b9 6c e1 62 22 32 2a 64 d4 ca 53 c0 b9 59 c2 73 d5 a7 39 d7 16 50 9b 92 6e fb b7 d2 25 18 4a ee fe 05 6a da 9f 75 61 21 ad 42 ea 56 1c fd 0c 53 3a 29 19 ae d2 f7 ae ae 74 ce bd 46 cf 27 21 8d 4a 7e d8 ff ea 3c 40 7f 9e b2 cd 30 0e d0 72 d3 56 51 f5 d6 5e 29 bb 1e 35 e3 24 40 18 aa 65 21 63 f0 08 1b 81 3b 1f 4c e9 77 4a 94 7c 84 64 4f a8 4b 2e a8 c3 f7 6f 48 4a 26 8a dd ca 22 73 f5 f0 be 94 32 06 8f e5 c6 0d 7e 84 05 ba 58 60 e2 23 db 57 05 1b 6a 2b ac 58 4f 2e 38 ca 86 9b a4 63 b7 24 86 01 09 4e 8f 54 20 cc e4 ff e6 cf 7c c6 b7 e4 5f 0f 06 b5 a6 23 f9 12 f6 93 aa 86 39 c4 1f f6 0d 39 1d 39 b5 10 d3 83 ff 0a 60 3d d7 30 75 de e7 d8 76 6b 6e 82 22 78 77 f2 c5 03 Data Ascii: {GXn}!MwB^NAmJIQmlb"2*dSYs9Pn%Jjua!BVS:)tF'!J~<@0rVQ^)5$@e!c;LwJ\|dOK.oHJ&"s2~X`#Wj+XO.8c$NT \|_#999`=0uvkn"xw
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: f8 59 b1 c0 bd 88 84 3f 30 81 9b 21 b9 97 5e ce 17 56 b7 b1 b1 99 63 e1 90 a5 7b 26 57 c1 f2 68 f7 23 e9 38 f6 f3 63 7e 9a 04 a9 00 0d 07 ce e0 6a 8b 54 32 35 15 f8 48 3a 13 08 6f 33 81 96 1a 3c b7 8b 81 d6 de 1c f6 b6 db 40 4f 3e 4c f3 f1 20 34 42 77 ef a2 71 cc 39 11 d5 df dd 84 2f a2 c0 eb c4 d9 4f be fe 3f 79 48 a2 f9 e4 88 25 2d 63 47 8f 81 28 4e 44 5b 0c 93 a9 85 17 9b cf ae eb 73 4d d9 da 5f 7d df 8f ba c1 b3 97 a5 8e 50 ab db 98 09 70 dc a1 40 70 04 aa c4 7e 61 25 12 9c 8e e7 d5 4e ee a3 22 43 90 ea 22 3c ce 29 9d de 31 c6 d5 f3 ea d2 80 20 9e df 7a ed 7c e6 81 73 48 64 91 11 7f 0a f1 06 82 52 36 e0 06 33 73 de ee e1 1e 92 f4 41 4a 3d ab 94 ce 66 a1 0f fe 1a 18 03 6d d7 e6 ab e3 6e bc bb 89 8f 6d 4e 47 00 cd 79 f3 d7 f3 8f d7 97 e9 dd a7 36 e0 8c Data Ascii: Y?0!^Vc{&Wh#8c~jT25H:o3<@O>L 4Bwq9/O?yH%-cG(ND[sM_}Pp@p~a%N"C"<)1 z\|sHdR63sAJ=fmnmNGy6
2024-04-19 14:06:12 UTC	806	IN	Data Raw: be 8c 0b 55 89 49 1d 63 a0 f5 d9 46 9f 06 24 6f c4 9b bd 30 f3 07 f8 e7 d0 cb 32 27 20 c2 10 0a 55 bc f7 de ae d3 c0 1c 5e 1d 20 f4 40 73 0f a5 8c 73 3c b3 49 a7 79 a5 84 27 68 47 40 a0 86 13 45 d8 91 07 a2 7e b8 eb 5c 1f 55 93 43 02 34 8d 71 31 65 cf 98 46 c6 92 3d 1b b7 d3 32 ea f4 e9 35 36 67 21 cd 87 e2 c4 a4 f1 cc 7c 5a 14 4e 2c c6 5d a3 05 8f 71 b7 b0 e6 aa 46 9c 9e ea 09 3a 9a af 15 06 6f 01 94 54 37 d8 10 93 e3 2f ee 08 38 59 c4 ad f9 ee d3 33 b1 b6 de b2 53 36 06 11 43 59 60 ac 4a a0 68 3a 16 29 49 8e 92 34 ea e7 42 be d5 71 21 b3 3c a2 15 df 2a 85 65 e8 49 95 23 cd 1d de 32 d7 d3 b9 02 66 75 a0 f5 05 67 1a d5 85 a1 f5 2e 45 38 cb 3f e3 64 14 3b cb 76 77 df ff fb 65 c0 5b a7 22 d3 c8 b8 af b6 7c ef 8b 5d ef 8a 6c e9 b3 c6 bc 1a 35 06 43 ad d3 13 Data Ascii: UIcF$o02' U^ @ss<Iy'hG@E~\UC4q1eF=256g!\|ZN,]qF:oT7/8Y3S6CY`Jh:)I4Bq!<*eI#2fug.E8?d;vwe["\|]l5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49782	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1106	OUT	GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13388 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 44 34 00 00 57 45 42 50 56 50 38 20 38 34 00 00 d0 a2 00 9d 01 2a 28 01 28 01 3e 45 20 8d 44 a2 a2 21 12 1a 0d a4 28 04 44 b3 b7 70 b9 f8 88 57 cd 05 bd bb c5 cf 87 31 56 eb a7 f2 7f 74 de ec fd 40 79 80 7e 9f fe 9c 75 80 fe 67 e8 03 f9 17 f6 7f d8 cf 64 df f5 5f e9 3d c4 7e b3 7f 8e f7 00 fe 4d fe 1b ac 03 f5 77 d8 17 f9 97 f7 af 55 9f f6 ff b8 5f 04 9f b7 3f b7 ff 00 ff b2 5f fb 7a c0 3a 8f fa 35 fc fb f1 6b cc a7 e5 5f ce ff 19 3f bb ff d5 f5 7f f1 1f 92 7e 9d fd 97 f5 c3 fb 6f fc 5f f4 bf 0d 5f c3 f8 49 e5 ff f0 bf 99 7e e6 ff 0b fa 83 f4 af ec bf df ff bc ff 65 ff e1 fe af ef 37 ef bf e0 ff 28 bc e1 f8 27 fb 9f e5 17 f6 bf 90 2f c7 ff 8b ff 56 fe cb fb 0d fd c3 f6 bf dc 97 fa 1e d9 9d 3f fd 2f f8 0f 50 5f 4c be 55 fd eb fb 6f f9 6f f7 5f Data Ascii: RIFFD4WEBPVP8 84*((>E D!(DpW1Vt@y~ugd_=~MwU_?_z:5k_?~o__I~e7('/V?/P_LUoo_
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 83 1a 6f f6 df 24 a0 3b 6d 67 23 02 5f ed be 49 38 a6 39 0e 2a 92 ed 60 bd 74 35 f1 1f ff f4 42 f2 76 fb 08 b6 c6 ed 2d fd 38 48 93 f1 0d 93 7a 9c 2e 59 f1 37 e3 fe 3d 94 ba 20 b9 9c 2b 77 17 2a 16 d1 0e 14 c5 8f 4e c1 57 73 bc 0a 91 c0 39 f9 6b 04 4f 32 71 a3 14 c5 1f d8 a7 70 7c 9d 4b da f2 66 0d db 07 b2 0d fb f2 f6 7d a6 1e 1a df 5c cf b0 c4 d2 ee 74 7a bf 69 16 e4 04 c6 fb 71 da 7c 0b f5 61 a6 30 60 2f 4c 64 8e 76 89 a4 58 be a4 20 53 d9 d0 64 8b 92 c7 16 fa af 20 31 22 5d a4 39 a6 f0 1d ed 8e f7 43 4d 55 b4 3d 64 41 27 88 09 e7 cd 70 46 56 f3 8f 50 5a 3d 04 b2 70 8d 69 38 1e 22 2b ce 08 66 6c 58 3b 1b 0d 75 d5 b6 60 63 37 ee 85 b3 c7 1e 5c 44 1d 2f bd 37 ed 8f 30 3c 85 b1 9e 30 71 7f 05 fd 1f a0 c4 83 93 f6 57 ba 9d 5b 8f 1b d6 d8 4f d1 a4 74 18 af Data Ascii: o$;mg#_I89`t5Bv-8Hz.Y7= +wNWs9kO2qp\|Kf}\tziq\|a0`/LdvX Sd 1"]9CMU=dA'pFVPZ=pi8"+flX;u`c7\D/70<0qW[Ot
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 5f be 57 8b 7b df e4 0f b8 a0 df ef f4 f9 08 80 80 1d 20 84 21 b6 d0 40 25 d5 0f 8f 98 3e 63 77 05 49 70 c1 f1 84 07 7a 32 b0 06 dd 6e 04 35 b4 b9 ee fa 44 c2 91 ca 00 b9 2f d1 b7 5d 91 06 15 68 09 73 fc e5 11 63 b7 5d 0f 17 6f 50 08 a6 05 e3 16 36 56 fb dd 73 02 9c 23 c4 3c f3 a7 5a 64 17 c8 33 6c 87 72 bf d2 2f 29 1a 7c 7c 76 de 54 1c af 7f 8a a0 ea c2 bc dc c2 8f 62 aa f3 3b a6 96 4c 44 57 1f 2d 06 b8 8d 41 74 6a 8d 26 ff 51 d1 20 11 e7 af 6e 58 9a 41 07 83 1b 8e 3c f0 38 4c b5 33 b7 07 8e 6d be 0c 49 72 b6 1d cd 95 85 1f e9 82 e0 91 25 11 77 c1 fc 43 93 ad f4 22 82 91 67 95 06 f3 d3 4f 1c 18 a3 94 65 d8 cb a6 ab 97 cb b2 9b ef 31 ca 51 44 8b 4e 4f 60 d1 e1 89 33 33 17 e6 0b 6e a9 b3 39 89 38 a9 a8 e8 aa 24 dd 52 20 37 0a 6d 90 ce f4 39 17 81 be b4 9f Data Ascii: _W{ !@%>cwIpz2n5D/]hsc]oP6Vs#<Zd3lr/)\|\|vTb;LDW-Atj&Q nXA<8L3mIr%wC"gOe1QDNO`33n98$R 7m9
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 86 91 53 a7 44 66 f2 ad a1 df 18 9b 67 6c 39 5d e4 36 93 93 db c6 bf 3b 8e ac 0e 7c 74 32 ec 39 c6 2d ea 9a ee 28 fd 3d f9 cb d5 86 b3 71 c6 1b f6 42 ad ac bc 08 18 48 a0 3f 2c 61 4a 09 f8 78 6d c9 7a 19 2b 7c 9d 02 64 dc a5 de 92 cd 64 f0 87 4f 5a 49 e8 ea 1c f3 75 94 ea b3 64 cc 7e 74 65 0b 73 be 8c cb ba 6e 5f 61 57 cf 51 39 f3 b8 3a 29 bd d5 25 2e 59 8b 79 a1 19 0c 68 5e 98 a0 fe 5b 32 ff 64 21 0a 1b 1b a9 a2 f3 7d 23 6c 11 6c fd a6 e6 22 81 f9 e2 1d 4f e8 b6 11 2b 76 6d 05 66 11 6c 9c aa fb f1 80 e6 85 84 48 a7 ef be f7 75 01 f6 ed 7d 75 ff 55 a6 1c 34 de 3e 1e 87 1a f2 23 3f ac 3c 85 a3 33 a1 3f 6b 09 b1 64 41 82 e1 db be 8d 15 23 cb 99 47 19 4a 49 5f e1 06 ed ac 4a 40 7a ef ea 75 6f c8 ea f4 23 40 8c 13 fe df 46 f7 fa 2f 60 f2 b3 41 05 1e 00 84 40 Data Ascii: SDfgl9]6;\|t29-(=qBH?,aJxmz+\|ddOZIud~tesn_aWQ9:)%.Yyh^[2d!}#ll"O+vmflHu}uU4>#?<3?kdA#GJI_J@zuo#@F/`A@
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: f5 0f 7c 8e 3a 96 af a7 b8 9d e5 77 c8 c0 95 79 d4 41 4a f2 c3 b4 ad 7a 88 55 61 92 c6 70 97 4e f5 4a ed ff 43 70 fa 50 cb 41 02 42 2b d6 02 41 1b 58 61 9e e2 23 f8 56 20 40 8f 94 bc 56 30 7f 44 50 4a d5 7e be 18 3b 6b ba 94 17 92 73 d6 62 c0 d7 84 e6 1c 37 ab 72 ba e4 90 fa 17 22 f1 97 60 9c f9 f7 9f ee aa 3e ac 5a 92 26 0b f3 e9 43 85 93 6b 8a 81 47 50 2a 86 d4 75 a6 36 fb eb 75 97 c2 de 85 22 ee 8a ac f8 57 49 d1 47 16 85 ab be 7e 79 d2 97 94 4d 0b 1d d8 1d eb 0e 36 54 85 6b d5 46 03 cc 14 24 05 08 9a 0a 1c e6 65 c8 d5 26 c0 11 c7 a5 27 66 c0 57 96 27 d3 87 50 df a1 2f f7 e6 04 9b 7f 7a 24 5d b6 61 fc bf 8e f8 53 f3 67 cf e4 e6 f8 45 4f 47 70 77 dd ed 90 1b f0 2f 52 99 c7 8d 68 cf 5d a3 28 e3 8f f8 af 0f e0 af f4 be 44 94 3f 67 c8 d2 8b d3 24 dd 22 71 Data Ascii: \|:wyAJzUapNJCpPAB+AXa#V @V0DPJ~;ksb7r"`>Z&CkGP*u6u"WIG~yM6TkF$e&'fW'P/z$]aSgEOGpw/Rh](D?g$"q
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: dc 31 c1 f7 1b 4b 1e 78 38 60 f6 24 86 ad ef c5 be 4b ea f9 1d 92 22 14 d5 4f f2 66 c5 a2 bd 30 69 9e aa 06 c3 04 ca 1a 91 d2 8e e1 25 a1 28 28 3a 5b 27 fd 0f 79 3d 14 57 83 41 5b 2a 64 e8 71 ee 09 3c f7 6f d8 d1 30 5b f2 dc 04 32 31 84 0b f5 b3 65 b7 c7 2b ff 13 34 ae a0 e9 3f b2 1a b7 a6 de e8 2e 56 53 34 9f 1e c6 78 9f a1 e0 d2 8b d1 fa 82 ce 8d 37 9d eb 2b 03 86 f6 a1 ff 26 3c 5d ec 25 4b 65 99 41 cd cc e0 71 93 92 3e e0 66 ec 53 98 b9 62 3e 58 b2 13 2e d7 95 f3 a9 9a c6 42 06 c9 df 85 ce f7 68 46 4f 11 26 78 4e 73 fe 44 51 55 5a 5b 82 2c a1 17 95 4a 55 e2 d4 4b 00 10 ea e1 a3 4e d7 fe 93 e5 36 6c 76 72 78 a6 98 bf 2c cb 10 56 f8 9c 6a 06 1a b8 11 83 95 73 0d da d7 e9 6d b7 70 3e b4 f2 cc 85 45 c4 19 cd 79 a6 d2 d2 63 e6 b7 5b d0 f1 a1 da fc e5 1a f7 Data Ascii: 1Kx8`$K"Of0i%((:['y=WA[*dq<o0[21e+4?.VS4x7+&<]%KeAq>fSb>X.BhFO&xNsDQUZ[,JUKN6lvrx,Vjsmp>Eyc[
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: fb 67 ce e7 d3 63 db 7e 16 0c 13 bf 4f c4 f1 9e 2b fd 7b 80 b3 39 c1 c2 e8 e8 32 58 f6 de c3 1d ba 32 f6 90 7d 14 26 a1 7b b5 b9 4a 49 97 b1 f8 f6 51 d9 52 e4 30 a2 6a 58 fc 9b e2 74 ff 40 a8 95 3f cb 84 a2 8a 56 70 d7 82 a9 36 b6 f0 45 15 7c ed 86 15 d1 7f bb e0 92 bd 30 11 48 cf e3 64 66 8b 86 df 80 bd 35 f0 6e b5 bc 08 d3 3c 0d 4e bd f7 e2 9d c9 b9 ef f6 fe 64 7c 52 22 4a 68 3d be 61 5d 56 0f d0 d0 b8 c3 0a 56 a9 61 ba cb 45 49 a8 1e 4d b2 f4 42 70 df a3 47 0b 2a d6 a7 e7 88 76 82 bc 20 56 2c 0b d4 b2 82 43 9d 56 e7 35 c0 a8 60 89 20 1b 4c 1c 0d 96 b2 ae 26 66 fb e9 d8 e7 49 ba 55 14 53 b2 c8 d2 46 c3 aa 9d 97 95 b2 c8 9e 52 b9 f1 af 4b 15 23 b3 9f 46 59 40 ef 72 fc 8e c2 ad 6e 71 68 66 bd bc 20 72 58 93 99 52 be 48 93 4b f8 d5 3b f3 2f f2 68 1b f5 60 Data Ascii: gc~O+{92X2}&{JIQR0jXt@?Vp6E\|0Hdf5n<Nd\|R"Jh=a]VVaEIMBpG*v V,CV5` L&fIUSFRK#FY@rnqhf rXRHK;/h`
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: a0 22 c3 51 6d e0 1d 59 92 c4 09 27 0b 60 03 b8 bc fc e0 a5 3f 20 0e 19 f3 74 55 08 ed 1f 7f 9d 8a e5 c8 11 ef d5 e9 41 b5 7b a5 49 1c 4b 84 63 2f 90 b5 85 6a 01 ec 68 a7 99 d9 9c 72 3f d8 3f f6 07 ea 48 7f 5d 9a 25 f9 12 0f dd ab a5 4e 14 da e3 be 54 02 34 e5 66 54 e2 65 e4 eb 00 c8 7e e9 d8 da 93 53 fb f3 6d ab 1c 6a 73 16 3a 7f 2b 22 e5 39 f9 21 8e 4c b4 87 2b c5 34 67 0e 28 6f 12 02 32 62 28 05 b9 c5 a4 83 a1 40 29 e3 04 24 2e 36 c7 79 36 86 65 66 2f 35 58 e1 94 bc 65 d5 e4 44 53 b6 ea c3 a6 df 22 2e 71 d8 53 8b cd e9 f8 7f 33 75 60 20 5e 5e 7d 3b 5b 7f 83 09 31 bf f0 ce 65 6d 10 54 2b dd 7f 13 ef 88 37 6c c8 06 7b b8 83 63 47 6e 08 76 a7 22 c9 34 97 07 cc c7 7e ef f6 f0 71 a5 2f 47 7e 80 df 59 7b 9b 31 8e dd 31 92 2c d4 cf b5 76 71 de 08 2c 3e a0 53 Data Ascii: "QmY'`? tUA{IKc/jhr??H]%NT4fTe~Smjs:+"9!L+4g(o2b(@)$.6y6ef/5XeDS".qS3u` ^^};[1emT+7l{cGnv"4~q/G~Y{11,vq,>S
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 31 5f 00 d8 9c 17 42 c5 c4 b2 09 0b 24 17 8f c5 ac c4 e2 99 29 fd 12 7e 92 ce 09 1e c6 44 4b 74 c9 fd 40 3c 69 bd c8 22 1c 2f 05 9c 3a b8 e7 59 ef 4d 24 d0 e6 a5 6f 72 5b ac 7b a8 bb 64 af e4 3f c8 f6 08 f5 17 90 61 92 58 73 30 8e c0 4f 04 9c 9e bc f0 d0 52 a9 e3 d7 92 7e fd f0 c3 b6 a2 98 29 77 49 0f 79 52 a4 35 bc 25 14 e4 a2 a7 fe 89 03 d3 68 69 e8 f9 19 26 a2 26 6a 59 cc 4a a5 af ce 72 e5 cd 84 cb ff 3a be 51 2a b9 2d 02 29 2d 54 1a 72 86 f4 04 2c 12 1a 79 0c c9 c1 1e 33 21 4c 77 0e 4a f2 dd 81 34 e7 d1 6d ae c1 20 73 16 a6 dd ca 91 5f 21 c6 98 77 6e 76 1e 59 75 3f c4 e1 fd e0 03 54 c2 7c 8a fe 96 92 68 70 1e e8 5c 65 0e 25 e2 c5 fd 2d 89 ea c9 e5 89 c0 35 a6 26 c6 b6 b7 e6 d6 6e ac 05 24 1c 51 81 05 9a c9 d8 ab 25 4a 7d 9f 56 a6 6a ab ce 89 20 2e c7 Data Ascii: 1_B$)~DKt@<i"/:YM$or[{d?aXs0OR~)wIyR5%hi&&jYJr:Q*-)-Tr,y3!LwJ4m s_!wnvYu?T\|hp\e%-5&n$Q%J}Vj .
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: e5 38 99 89 88 73 80 4f c6 fb 8a 13 00 37 f7 0a 91 9b b3 ca e8 05 a3 ef dd dd ad cc 0a 12 73 14 65 a5 51 f5 5b 1b bf 26 97 61 88 b6 72 8f 3f a2 e7 38 1d 65 e4 17 35 86 91 67 50 ba 3a 4b 50 92 b8 c6 ac 41 0e 1e a4 c8 24 47 91 0e cb a2 e0 43 28 83 f7 dc 4d 56 e5 5a a2 94 96 c3 93 e6 e0 1c 37 4d d0 bc 04 9f e6 6d 0d 7d e0 aa b1 a3 70 31 dd 3e 21 d1 72 9c 2d 3a 77 a4 5b c7 7b 40 86 13 da 07 55 cd b7 d8 eb 6f e8 f4 dd e9 7a bb 81 9b ae 3e bc a7 37 24 5a 5e 51 3b f0 69 78 bd 23 58 25 57 33 90 77 e9 37 9e e8 a1 93 d0 89 a7 21 1e 71 de 8e 54 25 33 97 d5 d2 8c c7 e8 ff 3c 9d 1c 3a 4e f3 15 18 50 e8 02 9b b7 c1 10 86 ae 00 5b 51 f6 9f 8d 6a 9e c4 a4 dc df 5f 2b c8 2e e9 9f 65 6d 01 bd eb db 4c 65 8e 9c a1 19 c1 56 cb de a8 70 f7 ac 18 21 1b d1 99 53 af 79 10 37 9f Data Ascii: 8sO7seQ[&ar?8e5gP:KPA$GC(MVZ7Mm}p1>!r-:w[{@Uoz>7$Z^Q;ix#X%W3w7!qT%3<:NP[Qj_+.emLeVp!Sy7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49781	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1103	OUT	GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34202 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 92 85 00 00 57 45 42 50 56 50 38 4c 85 85 00 00 2f a5 c0 49 00 4d 40 8c 64 2b 6c 93 bb 8f 65 be 1e ee bf 60 90 26 25 44 f4 7f 02 ba bb e7 ac ee 9e 6f b7 9e 73 76 77 cf 39 ef 9e dd a7 3e f5 d6 a7 a9 76 b7 da b3 ed ee 7b f6 9c 0e 13 d5 24 e9 e3 9c dd 73 f6 fb b9 cd 7f e8 e6 65 c2 76 df b7 50 55 a8 17 24 c0 4d 32 54 80 2a e6 c3 92 73 12 88 63 0c 0f 05 79 ac 51 c3 2a d9 03 90 c4 37 52 1b 49 55 8d 9c 58 39 70 18 24 40 ad e0 8b 6f a2 7a 19 a8 cd aa f9 75 ff 23 72 dc ae 56 a1 48 c8 21 40 b7 de 43 4d 12 92 43 11 17 cb 3c fb 40 48 12 4c e2 41 e5 ef 8f e7 03 44 de 6f 55 71 59 58 4f 03 a9 c8 eb a5 ca 50 ed ee 59 6a eb 02 ae b1 12 48 f2 35 92 6c 73 9a f8 7a 11 54 47 40 73 ca ef 77 1d 46 f9 72 7d 3d 50 40 81 09 f1 73 52 17 7b f6 cf 8f 0d 78 22 89 47 a8 02 Data Ascii: RIFFWEBPVP8L/IM@d+le`&%Dosvw9>v{$sevPU$M2TscyQ7RIUX9p$@ozu#rVH!@CMC<@HLADoUqYXOPYjH5lszTG@swFr}=P@sR{x"G
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 0a 16 14 af f7 0b c5 e7 ea fd 98 01 47 e1 d3 7b 9f 3e 18 97 82 82 37 54 34 b7 82 b1 be 3b 04 02 83 1b 68 c3 ab 77 63 5e 8f c1 4d 01 40 c7 76 e2 c4 ea d8 51 3c dd 6d f3 76 e2 cd a9 a1 3a 17 4f 00 30 dc 4e c8 e3 6f de 1d fb 09 80 82 e6 74 84 d3 35 e0 21 0a 56 1f 8f 27 ff fe f3 e2 0c 67 61 c1 d2 00 50 01 50 fa 56 fa fe d6 f7 47 df 9d b9 de 58 20 ee 4e 42 07 ee d1 e6 11 3e 14 03 1f b0 03 76 34 9c b0 e1 c6 a7 27 79 da ef 91 9c bd 6b 00 d4 7d f7 7f 37 76 b9 c2 71 bc 08 ed c9 7d 17 a3 d2 0e 73 97 cb 09 f7 10 c0 d0 7b 34 90 f2 09 3d 00 a0 eb d6 ce 28 be f0 09 6d 68 68 c0 86 ed 04 db cc 87 16 b1 78 cd b8 d2 c6 70 19 c0 d2 87 16 cf 40 68 68 f1 bd 8d 61 1b 80 b3 2f df 05 d0 df 8d ca 15 48 4e b9 c9 36 31 a6 b2 4f ab 22 78 f8 b4 b6 4b 00 6c d7 e7 ee 07 7c d7 0c 9d 8e Data Ascii: G{>7T4;hwc^M@vQ<mv:O0Not5!V'gaPPVGX NB>v4'yk}7vq}s{4=(mhhxp@hha/HN61O"xKl\|
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 a6 74 a9 a6 33 2d 56 ae c1 d6 5d 29 8a a8 53 ce 94 4a 69 39 2d 4b 15 51 27 b6 31 84 5a 55 53 2a 6a ac d2 42 2a 39 d7 89 33 23 29 2d 33 05 ea da b9 ba 30 29 0e a6 b3 0d 48 d7 74 a6 85 96 24 57 2f 23 d9 b9 d2 19 95 81 a8 c8 a0 28 ae 34 ce 95 05 a2 b5 48 07 61 dc 92 44 87 66 57 8c 04 4e 65 d7 bb 42 c3 72 37 0b 4b c8 23 b5 85 a1 9c b0 47 58 11 96 89 90 64 e7 cc aa 91 ec a4 b8 62 86 25 65 cc c8 a1 24 a7 c7 a3 d1 c0 b8 92 3a 4a 92 73 da 59 08 67 b5 33 2a 16 cc 5a 04 76 aa b8 a2 77 76 08 27 7a 16 01 a9 1b ad 1a 10 64 95 4e 39 8a 24 f5 54 12 0a a9 2b 5a c0 88 4a cb a3 c2 29 b3 3c 23 84 e4 8a c6 52 74 14 a3 20 4c 18 85 a2 24 27 8d 72 b9 88 0e 20 8a 4e 55 09 42 a1 4c 50 25 0e 03 8e 62 14 85 08 47 85 d4 54 87 41 Data Ascii: XT\t3-V])SJi9-KQ'1ZUSjB93#)-30)Ht$W/#(4HaDfWNeBr7K#GXdb%e$:JsYg3*Zvwv'zdN9$T+ZJ)<#Rt L$'r NUBLP%bGTA
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 65 31 66 28 89 12 8a ff 72 aa 72 48 be e5 46 c8 85 8a 51 c1 62 09 69 29 9d e5 b2 bb ba 11 82 02 66 0a 75 c8 a4 5b 51 a1 04 a6 94 24 51 26 30 a6 a8 0d 4e 8a 24 ea 5c 5d 28 52 29 0d 6a 44 08 ae e9 94 54 0a 9a 64 4a 77 b9 cb a5 9a 3b 2a 5d 2a 95 22 29 25 35 50 d3 09 55 3a 55 0a 52 21 36 25 05 95 d2 91 25 22 36 43 a6 54 2a 95 32 52 12 1d d5 00 53 8a 2a 05 53 ca 54 48 72 51 23 34 9a a4 46 4e 2a a5 6a 33 43 2c 19 a3 a6 ac 58 4a ad 65 06 9c da 41 67 94 88 16 8c 98 b1 b1 58 8f 32 89 a9 35 d0 c4 94 d3 b0 31 d5 58 42 4d 94 44 19 a6 53 a6 b3 a8 e0 1c 81 3a 96 d2 cb 89 18 d5 51 31 12 a9 ec cc e9 98 88 52 6d 6c 8d 2a 75 28 8e d0 d4 f8 cc ee 50 4a 95 da 7d b6 21 35 6a 9f 69 64 aa 71 d0 12 ba 24 d5 38 da 28 04 89 74 28 75 92 d5 7d 44 a5 52 66 79 82 14 82 69 21 49 42 bd Data Ascii: e1f(rrHFQbi)fu[Q$Q&0N$\](R)jDTdJw;]")%5PU:UR!6%%"6CT2RSSTHrQ#4FNj3C,XJeAgX251XBMDS:Q1Rmlu(PJ}!5jidq$8(t(u}DRfyi!IB
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 25 69 8d e9 71 c2 04 9d 58 23 60 3a 17 6d 6c b1 4d e5 84 4a 86 ca 2e 98 a4 29 a7 55 1b 00 7a b3 9d 52 a6 06 73 0a 86 6c 70 62 4e 64 b1 94 ab 29 46 b3 54 c7 59 2d 75 61 56 9d 0d a5 8e 7d 95 af 94 5e 96 b4 b5 6a 67 32 89 bc 7d 4a 99 ce 82 37 cc 01 37 f9 ca ec 24 53 33 ca 47 aa 46 d2 f5 94 6b 10 3a a7 b0 63 21 16 d1 76 a1 44 95 9c 72 46 80 3a 65 e3 62 d9 7a aa 9d 65 85 80 8e ab 1a 09 dc 4c d1 82 20 9f b5 c7 92 54 ac 56 d5 41 4e 5d ef 8a 3d 90 96 2a 1e c1 10 60 ab 72 26 91 02 fa 4e 29 41 f0 55 d5 41 d5 76 ba 95 c7 94 54 44 7d ca ea a8 53 6d 2d 76 d0 d4 91 f9 46 49 a9 c8 b7 4a e7 4a a9 1e aa 36 2a 5f 00 11 00 51 d8 d9 81 d1 b1 ab 06 48 65 b9 0d 06 ac 20 0a 45 96 32 4b ba 64 f1 8c 99 b8 28 2a 11 26 a8 14 56 ed 10 72 44 a1 b8 b3 28 b5 51 81 49 38 17 04 a1 60 4e Data Ascii: %iqX#`:mlMJ.)UzRslpbNd)FTY-uaV}^jg2}J77$S3GFk:c!vDrF:ebzeL TVAN]=`r&N)AUAvTD}Sm-vFIJJ6_QHe E2Kd(*&VrD(QI8`N
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 0b 1b 36 5e 18 5d 00 54 85 2a 7a 0b 14 16 50 a9 b0 80 70 1d 83 af 6d f8 90 84 29 5c 00 9f fd dc 8d bf 3f 72 14 b0 c8 78 8b 44 c5 87 cc 24 02 03 50 65 92 b8 d8 88 04 01 c0 b9 8c 9b b3 8c 00 11 76 e2 08 83 2a 28 23 0a af be 67 3d d2 b7 b7 2e 01 6f 88 7a 8a 62 a1 ec 01 06 61 9e aa 9c 0e e9 7a a6 da 36 d5 10 b9 ed 2a 5a 6c b0 e7 b2 c7 9c dc c9 d1 76 51 11 d2 d9 ae d2 3d 57 6e 8f 16 a7 48 5b 5c b5 0f 95 b6 92 d3 64 c9 39 60 46 3a f7 4b 6f fb 76 b4 b5 8c 48 20 c5 ca 16 53 8e 06 31 a5 66 bf 72 f3 16 06 b5 68 1a 5d 34 a8 05 ea 03 ab 34 6c 63 0d 5b 37 12 4c ed 6a f7 f9 21 23 62 03 8e 6a 41 60 5c 14 11 2e b4 85 81 49 0a 39 e4 22 a6 30 a5 ae a8 d5 bd 47 e6 d6 5d c9 84 49 2c 43 34 62 04 98 c4 ca b8 8b 3d 18 62 0a c5 a6 dd 92 8e 63 54 ee 9a f4 05 e7 be 11 e4 ec ee ec Data Ascii: 6^]TzPpm)\?rxD$Pev(#g=.ozbaz6*ZlvQ=WnH[\d9`F:KovH S1frh]44lc[7Lj!#bjA`\.I9"0G]I,C4b=bcT
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 67 e4 1d ef 78 f5 b6 cb ae 4b c7 f6 12 09 31 5b ef d9 91 6f 3e b0 66 8a 63 5b a8 c7 5b c9 94 bb 2d b2 98 9a 8b 61 8d a7 28 f5 53 62 73 31 9e 9b d9 6a 63 bc ab 99 57 21 25 2a e7 00 61 a4 eb 14 d5 a5 ce 76 30 53 8a 4e a8 34 8b a9 18 c9 b8 04 83 18 1a e2 8f 3e f2 8f 82 8a c1 c4 bb 9e 68 46 d5 88 c7 af 7f f5 ed 1f 3f f9 bd d8 bc 6b d9 8f 3e fb a1 97 bb e7 ce aa d3 e6 7d cf 3b 17 02 20 25 00 b0 b2 20 01 90 b2 26 ed 13 40 4d 5c bf 5c 75 86 3e 62 25 d5 71 d8 b1 e3 39 64 5d e2 72 38 4f 4e 4a 70 de 73 a0 57 eb 43 f7 3f 7b 76 74 e7 83 b7 cf 3d 8f 87 7f f2 d5 81 ed 9d 3f 65 79 0c ca 93 aa af 10 4a dd f7 7c ea aa 2a 8a 02 d5 51 50 34 1d 9b ab 74 95 a6 3a 78 f5 c5 68 e2 c3 b8 0a 50 40 d1 e0 eb 00 f4 45 cf e1 eb 8c 53 5a af df a5 10 90 20 83 4f e2 fa b9 0d 15 08 a3 ce Data Ascii: gxK1[o>fc[[-a(Sbs1jcW!%av0SN4>hF?k>}; % &@M\\u>b%q9d]r8ONJpsWC?{vt=?eyJ\|QP4t:xhP@ESZ O
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 3c 89 1b 99 25 75 83 84 93 49 56 8a a9 20 45 08 5c 56 88 a3 5e 41 92 ac cf 4c ba 38 93 a0 26 2e ad 86 a6 4a 6c 57 cf db fd f1 de eb ef ff e6 a3 25 b3 ef 9f 3f f3 48 55 63 63 41 c1 05 11 f1 94 d4 86 b5 5c 11 9a 00 74 a7 65 c8 e7 45 a1 07 73 59 c3 56 89 db 88 b3 84 05 30 a6 9a 87 94 e3 04 28 e8 68 3a b6 4a 82 1c b0 3c b1 50 a3 a9 34 11 32 9e 11 d7 ea 39 de fc 18 ff f5 83 c7 5c e4 85 17 97 a5 ee 21 fb 38 67 7e 48 37 d1 46 8b 09 83 aa cd ba ab 78 4a e7 88 a8 86 ee 2a 45 52 55 bd b2 43 6e 15 c8 b2 55 a5 c4 d4 14 cf ba 5d 58 65 ed e7 ee c6 2d 45 59 2f 7b 96 25 57 6b cd b3 2e 6d ac d0 af 17 db 37 99 14 8a 1b b5 44 97 94 55 19 ac bb bb c0 28 40 59 57 c9 6e bb 10 c0 87 d6 99 98 10 4d 8c 69 20 00 d6 d0 11 08 d4 e4 32 c8 31 86 01 e4 72 83 04 08 92 aa 64 ca 06 b9 2c Data Ascii: <%uIV E\V^AL8&.JlW%?HUccA\teEsYV0(h:J<P429\!8g~H7FxJ*ERUCnU]Xe-EY/{%Wk.m7DU(@YWnMi 21rd,
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: fe f8 55 5d ba 78 65 d9 e2 5a de 7b 51 dd ad 1b 8b 8a 52 cf ae f8 2a 74 f6 b6 f2 ee a8 d6 ec aa fd 85 ae 5d 52 f2 51 b5 6f a9 52 ed 2a bf f1 76 2c 82 77 67 0e 1a 9d 8f 96 76 87 5a 51 dd 7d 84 b5 ec a8 ad d2 31 56 6e cf 32 8f b1 0d 23 5f 5f 57 69 62 c9 17 b2 33 8c fd 02 a7 3b 2d f9 c6 f9 d2 d6 74 c8 5b e4 64 bc e4 03 ed 61 32 f5 45 79 d3 7e 27 4d ea 0d 7c 98 6b ea 89 6f 9f bb 69 a7 1d 68 bf 4c 1d 6b c6 3e 1d f5 d5 30 3a e5 bc 3b a5 d5 a6 f6 2b 9d d3 1d 4b f7 91 f3 65 ea 30 9d f3 63 a4 25 94 37 ce 23 55 ea dd e7 bc 19 3b e9 a5 eb a7 73 3e 57 db e4 ad aa 5f eb 4c ac 75 db 32 aa a5 9c 3d 8b b0 38 ad 77 b7 8d 31 a9 5e af bd 9d 92 29 a7 7c 75 f7 01 2b 79 d6 6b 36 46 1d eb ae 6f ad a5 32 a9 59 77 f5 24 0d 6b d1 a8 0b b3 ea b6 43 54 38 5d cf ba bc 46 a5 ab 9e a2 Data Ascii: U]xeZ{QRt]RQoRv,wgvZQ}1Vn2#__Wib3;-t[da2Ey~'M\|koihLk>0:;+Ke0c%7#U;s>W_Lu2=8w1^)\|u+yk6Fo2Yw$kCT8]F
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: b9 a9 14 85 1e a0 6a 54 a2 02 df 14 b5 34 9a 4f 0a 1b 53 52 89 2f 75 24 51 74 da 14 05 c3 06 79 ba 11 4a 45 cb 4d 21 8e 4f 4a 27 a6 28 a8 8e 92 9e 2c cd 49 d3 51 01 4d b5 42 e5 42 ae 6a 2e 17 e5 2c 1b 5c c4 21 74 eb 22 55 10 ab 6b 0c 60 72 4e 4f f5 7e 06 86 48 5f 3f 53 b5 4f f9 72 ef ad ab 1e 49 dd 7a 16 9f 98 93 90 db c7 5d b6 8d d5 ed ab 7b fb c8 74 ce 5c f9 08 6b 69 4b fb 6e 57 3b 25 26 7b aa f7 c1 35 19 57 bd 37 95 31 6d f1 1e 77 d5 37 ca d8 ac ca bb 54 b3 36 8b 77 e9 0c 3b e6 dd 68 a3 49 ea 5b cb be d2 09 a7 dc de 51 eb 69 8f f6 d3 7c 1d e5 a4 9e 86 fd 74 30 74 68 bf 0d 9d e4 a6 f3 9e d2 d6 58 72 a8 7c 80 c3 a0 7c aa 72 94 0c 5f 16 1f a9 26 5b 8b 0f b6 21 a8 fb e8 f2 b6 94 70 54 de 7b ac d1 b8 c5 4f 57 d5 5b 2c e7 ab e5 fd 65 d4 54 af c5 5f 55 f5 ed Data Ascii: jT4OSR/u$QtyJEM!OJ'(,IQMBBj.,\!t"Uk`rNO~H_?SOrIz]{t\kiKnW;%&{5W71mw7T6w;hI[Qi\|t0thXr\|\|r_&[!pT{OW[,eT_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49783	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1105	OUT	GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33456 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 a8 82 00 00 57 45 42 50 56 50 38 4c 9b 82 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 74 72 cd 53 1e f7 e4 1f 70 f7 f4 5e 08 11 fd 9f 00 db ee 2e db bd 3b b9 bb 6d bb bb 1f b7 bd f2 ca 93 bf ba 2c b5 d5 5e 3c ed b6 8f 23 4a 2a a9 85 3d b9 db fb 3d b5 7f 6d db 6c 26 4c cf f3 08 6a 75 41 02 3c 24 11 49 0a 40 1f 43 14 9b d1 71 1c cd 90 14 b4 d0 ad 3a ea 50 55 92 f0 3d 3e 24 a5 04 64 51 75 64 62 29 01 4c 07 49 18 d3 7a ba 93 40 36 46 55 f5 2d 69 0a 59 a9 ea f2 62 f0 3d 02 d8 92 c8 2f 45 04 a9 a2 d6 fa 90 c2 e6 42 d2 5f 76 c6 04 91 94 00 49 3e aa 22 25 7c 47 07 e2 1f 24 71 48 30 76 06 70 1d 23 d2 98 77 ba 15 08 80 a7 31 08 d2 06 50 74 de f7 92 a4 1d 21 dd fa 09 a2 73 ef 0f 48 92 f3 65 87 02 92 44 4b 28 40 02 49 b2 ef d5 77 82 ad 4b d2 b5 39 42 ce f3 bd Data Ascii: RIFFWEBPVP8L/IM@lHtrSp^.;m,^<#J*==ml&LjuA<$I@Cq:PU=>$dQudb)LIz@6FU-iYb=/EB_vI>"%\|G$qH0vp#w1Pt!sHeDK(@IwK9B
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 97 5b f8 5a 3b 0b 04 1e d1 d0 9c 36 a7 63 fd 00 70 bf 10 ec 3c 77 0a 02 8f 80 d6 58 3c 8c 71 06 70 6e a1 87 1e da 46 df ea 21 64 92 49 26 05 69 e7 81 70 19 00 e8 18 03 80 de 42 8b 75 8e be da ba ea 5a 00 00 5c d2 f9 6a 74 6c ac e3 1c 02 de 97 cf e5 6d 79 5b ab 3d 6c 3e 3b 3b a1 39 0d 97 26 00 86 4b 00 1a 7c 7d 89 f3 7c 71 cb e7 7a dc 37 00 04 4e 4e 00 02 3b c0 04 7c 0e 2c 9e 01 a4 cf d2 8d 74 2b 3d 0a d6 90 40 a4 90 90 e3 bf 76 d9 7a 74 0a 70 f9 e8 f3 5f 1f 11 53 c4 14 31 45 4c d9 f4 cf 94 4d 11 93 7d 3c 01 2c b1 2c 00 68 f0 eb d1 4c 6c 1e 60 a7 09 b0 c4 12 04 d0 5c 03 18 36 6c 58 b7 31 eb d6 ad 0f 00 03 10 c0 e7 3e 8e 3f 19 43 b7 6a cd 9a 6d 0c 60 d5 61 bb 03 f6 0b 4c 00 9c 01 e7 c4 7f 5c 6a 26 00 c0 8f 4b e5 e4 9c 50 8e 00 4c 07 18 0e e3 61 3f 40 7d 02 Data Ascii: [Z;6cp<wX<qpnF!dI&ipBuZ\jtlmy[=l>;;9&K\|}\|qz7NN;\|,t+=@vztp_S1ELM}<,,hLl`\6lX1>?Cjm`aL\j&KPLa?@}
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: b6 25 49 42 92 f3 b4 56 9d ff 8c 74 18 3a 85 ba d6 77 16 d3 92 24 c9 92 14 a9 45 71 5e 8e ce 27 ec 33 3d 26 80 ce b6 6d 6a e3 ea 1d 90 21 b6 cc 14 66 66 a6 3e 39 f4 07 4f 8b fd e9 c3 cc cc 6c 7b 49 66 ad d9 82 29 64 cd ee 64 e5 3e 22 26 e0 ff eb ff a1 0e 28 96 4a 77 42 85 74 a9 53 02 25 e9 4a 27 25 2a 75 4a 4a 77 91 e0 2e a4 53 81 4a 95 c2 51 4c 0a a9 54 2a 44 a9 22 00 01 09 00 ca 16 83 25 80 24 50 2a d5 40 a7 04 ba 98 a2 fb 54 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d a8 54 29 95 4a 17 4b a5 bb 90 02 fa 44 4a 1d a8 54 ba 13 aa 14 a2 a4 44 1d 25 92 44 85 54 aa 40 a7 a8 54 54 50 a9 53 28 29 a5 4e a5 22 91 4a a5 4e a1 54 71 c1 77 01 25 2a 95 4a d5 38 8d 19 e9 8a f5 e6 74 a4 d8 60 b5 53 8d 84 ac 0b 3a 3a aa 91 b9 05 41 e5 dc c2 a6 52 54 ab 18 29 aa 29 57 77 Data Ascii: %IBVt:w$Eq^'3=&mj!ff>9Ol{If)dd>"&(JwBtS%J'%uJJw.SJQLTD"%$P@TTDTDT)JKDJTD%DT@TTPS()N"JNTqw%*J8t`S::ART))Ww
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 21 04 44 62 15 0a 83 58 a0 58 96 50 21 70 a9 04 a8 14 c5 42 92 65 21 87 42 55 e3 0d d8 bd 94 69 09 dc 52 c6 64 ca 0b 69 74 4d a6 b3 9d 0e 4d 27 94 53 b6 29 55 ec 96 ed 76 ea 86 2b ec 74 ca 54 d0 75 04 ad 10 da e7 dc a8 52 8d 72 14 6f 48 e9 ea 3e d3 a5 bb dc 45 70 4b 0a c1 75 4a 8a 52 d4 c5 1a e9 1a 52 6e 47 8a ae 84 d6 82 94 3a d5 2d 57 13 46 e3 c8 e9 c8 94 4a d7 29 33 a5 a4 4e 39 37 4a ba 16 bc 82 14 4a 5a ab 6e 94 64 64 de a6 9a 8c 9c 73 50 2b a4 6e 9c 1b 2a 6d e4 9c 92 4d 06 d9 5b d6 94 ba e4 ca 39 51 da 06 78 81 a1 9c bb a8 c0 19 f0 5a c4 b9 c3 55 b7 98 f1 c6 ab 06 b4 5b 16 21 56 ad 45 3b 77 aa 52 75 bd 8c aa 44 8d 2b a5 18 46 2a 46 60 90 99 31 08 99 50 86 dc 21 ad 22 62 2c 86 c2 d5 46 67 21 69 4b 05 96 55 95 f1 66 07 0c 6e 23 e7 f1 f2 5a 8a 33 56 a9 Data Ascii: !DbXXP!pBe!BUiRditMM'S)Uv+tTuRroH>EpKuJRRnG:-WFJ)3N97JJZnddsP+nmM[9QxZU[!VE;wRuD+FF`1P!"b,Fg!iKUfn#Z3V
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: e7 a9 b5 6b 82 ce 37 be 6e 54 d3 bd aa bc f7 e9 cc 49 e0 1b b8 89 e5 3c 85 bd 28 a9 db 59 4f 74 7a 66 29 4f dc 4e 52 53 2f ce e9 8b 19 c6 8a aa 43 96 50 b7 8a a9 09 b8 8a 64 12 e3 19 57 c2 95 4b 46 ab 4f 9d a5 62 15 bd 29 13 96 d3 42 02 a5 c9 2d 46 aa c4 b5 4b 25 04 3b 6b 0a 39 76 3a a3 1a 15 0b d9 99 c8 62 f3 b2 82 07 ca 95 13 4b c8 42 d5 2d a9 cf 9b e5 ad 60 79 63 8c 83 96 34 60 59 36 ad 25 96 31 d1 aa 55 08 45 ab 40 38 99 95 60 aa bc 20 18 06 b1 a0 6a c6 92 19 98 ad 24 58 82 d9 f4 28 92 55 19 19 75 b5 a1 a1 0a e7 8b 62 2d 8d aa 8c ba 62 28 0a 5d 23 18 d2 d2 24 a7 47 49 14 bc 0b 8c b9 60 aa d2 40 22 15 53 90 02 ec 56 75 d3 51 54 63 3a 64 2c 06 b7 5c 13 8a f4 b0 35 34 5d 63 b4 a4 08 ea 94 8c 19 20 2d 82 36 95 6a 84 6e 54 a9 14 d5 8e 4c 25 4a 9b 5b 6f 8a Data Ascii: k7nTI<(YOtzf)ONRS/CPdWKFOb)B-FK%;k9v:bKB-`yc4`Y6%1UE@8` j$X(Uub-b(]#$GI`@"SVuQTc:d,\54]c -6jnTL%J[o
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 94 5d 64 4a 09 2e b6 54 05 c2 ae 41 01 5a 1f 97 52 12 09 89 70 d2 9b 5e a1 e1 3d 40 22 50 d0 a1 b8 66 28 11 22 8c 30 59 2b b0 91 02 9c c2 d0 92 81 17 e0 19 b3 63 4c b7 b2 96 4a 41 38 de 43 e9 3c 4a 00 42 4c 78 69 16 51 44 51 e9 15 b3 38 45 10 5e 47 92 8e 96 ce a2 8a 14 42 f0 1e 08 95 22 c1 72 da 00 8e 51 54 a2 0a 2c 81 cd 84 c8 2a a6 22 59 88 61 a6 2b 13 b6 2a b4 6d 64 50 a5 32 dd 12 32 28 5a db 18 51 c1 a7 46 c6 32 ce 6c 6b 54 00 52 21 a1 a0 76 41 5d 4a d2 e5 5c a9 d4 cd 32 6f c1 c0 8e f6 b6 a2 07 e9 d6 6b 71 0a 8d 65 5b f6 ca 34 48 ed c5 b9 f7 81 37 08 0d 73 45 96 9a d2 e7 7a 7b a3 9f ff 76 5d fe 97 dd b2 39 ec 8e 49 2c 41 33 2d 44 19 b1 aa 42 43 bc f0 9a ea 24 54 11 19 9f fa cf 37 72 6a b6 02 20 1e 5d e2 df bf ba 60 0b 8e 09 48 60 b4 a5 24 0b 20 65 56 Data Ascii: ]dJ.TAZRp^=@"Pf("0Y+cLJA8C<JBLxiQDQ8E^GB"rQT,"Ya+mdP22(ZQF2lkTR!vA]J\2okqe[4H7sEz{v]9I,A3-DBC$T7rj ]`H`$ eV
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 35 8d 6b 79 bc c5 e7 6f d8 d3 fb 72 56 cf ed 92 6d 9e 1c d8 36 2e cd b3 37 9c 0f ae 7f 3e b1 6b 8f 1f f1 94 d0 f3 a6 08 3c f1 c9 ff 7e 68 c3 5c d8 fd 74 e7 c6 bf 9e b8 fa ed 3b 97 74 fa f4 0f ed 3f ef 23 07 5a d7 55 3b fd 61 11 26 9e 47 6e c9 62 c0 fa 6c 51 c1 d4 94 a5 5b 78 2b 99 72 1f 8b 2c a6 66 33 ac f1 14 a5 7e 4a 6c 2e c6 f3 61 b6 da 18 ef 6a e6 55 48 89 ca b9 40 18 e9 ba 45 75 a9 b3 5d cc 94 a2 13 2a cd 62 2a 66 d1 9b 64 04 93 8f 46 61 8f 71 7a 36 29 db 98 26 75 d9 96 dc 50 5d fa 53 ff 73 ed 27 f3 4d 0f 5c 32 84 40 4e ed 95 b9 d9 77 ff d1 9a ff 7e df ec a3 51 d8 2e 19 51 22 30 66 46 0f a9 48 a0 29 74 b2 8b b8 8c 66 02 4c de ec 41 5c b0 10 85 02 a8 00 92 37 51 88 18 05 64 43 44 95 7a 73 ab 1f 3e e4 5b 2f 1f d1 2a f6 0f ae ba 6d f3 8a 9d 78 41 cf 9a Data Ascii: 5kyorVm6.7>k<~h\t;t?#ZU;a&GnblQ[x+r,f3~Jl.ajUH@Eu]bfdFaqz6)&uP]Ss'M\2@Nw~Q.Q"0fFH)tfLA\7QdCDzs>[/*mxA
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 52 a9 54 a0 08 61 22 00 15 a1 52 f0 b0 36 67 2d 21 86 f7 ee 6c a7 b5 36 26 eb 3f bb ae c4 d4 14 ef ee a3 68 95 75 9e 4f 37 6e 29 ca fa b1 77 59 72 b5 d6 bc 6b eb 60 85 7e fd 70 7c 93 49 a1 b8 51 4b 74 49 59 95 c1 ba fb 14 18 05 28 6b 97 ec 63 1b 84 8a a9 29 c5 48 62 ae 2a 59 db 93 55 5c 55 85 98 2b 0e f6 88 f4 86 53 d1 f2 00 3c c0 71 50 f8 64 1b 95 00 c4 05 5a 2a 22 3d 40 23 52 5d fa 12 10 a0 17 2e 15 38 40 3a 0a c6 12 80 86 2e 28 c0 c5 49 e2 82 c1 f5 0a bd 11 94 c9 2c 21 ce 27 71 78 9f a8 43 34 44 02 41 08 15 71 e1 90 0a 66 db 84 11 c5 a8 a1 53 84 11 85 60 a2 f0 53 a5 c3 fb c9 40 89 33 a9 74 6d 4f 1e 72 eb e6 a6 8b aa 5e 5b a1 b8 6c aa 1f d3 4d 9e 02 9f 4b cd 16 b3 76 72 15 39 6e d8 d4 22 a9 46 b0 6a 5d 6e 34 fd 72 cd 60 0f 4a 67 b6 9c 6f 47 ee 7d d6 f5 Data Ascii: RTa"R6g-!l6&?huO7n)wYrk`~p\|IQKtIY(kc)HbYU\U+S<qPdZ"=@#R].8@:.(I,!'qxC4DAqfS`S@3tmOr^[lMKvr9n"Fj]n4r`JgoG}
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 96 40 ce e4 2c 40 44 cc 3d ce 3f c6 6e 7a e9 fa d7 39 df ab cb 73 86 c4 a4 9e 13 6b dd 8e 8c 6a 29 a7 4e 65 50 d9 aa 6f 49 2e 26 d5 eb 67 ef a4 64 ca 79 74 cb e6 64 38 31 f3 3c 18 75 ac 4f 3d 5a 4b 65 52 b3 3e d5 93 34 ac 45 a3 2e cc aa db 09 51 e1 74 bd da 5e 47 a5 ab 9e a2 5d b9 92 bb cd 1d 53 4e b5 5e 57 3b 76 50 92 3e 36 b2 3c 6c 7b eb 37 9b 9d 59 1a b7 91 0f d9 a9 3e 75 29 2c f0 ea d7 c2 cb f0 9a f5 19 64 79 b3 fb 58 3f 1f c0 58 99 8f 24 36 8f f5 a1 a7 aa 36 eb c7 8d fb 50 5a 2a b4 fd 2f 45 c6 23 33 d3 9f 84 d8 e9 ce 56 1f 1f ec 4a 96 b6 ff ec ba 05 9b 42 b2 36 a5 07 19 96 25 8e ca 5a 9e 07 67 24 53 cb 29 81 5c 10 58 25 d6 86 4c 46 48 0c 21 d0 08 0a 54 4b 9b b0 f7 90 0b ec 76 a9 2b 13 cb 55 cd e6 c4 bc 61 c8 b1 db 12 16 81 22 6c 83 a1 ac 9b 22 6f 8a Data Ascii: @,@D=?nz9skj)NePoI.&gdytd81<uO=ZKeR>4E.Qt^G]SN^W;vP>6<l{7Y>u),dyX?X$66PZ*/E#3VJB6%Zg$S)\X%LFH!TKv+Ua"l"o
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 8f 74 c2 2d b7 bf a8 f5 b4 47 fb d7 7c 5d e5 a4 de 86 fd eb 60 e8 d0 7e 1b ba c9 4d e7 6f 4a 47 63 c9 a5 f2 05 2e 83 f2 ad ca 55 32 3c 2c be 52 4d 8e 16 5f 6c 43 50 f7 d5 f6 8e 94 d0 20 6e 9e 0c 87 9b f2 dc aa 7a 8b e5 3c 5a de ff 18 e5 d1 87 f2 14 12 6b 5b ae d2 be 4f 51 b2 49 5c ce 42 a4 cb 36 65 81 94 ad 56 e5 f2 71 38 9c 92 1e 55 85 02 d0 48 2a 51 16 36 6a b3 fd d8 48 91 e1 56 dd 12 e0 71 eb 6e a5 31 d3 d2 7d e8 e8 52 d5 d0 0e 8b 54 31 26 6d 8b 2d d5 ee da 47 a2 b6 55 e1 bf 69 b0 a2 5a a9 d9 48 85 67 f8 ac d9 07 76 f0 43 e3 58 50 9a da e9 72 18 e6 47 3d e5 98 ca a6 d9 94 dc 96 c2 27 c1 98 b5 36 37 0b 4f b5 c5 ad 4f 99 ca 5a e1 3f a7 ae 3a db 9a cd e8 03 db 2e b5 40 5e 41 83 90 d6 b8 46 55 ab d6 de 62 e6 63 41 45 a4 35 b0 d3 73 4a b9 9b bd 53 46 d7 48 Data Ascii: t-G\|]`~MoJGc.U2<,RM_lCP nz<Zk[OQI\B6eVq8UH*Q6jHVqn1}RT1&m-GUiZHgvCXPrG='67OOZ?:.@^AFUbcAE5sJSFH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49784	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1099	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2840 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:05:42 GMT Expires: Sat, 20 Apr 2024 12:05:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 7230 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 10 0b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c7 0a 00 00 2f 3f c0 0f 00 4d 28 6e db 36 82 94 f4 e5 74 ff 81 af 19 22 fa 3f 01 7c ae a0 60 e2 12 b2 e7 62 eb 0c 74 0b 75 90 2a de 0b b7 b5 6d 2b d1 5e 44 84 54 40 44 ff 45 b9 eb b8 fb d4 c0 36 92 24 27 fd c2 a4 30 bf 30 2f ff e8 d0 1a 8a 6d 23 49 8a ea 33 f9 fc 23 62 66 36 d9 e8 ff 04 e0 cf 5a 38 8a ee bf 18 00 39 de 33 6c f3 6a 4c 11 1b e0 ac 98 ce 7b 05 67 25 3a 20 57 25 ad da cf 95 ee d7 57 02 50 ee 57 24 6b 55 7d ad 0c 15 00 10 04 6b 65 ac 8c 3e be 1b 2c 6d db 76 4c 92 74 dd ef f7 85 13 55 d5 63 db b6 6d ef fa 98 bd f1 07 66 69 db f6 cc ca b6 6d 97 6d 27 23 11 11 df 7b 2f 32 aa fa 8b 58 f6 ea 09 0f b4 6d 9b b6 6d db 56 cc b5 cd e1 31 96 6d db b6 ad Data Ascii: RIFFWEBPVP8X??VP8L/?M(n6t"?\|`btu*m+^DT@DE6$'00/m#I3#bf6Z893ljL{g%: W%WPW$kU}ke>,mvLtUcmfimm'#{/2XmmV1m
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: d6 3a 5b 50 00 28 85 84 82 cb 98 21 73 b5 14 33 34 62 18 82 03 84 69 66 25 28 13 41 8a dc 50 59 0c 4b 25 bb f2 f8 bf 57 ef 73 9a 97 98 c0 5f df d7 77 4e 22 42 2d 9a 89 5c 79 ae 63 4d ae 85 21 97 b2 87 f9 f8 16 d8 5d 1e 20 03 04 1c 41 10 43 94 20 a0 b2 e0 86 9a dd 41 90 ea 56 8b d3 fe 5b fe 00 f5 5d 5a 41 ff e3 45 13 48 74 32 1d 15 ff 1a e2 d0 d2 fc 96 e5 76 28 12 85 24 e4 a8 4a ed c7 74 db 87 e6 e8 fe e5 66 00 11 21 40 62 47 e1 40 83 20 06 30 69 4e 66 f6 44 0e 3f 54 87 1b a8 0b fe ef f3 66 8d 73 d5 1c 62 69 fa 9f 6f ed e8 1b 4b 65 6e 99 ee 39 2a 05 a7 44 82 82 62 b1 9b 49 cb e1 c4 70 d6 e7 9c f9 90 f6 4f 43 88 80 02 ec 08 10 07 24 d0 ec 30 73 0c 65 a6 ec b2 8e f6 ea a7 6a 5d 97 56 52 fd a3 74 06 7e 77 c8 eb 5f 3b e4 d9 5b 45 25 cd 66 05 15 ac a8 60 62 00 Data Ascii: :[P(!s34bif%(APYK%Ws_wN"B-\ycM!] AC AV[]ZAEHt2v($Jtf!@bG@ 0iNfD?TfsbioKen9*DbIpOC$0sej]VRt~w_;[E%f`b
2024-04-19 14:06:12 UTC	863	IN	Data Raw: 76 7c 87 c7 9f d9 01 a8 7b 7e 6e 7d ff 7b 8e d5 20 53 b8 b4 43 58 e1 ff 8d b9 d7 0a 89 00 cd b9 f8 dd 9b f4 85 d7 7a 4c af 71 f7 3e ef 70 c2 fa 16 8f 3d bf f3 b3 07 47 ff a0 5a a5 bc b5 e4 61 d0 f8 9c 93 4e 6a ed 39 ec fa f8 37 8b c8 00 b5 9b ff bc e2 f7 93 5f 1e 8b 02 44 84 45 28 ac d0 7e a5 d7 45 22 8b 30 dd 6a 4e ef 7f d4 c1 97 5e ff e3 8e 08 17 5b f3 d3 e6 ce 69 b0 c8 70 44 1e 09 a4 46 6b 9c ce 14 dd 69 12 c0 04 97 eb ef 6f 3e f7 ef ee 42 75 82 02 44 84 c2 16 f6 26 ba 9d 4c 20 22 ee b1 0b 1f 7f c4 de 5b 9f fc f9 eb 5f 74 89 02 98 de 6d d3 5f 96 ef 55 dd 4c 21 c6 16 f4 97 d2 5c 0b 61 07 c5 ed 76 d1 1f 5e 32 fd 5e ff 93 1f dc fd c8 0b 4e bd 29 57 6b b8 68 a8 2f 56 fd f7 bb 2f 4c 9d c5 0a 22 2c 22 4a fc 3b ec 1e 0b 43 0c 76 b6 77 81 45 9d 9d f7 40 79 e7 Data Ascii: v\|{~n}{ SCXzLq>p=GZaNj97_DE(~E"0jN^[ipDFkio>BuD&L "[_tm_UL!\av^2^N)Wkh/V/L","J;CvwE@y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49785	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1100	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:45 GMT Expires: Sat, 20 Apr 2024 11:12:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 10407 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 f2 76 7e 5d fe 84 2f 0c 11 fd 9f 00 9f 61 90 96 a1 ca 3a b0 dd 8f 21 f1 5e b0 8d 24 c9 49 5b 88 d7 26 9a cb 3f 4f 88 81 71 23 49 8d 0a 13 00 22 ff 18 3d 67 5f 6a db 48 52 63 7e 88 f9 43 ec 7f 2a 1f df 44 a2 91 00 30 28 24 a9 f9 89 25 03 b6 17 b6 77 5d 6b 0c 7b 7b 01 05 44 13 23 23 01 a8 ae bf c4 a9 71 5a ac 76 9d 00 20 31 b1 b0 80 1f 0f 1d d8 d6 d6 48 8e a4 96 86 67 96 cd cc cc cc cc 8c 91 d7 d1 da 11 33 73 c6 cc cc cc cc cc cc cc 3c cc 33 2d f8 03 75 ab 5a da 6c a3 bb 9e 4c ea 2a 99 3d a5 ea da d0 ec 70 c1 cc f6 62 64 66 7b 29 34 43 e4 2a 39 b4 b6 1d 92 f4 7e ff 5f d5 e6 28 5a db b6 6d db de cc 66 ba 99 bd 91 6d db b6 cd b1 3d d5 7d ba 1a 7f 7d 72 64 db 56 6d 65 ae Data Ascii: RIFFWEBPVP8L/?EmIv~]/a:!^$I[&?Oq#I"=g_jHRc~CD0($%w]k{{D##qZv 1Hg3s<3-uZlL=pbdf{)4C*9~_(Zmfm=}}rdVme
2024-04-19 14:06:12 UTC	1247	IN	Data Raw: ab c5 3b 72 55 6b 97 f9 ed fb 6e a4 5a 11 0a 78 49 06 d8 05 21 48 96 50 8b ca 3c 6c c7 e6 de f3 7f 85 ff bf a1 d5 ba fe ef a1 82 5f 9b be d9 33 61 bb 11 0f d4 94 73 c2 3e 9d b7 ae 37 16 e6 11 10 3c 72 83 1c 94 36 c8 38 15 20 13 43 40 88 01 cd be bf 99 6d 5a db b5 db 3e 56 5b f5 e9 b7 46 ce 43 63 89 8c d3 0f 91 89 10 87 c2 52 03 f4 df 23 d9 b8 64 c6 91 51 86 40 96 24 42 9a e4 1f ea c0 22 5a f9 42 81 ca a1 8c 16 a7 39 59 10 0a 45 35 f8 d5 95 f2 42 b6 1c b8 61 18 f9 53 22 20 08 fd cf c0 c7 80 72 75 26 77 78 68 96 82 08 28 a6 74 55 2c 15 47 94 45 d8 7c 89 00 18 02 df 37 ae b3 5e 28 b9 71 c8 46 b5 c5 0f 41 0e 6d 00 81 8e 18 de ed e9 59 af 5b 24 83 00 99 42 05 d7 20 ae 31 aa 6c 2a 21 41 18 84 41 18 c8 1a 02 e5 ac 73 b8 d0 10 e6 9c 9d 31 b4 fe 3b 13 84 41 28 81 Data Ascii: ;rUknZxI!HP<l_3as>7<r68 C@mZ>V[FCcR#dQ@$B"ZB9YE5BaS" ru&wxh(tU,GE\|7^(qFAmY[$B 1l*!AAs1;A(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49787	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	541	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:03:05 GMT Expires: Sat, 20 Apr 2024 14:03:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 187 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49788	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	530	OUT	GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34150 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 5e 85 00 00 57 45 42 50 56 50 38 4c 52 85 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 22 67 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a bb bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd eb a5 2f 24 75 49 ea cd 5b 5d dd 03 39 6d 5b 9b ee a5 ab fa be 96 ea 7f ab bb 1b c0 00 66 2c ef fb 0a cc d9 06 5e ec 99 1e f9 cf 14 d7 d6 18 a3 98 12 08 09 10 ca 91 43 99 c9 b5 0f b2 e2 48 38 33 87 33 93 8c 30 52 cd 8e 58 06 36 30 39 2f 5f 5b 0c a6 15 fb cc ac af 24 1b 91 5c 3c 2d d9 c6 9c 0d 74 4b c4 f5 92 58 8c 18 63 6c 7e a1 83 15 41 1c 37 92 22 22 00 2e c0 9b cb 25 d3 b2 ee 06 22 2d e2 d2 21 49 0c 89 48 ce 63 02 cf 98 26 e4 8d 40 4b 95 4c 04 e7 98 18 49 b6 e2 98 68 fe 7e cf 12 11 c1 46 96 be da d8 5c 86 3e 27 03 11 11 76 f8 f3 63 c3 29 22 6c ad 36 71 54 84 bb bf Data Ascii: RIFF^WEBPVP8LR/IM8lF"gn/Y_<BD'*nzw/$uI[]9m[f,^CH8330RX609/_[$\<-tKXcl~A7"".%"-!IHc&@KLIh~F\>'vc)"l6qT
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 8f cf 00 8f 04 00 1a e6 23 56 97 56 97 00 7e 77 9d 15 a9 86 b0 dc 4c ab 61 b3 fa b3 07 00 cc 77 6d 83 35 77 6c 98 50 0d 61 31 03 50 cb 00 00 ee df 03 bc 2f 77 f3 fa fa 8e 9b e9 0b 2f ce da 1e 80 c0 e4 1c 9e 29 10 7e d9 f7 59 7f 46 18 36 a3 eb fd 01 13 a6 06 00 51 27 6f 7b 77 ba a3 b2 66 82 4b 80 6a 9a ff ef 95 61 35 87 db f5 31 2e 4e 2a f0 44 13 2c 6c 5e f3 d0 02 58 30 01 c0 05 f2 72 f8 cf 01 9c 2c e2 7c b9 8f 00 40 fc b6 bd 34 33 58 0a 00 75 db da df 99 2e 2a 8c 8b 67 8f ca e2 7e 0b bb 4a 0b 8c 2e 8a 27 9b b2 ac 59 93 c6 25 84 1d 97 c0 4e 6d bd 80 44 d1 77 b6 5e 93 cc f1 ef 65 b9 52 77 00 d0 b4 a9 0c 48 08 46 c9 ff fe a3 a2 a0 00 33 e6 05 4e 22 c1 e6 6f 6b b7 30 48 7d bd 50 76 dd d8 81 45 01 eb eb e3 fe 66 84 9d 82 72 f9 a1 ec ba 53 07 88 84 71 1f ec 80 Data Ascii: #VV~wLawm5wlPa1P/w/)~YF6Q'o{wfKja51.ND,l^X0r,\|@43Xu.g~J.'Y%NmDw^eRwHF3N"ok0H}PvEfrSq
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d 00 04 00 e3 01 dd 85 14 d0 27 52 ea 40 a5 d2 9d 50 a5 10 25 25 ea 28 91 24 2a a4 52 05 3a 45 a5 a2 82 4a 9d 42 49 29 75 2a 15 89 54 2a 75 0a a5 8a 0b be 0b 28 51 a9 54 aa c6 69 cc 48 57 ac 37 a7 23 c5 06 ab 9d 6a 24 64 5d d0 d1 51 8d cc 29 08 2a e7 14 36 95 a2 5a c5 48 81 65 b8 26 65 cb 5c 43 1b 60 ae c9 1a 05 9b a9 1b 14 80 46 30 20 68 33 03 e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 16 06 d6 a6 6e 3c cd 60 eb ae 14 45 d4 29 67 4a a5 b4 9c 96 a5 8a a8 13 db 18 42 ad aa 29 15 35 56 69 21 95 9c eb c4 99 91 94 96 99 02 75 ed 5c 5d 98 14 07 d3 d9 06 a4 6b 3a d3 42 4b 92 ab 97 91 ec 5c e9 8c ca 40 54 64 50 14 57 1a e7 ca 02 d1 5a a4 83 30 6e 49 a2 43 b3 2b 46 02 07 d3 ee ed 14 97 67 6c 0f 14 21 27 b6 82 81 Data Ascii: TDTD'R@P%%($R:EJBI)uTu(QTiHW7#j$d]Q)*6ZHe&e\C`F0 h3XT\n<`E)gJB)5Vi!u\]k:BK\@TdPWZ0nIC+Fgl!'
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: da c8 d9 25 9b 0c b2 b7 ac 29 75 c9 91 b3 a3 b4 0d f0 02 43 39 77 51 81 33 e0 b5 88 73 87 ab 6e 31 e3 8d 57 0d 68 b7 2c 42 ac 5a 8b 76 ee 54 a5 ea 7a 19 55 89 1a 57 4a 31 8c 54 8c c0 20 33 63 10 32 a1 0c b9 43 5a 45 c4 58 0c 85 ab 8d ce 42 d2 25 15 58 56 55 c6 9b 1d 30 b8 0b 39 8f 97 d7 52 9c b1 4a 65 b3 0a cb f2 c8 15 12 83 a4 b2 c8 42 ac a5 c8 58 96 89 2e 54 2a 8b 31 43 49 94 50 fc 97 53 95 43 f2 2d 37 42 2e 54 8c 0a 16 4b 48 4b e9 2c 97 dd d5 8d 10 14 30 53 a8 43 26 dd 8a 0a 25 30 a5 24 89 32 81 31 45 6d 70 52 24 51 e7 ea 42 91 4a 69 50 23 42 70 4d a7 a4 52 d0 24 53 ba cb 5d 2e d5 dc 51 e9 52 a9 14 49 29 a9 81 9a 4e a8 d2 a9 52 90 0a b1 29 29 a8 94 8e 2c 11 b1 19 32 a5 52 a9 94 91 92 e8 a8 06 98 52 54 29 98 52 a6 42 92 8b 1a a1 d1 24 35 72 52 29 55 9b Data Ascii: %)uC9wQ3sn1Wh,BZvTzUWJ1T 3c2CZEXB%XVU09RJeBX.T*1CIPSC-7B.TKHK,0SC&%0$21EmpR$QBJiP#BpMR$S].QRI)NR)),2RRT)RB$5rR)U
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 92 19 98 ad 24 58 82 b9 e8 51 24 ab 32 32 ea 6a 43 43 15 ce 17 c5 5a 1a 55 19 75 c5 50 14 ba 46 30 a4 a5 49 4e 8f 92 28 78 07 18 73 c1 54 a5 81 44 2a a6 20 05 d8 a9 ea a6 a3 a8 c6 74 c8 58 0c 4e b9 26 14 e9 61 6b 68 ba c6 68 49 11 d4 29 19 33 40 5a 04 6d 2a d5 08 9d a8 52 29 aa 1d 99 4a 94 36 b7 de 14 55 0a ba a8 29 75 6a 6d ca a0 8a 0d 4e 9b d0 a5 d2 e9 38 a3 24 ad 31 3d 4e 98 a0 13 6b 04 4c e7 a2 8d 2d b6 a9 9c 50 c9 50 d9 05 93 34 e5 b4 6a 03 40 6f b6 53 ca d4 60 4e c1 90 0d 4e cc 89 2c 96 72 35 c5 68 96 ea 38 ab a5 2e cc aa b3 a1 d4 b1 af f2 48 e9 65 49 5b ab 76 26 93 c8 db b7 94 e9 2c f8 c0 1c 70 93 47 66 27 99 9a 51 be 52 35 92 ae b7 5c 83 d0 39 85 1d 0b b1 88 b6 0b 25 aa e4 94 33 02 d4 29 1b 17 cb d6 53 ed 2c 2b 04 74 5c d5 48 e0 66 8a 16 04 f9 ac Data Ascii: $XQ$22jCCZUuPF0IN(xsTD* tXN&akhhI)3@Zm*R)J6U)ujmN8$1=NkL-PP4j@oS`NN,r5h8.HeI[v&,pGf'QR5\9%3)S,+t\Hf
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 90 0a 09 05 b5 03 ea 52 92 2e e7 48 a5 6e 96 79 0b 06 76 b4 b7 15 3d 48 b7 5e 8b 5d 68 2c db b2 57 a6 41 6a 2f ce b9 0f 72 86 ca bb 51 53 38 30 92 cd 0b 0f 6d ea 4f 06 09 84 17 2f f5 47 bf fc 2c 5a cd 6f de fc f1 b2 2b 53 84 46 12 68 24 2a 35 77 5d 1a ff 7f e7 6b 91 04 30 18 4a a0 05 10 a8 85 90 2a 00 b2 84 04 fa a1 50 b4 04 b2 a4 cc af 7e f1 f1 a5 6b 97 37 46 e7 5f fe cb ca 54 06 c3 04 98 28 24 47 98 3a f8 f8 09 07 3a 85 6a 14 a0 56 58 03 b4 65 ca bb fe f3 a7 91 24 85 29 49 21 38 6a a1 a6 40 d5 a8 78 e6 6a b3 e4 68 6f e7 9c 20 65 53 75 0a c5 42 d9 0b 0c c2 bc 55 39 1d d2 f5 4e b5 6d aa 21 72 db 55 b4 d8 60 cf 65 af 39 b9 93 a3 ed a2 22 a4 b3 5d a5 7b ae dc 5e 2d 4e 91 b6 b8 6a 5f 2a 6d a5 b1 67 dd 69 41 d7 d1 5d af d4 35 33 65 1f 48 0b 75 36 ab bd c8 c6 Data Ascii: R.Hnyv=H^]h,WAj/rQS80mO/G,Zo+SFh$5w]k0JP~k7F_T($G::jVXe$)I!8j@xjho eSuBU9Nm!rU`e9"]{^-Nj_*mgiA]53eHu6
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 82 f0 04 b0 f4 db ca 9c 86 11 5f 79 f2 3d 5f 3e f7 bd 89 a9 ba 9d b3 b2 23 12 df ff 97 57 f3 3f e8 62 07 48 10 82 a8 26 0c ad e3 b3 cf be e3 47 be fe ed 7f c4 8e 4a 5b 8d 8c 6c 0c a5 fa cc 80 56 18 0d c8 14 bf a8 1c 59 0e 5a 32 18 50 45 50 03 a0 89 56 a2 ec 0a af 86 f8 0e 09 a6 da 00 0d c0 68 29 23 7b 96 77 30 c9 a9 ca 29 4a 67 ba b2 ee 9c 29 85 bc 14 07 05 5a 55 47 24 35 54 3b 45 da 00 db a9 b6 8b ca d5 ac 6b 17 ec 13 57 f5 50 9a 3e 75 73 b7 a9 f6 ed 92 ee 70 95 3f 40 57 86 fa a8 ea cd 90 d2 54 fb c5 e9 cd cb f9 ed cc 29 4f f2 d5 e2 75 31 e0 05 d7 2a 9c 20 f3 e1 ff f5 fb cf 1c fe f8 a6 d7 fe bb 8a 11 89 fe ee ef e9 72 76 df 75 63 7d e6 bf 00 24 a7 53 4b 61 e3 9e 45 1b b2 36 2f bc 2b 45 fb e3 6f df fd df 93 be fc 47 62 8d d2 47 52 76 bd a3 c2 64 e6 f5 c7 Data Ascii: _y=_>#W?bH&GJ[lVYZ2PEPVh)#{w0)Jg)ZUG$5T;EkWP>usp?@WT)Ou1* rvuc}$SKaE6/+EoGbGRvd
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 9b 2e aa 7a 6d 85 e2 b2 a9 7e 4c 37 79 0a dc 97 9a 2d 66 5d c9 55 e4 b8 61 53 8b a4 1a c1 aa 75 b9 d1 f4 97 6b 06 7b 50 3a b3 e5 7c 3b 72 ee b3 8e f7 51 e5 2d 5c d7 9e ea 7d cc 35 92 94 d7 5d 1c 95 52 ef ba f8 4a d5 d5 6b 5d bf cb 3a 20 71 ea 4a f4 0e 15 6a 9b 53 48 8a 90 a2 15 11 11 d6 a5 11 0d 85 2c 99 78 9a d2 49 01 6b 18 af 2c 25 71 65 48 1a aa a4 ad 91 a4 a9 c0 57 59 85 eb e7 95 05 47 4d 40 e0 61 48 71 85 4d 98 6a 45 92 a4 0c 81 16 4c 88 ba 32 8c 0a 08 e1 e9 4b 1b 93 10 52 0c 13 60 9c d6 b2 86 18 1e 93 24 a8 ab 35 ec f8 92 c0 80 2f 6d 48 4a 09 9a ca 62 ef eb b2 5e 90 6e 4f e5 3b 54 33 e3 3c ae 88 44 ea 75 57 5e a9 66 6f 54 f9 2e d7 51 9c da 77 57 5b 3b 95 ea 5d 8b 6f c1 74 b3 99 8f b3 36 9e 4a d7 85 8c 4d 89 2e eb 01 e5 47 cb 4e 67 e1 2c 27 ee ee 5c Data Ascii: .zm~L7y-f]UaSuk{P:\|;rQ-\}5]RJk]: qJjSH,xIk,%qeHWYGM@aHqMjEL2KR`$5/mHJb^nO;T3<DuW^foT.QwW[;]ot6JM.GNg,'\
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 1c 95 b5 bc 29 27 31 ab 0d 55 ca 82 c0 2a b1 36 64 4a a2 a9 03 8a 11 a5 a8 96 2e c2 b5 87 5c 60 77 95 ba 32 b1 5c d5 6c 4e cc 1b 86 1c bb 4b c2 22 50 09 97 c1 50 ad 4d 91 37 45 9b 3b 8c 2d 37 df 06 d0 11 d8 c4 d6 46 94 c4 99 a3 a8 54 d5 3b 4d 99 a6 e6 34 58 77 b2 a0 e2 de 39 3a 89 42 eb d0 4b b9 d3 69 73 a6 94 14 9d af 86 bd c1 1d d5 9d 6b 3a 17 35 66 af a1 14 55 a5 a9 33 55 ff 47 5c 2a 97 38 de 45 2f cb e5 e8 82 75 5a 2b 8d 93 a4 56 4e d8 76 22 5d cf 5a 79 46 d5 d5 ab ec 57 ba eb 4e ce f6 5f 42 ad 48 f9 ac e5 9d bb b1 49 8c ea 08 37 77 5c 7a 77 8c d9 e5 d1 f5 59 8b 07 65 4c a2 3e 3e ea 18 2e d7 57 4e 47 2e 79 54 7a b7 d0 35 8f f3 91 6b 3a b9 c9 e3 6c 07 95 dd 2f b6 e3 93 32 4f ad fa a2 4a 4d 98 4f b7 34 4a 62 0f 4b ef 8c 8d 4e b7 f8 16 e9 69 43 5f 6c 6f Data Ascii: )'1U6dJ.\`w2\lNK"PPM7E;-7FT;M4Xw9:BKisk:5fU3UG\8E/uZ+VNv"]ZyFWN_BHI7w\zwYeL>>.WNG.yTz5k:l/2OJMO4JbKNiC_lo
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 1c 53 b9 68 2e 4a 6e 4b e1 4e 30 66 ad 8b 93 85 a7 da e2 d4 5d a6 b2 56 f8 cb a9 53 27 cd 56 2a 4f 2e 6e 09 eb 22 65 8b 4a d1 e2 36 6e a3 aa 55 6b 6f 31 73 5b b0 c6 e2 36 54 2f 97 03 b5 4d 7a 15 29 1c 8f 4d 6d 4c e0 31 ad c5 a4 8f 4e 77 dd 55 b7 ab 46 e9 ce 5a 83 2d 04 9f b9 4e dd f5 86 9c a3 4a c3 a8 02 69 b7 08 74 b9 7a a0 cd 60 67 ca b5 19 55 b4 6c 1c 1a d9 39 7b d0 28 51 76 29 dd e9 82 d3 39 1b 25 1a ab bc 05 2d dd b9 76 91 8d 6c f2 c6 f9 8e da c9 a0 f3 dc 15 2f 89 ae dd 9c b7 a5 cd 19 59 8f e9 9a 0a f0 e2 eb a0 8a f5 e6 bc e8 ca 35 8e bc a6 6a 05 9d bd 60 27 88 8a b2 5a 8a e5 89 26 5a 23 ae 6e dc c8 82 b2 8b 6d aa a9 eb d1 aa 53 0c 59 a2 56 ab d3 e9 a3 67 72 dc bc 10 dc 4e ce d2 3c 4d f3 e6 a4 b6 98 ea b4 33 97 fd 7a 30 26 fa 35 27 a9 86 e9 5e 5b c9 Data Ascii: Sh.JnKN0f]VS'V*O.n"eJ6nUko1s[6T/Mz)MmL1NwUFZ-NJitz`gUl9{(Qv)9%-vl/Y5j`'Z&Z#nmSYVgrN<M3z0&5'^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49790	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	530	OUT	GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 36974 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 66 90 00 00 57 45 42 50 56 50 38 4c 5a 90 00 00 2f a5 c0 49 00 4d 48 6c db 48 90 24 d8 53 ae b2 ab 71 f9 07 3c 3d fb 1f 42 44 ff 27 a0 aa 22 cd 64 24 f9 ec 4a dd 52 f7 c5 96 7d b4 92 7d db 91 f4 a2 2d f9 91 ba b3 a3 48 12 f5 36 ee 23 d9 6b ee f6 ac bb 77 07 df 07 f7 da 9e 77 4b 18 4e 77 db 70 92 9e 19 48 bb dc dd 75 03 ec d8 33 91 ba 5f 01 80 62 d2 dd d1 4c 53 1a bd c0 7c bf 94 99 09 98 99 24 9b d1 a5 07 40 91 d3 c9 ee 36 47 d2 8e 01 30 f9 92 d6 33 04 00 f7 5e 86 6b 33 58 a0 0e fb 00 c0 39 07 d7 c5 bb a9 2b 29 49 9e 4b b5 50 96 e9 0b 00 02 f5 f0 8f b6 99 7c bc 8b 27 91 48 bd 96 17 e0 a0 6c 51 b2 0d 64 a7 80 da 75 2e ab c6 77 d6 34 bd 6d fc c2 1d 5a dd 92 1a 48 be 8e 39 73 bb 12 e4 1c 1c bc cf 47 e1 00 33 94 1d cd 07 70 50 bd 54 92 cc f3 22 00 Data Ascii: RIFFfWEBPVP8LZ/IMHlH$Sq<=BD'"d$JR}}-H6#kwwKNwpHu3_bLS\|$@6G03^k3X9+)IKP\|'HlQdu.w4mZH9sG3pPT"
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 15 8b 98 c0 56 e3 0b 0b e5 a6 06 e7 b9 bc 95 cf 27 20 86 61 b1 9a e8 21 fe fc e0 2b 00 0c 58 5c 5c 5c 3e af 19 00 58 2c 10 41 5b 57 f7 d0 3b 00 16 02 02 7f 6a e3 e2 45 b7 1b 00 01 24 fe fc d8 06 76 b7 9b 6b e1 9a 42 44 14 c0 08 80 cc 33 cf 9f 56 be 53 f1 6b 3d 3b 65 ed cf 36 d0 5c 0b 57 fc 1c b1 28 cf 1f d7 73 67 cf 1f 1f b2 93 4c be 57 d9 45 26 71 77 64 b3 5b 75 70 32 39 83 01 15 20 41 02 01 56 7c 5f ec cd e0 f7 14 f9 dc 33 57 ec 78 12 42 21 49 0f 62 cd bd ba 61 cd da de d8 07 b7 07 5f 1d be af 38 53 67 e5 c9 bc ac 79 e7 c9 bc 98 28 8a e2 f7 ee 74 67 e1 6e e1 61 ea 49 8a 61 60 ea 4c 9d b8 cb 48 3c 19 46 67 52 8c 8b 27 cd 11 62 22 a5 38 71 b7 70 97 99 b8 c6 ae a5 6b 38 7c eb d9 79 de 7d 67 bc f2 02 ea dc 48 23 3d c0 50 8c 7d 4f bb 5e 76 0d 38 c7 08 8c 50 Data Ascii: V' a!+X\\\>X,A[W;jE$vkBD3VSk=;e6\W(sgLWE&qwd[up29 AV\|_3WxB!Iba_8Sgy(tgnaIa`LH<FgR'b"8qpk8\|y}gH#=P}O^v8P
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 0a 81 63 0a b3 7c 9a 70 03 48 2b 9a 18 87 8e 4a d3 7a 72 13 40 23 80 e1 81 ab 0e 5b 66 95 10 0b 4c c5 ec d4 2c 4d 16 a0 d9 81 d5 6d 18 61 96 88 29 64 5b 00 8b 49 78 28 26 ad cc aa 41 30 0d 40 10 80 60 04 0e c4 51 16 41 d1 d2 07 07 22 64 c4 11 11 31 10 c7 21 23 62 1c 21 43 96 21 08 2c 47 07 30 10 5b a1 52 b6 0a ab 10 dd 5a ae 08 84 c8 48 62 a5 00 aa 32 a6 62 57 39 30 4a 19 02 4a 0b 15 4a 24 56 a5 50 8c 72 d0 2a 26 ac 00 7a 15 43 a2 8c 11 94 00 89 31 15 91 d2 28 65 83 48 33 82 00 30 1e 66 18 3c 46 03 6c ca 10 49 24 8f 21 03 05 08 20 20 01 00 51 46 60 44 c4 65 94 18 07 a4 11 40 40 a9 32 54 a3 24 8e 43 a5 f1 74 4a 65 b5 3a 0b b4 02 11 62 a7 83 34 40 c0 34 03 80 26 20 14 89 88 5a 8a 56 6d f9 b3 b1 c4 b1 1c 38 22 14 90 ad b0 9a 62 52 40 0b 31 12 c4 b6 02 80 00 Data Ascii: c\|pH+Jzr@#[fL,Mma)d[Ix(&A0@`QA"d1!#b!C!,G0[RZHb2bW90JJJ$VPr*&zC1(eH30f<FlI$! QF`De@@2T$CtJe:b4@4& ZVm8"bR@1
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 70 48 ad 04 44 a2 c1 08 01 06 ca 80 48 cc 24 4a 81 0c 95 ba 72 9a c0 59 f6 84 22 c7 cd 2a 22 90 0e 44 95 c0 42 dd 6a 45 44 60 8c 23 01 23 23 b4 6a 14 4b 91 08 2b 89 c4 12 88 81 63 89 b1 a2 03 28 51 56 d0 b1 95 52 71 84 12 04 50 22 54 13 2a 81 41 a0 0f 0e 03 37 00 64 a0 c1 21 28 62 10 41 55 e0 d2 a0 84 00 12 31 62 09 a0 50 6a 0c 00 14 12 40 1a 9f dd 50 73 4c 37 6d ec 84 41 b1 42 8b 94 ad 59 47 37 a6 c4 12 26 6e 02 63 80 11 33 a5 85 63 5c 4b d3 51 3b 96 6b 52 64 05 00 07 e2 56 49 71 a3 ca a8 d2 02 34 29 10 8a 9a 0a 45 42 85 2a 88 96 24 a9 88 0d 00 6c 62 19 07 cc c5 04 04 9b 63 01 04 40 09 1c 62 ca 10 09 8c 71 d9 14 a0 0c 88 10 09 6a 45 33 0c d4 67 28 b5 12 d7 56 49 94 60 95 2a 6d d7 95 d2 c5 8d a8 40 40 16 29 e3 12 c4 40 4a a4 88 bc 42 4d 93 da 1a 6e 58 04 Data Ascii: pHDH$JrY""DBjED`###jK+c(QVRqP"TA7d!(bAU1bPj@PsL7mABYG7&nc3c\KQ;kRdVIq4)EB$lbc@bqjE3g(VI`m@@)@JBMnX
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 20 8e 4c a7 20 0d 42 0b 21 b5 4a 55 cb 31 84 88 4a 85 ca 88 32 5a 22 b1 8c 03 40 34 72 98 21 80 11 23 82 30 cb 54 0d c4 d8 84 00 47 84 00 32 4a 80 74 41 1d a6 ab 5a 4d 2b 01 50 01 91 8e e9 56 c4 a3 d0 0e a2 28 48 f3 aa 11 d5 b8 91 c0 90 52 06 66 90 b1 08 a1 59 42 5d 56 58 9d 56 a7 d5 14 38 46 c4 88 a7 12 b0 6a 84 e1 b4 16 33 59 2f 2d 01 60 b5 40 80 ba 55 41 62 a0 44 31 e3 88 71 44 8c 10 e0 a5 98 28 05 65 20 a4 e0 22 80 94 e3 72 e0 22 12 81 02 41 b3 90 e8 32 2e 73 96 40 53 02 61 51 aa 39 00 04 c5 02 34 43 51 53 b7 3a a2 91 5d 81 88 30 a3 41 d9 9e 89 46 20 21 b2 76 53 55 af 54 3a a5 11 a6 4c 81 db c6 01 84 a2 0a b3 0c 2a 42 98 90 92 45 95 a8 08 65 90 95 a4 51 19 05 05 81 88 81 03 18 08 14 31 40 c1 4d 13 62 2e a6 c1 22 28 e3 28 18 08 2c 87 3a 84 a8 c6 17 2a Data Ascii: L B!JU1J2Z"@4r!#0TG2JtAZM+PV(HRfYB]VXV8Fj3Y/-`@UAbD1qD(e "r"A2.s@SaQ94CQS:]0AF !vSUT:LBEeQ1@Mb."((,:
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 00 58 02 0c 61 08 30 48 0a 4b 82 9c 42 33 d9 fa bf fc e6 37 ff b7 7d e6 11 66 48 1f db df f8 c5 47 fe 36 a7 2c 65 0c 20 98 25 26 48 50 30 aa b4 96 24 5c 02 17 fa b3 7f 34 95 77 6e c6 b4 20 56 2b 25 27 c4 d3 9e 44 a6 a4 6a 15 91 25 78 63 35 42 9e fa 3c c7 e6 d1 18 03 e2 14 f5 a4 08 86 91 68 19 40 4d 62 89 45 90 34 62 85 19 15 0c 20 8c 2a 4c 40 04 04 00 60 90 30 80 24 58 68 81 53 09 03 0c 31 02 82 31 e2 78 6c 9a 9e 6c fb cd 6f 7e b7 df 7c 6a f6 e4 06 ab 9b 0f 3e f2 6b 7e f1 31 d7 22 45 46 29 49 d4 12 4d b2 48 3c ea ae 64 2e 29 2a 88 df 75 4b 96 69 c4 34 6e 40 41 ad 58 05 ca a2 d6 1d ab 31 9a 99 c9 0c 5a e3 a1 11 34 82 b0 ae 56 32 a0 62 ea 6c 5a 2a 7b 15 16 55 9b 55 02 6d 6b 56 b0 4d 50 8a 5b 02 60 62 95 12 00 22 06 50 30 22 02 f1 08 14 41 2c 11 11 cd 18 28 Data Ascii: Xa0HKB37}fHG6,e %&HP0$\4wn V+%'Dj%xc5B<h@MbE4b L@`0$XhS11xllo~\|j>k~1"EF)IMH<d.)uKi4n@AX1Z4V2blZ*{UUmkVMP[`b"P0"A,(
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 25 d3 7f fe e5 1d 27 02 b8 2c 82 28 11 05 62 62 20 46 04 06 16 48 8c 51 8c 34 45 00 2c 01 20 46 c4 05 62 ca 08 81 51 91 29 2b b2 92 21 49 8d 5a 55 13 c5 4f ab 6a 1d 21 ad 6e 56 0c 2d 00 98 13 4a 82 dc b2 9c ca 03 59 ec 1e 94 19 37 2b 2c 56 33 3a 06 1a 89 05 18 31 ea 50 46 19 8a a9 b1 82 59 56 58 64 36 90 d4 eb be 9c ad fb 7a ee 4f c7 e7 fe ec f6 71 5f b0 bb f1 ea fe f8 7b a5 a3 b7 fa c7 9f 3a 5f 4e 00 2c bb 2c 81 47 04 0a 70 c4 00 24 8e 11 82 88 21 08 41 44 8c 88 88 81 80 20 ca 40 00 02 21 80 2a c4 2a 56 ad 30 d1 20 eb 6a ce d2 56 d5 44 b5 c9 94 86 d8 3a 49 cd 3b 24 ab 48 8d 42 a7 2d b0 5a 06 81 ad ea 16 19 0c 46 d9 56 8c 22 80 31 a8 8c 58 ca b6 15 c6 58 60 43 d8 08 6c b0 cd 07 78 f0 03 bc fa 72 cf fc d6 f8 d1 c7 3f d3 3c e9 6f 7d c9 76 e9 17 a3 0e 5e fe Data Ascii: %',(bb FHQ4E, FbQ)+!IZUOj!nV-JY7+,V3:1PFYVXd6zOq_{:_N,,Gp$!AD @!**V0 jVD:I;$HB-ZFV"1XX`Clxr?<o}v^
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 80 22 a9 85 64 21 ad 55 03 21 33 b1 35 84 09 26 b5 a9 58 a5 b3 38 28 9b 08 a1 92 0a 85 0f 52 81 43 a9 50 5a 95 a2 22 6a 4a 5c 22 ab 92 b2 01 40 62 cd ad 1d ba e5 99 27 b7 91 c5 b9 f1 ab 5b ce 51 42 48 cc 7e f1 f8 02 3b 10 24 48 81 18 18 88 01 00 03 8d 04 02 21 88 11 8f 88 18 12 c7 90 a6 8c 18 88 90 51 8c c0 88 91 51 e0 6d 60 00 2b 34 78 b5 00 28 15 22 48 2a 15 0b 93 88 aa 19 14 44 69 45 50 55 75 4c 91 62 75 88 8a 88 38 e4 50 37 11 37 37 ad 4a 09 c2 15 54 2a 00 80 ae 0e 3c b8 b6 5d ac f1 ab 5f 3d b5 fd 72 9d 29 0b 00 42 fa fd ef fc fa 3a 08 00 10 0e 09 60 00 40 a9 49 c8 a5 8c 81 31 80 08 00 23 22 80 28 b2 41 08 02 00 ca a6 c0 40 e0 75 04 02 00 a2 08 06 42 d3 98 08 54 0b 4b ac 32 a6 59 4b 09 a0 49 ae 64 ca 13 98 52 d3 d2 20 12 29 fa b6 74 33 10 ef ee 84 aa Data Ascii: "d!U!35&X8(RCPZ"jJ\"@b'[QBH~;$H!QQm`+4x("HDiEPUuLbu8P777JT<]_=r)B:`@I1#"(A@uBTK2YKIdR )t3
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 00 50 38 81 43 01 5c 67 04 00 b8 74 de 6d dc f9 9e 4f d8 1c 06 e4 12 4b b9 bc 19 40 60 a0 80 ae 44 70 09 1c 61 10 28 31 02 82 00 46 2c 21 80 a0 09 53 0a 42 8a 88 84 57 09 bc 46 53 22 80 08 b9 91 22 cb 22 4d 34 32 d5 ca f1 21 47 1c 61 a4 44 7c c4 74 30 3a 96 9b 8a aa 43 57 15 4c 1f cf 2a 46 cb 07 05 a1 00 40 e2 43 9f 3d db 67 dd 79 c8 de 73 b9 f2 9f ea 5e d7 ff 37 cd 0b c4 e3 ed bd 88 1b 7f 1f 05 00 15 40 00 66 2e de f0 f5 4f db bc 10 e3 88 08 d1 10 cd 88 52 96 61 62 c0 c4 18 11 32 04 02 44 00 8f 08 20 10 0b c4 14 44 0c 41 88 29 12 00 44 13 8c 80 00 42 88 20 a0 08 8d e1 e6 5a 2b 24 9d 5d 02 91 d5 b4 f3 e2 e3 90 48 91 12 90 ae 74 91 ce e8 a6 ac ee 09 e9 dd e8 a0 8c 00 2e a3 04 00 13 f9 aa 9f e8 d1 3f ad 0e 06 ef 40 fb 84 bd 8b d9 78 ac dd 53 23 bf 35 a7 5b Data Ascii: P8C\gtmOK@`Dpa(1F,!SBWFS"""M42!GaD\|t0:CWL*F@C=gys^7@f.ORab2D DA)DB Z+$]Ht.?@xS#5[
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: f1 e1 ba 02 10 52 c8 a3 1a 49 28 01 44 28 23 29 a3 b8 25 8d b4 30 aa b4 03 bc e8 5b 1f 2d 1b 06 80 40 08 80 81 c0 18 80 08 8e 88 06 80 19 88 28 82 26 36 01 34 58 40 56 52 12 01 01 00 82 26 6a cd 19 4e 45 55 92 45 a8 6b 25 6e 5b 97 be ed 2c 25 45 a9 12 a9 93 10 42 20 8e 11 81 e6 00 ba 9c 5c 25 06 08 bc 52 55 94 71 83 4c b3 a2 b5 42 86 97 d2 7c 92 b3 f0 20 20 80 26 70 00 01 60 8c 18 0f 88 60 20 42 80 40 2c 05 88 1e 89 40 29 00 35 00 18 28 15 05 10 89 28 4d dc 1c 87 2a 25 9a 2c 5a 47 43 0a 37 b8 22 3a 21 70 d4 65 e9 46 8e 23 99 22 87 d2 45 c5 22 55 81 11 91 c9 12 a1 a1 9d d4 76 12 1a f5 47 24 10 00 80 28 c0 ea 63 25 08 00 0c 91 30 e8 72 1c 47 c4 e8 82 01 2c 12 45 a2 08 30 20 90 01 40 a4 08 29 92 29 b8 45 37 ad 10 29 75 29 21 67 b8 c9 54 49 d9 11 1f 57 1f 52 Data Ascii: RI(D(#)%0[-@(&64X@VR&jNEUEk%n[,%EB \%RUqLB\| &p`` B@,@)5((M*%,ZGC7":!peF#"E"UvG$(c%0rG,E0 @))E7)u)!gTIWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49786	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	529	OUT	GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51228 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 14 c8 00 00 57 45 42 50 56 50 38 4c 08 c8 00 00 2f a5 c0 49 00 4d 40 8c 24 39 6e 53 b3 b8 07 c4 82 f9 07 0c 50 76 08 11 fd 9f 00 fe 28 a9 d4 f1 0f ad 9e c8 78 48 b2 a5 b8 68 02 d8 18 db 92 6a b6 72 82 2c 24 6b 0c 90 32 05 cf b4 8d 4f 40 99 a9 c5 33 9f 47 11 61 03 18 03 54 3d 55 10 82 01 50 04 51 f9 3c 63 8c 90 10 88 06 18 63 44 55 09 71 8d 00 f1 1d 02 83 cd ef e6 aa 5f 0c e8 f2 c7 40 3b 82 f9 00 ba d9 b2 85 80 04 49 c5 69 23 3e 23 2a 00 83 f1 88 38 26 b0 c2 40 6f 10 3a ee 16 e0 e3 1e 07 60 ce 01 0c ae 7a de b2 6d 50 f2 ed 8d b9 5a e8 a3 eb b2 e6 2c 31 3e 36 97 bd 35 65 7f 78 6f cf b4 73 4a 82 71 a9 2a e7 de 7b 4b 2d 87 8e b7 ab 6c 78 7b 69 29 00 89 88 ee 7e 33 7b 6f 83 00 37 a0 ee 99 69 db 60 43 77 81 dd dd 8e 32 30 05 ab 4d c3 21 09 6c 0d f5 Data Ascii: RIFFWEBPVP8L/IM@$9nSPv(xHhjr,$k2O@3GaT=UPQ<ccDUq_@;Ii#>#8&@o:`zmPZ,1>65exosJq{K-lx{i)~3{o7i`Cw20M!l
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 30 44 a2 be 97 f9 d8 ff ec 0e 65 d4 4c fd 62 96 00 09 90 24 49 bc 11 6f 22 81 b8 cf b5 4e f7 f0 1a 1f 64 78 7b dd cd 09 6e 01 40 80 24 df 38 7a 43 00 d8 c7 11 81 de eb 63 87 d5 01 ee 25 49 14 6f 4a 82 0c 06 f1 60 b4 6d 2d 7f 5c fe e8 17 33 00 ef 78 0f 90 43 92 8a 8f d3 c6 62 86 2b 74 46 0a a1 dd dd cf 2f 33 7c e6 fd 8d f7 00 49 0e 49 02 a3 fc 1a c6 b2 0b 9d 8b 6e 0e fd 2c 3c 28 09 58 f5 38 a7 f7 b9 e9 d4 d4 52 53 b4 74 ea 23 fd 64 3e bd 6e 7e d4 01 10 79 56 d7 62 36 b7 f9 bf e8 54 b4 b5 35 fc 79 b1 8b cd 6d b9 6a 5e 59 03 c0 1b 51 97 a8 f4 5e 87 ce b9 cc a5 b5 2f 1a ad b2 ce fd 01 e3 d5 04 49 02 c4 4a ef 6d 4d af 55 2a bd 55 20 42 c1 89 ef 66 02 00 4c ab 24 ec eb 25 8b b7 7a ad d7 ba b8 74 89 63 19 31 f6 16 f7 f3 d1 f4 db c9 4f 3f 9c fd 26 a0 24 2b 0d 26 Data Ascii: 0DeLb$Io"Ndx{n@$8zCc%IoJ`m-\3xCb+tF/3\|IIn,<(X8RSt#d>n~yVb6T5ymj^YQ^/IJmMU*U BfL$%ztc1O?&$+&
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 30 67 02 60 0c ee 3d f7 ec d9 62 02 f8 bf ff bf de 72 23 e9 f3 f9 e2 a1 cb 54 b7 b8 5c 66 b6 43 4e 1c 70 b0 bb 43 cd 1c 98 66 66 e6 ee 34 c6 ed 4c 27 1d 68 ee 0e 33 74 da 31 87 13 33 c4 50 55 76 95 8b e9 56 5d be e7 dc 03 5f f8 7c 3e 3f d4 b5 dd f4 07 bc 67 54 6a 69 e0 6a a8 c1 9a 74 66 16 4b a3 a3 d5 99 89 ce 82 7f f8 2a 3b 5e b2 6a 19 bc 50 83 d1 d5 e8 0e 7c 17 4e 4b 74 16 06 2d 79 18 bc d1 69 28 45 b5 e0 1f ce 40 2d e7 2c 43 14 a5 87 a2 5a b8 9a 39 03 a5 11 7e 35 62 b0 86 67 32 50 6a b9 c1 3f 54 7e b8 6a d5 62 74 96 a1 b5 c3 63 c9 ea f5 ae ee 28 f2 42 69 75 06 bc 9c 5a 06 77 d4 e0 55 69 78 a6 06 6a 29 7b 96 b9 14 35 95 9a bb 4b 91 b3 7c 17 ee 72 ee 0f 1e 89 79 c6 1a 6a b0 26 db 50 8a 74 b7 55 d2 0a 03 b6 6d 87 25 49 7a df ef fb 23 e2 f8 a4 2a 2b cb 55 Data Ascii: 0g`=br#T\fCNpCff4L'h3t13PUvV]_\|>?gTjijtfK;^jP\|NKt-yi(E@-,CZ9~5bg2Pj?T~jbtc(BiuZwUixj){5K\|ryj&PtUm%Iz#+U
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: e1 b8 c1 8a 1d f3 16 20 dc 33 bc 3a 88 43 82 8c 7b 20 00 27 d8 9a 42 22 ca e6 75 02 ec 47 67 f3 90 80 00 5c 01 88 ec c2 09 0f 35 76 41 2c 05 64 29 7a 75 04 90 14 80 0d 0a 19 7b 92 ed 56 8d 9a 78 7a 52 33 d3 ab 5b f2 5a 80 41 6b b7 d6 46 aa d7 47 54 5f 94 74 b6 07 5b 53 48 49 f6 57 54 d8 35 d1 42 71 c2 39 6b 6c 49 49 61 f3 71 4a 0a b0 e3 90 02 0a a6 70 e0 74 0f b6 ab 31 ba 8c 8e 99 1b 90 ac 86 25 c7 1d ab 1b 54 37 cf 6c 56 47 28 37 a3 5b e6 04 60 9e 90 7b 52 00 62 ff 25 25 11 d4 00 c5 2b 21 9c 31 e5 b4 ad 01 34 08 b5 5d c2 06 5c 81 00 48 b2 0b 24 25 25 41 f2 14 61 f7 25 91 36 65 a3 ba e3 e6 ea 20 50 1d 92 0a 64 15 8e a3 4f 34 69 dc 42 05 47 47 f6 63 42 4a 4a dd 8d ec 03 27 05 92 ed e1 04 48 82 a4 50 77 54 f0 00 21 05 48 61 33 9c ab 0d 01 ae 38 a3 b0 79 65 Data Ascii: 3:C{ 'B"uGg\5vA,d)zu{VxzR3[ZAkFGT_t[SHIWT5Bq9klIIaqJpt1%T7lVG(7[`{Rb%%+!14]\H$%%Aa%6e PdO4iBGGcBJJ'HPwT!Ha38ye
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 3c d7 ab ff e0 73 5d b3 5d ee cf 7f d1 e5 6e ab 9d d0 0f bf f9 2e e7 5e 62 7d ad de fb b8 c6 16 87 fb 9d 21 67 9a 69 00 e4 29 45 64 0b b0 08 72 ba 4a fa c1 d9 27 13 9b a6 0c 60 ec fa 82 11 83 31 06 92 51 35 24 8b 93 bb c1 6e 3c 53 ce b2 1d b9 8f c6 c9 0b 36 72 6d 71 73 55 10 09 ea 33 f8 b3 43 7b bf ab 9e 5c e6 63 ef b9 e2 b7 bf 57 60 28 7c d9 db 7e ff 04 cd ac aa a5 dd a5 b3 71 97 f4 00 e7 f9 3e f0 07 10 f5 32 bf f6 39 2f f8 9e 3f 68 83 5e f2 07 3f ed 46 a7 1e e4 93 f3 60 5c c8 5a ff b4 50 11 81 9e 67 b6 56 87 c7 10 87 33 ec c1 10 70 4e d1 1e 37 3e 37 01 c3 e7 6c de 7c d3 b9 02 84 02 0e ec 2f 52 1b ad 04 1a 02 0a 3c 03 9e f6 62 1d 49 96 9c bf d9 38 86 a8 6f c6 36 6a e2 f5 d9 3a 5e 7d b4 55 94 a2 e0 99 67 5b 25 32 0e c3 1e 19 77 a6 82 ed 7c 14 40 07 67 55 Data Ascii: <s]]n.^b}!gi)EdrJ'`1Q5$n<S6rmqsU3C{\cW`(\|~q>29/?h^?F`\ZPgV3pN7>7l\|/R<bI8o6j:^}Ug[%2w\|@gU
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 11 b8 4a 1a 27 6f c6 33 90 7e 83 8b 3d 9a 09 f9 08 b5 cb 57 4e f4 78 74 72 03 b0 f1 80 60 1a 1a 6e e9 00 00 78 d3 e8 9c 26 1f fd fb 3f f8 58 3f f9 c1 e5 be fb 63 ef aa 09 00 91 46 80 16 e8 00 00 20 22 66 3c d3 2b fe ec d3 fc db 5f 7c 5a bc de 5b 7c 24 b8 cc a0 15 5c ac 80 4e 00 e8 04 23 64 c1 8a c8 54 00 5c 1c 86 7f e4 0c 11 0e 09 28 0e 1a 7b a8 fa b1 22 85 49 dd 85 cb dc f1 ba 73 b5 ac 86 35 a1 1d 25 26 85 46 55 c5 2e a5 83 df 58 6b 39 d7 85 91 46 f3 cb be bc bc ec 9c 27 67 6d 61 22 00 80 16 00 30 ef 9e 50 7f ba b7 fc fe bf 99 2f d6 04 98 34 06 93 76 00 04 9b 5e ec 9b 57 ca 74 a3 8f 04 80 72 13 b8 78 29 66 a6 41 c3 2e 30 a6 6a f3 20 db 60 20 4e 0d 20 26 15 27 4d d7 43 8a 54 79 ee 68 4f ed 81 9d d3 ab 64 55 59 ad a5 59 57 83 75 c6 43 fa 88 93 45 83 5d 19 Data Ascii: J'o3~=WNxtr`nx&?X?cF "f<+_\|Z[\|$\N#dT\({"Is5%&FU.Xk9F'gma"0P/4v^Wtrx)fA.0j ` N &'MCTyhOdUYYWuCE]
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: d9 be ee d3 60 d3 af f4 dc f5 67 98 ae 03 8f f3 e1 3f a3 02 97 f2 5c ff fe 47 46 50 eb 4f 75 fd cd e9 46 5f dd 0d 1c 4e b7 a0 de 18 00 82 30 10 b6 16 a0 23 04 98 50 0d bd be be 16 01 01 13 aa 69 75 a6 5a d5 52 8a eb 2a d7 f3 62 49 94 b2 c1 9b f2 9b 7c f2 29 a9 34 7e 8f 2b 4c 2f 9f 5d 52 02 ad c0 c6 e6 79 7d ba 54 23 db 3c ee 79 0f 74 1a 55 3d fb a1 db 8b 52 63 c9 e3 7d f1 57 54 53 23 c4 97 3b 7b ba d9 8f 7d 81 4c eb 8e da 10 18 46 bc 06 bc e8 03 7f f5 15 7f ec 37 af 0c 47 3d c4 09 3a 4f cf a6 6a 13 43 af 3f fe e7 5d 1d bc 6b 84 b2 dd f8 fe f3 cd 2f 67 49 ed 19 67 78 b5 fe 0b 3e 88 17 33 f1 73 76 f4 98 a2 db 4a 6e f0 85 95 a7 b7 8e 5c 30 5c 3f 7d 13 22 1e e5 d4 2d 1c ad 1c e8 66 df ff b1 8f e3 ba 70 e2 22 f9 f5 7e d0 f3 f7 b6 dc eb fa dc 27 00 88 00 a4 71 Data Ascii: `g?\GFPOuF_N0#PiuZR*bI\|)4~+L/]Ry}T#<ytU=Rc}WTS#;{}LF7G=:OjC?]k/gIgx>3svJn\0\?}"-fp"~'q
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: f9 2d de 9b 0a 1a dc 3c 9d 30 d4 cd 04 60 ee 80 86 73 61 5a 63 c2 f1 74 10 18 39 1d 10 05 41 68 58 23 11 48 9d 1e 32 22 99 a9 00 d0 79 0c 74 e8 02 40 10 20 b2 b4 23 04 c0 7f 0d 2b 10 ec d8 54 03 8a a0 40 01 ae b8 62 27 44 e6 11 aa 65 46 5a 00 b9 14 1c 12 d5 e4 7c 30 9c dc 77 a5 25 cc 52 27 8d 46 3d 46 c5 11 3d a0 60 c8 c0 82 37 3e f4 23 20 0d f1 c5 70 22 91 c1 bb 3b 9a 3a 00 00 d2 d0 60 b0 a1 06 0d 00 80 4c 10 00 a0 a5 03 82 00 00 c1 d8 62 80 14 80 d9 03 76 75 07 14 80 1d 50 00 84 cd ab 20 6b a5 1e ed 88 5f dd 90 74 15 66 98 a5 23 4c e1 11 59 eb 3c 7b 9a 32 0b e5 2a 1d 8e 7a d5 6a 26 c6 77 13 63 f1 a6 05 27 5a ad 1f 4b 19 0c 43 8c 48 3e e2 e4 39 1c dc 84 3c 66 2c 12 44 e4 75 01 22 60 ce 0c c2 a4 41 68 0e 4d 92 86 49 53 60 66 34 50 90 01 40 0d 04 b4 80 80 Data Ascii: -<0`saZct9AhX#H2"yt@ #+T@b'DeFZ\|0w%R'F=F=`7># p";:`LbvuP k_tf#LY<{2*zj&wc'ZKCH>9<f,Du"`AhMIS`f4P@
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: af 59 f5 ff fe 17 ab 6f b1 ea 3f b7 fa b6 cb ff 8c 15 ff c2 19 0f 79 06 ce 6a 13 f1 e4 ca fd d2 57 c7 d9 1a 9c de 11 f7 39 05 93 ea 50 5b 9c 22 06 98 66 08 26 15 bd e3 34 6d 76 cf 24 ed 8e af a1 b9 f0 b2 f7 3f 0f af 41 3b f5 e1 79 be d0 44 92 37 3d 6d b2 11 4e 77 80 04 4c 98 84 cd ba e3 4d 33 78 de 87 fa 79 de f2 09 2d df e4 61 4f 2b b6 b0 0b 82 d9 65 4f e1 8c bf f1 6b df c1 fb df f3 d1 5f 74 ce 1a 9c ae 66 8a e9 fd 98 34 05 00 10 82 06 43 46 08 fc a1 c4 3b 48 e3 38 7e f6 f8 8f 3c 6b f3 7e 84 31 47 46 b2 0b 04 e4 e8 40 8f 56 84 81 c1 02 30 03 ec a0 aa 55 ad 00 69 98 06 82 68 a7 0d ae fe 63 23 1f b8 6e 42 59 a1 d7 77 4a 2a d8 fd 1f 75 a1 17 ab 6e 83 fc fd fa 33 6e f7 d2 3a c7 9f 74 47 47 b6 39 6a 4e f3 2d ed ef db 3c 71 fe 69 b6 ab 05 77 ad 60 e8 7d 39 a3 Data Ascii: Yo?yjW9P["f&4mv$?A;yD7=mNwLM3xy-aO+eOk_tf4CF;H8~<k~1GF@V0Uihc#nBYwJ*un3n:tGG9jN-<qiw`}9
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 79 8b 4a fa f0 5c 78 db b7 f6 ba f6 e5 fe c7 1e f8 9d cd 36 d5 00 38 02 d7 bf f5 97 3e ae fb cb 7a cc 97 f1 fb 57 ac 62 ef 53 b0 58 ed 5b bd 31 4f f6 8a fd b6 ff b1 9c e3 fb e6 ed fe 61 7d dc e7 ec f6 fc f4 b2 d5 ef e2 00 81 d1 0e 01 bb 0f 00 f0 f0 0a a0 12 32 61 6a c2 b4 1e a1 d5 b6 c4 84 75 15 a9 83 e8 24 23 e3 f5 bd 64 62 9d 42 25 2e 80 b6 71 68 c8 38 bd 91 d3 78 6c 79 39 f5 22 48 a2 e6 c1 20 62 91 e1 27 a3 8e 70 78 31 15 b2 5c 79 37 a3 27 69 d3 ea 7f e2 92 20 00 a6 d4 80 53 dd ae 75 35 64 e3 ec 98 b9 70 bf eb 5f 5d f8 f6 37 fa bd f4 8f 73 5a 15 ac 95 88 10 c0 65 bf d2 37 be 9d e3 c7 39 6e cb e7 fb 12 af 60 a7 b7 e5 dc bf e8 17 7f d6 7c f9 af ff fc df fd 26 bf bf 9e f7 2f 6b f4 1d 39 c7 0f 4d 9f 74 bb 5b d6 e1 ff 41 60 b6 de a7 ed 1d 7f c2 58 68 10 c6 Data Ascii: yJ\x68>zWbSX[1Oa}2aju$#dbB%.qh8xly9"H b'px1\y7'i Su5dp_]7sZe79n`\|&/k9Mt[A`Xh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49789	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	530	OUT	GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9646 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 a6 25 00 00 57 45 42 50 56 50 38 20 9a 25 00 00 f0 8d 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 12 7a 7d 58 28 04 04 b2 b7 7c 2f dd 83 78 17 1b b8 97 db 96 8b d2 cb a2 fe c1 e6 ef 45 fe 8f af 1d 0e f9 27 f2 0f fc 8f b8 ef 78 df d8 3d 80 7e 43 ff 81 ee 01 fa 6b fe 77 f9 3f f8 0f 68 cf d0 0f 72 3f af 3f a3 be e0 3f 95 ff 6e fd 8c f6 22 ff 63 fd cb dc 6f eb 47 f5 ef e4 bf e0 3e 40 3f 94 ff 3d f4 18 f6 00 fe 55 fd 67 d8 03 f8 8f f2 ef bf ff 94 2f f0 5f b1 ff 02 ff b0 df b2 3f 00 9f ce 3f bd 7f f7 ff 67 ee 01 e8 01 d4 3f d9 3e c3 3f b1 7e 44 7f 6b ff 67 eb 9f e2 ff 23 fd 27 f1 ab fb 8f fd df f2 9f 21 ff d7 78 4e 89 07 c5 7e be fd 4b f1 ff fb 17 fe af f6 bf 79 ff 92 ff 7b f8 29 e6 ef c2 ef e9 ff 28 7e 00 bf 1f fe 4b fd 4b f2 63 fb bf ed 2f 1b Data Ascii: RIFF%WEBPVP8 %*((>ADz}X(\|/xE'x=~Ckw?hr???n"coG>@?=Ug/_??g?>?~Dkg#'!xN~Ky{)(~KKc/
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: af 5f de 8d 8e 61 28 c2 f8 6f 08 af 97 2a 86 83 d2 04 91 49 db 38 1f 55 6c 9a 88 0a c5 ed 2c c6 4a 33 4f 4b 65 99 d0 68 15 20 f2 02 eb 16 74 a5 db 09 8f a4 19 b2 d0 fd f4 14 67 b6 fb d7 ea 1b 92 90 b1 4d c0 3a 91 4a b0 39 f6 f2 be 67 59 80 7a bf 30 63 2c 70 bb 23 70 e8 83 87 a2 a9 84 df 39 e5 1a a6 46 5c f7 e2 eb 45 a3 e8 13 a8 88 85 38 e0 c7 90 1e a5 38 7f b4 85 4e 6a 90 d6 ea ce 52 20 c3 a1 f8 a5 b2 e9 9e 59 dd 65 82 e5 49 d3 4f bd 8c 7b 95 42 c7 5d 24 ee 41 f4 f1 67 4d f3 75 e7 70 9d 12 22 bf aa 93 4e 88 b8 7b 4f 55 25 48 3d aa ef 99 84 7d d6 a1 de 29 97 8c 09 a9 3b e2 85 5e 3e 9b 64 88 86 6c 82 70 57 da 9b 75 c4 0d 5b a3 9d 94 13 76 5a 90 c0 92 59 2e ed a9 12 64 1d 24 8f 6d f4 fe 07 44 31 77 8b f8 67 d9 88 1d dd 0b a5 97 e2 0c 96 e4 9a 3e 31 7e 1a 7f Data Ascii: _a(o*I8Ul,J3OKeh tgM:J9gYz0c,p#p9F\E88NjR YeIO{B]$AgMup"N{OU%H=});^>dlpWu[vZY.d$mD1wg>1~
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 29 6c 20 5e 0c 07 95 9c 33 a3 9a 8e a5 4d 5f 4d 05 8e ee 8c 2a 1d ef 19 51 14 22 4c fb dc cc f6 a2 29 2b 8b 23 cb a2 bc b3 f9 50 3d 1a 02 6e dc 3f 94 7a a3 2e 0e 80 2e 12 0c 18 ef a2 c2 fa 95 0e 7b c9 43 f3 3e d3 a6 97 24 8e 7b 8b 18 d5 55 1e 39 88 89 e1 e3 3b 10 f8 66 13 4f 9a e0 4a 58 1f d6 11 07 5d 02 b0 5b 44 d8 9b f7 8d de c1 f4 62 cf de 66 4e 67 b4 4d 23 db 01 f4 eb 96 ac e8 1d 91 70 72 d2 e1 99 06 50 87 ed 1f c9 61 f9 ff 66 d6 0c 6d ba c3 cb 5e 39 1a 57 05 5e bf 02 c7 03 c5 b0 eb 7f 20 29 b0 1f ea 05 cc 5b fb db 73 d8 d5 d2 9d 9c 50 30 03 9d 27 eb b3 56 1a 18 1e 40 ff 66 df f4 86 b2 70 4c a3 a5 67 9d 5d 04 f7 55 f5 f8 b3 14 46 a7 ad ce 91 2e 92 de da c1 39 e6 2f e8 98 ab 75 27 08 2b 84 d4 6c a8 8a 82 6e 49 4a a8 59 0c 6f e0 5f 9e 6e 4b 21 59 37 2f Data Ascii: )l ^3M_M*Q"L)+#P=n?z..{C>${U9;fOJX][DbfNgM#prPafm^9W^ )[sP0'V@fpLg]UF.9/u'+lnIJYo_nK!Y7/
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 78 cd 57 64 bc 74 80 fa 7d 8b 10 dc f4 15 0c 7f a3 72 5c ab ac 74 26 0c 25 66 e4 67 24 f6 3d 56 52 7d 43 6d fe ca 7b 3e 99 77 62 e2 ed 98 b1 f0 cc 41 2f f8 7e 57 4c 10 e7 50 b9 fa b3 0d 65 05 a9 41 2d ac 81 d8 18 2b 5f 2b 42 52 3b 86 d1 90 6e 89 b6 1f df 2a f2 4a 5d c6 6f dc 23 5b 61 bc 9d ee 26 00 83 5e c9 8e a5 db 98 06 8b fd 98 80 3f 59 22 4d 6d 45 80 eb 67 01 43 da a6 f0 4f 18 7c b5 92 29 8b 5e 06 8b 8b 40 de 6f 7e b9 53 35 5f 3b 3d 53 97 3f 75 3e e8 ab f6 60 ef af 80 41 c3 1f b4 3c d8 e9 e2 d3 23 6a f4 f4 8f bb ab 5b 9b 56 1e b3 98 f9 34 1f e3 ca 58 76 7a 4b 32 e3 28 ab c7 7c 18 4f 88 f5 77 32 c5 24 f1 6e ea bc 96 a7 37 33 55 11 9c 5a ba 80 58 64 23 bd 62 1c 89 5b 74 0c 79 b5 12 2c f8 06 03 4a b7 7c d0 99 04 24 b5 bd 1b ea e8 46 ed 52 34 3f 5c bf 95 Data Ascii: xWdt}r\t&%fg$=VR}Cm{>wbA/~WLPeA-+_+BR;n*J]o#[a&^?Y"MmEgCO\|)^@o~S5_;=S?u>`A<#j[V4XvzK2(\|Ow2$n73UZXd#b[ty,J\|$FR4?\
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: dc 95 85 3a c0 36 2a d4 e3 68 13 ca 23 be 2e fe c6 cd d3 b9 8a d2 24 93 8b 2c c1 1e 9f 03 39 e0 17 ab af eb 06 59 97 aa 31 df 5a 91 d9 d1 eb 31 23 6c c7 d2 e9 ac 48 8f 56 23 0e 61 d2 15 55 e0 88 2b 87 53 9e a4 58 fc 4e 29 06 c3 ad 28 55 95 d6 f9 37 26 0f 2c 9b ae 51 b7 ce 34 5c d8 e2 42 17 2a 11 a5 98 89 bb 7f 30 b5 79 8f eb c2 02 03 a7 4d 2d 6e ee 95 32 d1 e3 a1 6f 62 59 f3 08 d6 70 a3 fa 80 0f 86 72 85 1d 45 10 03 9b 2f 0b 20 66 99 81 ad 21 73 6e dd 4b 43 f5 06 15 7e 70 93 8b cd 28 7e 95 15 2e 66 30 24 4a be 28 7a 6a 7e 66 d7 3a 51 4a 2d 64 a4 22 ef 23 b9 24 4b a7 85 8e 21 1c 45 d6 46 ee 31 35 d9 f4 27 9f fd 53 3b 52 60 cf 17 44 c9 1c e2 11 93 51 12 08 84 6d 26 c5 76 bb 3b 67 17 21 d0 b4 16 d2 da 92 00 d8 e2 60 b5 e6 c9 f6 98 77 50 b9 ed 91 0f 06 51 c0 Data Ascii: :6h#.$,9Y1Z1#lHV#aU+SXN)(U7&,Q4\B0yM-n2obYprE/ f!snKC~p(~.f0$J(zj~f:QJ-d"#$K!EF15'S;R`DQm&v;g!`wPQ
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: d4 f0 4f c3 cd d2 6b 9c d3 62 2a 01 7d de 57 df 2a eb a2 1f 4b e1 f7 24 2a aa 3b 9c 01 0a d4 70 a9 94 b3 08 bb f2 41 a3 5d e8 7d 6d 5a d5 e2 7d 88 2c 78 4f c5 b9 7e 09 9e 93 c5 8b 1d de c1 43 06 bf 6d c9 4e 87 4f f9 aa e8 01 5d 88 e7 75 db b8 af cf 59 3c 6c a9 94 f7 ee 70 d2 b9 3f 94 79 51 89 76 f5 77 6d d1 8e 35 57 c3 c6 47 22 b6 db 3c 6f 50 65 43 4f 6f bd 38 76 7e 7c 06 9f f4 50 df 1c 16 7f 48 4f 0a 2d 18 68 42 c9 d2 b3 fb 11 09 f5 ea 5e 4e f4 42 9d cc 2a 8d c0 18 af 3f 47 99 f9 ff 37 7d f8 f2 2f 17 5c c7 10 8a d0 b4 c1 43 4b ed fc 35 b3 d7 65 37 de 6c da c7 9e 34 21 c5 ab 95 f9 c8 aa 7d 2e c3 f8 83 e8 09 fe d2 86 74 e4 7c a8 d6 82 9e bb e2 21 9a 61 6b c8 26 06 67 6f 60 9a 03 1b 4b 20 1b a9 eb 30 6f 6b a5 98 a7 db 5b e4 a6 04 85 1f 47 bb 97 90 b5 7c 2f Data Ascii: Okb}WK$;pA]}mZ},xO~CmNO]uY<lp?yQvwm5WG"<oPeCOo8v~\|PHO-hB^NB?G7}/\CK5e7l4!}.t\|!ak&go`K 0ok[G\|/
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 14 df 0a d2 77 bf 13 4f 01 69 0b 2d 66 69 bc 7a 6f c3 ba f9 a5 73 a5 f8 c8 97 82 e8 01 c1 09 0a 4b 69 32 62 c5 c3 4c 52 03 75 97 a8 e4 40 a5 59 f0 2f 2e f1 cb 38 12 aa 1e 82 4c be c9 b3 4d 37 fb 60 bc 06 f7 1e 79 87 a1 29 6c 29 bf c3 57 01 58 fc 00 0d 6c c6 35 80 00 3a 1b 3a a8 49 38 71 9e 68 a3 cc 4f 9b d5 d1 e2 39 b7 03 6f 92 78 62 09 04 eb 7a 5a 55 b9 97 2c 1b d5 a0 f3 7e 20 16 ff 2d 4f 35 e7 b3 f0 0d 3c 5f 25 a8 81 69 87 fd d5 54 ed 25 58 ff ed 36 3f cb ea d3 e9 4e 10 f9 83 f3 15 18 07 27 e9 bb ed 0c 83 9c 82 0a cc cf d5 f3 5d 60 53 86 ae e5 76 73 8f 1a 4a 0e 59 a6 d0 cc 20 65 74 fc bb 0d e7 f5 0c 99 45 de 43 5a 96 e3 b5 6a 2e 84 fd ae 29 7a df ac a2 44 c4 ac 62 08 1c cf 0f 8a 5d e6 12 a7 20 9b bf 4f f7 25 68 19 f8 64 6c b3 22 65 bc da 1c 62 36 19 f8 Data Ascii: wOi-fizosKi2bLRu@Y/.8LM7`y)l)WXl5::I8qhO9oxbzZU,~ -O5<_%iT%X6?N']`SvsJY etECZj.)zDb] O%hdl"eb6
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: f9 76 4c d3 c2 d7 11 a1 ca 8e 00 82 32 14 c4 b4 df 25 34 53 34 a5 8b 05 1b c8 dd 9b 6b 26 d4 09 e6 3c f3 96 5f 89 20 40 c0 c9 80 2a 40 fd d2 fb 3e 0c 68 06 f8 c0 a9 cf 84 ff 70 53 0c 47 8a 03 4e a7 68 c0 e3 69 fd 84 9f ff b9 3d 70 0f 74 ef 7e d0 ae 1f cf 21 94 c9 c0 3b 62 0f f8 30 15 78 87 24 39 7a 16 3f 11 dd bd c4 12 1e 2e a0 82 27 46 19 8d 66 e5 11 2a 69 64 00 36 33 5b e3 09 08 df 8d 4a ba 0f 83 03 05 62 10 aa 14 a6 4c e8 d0 a0 4a 37 ba 07 03 53 02 d4 5e 46 0f 6b bd e3 fd f2 a7 4c ac 50 40 55 61 b8 0d 42 57 0c 38 22 c1 f3 18 4b 7f 9e df a5 6d 11 60 32 db 00 67 b3 ae 35 67 be 35 79 64 22 ba c0 02 c1 91 c9 c3 bd 3b f2 d5 3f 38 c9 5c 2d 89 c4 cf c9 27 f5 8d 69 fb e6 a1 37 77 ab 96 c7 58 ac f4 de 06 8d 14 e8 83 11 ef 9a 25 b0 66 5f 20 bf 03 c9 80 cf 5e 5b Data Ascii: vL2%4S4k&<_ @@>hpSGNhi=pt~!;b0x$9z?.'Ffid63[JbLJ7S^FkLP@UaBW8"Km`2g5g5yd";?8\-'i7wX%f_ ^[
2024-04-19 14:06:12 UTC	139	IN	Data Raw: 6a 36 4a 38 1e 85 7a 1f 1c 85 e4 8d a7 9f 70 0c d3 3e 10 b4 af 64 fc 6f a4 fd a8 66 e9 10 41 ab 87 d1 68 38 ad dc f8 f9 51 85 f1 39 ed be 34 f9 9d 3c cc 54 79 13 09 d6 e3 3a 14 40 1d eb 4d 4e d5 97 8b 85 13 e6 2d 51 8f 3f ee f9 13 48 06 96 ec c0 36 f6 3b 5c 4f a3 f5 c2 1b a1 14 0b 2c 01 5e 6c ff 91 b5 9d 95 61 4b c9 84 5a 66 9a f0 08 b4 e2 7e 44 00 ea 24 e9 4e 0e 7e b2 e1 96 19 00 95 b0 36 fa 3a c0 62 e6 66 00 00 Data Ascii: j6J8zp>dofAh8Q94<Ty:@MN-Q?H6;\O,^laKZf~D$N~6:bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49791	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	531	OUT	GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 31756 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 04 7c 00 00 57 45 42 50 56 50 38 4c f8 7b 00 00 2f a5 c0 49 00 4d 38 8c 24 35 6c 72 87 e2 40 20 fd 17 2c d9 69 21 a2 ff 13 50 55 95 19 55 95 4f b7 ca cc aa aa cc fc 56 56 9d ea ae 9e 2f 6c e8 8e 53 56 a6 cf b7 aa 5c 72 f5 0a 04 88 2d 2b b3 b2 fe cd aa e2 f1 da be df af e0 dd 74 03 5f ba 49 5f af 97 80 7a 1a e9 06 6c 60 ac b5 56 32 f6 da 8e 63 ac 58 46 d8 0a 6e 31 5d 37 84 dc 4e 47 c4 ea 08 47 1b 04 da c3 a2 9b 50 ce a7 4f b7 13 36 c4 83 fc a8 af f0 78 77 95 4a 08 d0 c0 74 03 55 da 2a 6b b5 30 b3 05 2d 2d 7b 80 e3 1d 73 00 ba 0f ba 05 c4 36 6c d0 db 70 9e d9 22 0e 7d ea 6e 17 72 5a eb 40 b7 2a cb 2d 38 8f 03 5c 6b 1a 46 22 36 0f 99 76 2b b7 e3 d0 a8 12 6a c4 a6 fe 7e d7 41 b9 55 3f 1e ae b0 6f a6 7d 3f e0 6e 7c ff d8 78 e2 78 0b 01 08 08 56 7d Data Ascii: RIFF\|WEBPVP8L{/IM8$5lr@ ,i!PUUOVV/lSV\r-+t_I_zl`V2cXFn1]7NGGPO6xwJtUk0--{s6lp"}nrZ@-8\kF"6v+j~AU?o}?n\|xxV}
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 3a 81 40 00 20 31 de f0 c5 4c d6 4b bc 3d 96 31 12 61 ff 29 ad c1 17 13 7b 64 bd f6 15 2b 9a 75 b8 06 80 d5 1e 66 f7 88 cd 93 79 f1 93 5f 2c 75 00 02 69 0d 66 26 be 0f 9c 3d 1b ec 37 8f 33 2e f9 66 0f 98 f5 8d 97 0d 1a 60 81 69 00 40 da 4e 81 86 09 b0 c0 02 06 40 be 5c cf 01 68 c0 e7 1c 9b 4b be 4e fc 87 17 c0 0b 2e 31 01 00 2e f7 72 f5 f2 03 c9 94 7b 00 1c 02 d0 d6 e4 c7 8e 59 5e a6 00 e2 30 1c ee fd 18 e1 d0 e8 05 c6 2c cb d4 4e 58 ce 4e c3 69 00 07 6d f4 43 90 f2 d4 fe 23 4c 68 07 00 48 63 3d 5c a3 7a ec 29 d0 97 1a 0e 01 18 18 1b f8 af 34 07 da c1 21 a0 1d ba 4d 07 96 be 00 1c 12 22 44 f3 df 01 52 17 a4 0e 8c 10 8d 1b 90 6c d7 39 4b 4b ae b3 49 19 5d 71 ff c3 5e 1c 9b 00 53 0c 7f e9 17 1e 0d 42 23 71 4f d2 d6 43 0e 31 c4 50 e3 76 4c 62 52 93 a7 99 39 Data Ascii: :@ 1LK=1a){d+ufy_,uif&=73.f`i@N@\hKN.1.r{Y^0,NXNimC#LhHc=\z)4!M"DRl9KKI]q^SB#qOC1PvLbR9
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: d4 cd 53 35 ab b5 ed 09 d1 cc de a6 36 94 0d d2 ee 6d 8a cb 13 db 03 8d 90 89 ad c1 c0 24 d8 04 33 c4 93 6a 0c 49 8b f6 cc 45 d2 48 db d4 5e 1e d2 2b b5 89 84 44 f7 ca c5 c5 65 6d 9b 60 42 68 d1 6d 89 b1 25 b7 a5 c0 63 ed 79 aa e5 0d da a6 ee 2d cd d8 a8 7b 3d d5 32 d8 e6 61 cb 58 3d 93 43 84 08 b9 d7 a8 12 83 4d dd 58 5e d4 e8 26 17 d8 d0 9e 5c 1b 63 68 53 b7 12 c4 42 29 64 ec a8 14 12 21 51 9d 84 a0 58 96 11 0d 46 2d 0a 49 aa 05 55 e4 65 45 28 85 90 a2 22 30 38 08 05 b1 6e c5 31 08 28 0b 21 64 22 f0 a2 2c 45 2c 44 bc f3 2e 62 89 09 06 2c 09 84 50 26 68 19 b1 12 2a e5 41 5e 90 12 2f 0a 25 62 19 64 49 3a 65 28 19 2a 2f 2f 2b 61 4b 2c 24 92 f2 b2 2c 2b 45 12 05 76 64 ca 20 63 52 02 9e d4 14 58 16 4a a1 94 08 85 52 b0 bd ba 13 cf 3d 6c ad 3d 5e 17 68 7a cc Data Ascii: S56m$3jIEH^+Dem`Bhm%cy-{=2aX=CMX^&\chSB)d!QXF-IUeE("08n1(!d",E,D.b,P&hA^/%bdI:e(//+aK,$,+Evd cRXJR=l=^hz
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 7b a9 05 00 d0 06 55 2c d8 b2 16 04 c5 5a d0 d2 aa 3a b2 31 9b 55 d9 44 a5 c0 ed 52 5b ed aa ed 64 49 da 15 dc 4d 6a cb 86 3b c5 da 54 d4 8d b5 f1 da 6e bb 76 f7 42 ab 76 b8 5b d6 ad 76 e8 38 bb ed 60 bb 4a 56 a8 42 5b 6b 68 2d 91 56 74 62 61 1e 74 4f d4 78 c1 c9 d4 86 2a bd a5 8e 79 35 02 6f a5 bb 05 e5 d4 d4 89 59 b6 97 7a cd 14 28 af 97 6e ab 6c 6e 2f 75 8b 0e b6 59 37 14 43 60 9b 6e d3 6a 11 75 25 18 49 ae a7 00 d0 9e 5c 2d d2 6a a5 6e 0c 21 e6 9e 54 cb c8 3d a9 2d 64 7a 4b bd 37 8b 34 e8 58 ba ed 7a c1 c9 b0 01 d8 93 bc f1 0e 48 bb 7b a6 db 58 d8 bd 92 37 a6 29 ea 6d 03 60 d5 b1 87 0b 05 35 eb b5 50 28 eb bb ac 2d 53 ed 49 bd 78 41 af e4 bb 92 62 8c 67 a8 33 90 9a 6a 89 99 8a 5a c3 24 15 bc 0d 8c 21 53 61 cb 98 94 ac 19 c8 1d 85 a5 a0 05 24 05 c4 2b Data Ascii: {U,Z:1UDR[dIMj;TnvBv[v8`JVB[kh-VtbatOx*y5oYz(nln/uY7C`nju%I\-jn!T=-dzK74XzH{X7)m`5P(-SIxAbg3jZ$!Sa$+
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 71 e3 b6 2c eb de a5 3b a0 65 2b 75 b0 b6 7a 67 1d a5 8e e8 50 19 dd f2 5a f6 c0 69 c9 0d d6 da 33 eb 2d c1 bc 37 fa 0a ba 27 21 6f 1e 5e ad 56 4d ee 7e 82 d6 12 eb b7 f2 3a 65 5b 7d 25 f5 aa 5a f6 42 3f 03 b7 08 93 2c 83 2a 0c 12 c4 21 f7 73 f7 f6 8b 1b 57 74 a1 85 84 d9 45 6a 00 30 28 94 51 85 94 44 c0 19 75 99 5a 28 81 23 a5 2c 16 13 53 92 12 75 a0 02 21 6b 12 43 75 91 9a c2 b2 e4 22 0b d4 94 a4 04 0e 45 20 a0 12 38 cd 11 52 43 a3 4e 93 90 d8 28 64 39 cf 98 a2 01 f3 f3 4a 96 c4 3a 65 b5 40 85 ad ce 33 0c 95 46 7e 92 5c 61 f0 e6 d1 2b b3 9c a4 be 84 0a a8 2f e6 9c 41 ad 97 d1 b7 54 c6 b2 1a cb 52 c8 5b 9a 95 62 a5 8d b3 0c 24 71 5b 29 2b 69 51 53 88 ae a4 9e 30 74 ed 4b a5 56 41 a4 a2 52 2d 40 1e 27 24 24 8c a1 eb d5 5b ee 7d d9 99 4f bd f0 91 9f fd f1 Data Ascii: q,;e+uzgPZi3-7'!o^VM~:e[}%ZB?,*!sWtEj0(QDuZ(#,Su!kCu"E 8RCN(d9J:e@3F~\a+/ATR[b$q[)+iQS0tKVAR-@'$$[}O
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: e2 8e ef a0 09 68 77 f6 46 6b e6 ec 82 e1 d9 1c 5a 87 ad 5e 99 e9 ec ef 7c f5 55 dd be 90 aa e3 41 fb 9d 7e e6 8d 4f 79 f3 27 df 69 cf 75 31 51 f0 e9 3b ff 9b 0f de 33 fd 51 0d 09 a5 f3 4f 67 84 17 76 9b e6 79 fa 3e cc a2 c5 f4 bb 93 92 19 8b c3 1b be ff 91 d2 a2 31 9e aa 08 35 cc b6 37 7b e3 f8 0e 5d 51 a5 cc 62 17 a1 da 9d 4c dd 82 b2 cd 6a 88 20 31 e2 94 51 d0 76 ef 99 fa 2e b4 95 a3 0c 51 29 c8 72 3a 11 2a 43 2d 64 67 87 54 57 46 4e 27 05 36 84 3d d5 8e ce e4 ce 08 28 c4 76 ee b2 84 ca c4 5e d1 94 85 03 7c cc 16 30 c4 44 16 b2 2a 0b 29 5a 25 48 6b 92 ba 49 cc 88 41 16 d4 19 8a 0c e7 fd cc f1 d9 6f 9f fd 70 66 ea b3 f2 0d 4f 79 f7 bb df c1 8f e6 f3 ef f8 ff f7 de e3 b2 2b 9e 72 f8 f9 03 f7 41 b3 5c 97 01 a0 94 b3 45 1d 51 6a 31 a1 4d 19 9c 5d d2 5b 06 Data Ascii: hwFkZ^\|UA~Oy'iu1Q;3QOgvy>157{]QbLj 1Qv.Q)r:C-dgTWFN'6=(v^\|0D)Z%HkIAopfOy+rA\EQj1M][
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 57 2d ae 44 4b 5b c8 c4 31 95 c5 b4 29 49 e8 38 dd 02 55 c1 65 99 45 e8 92 ed 9a 8f dc 54 5b de 58 5d a2 e2 d0 14 0a 28 16 c0 6a b9 34 e2 51 28 1b 00 34 32 45 3c 90 82 76 19 71 b9 14 8e ba 62 4d ee 1a eb c0 10 92 11 eb 33 c5 32 43 20 d6 31 45 5d 0a 47 29 43 31 1e 0d 88 10 51 57 55 95 42 ac 9a 10 7a 53 6c 15 63 94 d5 ab 48 c7 c8 51 9c 3e 35 86 46 e4 2e 77 9e 8f 8b 4a 59 0f 7d 2b 19 1c 1b b3 ea 9c dc 4d 52 d3 3e bb 26 f1 b2 69 24 8e c6 30 c5 63 e2 a6 e2 68 3a b9 d9 06 dc d9 16 8f 13 54 10 9d b2 5a 1b 66 15 2b 0a 9d 6c 21 b2 10 9c c2 12 38 59 65 84 0a 01 14 59 91 8a 3a 84 32 12 12 72 42 c4 a7 64 48 1d 43 ca 60 21 21 11 24 00 00 19 a0 1a 06 ce c5 08 a0 84 18 00 c0 22 40 a0 2a b2 aa 96 15 50 55 2c c4 8c b2 0c 2d 31 40 a2 2c 80 52 a5 96 08 18 88 9a 51 10 30 55 Data Ascii: W-DK[1)I8UeET[X](j4Q(42E<vqbM32C 1E]G)C1QWUBzSlcHQ>5F.wJY}+MR>&i$0ch:TZf+l!8YeY:2rBdHC`!!$"@*PU,-1@,RQ0U
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 15 87 9f 9e f2 3e 3e 7e dc 73 67 a2 dc fc d2 55 37 4f 7b cf e1 f4 77 72 9b 33 70 fd e9 92 fd b1 7f 7a d7 13 ff fc 2e 17 9e ba 4d c4 dc 70 6d be 79 c6 ed 7e 40 6e 3d ee 08 6b fa b7 33 2e 7d e3 9f 77 7d e8 1d 2f 38 fe f8 73 d7 5f 75 58 77 95 97 7d fb 71 ff f8 e1 3f ae 7c c5 9f f3 70 fd f6 e4 9c fb 86 3f 3d eb 97 b7 e6 a6 3b 5f 74 9a a2 d1 9a 78 2a cd a7 77 e9 5c a5 5a 9b 8d 25 c1 d9 72 c6 6a 9a 48 45 bc 36 a6 2f b3 9a 42 71 f2 44 ab cc ac 04 2d ba 5e 44 20 84 25 b5 82 75 6b 30 c0 21 ed 06 ab af bf f4 a9 bd 39 f9 51 4f ff f8 bd b6 d9 9d 6f e8 d4 20 99 df 78 ef f2 b6 5b f9 da 57 2f be c1 5b 7d f2 c3 17 df d2 8c d3 f5 be b7 7c e3 c3 fb dd 19 1f ff e6 f7 dc 79 fb c4 27 bf 6f aa e7 9e ab 37 72 dd f0 eb 27 7e fa 4e 2f 7c e6 ad 0e 5f fb e5 cd 57 bf f0 a1 8f dc ee Data Ascii: >>~sgU7O{wr3pz.Mpmy~@n=k3.}w}/8s_uXw}q?\|p?=;_tx*w\Z%rjHE6/BqD-^D %uk0!9QOo x[W/[}\|y'o7r'~N/\|_W
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: bf b9 fb da 4b 1f b8 cb 4b 5e 7b ca fb b7 fa c9 fb bf fa 88 b3 de e9 93 b7 7c d5 c2 f5 7c e0 eb eb 45 8f 3d 9a 5e de 7e f6 89 7f dc f7 c9 1f 7a fb af fe 55 9b 39 1d 6e be 2a b4 5e 41 6a 45 90 b4 3d 2b de e5 43 1e 71 f7 ec b5 b7 56 1d f7 9a 73 1e 9b 9b b6 dc f1 b9 af 6e 0f bc ff 5f de fc ef 8f 39 f9 c3 1f df b1 e7 bd fd cf f7 bd ff bf dd fe bf 0f 79 d5 eb bf ea 11 fb bf e4 cb ff 7a cf ad 97 4c d8 38 fd 8d bc fd a1 8f 1d e5 ac f8 d0 fb ed 73 cf b3 83 f1 e9 9f 8e bd f7 63 77 79 ec 9f 4f 7e 28 8d f7 cf bf dd 0b 56 6f bb 78 ec 3f cf 3e f1 96 d7 f6 3e a8 27 fc 7d fb ce 9f b7 a6 f5 c4 bf 38 9c f0 8f ff ef 7f d7 ff f3 1b 3a cb 2c 12 62 d1 42 76 2d 28 5c b3 ac 16 54 5a 89 36 4a b5 8a 2a 1b f2 9a 77 75 d6 c9 51 ee b0 02 4e e5 ee cc 66 49 59 c7 d6 33 e1 5a 39 57 b3 Data Ascii: KK^{\|\|E=^~zU9n^AjE=+CqVsn_9yzL8scwyO~(Vox?>>'}8:,bBv-(\TZ6JwuQNfIY3Z9W
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 29 09 32 59 2a 51 25 35 10 ad 54 c4 81 38 a6 3e c9 12 88 2a 83 61 91 68 0a f5 aa 20 d6 63 01 4a 1c 49 4e 64 5a e4 04 41 59 02 3b 59 f6 fd 98 2c 4b 96 3a de 95 f5 64 29 b8 88 9f 90 27 50 2a 55 9e 15 6e 33 25 5c e7 f2 9c 83 8a 8a 65 76 17 ee a2 83 93 7d 16 15 2a 21 fb 72 6f dd a5 65 8a 00 9b ac c4 20 2b 11 82 1a 02 24 84 72 32 8c 46 6c 22 00 03 8a 72 5a db 1e 8a 3a 0f 9a 26 09 a4 00 8b 42 0e 03 b6 26 42 49 a8 e8 d2 61 d0 4f 32 f5 22 a6 b5 66 48 c5 90 ad 23 84 e2 82 6a 24 53 82 36 44 d6 a8 80 0f 46 74 a0 19 0d 29 d2 60 34 6d a0 46 69 c3 aa 9c 11 07 06 09 15 3d 1d 49 1f 13 cb 23 20 69 4f 46 d8 51 53 81 4a 46 a4 c7 88 02 1c d4 32 60 1a 71 84 44 24 c2 50 7a 46 a9 a9 d7 46 4d 45 99 1a 2d 40 31 59 28 74 85 d8 97 f6 62 38 dc 0e 3a 73 50 d9 9d ab db 2e 2a b7 92 b5 Data Ascii: )2YQ%5T8>ah cJINdZAY;Y,K:d)'PUn3%\ev}!roe +$r2Fl"rZ:&B&BIaO2"fH#j$S6DFt)`4mFi=I# iOFQSJF2`qD$PzFFME-@1Y(tb8:sP.*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49794	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1099	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:15:12 GMT Expires: Sat, 20 Apr 2024 10:15:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 13860 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 4c 44 07 00 00 2f 3f c0 0f 00 4d 28 6a db 48 92 3b cf 2e 7f c2 27 85 88 fe 4f 80 cf 6c 4d 42 ba bf a0 9d 83 59 27 2c 58 45 92 1d a5 2b 3a e2 5f d7 9d 70 83 02 3e c1 82 99 b6 6d cc 1f 5e cf 02 a8 76 0e 82 81 b4 6d b2 fd fe 35 4e 4a ff 13 5f 64 29 10 e0 80 25 57 f6 47 2e 5d 80 85 8b 01 3c 02 2c 0c 1e 18 63 c0 c2 0b 22 01 fc c3 43 8b da 3f 43 d2 53 dd 3d 58 7c 5e c4 b6 6d 5b 57 b6 6d e7 3a 27 57 b6 6d 5f da 36 3e db b1 b1 f6 56 5f ec ec a6 bf d9 bb f0 b7 27 ae ae 9c 09 fb 4c fa 4c e6 2e b6 f3 8f 93 9e 9c 54 9c 4c 6c dc da 4e 8e ec 48 92 14 c9 8a a8 ee 7b cc 4c 22 3c fd e5 a1 ff 63 9e ee 4a b9 d6 b6 29 92 f2 7e 55 d5 33 8b bb bb 6b 04 a1 66 ae f7 e0 ee a4 e4 dc 02 b9 bb 84 ae 19 c4 ee ee 30 33 2b 6d 55 7f 4c 80 09 Data Ascii: RIFFPWEBPVP8LD/?M(jH;.'OlMBY',XE+:_p>m^vm5NJ_d)%WG.]<,c"C?CS=X\|^m[Wm:'Wm_6>V_'LL.TLlNH{L"<cJ)~U3kf03+mUL
2024-04-19 14:06:12 UTC	1159	IN	Data Raw: 38 56 19 94 92 b6 a0 98 f3 8e 26 82 b5 c5 e4 f1 77 61 a5 f7 c7 f3 7b 78 43 ff 65 f8 3b 8d 01 99 b8 74 70 19 e8 d0 10 b2 d1 62 4f 4e 9e ca 90 33 7b 78 ba 7d 7d f9 35 8d fe 8d f0 df 58 64 62 44 5c 91 17 d4 a5 62 1c 49 ad 91 0a f4 4e 39 29 af d3 f7 2f 0a 6a fa 3e 0c c3 ef 41 eb 6b 00 a5 a1 7a f0 92 86 00 04 20 3b 96 a7 2b c4 86 a9 af 06 a4 e1 1a c0 4b 77 58 c4 81 e8 0a 99 df 9a f5 a9 1f c3 80 6a 9b a6 b5 d4 cd dd cc 49 d2 06 a3 68 c4 60 33 51 53 99 18 43 77 30 a8 ea d7 32 a0 4f 48 b8 d9 80 3b 60 b1 24 47 d1 df 39 49 79 51 05 a2 fa 12 40 15 90 03 3a 32 a2 9c 44 43 23 9b 38 36 f9 1d 23 5e 1c e9 cb 46 7a 35 fc 7a a3 91 55 dc 52 6c f3 57 d3 19 23 19 03 f4 16 1f de 06 22 a7 bb 2e 8b 6e 2b 94 e2 42 94 26 eb df c6 e3 af fa a3 cd f7 41 4d 7b fd b0 e5 ba b7 06 ac 6b Data Ascii: 8V&wa{xCe;tpbON3{x}}5XdbD\bIN9)/j>Akz ;+KwXjIh`3QSCw02OH;`$G9IyQ@:2DC#86#^Fz5zURlW#".n+B&AM{k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49795	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1099	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1552 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:32 GMT Expires: Sat, 20 Apr 2024 11:26:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 9580 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 08 06 00 00 57 45 42 50 56 50 38 4c fc 05 00 00 2f 3f c0 0f 00 09 05 6d db 30 da bf fc 11 77 c3 10 d1 ff 09 a0 e7 ea 31 7c 54 15 a0 65 d0 bb 44 44 33 08 2e 14 b5 8d e4 78 f7 2a 7f b4 fb bf 82 41 71 db 36 6e 8a 69 d7 5e a7 a6 6d 24 c9 dd ee de 0f e1 f8 a3 3b 00 57 f4 7f 02 fc 8b 77 a7 73 fb e5 4d 8e 4d a7 90 ea 00 d0 cd 89 c6 f1 02 00 3f e5 74 ba 83 4f 0f 5d f7 ff 14 db cd cc ae 99 99 99 19 3b 07 9f c1 e9 f0 09 9c 2a 4a cf cc 79 04 e6 57 60 66 66 c6 cb 7c ed 0b 67 67 27 70 d6 d2 d9 ed 5c 7d c3 c9 6c 94 95 dc 79 65 9d 36 cc b8 92 cb 80 19 ee 54 ae ac 9c ca 15 bb 8d 24 0b 92 64 d3 b6 7a 36 ef 3a d7 f7 e8 da b6 9e 6d db e6 97 6d db b6 df 97 6d db b6 6d db 6f 63 20 47 92 a4 48 8a a8 39 66 7c 9d fe aa 2d d3 31 cc 5c 65 4c 80 06 ac 80 d8 fa 05 6d d2 Data Ascii: RIFFWEBPVP8L/?m0w1\|TeDD3.xAq6ni^m$;WwsMM?tO];JyW`ff\|gg'p\}lye6T$dz6:mmmmoc GH9f\|-1\eLm
2024-04-19 14:06:12 UTC	830	IN	Data Raw: 34 be 10 ac 93 41 4d a9 5d eb ab 0e c1 4e 83 35 31 c0 a6 38 8f fa c3 2d 8e 45 b7 14 b6 ba 66 27 d9 0e ad bb 4a b2 b1 93 61 c5 52 42 f0 b9 0f 53 f2 e7 90 b5 79 78 6a e6 be ba cf 67 97 18 5c 3b e6 57 2d 64 d5 67 89 e3 c7 d2 d1 8f ea 17 85 7b bf 83 c0 4d 04 be b0 7c 5f d1 f9 ad 33 70 a0 76 21 14 7e b5 18 0d 9d bc cf e6 5b 63 08 b4 ed 17 ef 30 d8 76 10 c4 ef b5 17 3f 2a 37 75 c3 80 57 e7 4f c9 30 85 0f a9 15 b6 32 b0 5b ee 77 e1 14 93 61 b0 18 f0 90 2c 08 06 34 3a ee d5 a7 1a 2f 8e 65 43 57 fa 88 9e 82 cf 0a 20 45 72 6f 28 9c 0f 3a 00 63 31 e4 00 cb 2d 15 1f fe f6 77 f1 a6 ff 19 51 c3 b1 ae d3 e1 da e0 d9 48 35 c2 a2 70 8a f3 47 6a c9 bb 7d b9 5e be 3f 5e dc 66 36 16 57 47 47 3e df fd 92 13 2e fd 9e 98 e9 f4 e0 41 48 91 82 c2 29 42 03 41 92 7f d3 da a0 d6 9f Data Ascii: 4AM]N518-Ef'JaRBSyxjg\;W-dg{M\|_3pv!~[c0v?*7uWO02[wa,4:/eCW Ero(:c1-wQH5pGj}^?^f6WGG>.AH)BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49797	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1106	OUT	GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8956 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 f4 22 00 00 57 45 42 50 56 50 38 20 e8 22 00 00 50 8b 00 9d 01 2a 28 01 28 01 3e 41 20 8d 44 a2 a2 21 12 69 35 18 28 04 04 b2 b7 70 b6 c8 fe bc 43 a2 f1 eb d2 91 7d 2b f2 a3 fa a7 ec 77 ca cd 33 f9 c7 e1 3f 60 1d 22 c5 a3 d5 3f 72 3f 43 fd d7 f1 ef dd 5f f8 ff 61 1f 9a 7f ca fb 82 7e 8b ff 84 fe f5 fb 7b fe 7f ff ff cb bf a8 0f d6 ff 50 7f d1 ff b3 ff cc ff 49 fb ff f2 d3 fd cb f5 c3 dc f7 fa af ec bf a7 7f e6 7e 40 3f a4 7f 93 eb 0b fd 6b f6 08 fd 5e f4 a7 fd b8 f8 31 fd 8e fd bd f8 11 fe 83 fe 2f fe cf e7 ff 70 07 52 7f 56 7f cb 76 b9 fd c3 f2 a3 d0 3f 0f 3e 43 f5 d7 fb 7f fe 2f 82 4f e3 3c 1d 74 c7 fc bf 44 3f 8f 7d 95 fb cf f7 bf da 8f f0 7f b6 ff 78 ff 98 ff 5d e1 2f c7 9f f2 7d 41 7f 1d fe 5b fd df f2 9b fb bf ee 7f 1e 28 00 fc b7 f9 df Data Ascii: RIFF"WEBPVP8 "P*((>A D!i5(pC}+w3?`"?r?C_a~{PI~@?k^1/pRVv?>C/O<tD?}x]/}A[(
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 23 18 59 94 f9 f3 a0 a0 1b ef bd ac de ea 49 03 ab 1d 2a 23 09 4a 0b 32 44 81 30 1a aa 62 44 3d 60 23 55 6e 5a 50 67 64 f0 dd 80 3e 77 0d 3f 83 c7 d6 e3 1d 4f 9e a7 d4 d0 f8 fe 14 23 94 74 28 66 7f ce 51 73 3e 5b 1e b4 fe df bd 5b ab 4c e3 b3 57 5c fd fd 44 80 90 39 2d c3 f9 05 1e 48 d5 e3 57 b2 55 08 25 f8 17 90 1b b4 4f 39 4b 84 a2 12 4d 0a c2 9f 36 ab 54 2a 27 50 4a f3 43 14 bf 39 ad 09 bc 3b 2b 35 47 1d 88 4f ee 49 54 45 25 2b da 70 b3 a9 dd df 7e cf e7 57 8c c6 32 f2 5a e8 0f 9d 37 9d bf 46 21 89 16 9c b7 85 ff f6 73 36 12 5b 3c e8 70 dd 60 36 d7 fc 73 a3 58 a3 21 cf de 94 b0 78 df 99 9a 28 7b 96 a1 20 fc 9a a9 4c 13 6d 22 16 b6 6f dd 61 a2 9b 61 c1 e6 f5 99 57 1d ee 8a 3c 85 74 16 ab f9 00 a4 63 00 b8 9c 80 91 09 f3 15 45 f9 c0 b7 dd 4b c8 50 7c 50 Data Ascii: #YI#J2D0bD=`#UnZPgd>w?O#t(fQs>[[LW\D9-HWU%O9KM6T'PJC9;+5GOITE%+p~W2Z7F!s6[<p`6sX!x({ Lm"oaaW<tcEKP\|P
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 5c fa 46 85 75 cc 3b 9f 41 fd 57 b0 ea 59 40 0e 66 0e 8d e1 fe 73 26 12 11 bf 6c 3d ca c9 ce 03 03 e1 89 5a f2 9e 1b fe 77 63 3f 4d ad b4 eb cb 21 df e5 f9 c5 45 96 5c 69 28 ff 0f 38 96 fc b5 54 04 f6 ff d3 56 3f d5 48 d0 4b 75 97 b8 5b 5e f4 d0 7a da 22 d5 80 82 82 d3 d9 74 ca 90 56 91 ab 89 dd 2b 7e ef fd 31 9d a2 c5 95 fe 62 5e 40 7c 04 bc 8b 5a c8 b3 80 eb a3 ab 27 8e 51 0e 9e af 66 d3 c0 80 26 79 ae 51 00 20 1d 80 cd 04 e2 0d a5 92 49 91 3a f5 ef 10 e5 99 bc e1 a0 f8 10 5b c9 a3 1c ee 8d bc aa 53 42 09 8c 8b c6 f1 e9 ce 81 3d 8f 84 86 25 d8 27 71 e4 13 5d 5d 18 66 4d 81 0b 86 d0 2d c2 45 25 97 26 46 c3 67 84 0d 09 6c 27 24 69 9b 41 81 00 2f 42 3e f0 f0 86 28 75 83 ee db 41 97 68 c4 9f 53 d0 bc 60 ca 12 70 3b 89 f1 f5 a4 2e 9e 2c 14 33 74 25 b8 2e 06 Data Ascii: \Fu;AWY@fs&l=Zwc?M!E\i(8TV?HKu[^z"tV+~1b^@\|Z'Qf&yQ I:[SB=%'q]]fM-E%&Fgl'$iA/B>(uAhS`p;.,3t%.
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: bd 23 f1 7c c0 15 f7 b9 f6 c4 8c 38 2f 1b 5c 5f d1 27 09 1d 05 a6 5c a8 6a 6a e0 5d d2 5d f5 4c 96 bc 1a 9a 44 e8 96 3f 21 30 c5 43 a1 5b 67 eb 11 b4 8c eb 6b de f9 b9 b0 26 e2 50 47 9d e4 b1 af 78 f9 41 2d bf 42 a5 ab 3c 32 6d 44 8f 21 74 fb e1 ac 6d cd 62 5e f4 59 38 e8 3a e3 d2 d1 43 20 39 6d fe ca f8 0d d2 13 83 84 f0 4f 73 5a d9 2b 73 9e 50 c5 70 2c 57 ae d2 27 54 1a 8b 77 89 db 56 f7 3c 07 4f 72 3c 42 c6 c7 fa 11 14 ac cd 32 c7 71 27 79 94 6c 54 5e d2 2f 94 97 62 4d 41 b4 83 3c 24 f8 07 b6 58 90 4c 10 2b 5d 17 b0 a5 33 8e 5d 97 ba fb 57 7b 7d 46 b3 a8 2c ae a7 1e 9e 5a 3c 69 da 35 d9 30 4f d9 bc c6 ab 0c 11 48 f3 df 2b af ec 79 c3 c4 f7 62 1f 0a 2c 16 c3 ef 23 5e 4e 7b 86 01 63 1e bb a6 c2 69 d6 2b 0a 51 cb 4e 8c 84 c5 f0 c3 f2 8c e5 a3 90 c5 ad 7b Data Ascii: #\|8/\_'\jj]]LD?!0C[gk&PGxA-B<2mD!tmb^Y8:C 9mOsZ+sPp,W'TwV<Or<B2q'ylT^/bMA<$XL+]3]W{}F,Z<i50OH+yb,#^N{ci+QN{
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 22 06 9a d7 96 99 d3 bf 5a 63 9c 1e 31 32 da 1c a8 d5 5c cb 69 7f ee 5f 53 29 dd 8a 15 a2 29 b0 58 f8 4f 1d e8 55 f3 dc 8b a2 41 e0 c6 1e 87 31 98 27 ec e4 7c 4b a6 00 1a 2a e3 3f 11 c7 4d 76 ef 44 3a 6e f7 68 c8 20 77 9d 22 0d 0f 5e a2 e2 d4 c3 89 2c 39 cc 3c ab 9d 6f c0 bc b4 b6 1d 33 7a 51 d7 55 e4 28 81 19 32 08 cc f1 91 c2 08 87 eb 6b 53 e4 00 a7 ac 93 b3 47 69 c2 43 7b d7 72 3a 30 db 10 b7 55 45 60 a8 76 8d 53 a4 1e 23 6c c8 38 03 3a be 59 3c 52 03 85 81 82 19 5f cb 72 ab f8 71 b2 1b 6e 38 fa 9f fb e0 85 7c da 00 af 0e f9 c5 7a 3f 21 64 bd ca 97 57 4a 8f 0e 81 6a 57 46 17 23 f8 ed a3 d0 b2 6d ea e3 e7 ea 5d f9 6d 85 f8 27 4f 53 a7 f1 f8 fe 6c ea be 49 bf c7 40 7b 85 a1 b6 94 30 ee 72 ff df 4c 58 20 88 ce de 86 ac a8 df b1 e4 98 9b 64 d5 63 77 ec bc Data Ascii: "Zc12\i_S))XOUA1'\|K*?MvD:nh w"^,9<o3zQU(2kSGiC{r:0UE`vS#l8:Y<R_rqn8\|z?!dWJjWF#m]m'OSlI@{0rLX dcw
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 0a 16 96 71 85 ca ec 2f b1 05 fd 8f d4 c4 28 f3 bd 0b 1c bb c3 c2 7e 80 df 3b 8d a8 7d b5 b1 f3 6e d1 18 1c 9b c4 18 e6 a1 8b e9 47 00 50 2d e1 00 50 0f 49 91 fc 61 bb a9 6f 9d 98 0d 9a 6f 4f 69 f5 5e 78 b8 cc b3 cf 88 c8 a0 4f db 25 18 95 32 52 3f c6 c6 0f 5a 39 8a 90 40 33 71 18 f9 d5 e8 2f 34 7d 30 37 8e d6 c9 94 0b 66 6d d8 3c 7d d8 ee d0 54 a0 9e f7 b0 af 25 e1 9a bb bb ea 07 70 39 f3 35 5b a6 77 ce 13 e5 0c d4 e3 b5 f9 7e 04 7c f3 7c e6 af 65 50 15 9f 23 ce 54 c7 b7 7b 34 61 58 90 3f b4 65 0e 12 e9 d9 44 b0 5e f1 a0 2e 8f 06 f6 d5 71 18 9b 01 2d 0c 62 0b ce 44 a8 56 f7 db e5 d1 fb 8f 4a d7 4e 5d 8c 8c 1f 95 63 7e 1b 00 7b 71 cc 65 82 c1 81 7f f3 06 47 72 72 eb 4e e2 f2 d1 d7 2e 9a 62 4a ff 99 96 d6 cd f6 50 a0 9c 9d 39 ba b3 c8 74 5e 92 d0 15 8b 30 Data Ascii: q/(~;}nGP-PIaooOi^xO%2R?Z9@3q/4}07fm<}T%p95[w~\|\|eP#T{4aX?eD^.q-bDVJN]c~{qeGrrN.bJP9t^0
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: a3 65 c2 fa 21 d4 bb 7b 57 31 bb 4c 6c 9a 59 f0 78 1c a4 9f 65 75 ab 3e 53 07 8e c6 21 71 ca bb ed c0 b6 e2 a6 11 88 fe 1b fb 6e ee e4 12 37 e2 d7 0a 9f f0 17 c2 b2 d6 26 a9 8c 0d 44 5f ad 11 46 4a 48 f8 1b 75 b3 04 bb f6 bc e2 3e 53 c9 8e b2 53 a8 e2 a4 ff 82 88 c3 88 5e 8e 13 c7 0b 02 10 74 d1 b0 c8 5a 4e 6c e4 7a a4 9d 3c aa e3 b6 ef 99 fb 1c c9 8b 68 9d 29 9f f1 00 3a e9 bc c1 8b 97 2d ef af 3b cb b1 7b 18 0e 02 44 04 36 00 a5 61 39 1c 74 c1 f6 7b 91 64 94 ea 8c 36 e8 5d d9 33 ec 37 12 23 e8 c6 54 a3 ce d1 dd c8 a0 2b e9 34 83 b5 11 b4 c6 8d 7c e0 f5 2e f3 53 6a 40 47 6c 4f da 20 99 ce be 39 de d2 a3 82 20 0b e7 e5 24 d6 5e 6f f4 36 71 1f 7b b0 20 87 21 c5 0a e6 1b e4 40 e4 f9 ea 7a fa cb 34 3c 76 3e 0b 28 08 3b fc 13 48 d4 14 d1 0b 88 ee 9f db e0 57 Data Ascii: e!{W1LlYxeu>S!qn7&D_FJHu>SS^tZNlz<h):-;{D6a9t{d6]37#T+4\|.Sj@GlO 9 $^o6q{ !@z4<v>(;HW
2024-04-19 14:06:12 UTC	704	IN	Data Raw: 06 a4 f2 50 f2 d8 53 60 bb fd 02 c9 45 92 93 e3 b4 01 95 7b 87 49 db 1f a3 6f 60 2c 0f 59 71 5a 83 7b 90 3d bd 73 6f cc 80 28 0e fa a5 8e 8b 91 79 b3 fb 03 1b 90 2f 78 b7 d7 30 18 00 7c 8f e9 80 34 9b a6 a6 82 6b 07 e9 f3 e5 05 87 ff 87 f9 fd d9 37 33 89 cf 1d 16 a0 e7 a2 50 c4 3c 55 d1 67 41 af 0c bb 9b 3b 16 d6 f5 73 62 47 21 4d c4 aa f9 af b7 00 2d a3 67 e7 52 65 cb 80 5f d7 87 e4 50 60 2d 1f 80 d5 51 e5 33 f9 85 35 c9 e6 ef c4 a6 fa 87 38 60 39 04 65 ab 73 3a 4b 14 63 e1 4b 61 84 3f fa 31 27 1b 92 4b 1f 01 35 4f 4f e1 ce e5 0b 6d 1a 60 3a 06 bb 60 b4 82 c7 09 81 f7 ff 2e 7f 79 40 f1 8a 5c b1 f1 42 96 7c 25 d6 61 ea 96 8f af 22 cb 46 0d 53 b1 42 58 5b 8e c3 0a ae f5 14 c5 87 3f a0 6d 66 b4 71 de aa 21 90 ff 9e 02 c2 db 63 40 5d 34 dc 08 b4 1f e7 03 48 Data Ascii: PS`E{Io`,YqZ{=so(y/x0\|4k73P<UgA;sbG!M-gRe_P`-Q358`9es:KcKa?1'K5OOm`:`.y@\B\|%a"FSBX[?mfq!c@]4H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49796	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1109	OUT	GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:39:39 GMT Expires: Sat, 20 Apr 2024 12:39:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 5193 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	244	IN	Data Raw: 52 49 46 46 ec 00 00 00 57 45 42 50 56 50 38 4c df 00 00 00 2f 13 c0 04 10 35 b8 8d 00 46 6d 34 88 57 23 e9 ec 2e 30 44 ce 5d a0 e7 1d 98 4a 7f 17 ac 72 d9 c6 6c e9 32 81 14 e1 36 b6 6d 55 f9 91 0b 0e 35 b8 43 fc 28 e5 bf 18 0d b5 04 27 76 69 c7 aa b0 08 52 dd 0a dc 46 6d 02 74 97 f5 0c fd 83 e4 d5 5c 08 e8 5f 10 eb 9f 59 ee 92 d8 0c d5 ee 92 63 3b 20 f2 8a da b5 d3 8d 17 1c 1d 90 10 c2 7c 20 d6 c9 b1 15 12 70 6b e5 a9 d9 62 bc ce e3 cd bf 60 b9 a6 ab 81 96 8b f8 81 a4 07 70 bb fc 82 85 2f c2 82 37 32 3c e6 f9 ee fc b3 06 f1 f3 8c 98 cf 41 51 96 af e4 01 0b 9f cd 0d a7 59 c3 d5 40 cd 45 72 45 d2 03 f8 9a fd 64 1c e9 a5 5d 3a 9a ae 4b 47 92 5e 05 40 4c d6 53 8e 8f 67 9b e1 7a c4 f7 5e fb 67 c4 7a 67 81 b3 5c 98 4a 45 01 00 Data Ascii: RIFFWEBPVP8L/5Fm4W#.0D]Jrl26mU5C('viRFmt\_Yc; \| pkb`p/72<AQY@ErEd]:KG^@LSgz^gzg\JE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49799	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1108	OUT	GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 332 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:37:28 GMT Expires: Sat, 20 Apr 2024 10:37:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 12524 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	332	IN	Data Raw: 52 49 46 46 44 01 00 00 57 45 42 50 56 50 38 4c 37 01 00 00 2f 13 c0 04 10 95 c0 ae 6d db d8 73 db fc 63 db f6 ab 6d db ce ab 5b 48 15 e9 c0 da b1 0b 58 d1 97 71 bf 7c 88 80 63 5b db f1 2a b6 6d 1b 23 b0 4a 77 99 45 3a bb 75 72 6f c7 0e 9d d5 7a 00 b6 6d 5b ef 04 f0 11 4a b2 98 6c 1d 6c 19 58 4e 48 fa 8c f5 44 3c 24 41 22 58 ef 6b 29 fb a4 be ba 97 bd 79 e1 84 13 57 f6 96 37 54 7d 82 e4 09 90 b7 c4 83 b9 cb 56 ea 47 0c a9 76 34 01 64 05 89 1d 90 25 01 5a bb 1e da 8a 7f 79 29 6f 10 e1 a7 dc bb fb 02 c8 b8 cd 5d 7e e0 30 6a 53 2f 8e 02 12 19 84 a1 a5 de 24 81 97 7c fb 4b ce a9 ad 9c 96 19 c8 38 4d f8 00 0c 3d fe cb 49 fc 71 9d 7f 83 aa 5b c8 39 73 1c f9 11 2f 0e 46 3a 01 6a 87 cf a2 05 7b 6e e8 00 32 c4 ff 64 1c 23 41 3c ac 54 ee 41 ce 69 c8 83 b3 8d 2f 09 Data Ascii: RIFFDWEBPVP8L7/mscm[HXq\|c[*m#JwE:urozm[JllXNHD<$A"Xk)yW7T}VGv4d%Zy)o]~0jS/$\|K8M=Iq[9s/F:j{n2d#A<TAi/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49798	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1108	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 266 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:03:19 GMT Expires: Sat, 20 Apr 2024 12:03:19 GMT Cache-Control: public, max-age=86400, no-transform Age: 7373 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	266	IN	Data Raw: 52 49 46 46 02 01 00 00 57 45 42 50 56 50 38 4c f6 00 00 00 2f 13 c0 04 10 07 a1 10 92 24 67 ae ce df ed 18 fe 11 72 5e 0d 45 8d 24 45 bd fe e5 e1 00 7e 38 d8 03 9a 41 db 48 8e cc 1f dc 41 38 1d 8c f2 25 6c 23 db 56 72 bf ff 1f b9 62 39 0d 50 03 fd b7 c0 10 d1 81 4e 00 00 5b 6e 1a 50 b4 02 09 14 81 82 ac ef b4 ef 36 5c e8 77 1c 2b e8 bc e7 fe fc 86 58 a3 fd f7 d3 55 27 cc dc 06 23 ef 7d b8 ef bd d3 59 db ae bb c8 00 41 02 78 64 42 04 fd 00 86 91 24 25 da 77 77 e3 f1 fc c3 74 c8 20 a2 ff 0a dc b6 51 7c cc f0 0c f8 a1 2c 11 0d 03 91 92 0c b1 c4 c4 71 08 16 89 44 14 40 21 48 d0 aa 4e 98 70 aa 35 a4 a2 bb b5 d3 2a 60 ee e9 d5 b4 6d 73 d1 7e f6 6c 9c 06 02 df 5c 2f ad 5b 2f d4 f4 75 3d 14 81 40 1f d7 ed 58 16 c7 1d 34 6a 3d c6 7d ff ff 65 64 69 dd 69 cb d2 fe Data Ascii: RIFFWEBPVP8L/$gr^E$E~8AHA8%l#Vrb9PN[nP6\w+XU'#}YAxdB$%wwt Q\|,qD@!HNp5*`ms~l\/[/u=@X4j=}edii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49800	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	531	OUT	GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 37564 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3479 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 b4 92 00 00 57 45 42 50 56 50 38 4c a8 92 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 4e 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a ba bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd 54 b7 ea ed db 02 30 8e 5d 75 b5 54 92 14 92 b4 e9 c5 80 00 41 2c d5 d5 5d fd 6f 75 37 f7 cb fb be 02 ef 12 6c e0 c5 06 ed b8 98 e2 da ca cc 5a 64 03 26 40 91 91 8a f0 ca f9 20 18 17 23 22 d2 11 8a 11 22 62 64 3a 73 49 6c 5b b6 a4 21 49 cb d7 d6 18 01 91 0c c6 c8 88 a8 af f6 4b 40 a4 22 9e 96 04 f3 04 06 ba 25 81 38 2f 81 c5 bd 0e 36 60 40 27 69 c7 9c cc 03 58 5a 64 db 87 08 4b 5c 18 25 62 31 eb 41 12 29 71 3f 81 27 a7 7f 9f 4e dd 55 c9 00 be 31 92 6c 8e 02 f4 fb 3d 92 e4 2d 30 e7 44 5f ed 80 69 b0 01 7d 36 b6 0d 0c c0 c6 9f 1f 1b 16 02 30 b6 56 9b 00 24 90 70 f7 57 Data Ascii: RIFFWEBPVP8L/IM8lFFNn/Y_<BD'*nzwT0]uTA,]ou7lZd&@ #""bd:sIl[!IK@"%8/6`@'iXZdK\%b1A)q?'NU1l=-0D_i}60V$pW
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 71 75 bd f4 80 b3 32 b1 5e 6b 07 81 c0 80 8a ea a8 62 d9 5c 39 fb 9a 74 7e 98 e8 f3 8e 1f 3b 66 00 1c 80 fb 9b cb b5 9f f6 89 37 04 06 40 6d 4c ae 96 7e e8 e4 ab cd 62 fd 9d 0e b0 38 59 1c e9 eb a2 00 56 9c 6c c9 d6 27 02 81 00 40 c3 7a 00 00 e6 f5 56 df 71 87 23 eb 6e f1 07 3a 69 de 92 de a7 ad 21 1c 6f d6 7e 04 00 20 03 20 03 db d1 de 8c 6a 3f 1c 03 c0 e2 48 e6 9c b2 fb 1b dd 6e 3b 00 10 98 ed c1 ff 0c 4c 6e 65 64 40 e6 6b 83 7d 38 29 b3 31 60 98 01 a0 62 4f fe a7 e3 0c d8 35 60 80 d8 c8 80 0c b0 b2 19 bb dd 04 32 32 00 12 b0 9d fb 2e c8 00 80 be ba d9 d1 aa 07 40 06 8e 1b 60 cb e2 82 74 01 1c 75 40 c7 de b1 0c 00 78 3a 56 f6 fa 19 ca 0e 00 a8 9c 00 57 00 d4 89 b6 1c 83 32 82 0c f8 e2 88 6b 77 e1 ea d8 d9 1c 4a a5 0e 7d 53 3a 7c 91 00 8a 34 2f 57 20 a5 Data Ascii: qu2^kb\9t~;f7@mL~b8YVl'@zVq#n:i!o~ j?Hn;Lned@k}8)1`bO5`22.@`tu@x:VW2kwJ}S:\|4/W
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: f7 29 2a 25 52 14 25 05 4a 2a a5 80 a2 a4 d4 90 a2 24 8a a2 c3 28 ba 45 09 a2 4f 4a d4 90 a2 e8 26 29 09 10 91 52 23 52 2a a5 80 a2 44 34 95 a2 90 48 51 53 11 91 a8 29 0a 15 14 45 4d 45 94 58 e4 5b 04 29 45 51 94 96 ab 65 0d 3a 71 bd 73 75 89 b8 91 69 53 06 49 ae 83 ba 74 29 83 75 82 22 c5 75 82 9b 24 a4 29 0d 2a 65 e2 74 23 61 04 dd 54 83 a2 d3 8d 4c 93 94 c1 6a 54 89 02 03 1a 01 6a 67 8d 90 4e 84 6b 81 02 64 82 46 4e 2a a9 4c 9c 24 a1 ba ec 26 3a ca 34 ab 61 72 46 76 dd 8a 10 c8 89 6b a2 a8 1a 57 63 94 40 4e d9 8d 03 68 2a 13 85 8c ab 6a 40 91 39 a7 5c b3 84 aa b1 26 48 ad cd e9 e0 44 0c 4d b3 1b 81 ce 34 ab 81 85 70 7a 2c 61 73 d2 2c c5 42 a1 94 05 21 56 8c 39 19 24 35 4b 69 28 1a 5b 08 1a cc 56 1a 24 4c b1 f5 56 d2 62 dc 66 94 40 44 81 05 35 05 8c 5a Data Ascii: )%R%J$(EOJ&)R#RD4HQS)EMEX[)EQe:qsuiSIt)u"u$)et#aTLjTjgNkdFNL$&:4arFvkWc@Nhj@9\&HDM4pz,as,B!V9$5Ki([V$LVbf@D5Z
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 1a c9 bd 31 13 b5 d4 c1 b5 4b d5 6e 84 5e a1 51 99 5b 28 61 16 f2 2c c5 dc b0 6a 4b b3 bc e3 a9 85 b4 2d 17 80 a9 59 6a 73 53 8a 6a 3d 96 52 90 b1 22 61 b1 44 69 40 16 58 b3 2c 00 2b 2a 07 6e a0 29 05 96 61 11 ac 76 34 03 e2 42 41 c6 54 b2 bc b3 21 16 76 49 e6 e5 f1 2c 62 96 29 ca cd 94 8c f1 92 95 04 0b 44 b9 60 80 59 04 cb 18 2b 5c 52 14 c3 b2 46 85 54 40 fc 97 29 65 20 df b2 01 1c 28 0d 25 86 91 c4 22 cd 38 b6 ab 0d 80 4a 68 56 49 0d ac b4 55 0a a4 d0 44 95 4a a9 a6 d0 38 95 ba 91 2b a1 52 6a 4e 07 82 a2 6a 41 4b 8a 22 67 9a 2a 49 50 2b 35 d1 2d b7 1c 65 6e 24 2d 49 12 2a 51 25 23 32 4d 52 d2 94 04 25 51 dc 44 44 8a aa 4b 2e 25 c5 cd a2 26 8a a2 a8 06 55 4a 97 32 42 13 95 92 a0 89 6a 12 a5 72 c8 00 c3 54 32 b8 92 44 69 67 8d e2 52 e3 c8 c4 c4 25 ea 1a Data Ascii: 1Kn^Q[(a,jK-YjsSj=R"aDi@X,+n)av4BAT!vI,b)D`Y+\RFT@)e (%"8JhVIUDJ8+RjNjAK"gIP+5-en$-I*Q%#2MR%QDDK.%&UJ2BjrT2DigR%
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: c0 04 2b a6 84 84 14 96 25 a7 a4 46 de 94 71 81 28 99 04 4b 11 66 a2 04 39 8d 99 92 0a 0f 8a 2c 16 30 a8 32 cb c8 59 68 76 85 c4 48 ac 4b bd 54 c2 54 0d 96 5a ed 60 54 c1 7c 08 b3 18 2a 60 ac 59 ab 54 3a 03 1a a5 4b 27 5c bd 54 29 15 de 11 1a e7 a0 49 55 0b a5 44 69 82 12 84 3b a9 36 8d 90 96 d5 45 8d 8b 43 27 ce 14 a1 7a 71 8d 49 e2 16 45 26 2d 01 20 40 62 56 32 4b 24 0b ca 60 8d 1d 00 88 60 f6 06 24 12 c4 68 64 20 99 88 a2 7a b1 03 24 00 56 94 22 34 08 b0 97 80 58 02 b2 22 85 23 51 38 00 38 f0 45 9b 98 28 05 b2 97 49 1a 43 90 19 60 74 93 88 40 ac ae 4b ed d8 c5 6d 55 9d 22 a9 51 d5 0e 9a 4a a7 3a 5d 75 23 84 7a 67 77 a2 9a 8c ac 13 34 ca 0e 9d b2 4e c9 a9 92 aa 16 6b 32 a3 1c 33 8d 5a 34 53 d7 16 51 63 5f d5 83 aa c7 88 cd ca ae a9 a9 e0 dd 37 aa 69 06 Data Ascii: +%Fq(Kf9,02YhvHKTTZ`T\|*`YT:K'\T)IUDi;6EC'zqIE&- @bV2K$``$hd z$V"4X"#Q88E(IC`t@KmU"QJ:]u#zgw4Nk23Z4SQc_7i
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: f7 e0 a9 67 bd 45 a9 8f d8 f8 ba c4 65 72 81 ac df 99 2b 3f f2 c7 47 fd e1 0b 6c ca 09 cf bd e6 bf 8b ff fd 88 2d af 3d 67 ee 7f b6 77 f3 f1 a0 6f ff db 9e 40 a6 7b e5 f1 21 73 8e 0f fb d3 33 de ff 4b fe 89 4c 2a 9b 69 06 40 55 16 ae 65 97 02 55 bb 64 92 46 4d a9 a6 94 44 e5 6e 14 97 28 ae 76 aa 71 2a ea 14 49 54 3a 71 54 e2 24 0a 1a a1 24 27 57 f0 79 a5 93 26 a5 36 74 01 52 7b d5 1a 94 f6 7a 4a 6f b9 da b1 52 4f aa ba 61 93 d3 ea bc 42 a9 a3 ea be 31 23 d6 5c 6f ab ec 52 cd 19 34 f6 82 24 91 c8 b8 82 07 96 5e f2 be ab f6 b9 5a 7c e2 d1 d6 fd 9f 7b c6 eb ce 1d f7 f0 cb 7e 71 ca 85 29 53 09 90 32 3d f0 78 42 79 df bd 20 2f 6d 5a fe e2 72 c9 d9 0f ed fb d1 77 22 ca 14 b5 cd ec 29 d7 a8 7b ef ee a7 ae fc c8 77 3f f0 9c 03 d7 f8 bd 97 f4 d8 43 79 ff b1 fc f5 Data Ascii: gEer+?Gl-=gwo@{!s3KLi@UeUdFMDn(vqIT:qT$$'Wy&6tR{zJoROaB1#\oR4$^Z\|{~q)S2=xBy /mZrw"){w?Cy
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 4a c9 aa ac a2 ad 72 59 8e 59 85 aa 2c b3 3a 65 c5 42 76 64 39 3b 39 76 68 95 62 59 06 87 96 aa dc 74 8b a5 db 06 9b 49 d7 59 ae a7 d2 9b 9a ad dc b7 7c ba 84 ee 3d b5 ba d7 45 93 59 d5 fd 06 d7 68 87 fb a3 ca 09 4b 77 4f 96 de 26 6f 6e 69 f0 05 1d 30 5d 56 d1 8e 17 a4 c0 71 92 46 9e 18 ec ad 14 4d 38 b1 44 14 d3 1a 31 58 53 e4 76 92 06 81 54 c9 32 3a 5a 21 a8 ac 88 70 a2 84 98 25 91 15 4a 35 45 be e5 6c 51 58 88 53 87 1a 52 da 20 96 bd 64 a8 44 1d 6a 64 16 20 20 0b 91 9c 4a 06 58 66 29 70 25 96 90 81 09 4b 81 2b 0e 01 c2 70 a4 6d 90 a3 59 98 da c8 fa b8 62 50 54 bf 54 8e e4 54 cf ae dc 23 55 a7 77 ca af 9c d3 58 a9 87 72 2f 51 f2 f6 ad f3 34 d2 8c 74 f7 09 bc 51 5a 4f dc 7d 33 9d ca d8 0d 96 5c 49 99 6d 11 d5 1a 37 2c 32 cc c8 e3 5d 53 b0 8a b8 5e d7 0a Data Ascii: JrYY,:eBvd9;9vhbYtIY\|=EYhKwO&oni0]VqFM8D1XSvT2:Z!p%J5ElQXSR dDjd JXf)p%K+pmYbPTTT#UwXr/Q4tQZO}3\Im7,2]S^
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: c8 e6 38 87 64 2c 9d c9 79 1a 2c b6 fc e7 6f 2f eb 19 db 5d 36 be 7d e1 7f 5e 7f d1 dd 2f fe c9 3d 5f fe f8 b6 cd a5 0f ac 7e f3 97 97 5e fb d4 76 9d 78 6e d7 f6 8d 1b cf 9c f5 d3 47 be fd c4 3b ef be df ca 60 74 e1 8d d3 6f ee 79 ee 92 fb 5e fc ee 0b 8e e0 01 d7 6d 65 7e f1 83 d7 5e 2f 5d bb ee 91 f7 fe f7 df 3f 3d e7 05 51 e8 db ee f1 99 1f ff cb 23 fe 73 73 c5 f6 a1 90 e7 6f bf bd 76 cf bf 39 fa 93 f7 1f f5 c9 a7 a5 91 db 33 77 3e 75 f9 9f 8f 3e 72 af 3b 10 62 ca b8 de 8b 39 ea bb f7 1f ff 2d 5e d9 7e 1d 99 7d 58 d6 ed d2 19 ff fb a6 63 fe f3 ad e7 7d f7 d8 55 a5 8c 65 cf fb e8 fb bf f3 98 5b 3f ef 86 7f 2b 67 3a e7 9a 93 ee c1 11 61 79 e5 85 f5 fd 8f 96 ca e6 53 6e 7a e5 6d ff 7c c9 71 7f 7b fd a5 37 be fe 99 0d cf 3a f9 2f af 3d f3 13 2f e5 aa 4c c6 Data Ascii: 8d,y,o/]6}^/=_~^vxnG;`toy^me~^/]?=Q#ssov93w>u>r;b9-^~}Xc}Ue[?+g:aySnzm\|q{7:/=/L
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: d8 5d ce bb 65 d7 6e 28 59 17 d5 65 5d 52 96 1c 73 79 e3 52 69 d4 c1 d5 28 ba 1d ad b3 9d 13 d7 56 b5 c1 8d 03 aa 97 dd 71 55 10 61 d1 53 23 52 a6 65 4f 54 e4 f1 df fc 31 5f 0c 2d ff ff 7f 91 8c ae a9 2f 24 22 72 ef e4 e7 00 91 f2 e1 5f 1f 3d e7 52 d6 fe f3 ff 76 7e cb eb bf 7b 6c 0d 8e f8 f4 4d cc 3d f6 85 6b 6f ff 8f af 7c f6 4d 5f f8 c3 9f 7e f8 af 9f 47 5f 76 3e f7 87 fd 7f e5 e3 6f 3e 5f ff fb fe fe 99 3f f5 b5 ef 9f f0 c4 49 f7 9d df e5 54 8d 0e 7a fd 5d 9f 3c e7 54 8e bd a5 7e 79 96 1d 72 d1 b6 0c 3b b3 16 f7 0d 6b fb d1 75 77 51 88 4f 65 c2 72 e7 bd 2f 7f ed aa 9d 69 47 c9 0d a6 6d af 7c 67 ff 87 5f de f8 b5 b7 ff ea e7 16 1e f3 7b 2b 6e ff 92 a3 ce 7e 79 7b d7 e5 87 1f fa 86 a5 97 7c df f4 43 76 87 ef f8 d0 f1 17 f9 cd 67 ef b8 75 ed 66 c1 91 ab Data Ascii: ]en(Ye]RsyRi(VqUaS#ReOT1_-/$"r_=Rv~{lM=ko\|M_~G_v>o>_?ITz]<T~yr;kuwQOer/iGm\|g_{+n~y{\|Cvguf
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 89 c9 8e 1b 9b b8 9a c5 a2 a4 dd bf 10 2c 2f 9d 35 e3 49 13 3b b6 e3 6b cc 5b b6 c2 68 f7 97 3b b6 64 5b 54 ed b6 34 a1 46 cb a5 5c 8a 59 de c4 95 b2 56 37 aa a8 96 28 b4 22 ad 1d 58 35 b2 b4 01 1a 86 4c 0d 85 42 a9 cc 4e 49 52 92 08 a1 00 20 93 a4 3c 02 ce 1c 78 9c 4a c9 f0 88 50 2e 0f 5a 8a 94 cc 63 84 a1 97 47 82 cd da 49 a5 10 58 c5 44 cb ce 5b 01 ab 14 b0 43 00 10 87 04 c0 13 23 a7 c2 20 2f 0b 28 c9 ba 02 24 04 12 e1 44 0a 85 47 4a 82 c7 49 81 6c e9 50 c5 84 04 bb c4 81 87 01 88 1d b8 e0 f2 a0 15 4f 89 14 10 0b 46 62 49 81 20 27 42 d9 91 40 62 f0 8a a1 83 37 e5 d6 29 5a 29 37 95 52 d5 aa 6b 52 7f 54 50 19 14 e3 2d 3b 85 41 97 0e 5a 57 b3 aa e5 4a 25 ab 4e b1 db 15 74 9e 59 f5 2c a5 d3 53 ee 17 dd ba c9 ec fe 01 34 41 f5 99 e5 9d db b8 a9 1c 9a 27 70 Data Ascii: ,/5I;k[h;d[T4F\YV7("X5LBNIR <xJP.ZcGIXD[C# /($DGJIlPOFbI 'B@b7)Z)7RkRTP-;AZWJ%NtY,S4A'p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49801	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	530	OUT	GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6842 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3479 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	722	IN	Data Raw: 52 49 46 46 b2 1a 00 00 57 45 42 50 56 50 38 20 a6 1a 00 00 90 6e 00 9d 01 2a 28 01 28 01 3e 3d 1c 8c 44 a2 21 a1 11 99 cc c4 20 03 c4 b4 b7 77 30 68 01 e8 a8 65 a0 f9 00 03 d0 03 a4 93 21 97 cb df e3 3b 3f fe b1 f8 f3 fb 8d eb 4f e2 7f 1a fd 43 fb 27 eb d7 f6 ef f8 9f ec 39 94 f4 af fb 3f 41 7f 8b 7d 80 fa 57 f6 3f d8 1f ec 7f b5 7f 79 7f 6e ff 45 e1 3f c2 5f e8 bf 25 3e 01 7f 18 fe 3f fc f3 f2 0f fb 77 ed 2f b9 7e cb ad 73 f6 2f d4 17 d3 5f 92 7f 5a fe f3 fb 41 fd af f7 5b d9 4b f6 bf cc ef 72 7e c6 ff 80 fc 80 fa 00 fe 2b fc 8b fb 47 f5 ff d9 cf ee 1f ff fe b1 ff 5b fd 3f c6 f3 ea 7f eb ff 62 fe 00 ff 8f ff 3b ff 2d fd fb fc b7 fc af f4 5f ff fe d9 ff 8d ff 57 fd ff fc 9f fe 9f f2 9e d9 7f 36 fe ef fe e7 fb e7 f9 df fc 1f de bf ff fe 02 ff 22 fe 75 fe Data Ascii: RIFFWEBPVP8 n*((>=D! w0he!;?OC'9?A}W?ynE?_%>?w/~s/_ZA[Kr~+G[?b;-_W6"u
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 8f 8b 8a ff eb 89 82 d5 8f b8 cd 57 aa 38 39 2d f7 4e 73 82 66 30 59 89 a0 c2 96 c2 25 5f 36 e7 b1 77 08 ef bc 32 5c f4 4b b7 82 39 68 5a af 86 b5 6c a9 2e 8f 25 53 05 78 98 9f 38 e2 87 7b 53 ff 52 09 9d 12 e5 3b d8 e8 10 f4 80 83 98 00 80 23 7a 93 7c 4b 52 cf 7c b1 49 f9 6c c5 5a ad 1a ef 81 1f f9 30 76 62 72 3d 1a 0b 4a ad 9b 6c 39 76 6e 7c db 93 b7 2c 1d 77 b8 26 7a 16 4e 6d f5 8a 3a 88 48 12 83 24 62 36 f7 7f 85 3c 13 b3 94 df fe 47 d7 00 4e 6e 4a 5e d7 75 3c 0f f0 b1 c4 5b 98 00 80 93 6b a0 70 36 22 ce a0 b1 3b e1 86 fa 09 b1 83 08 ca e1 b3 f3 0c 9c 48 fe b8 00 00 fe ff c1 6c 80 bf 97 78 b1 ad 22 28 c8 84 59 f3 a8 a5 5b c3 af 78 8c 59 4d 8a ac 1e 37 23 bf fc c2 51 28 ea af 84 15 21 c7 07 ff e2 cd 30 64 79 fd 1f d1 08 65 5c b2 24 bb f8 c9 b2 b4 8f af Data Ascii: W89-Nsf0Y%_6w2\K9hZl.%Sx8{SR;#z\|KR\|IlZ0vbr=Jl9vn\|,w&zNm:H$b6<GNnJ^u<[kp6";Hlx"(Y[xYM7#Q(!0dye\$
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 2d f6 9c f4 09 07 b0 88 91 a3 92 a1 23 00 3a ca 8b 94 67 20 43 41 79 68 71 03 6d 7b 3e 5a 21 86 f6 a2 1b a0 9f f9 a0 fc ab 9c be 80 62 08 e1 f7 f6 39 c2 ed cb 0e 45 03 41 b0 81 73 5d a5 13 c7 34 f8 1b c1 89 5c 76 7c 29 88 16 9a cf 3c 96 2f 55 65 15 3f 22 f6 bc bc f7 01 d5 df 8c 7a 0a 93 00 b2 3b b4 7d 2c a0 f0 85 27 ba ae 65 de 87 1e d5 13 dc 6b 5e d3 58 2b 60 30 d7 9a 5f c3 78 20 db dd 5a 35 a4 03 b2 1a e1 68 c9 67 7d a4 28 5c fc 7f f4 41 fc 2a 1a 16 2f 00 5f 83 5a d4 d3 06 30 8d 98 31 cf 79 3c ea 06 a1 d7 5a 13 55 88 ad 45 80 3e a5 e3 37 8b ac b7 5e 57 96 ff f9 da a6 4c 6d b6 11 d2 c9 3f f9 04 1e c3 3b 2c ac 8f 5f 8c df b7 ae 81 97 3c 91 15 54 94 d3 8c f0 8c 01 35 c2 59 9d 08 c3 c3 92 b1 8e b2 86 56 e8 be a5 df e1 5f 48 15 0e b4 39 dc 69 3f 5f 82 7b 04 Data Ascii: -#:g CAyhqm{>Z!b9EAs]4\v\|)</Ue?"z;},'ek^X+`0_x Z5hg}(\A*/_Z01y<ZUE>7^WLm?;,_<T5YV_H9i?_{
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 0d dc 78 0b 83 fc 35 63 08 a8 a5 b1 7d a9 f8 6c 1c bf c1 c9 d3 75 14 80 fd 22 c8 fd 07 5d 5c 84 45 7f d2 76 eb 1c 24 3d 12 01 27 9f 45 cc f7 ff 51 77 69 05 bf d2 d6 e5 24 71 da b3 ed 43 37 24 03 e7 c0 54 9d a6 36 c3 cd ff ec a7 ff f8 ca b5 f0 61 95 5f 9e c7 b6 80 0e ea c5 7c 67 a9 c7 9d 5f 8e c6 51 79 84 54 45 cc e5 b4 77 e5 0c 7f f0 06 4b e4 0a fa b2 e4 87 55 07 9e f0 f3 c6 72 44 1d d1 d0 86 6d 9f 45 2d de 18 17 ce 76 db 2e db a8 6b aa 55 56 dd 76 cb c9 4a 77 5c 84 0c b0 69 c5 7a 61 71 62 48 74 04 15 45 c9 4f f0 8d 30 1e 72 6f 4e 02 a5 32 fa fb 01 5f dc 97 9c 0c 70 3a ca 8f dd e8 2c 86 cf d5 cd 44 a3 09 42 c9 35 54 12 71 59 e4 5b 1f 81 b3 64 3a 2a 1d cd 89 94 56 20 4e 91 c7 0e 24 9d 32 78 c2 3e b1 bd a1 a2 99 4b 4b 96 5f 42 73 72 ad 5b ee 14 41 90 0c 42 Data Ascii: x5c}lu"]\Ev$='EQwi$qC7$T6a_\|g_QyTEwKUrDmE-v.kUVvJw\izaqbHtEO0roN2_p:,DB5TqY[d:*V N$2x>KK_Bsr[AB
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 57 36 49 d0 7e 64 00 8b 84 0b e3 4a 83 31 e9 78 13 c5 1c 1b 38 f7 5b 42 c5 06 20 3f 0d ed b6 32 52 a7 4c 92 45 0b 09 db 21 6a 8f 1f 33 ae af 15 b4 9e ac b6 ca 19 16 d4 fd b3 be 99 4e 18 95 87 f8 13 a9 e4 14 38 b6 e3 bf fa e9 d4 c8 a3 04 c0 e3 b0 22 0d bd 7c 86 2c 69 b5 e4 fd 38 af 70 6f c5 48 f3 e2 4e 30 a9 61 bf c2 07 4c 0d f5 a3 d4 9c 7f 35 f9 99 ad 31 23 05 de 0f 4f 05 70 f7 ba aa a7 57 18 34 f2 b0 5f d9 1f 9a f8 25 06 70 1f 16 1b 73 6f 14 65 08 fd 79 dc e8 58 c3 1e 84 6c f1 9e c7 ca be 27 b1 9d ef c1 ae 12 dd e4 63 4d 7a 08 32 0e ea ec 65 48 c9 53 10 38 75 a2 86 7e 28 43 34 c3 2e 64 fd 17 6c 64 16 fb 22 ac bf 1c 8d e3 60 11 bf cb 44 6a f1 75 02 88 99 b4 50 1d 50 63 38 c6 31 5e 4f ca 3b ec 17 c6 8c a4 67 8f 1f c9 09 7d 0d e4 17 62 d1 fd 8d ed 19 12 46 Data Ascii: W6I~dJ1x8[B ?2RLE!j3N8"\|,i8poHN0aL51#OpW4_%psoeyXl'cMz2eHS8u~(C4.dld"`DjuPPc81^O;g}bF
2024-04-19 14:06:13 UTC	1100	IN	Data Raw: d7 8e b4 96 52 4d 0c 18 80 39 33 02 db 32 bd 25 0b 8e b9 d7 31 d0 f5 d6 16 fd 79 6f a3 11 b5 ed 5b b9 24 a1 ef 51 a5 3f f6 ab 8d e2 78 db fa 21 ec e1 3c 0d 00 26 a3 0f e8 ab 09 a6 19 d9 34 f1 8e ab aa 52 cd e6 e1 6e 89 e2 b2 66 16 89 ce 58 1c d7 43 c7 47 7f c3 16 ef 81 32 e4 be 93 e9 83 d2 0d 56 ed c9 f6 1d 4a 38 d4 c7 b1 7b 14 7e 96 c2 1e cd 7e 4d a9 68 c6 68 ae af 6b 47 bf 0a 66 44 69 32 49 34 93 aa e4 b9 f3 85 d9 0b 45 bc f8 cc 4b 18 87 cb 20 6a 29 4a 14 1f e3 1f 4c c7 b5 cb f0 0d c4 ef 51 e7 82 d8 07 65 c1 17 b6 6a 87 98 6e f7 74 c3 5a e4 b7 09 3d 03 89 3f 3f 39 b1 48 2d 10 c4 80 dc a2 ba b9 be c1 64 37 a3 a0 43 64 1d 7e 57 5d 37 a2 ce 66 a6 7c 10 1b 1e 3b 81 e4 e5 05 f0 ab 31 98 d0 bd 24 2a 39 79 ff 7b dc 2a 17 d3 0e 2f d7 c7 c0 31 f7 c2 8a a5 a6 55 Data Ascii: RM932%1yo[$Q?x!<&4RnfXCG2VJ8{~~MhhkGfDi2I4EK j)JLQejntZ=??9H-d7Cd~W]7f\|;1$9y{/1U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49802	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1108	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:53:17 GMT Expires: Sat, 20 Apr 2024 12:53:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 4376 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c db 00 00 00 2f 13 c0 04 10 ff a0 a0 8d 24 65 fc 1b bc 27 15 cc bf 36 94 46 92 14 75 fe 11 a2 f0 48 d4 0f ab a8 6d 24 27 fc f1 dd ef 50 f4 3e 3b 4c 02 00 4c 33 66 c5 53 0c fa fd 2b 51 85 07 00 a5 59 00 02 08 d0 00 02 08 10 10 c0 82 92 6a 9e 73 2e aa 18 29 fe ff d3 77 bf e2 7f 42 3f 86 56 d2 79 3f f0 bb 9f 8e 39 cd 8f ef dc cb f5 be a8 7e 60 01 12 43 01 8e 31 b3 62 00 86 91 24 29 59 ec f1 c3 e5 8d cd 3f 4f 1c 02 88 e8 ff 04 e0 ed 79 2b d2 e6 67 ca 69 1c 56 92 5c 87 71 2a f7 66 9e 9e f7 a0 35 0e b5 c6 a1 31 c8 8a 20 28 32 18 73 aa a3 52 ec ae 08 e3 98 f2 77 3d 95 62 7f ca 1a 84 29 90 86 30 f6 c8 f9 28 89 95 8a 93 c8 bb a3 65 e3 e1 b6 1c a1 a9 a5 12 a9 a4 6e f0 6e 00 Data Ascii: RIFFWEBPVP8L/$e'6FuHm$'P>;LL3fS+QYjs.)wB?Vy?9~`C1b$)Y?Oy+giV\q*f51 (2sRw=b)0(enn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49803	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	530	OUT	GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32634 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3479 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 72 7f 00 00 57 45 42 50 56 50 38 4c 65 7f 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 ce 3e f1 7a af ff 82 67 76 ae 85 88 fe 4f 80 6d 77 97 ed de 9d dc dd b6 dd dd 8f db 5e 79 e5 c9 5f ad 96 0f d9 5e 3c ed b6 bb 22 29 89 16 f6 64 b7 f7 7b 6a ff db b6 d9 0c 8b e7 79 04 59 5d 90 00 0f 09 55 2b c7 5a bd 61 3b 3e 8e a3 79 35 d5 57 1d 75 a8 2a d3 f7 ab 95 38 24 69 a5 aa 3a 32 65 8c 91 5a 30 1d 24 20 55 55 cf 8b 3b 11 19 83 8c c1 18 41 55 7d 4b 8b 91 64 00 d3 e5 09 c2 77 00 7b b1 99 a9 c8 1f a8 4a 8b da 83 94 24 c4 c0 5e 44 cc 11 fb 53 55 34 20 40 00 a1 03 51 11 3f 36 35 73 48 ec bf c0 75 bc d9 cb d4 ad ff 82 24 5d 7b f9 fd ae 29 03 5e 91 31 34 86 6e 2d d8 7e 75 ae d6 2b 72 fe 98 80 97 7c 45 4b a8 82 00 82 d8 f7 ea 3b 60 eb 92 74 6d be 21 e7 f9 bb 16 Data Ascii: RIFFrWEBPVP8Le/IM8lFF>zgvOmw^y_^<")d{jyY]U+Za;>y5Wu*8$i:2eZ0$ UU;AU}Kdw{J$^DSU4 @Q?65sHu$]{)^14n-~u+r\|EK;`tm!
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 38 01 75 b6 c9 dd b2 2e c6 47 8f cb d9 4d b7 62 12 08 87 00 40 c3 7a 41 c0 3f 6e 7a 2f 4c c6 86 2b d6 b5 87 be a3 69 46 35 87 03 00 2c f6 00 06 bd a5 e4 f8 c2 9b b1 5d 00 10 98 4d bd bc f3 50 01 73 ea 03 37 04 8c cd 36 00 18 f4 72 1b 00 00 15 db 33 bc 66 a7 62 c3 06 e9 4c bb e3 df 45 87 ae 3a 70 71 5e e3 cd 1b 42 ff 3f 1a 6e 8e 6b d0 79 e4 0d b0 35 ce 18 ec 2d e5 c7 41 4e 5b 43 0e 06 d0 8f 1a 00 f5 bc b7 bb 03 9b 5c a1 6f 6b 49 3b 78 d2 43 ae b4 c1 da 64 db c1 06 80 96 f5 be 34 90 0c 67 84 c7 70 1f 1e 47 2f 20 09 4f d3 dd f3 f8 e4 01 c2 43 b8 1f 1f 01 a0 d1 f4 b9 cd c8 1f f5 9f 86 fb b5 a1 71 72 c5 7a 01 67 a9 9d 4a 93 4f 68 79 b1 2c c0 d2 3b 34 e9 14 3f 5a 5e 9c 17 c0 b0 ea 0e 0f 12 d0 1f e4 ca 15 48 36 bb 55 59 a0 5c 7a 53 4d 91 ac 62 5b 25 30 d2 2a 35 Data Ascii: 8u.GMb@zA?nz/L+iF5,]MPs76r3fbLE:pq^B?nky5-AN[C\okI;xCd4gpG/ OCqrzgJOhy,;4?Z^H6UY\zSMb[%0*5
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 2d 9d e5 b4 14 45 51 ca a2 2a 00 01 09 00 b2 ab f8 a8 ca a2 a8 a6 58 14 b5 d8 91 62 57 23 fc a3 08 55 28 8a 6a 14 d5 34 94 a2 a8 86 4e 28 aa 45 51 7c 2e 8a bf d2 12 7b d0 a2 13 8a e2 0f a8 96 b2 50 43 67 41 d3 50 8a a2 8a 1d a1 28 ab 50 74 c4 42 2d 3a 8a 32 15 45 d1 11 8b aa 2b f9 2b aa a1 28 8a ba 24 97 b0 e2 ab dd 2d b9 41 b5 25 ba 8e 5a 01 76 4b 6e 78 d4 2a 9c 92 42 25 a7 b4 ad 96 75 35 ac 08 b5 95 ba 9d 55 2d 6a 19 72 80 59 26 6c 40 ad c2 15 69 51 6a 25 8b 92 6b 61 11 be a2 5d 14 a5 ac 2d 59 52 4d 6b 6a 2b d5 6a 99 9b d8 16 1f b5 5d b8 72 f5 5b 62 b7 1b 55 95 75 2a d9 a2 c8 55 72 15 51 95 75 12 5b 53 ea 6a 6a 8b b2 d6 26 57 8a c2 a5 4e 92 1d 44 ae c2 96 d0 5d 97 ba a5 a1 3a d9 2e b6 28 be ed c2 95 7a 84 52 77 05 14 97 6a 17 a8 20 d5 d0 51 55 dd 68 5d Data Ascii: -EQXbW#U(j4N(EQ\|.{PCgAP(PtB-:2E++($-A%ZvKnxB%u5U-jrY&l@iQj%ka]-YRMkj+j]r[bUu*UrQu[Sjj&WND]:.(zRwj QUh]
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 46 6d 56 c9 fb d4 55 69 9d 24 27 56 db 2a 79 0b db 2c d8 b7 a2 2d ba e6 28 79 43 ae 2d f2 45 96 71 e9 aa 41 17 24 eb a1 2e 9d 6e ba 87 9d 6c 5e 33 c2 ee b1 4a b9 66 3d 5c 97 8e 1a 4d 77 57 a0 46 d6 ba 51 cb 71 d0 b0 92 a0 c2 4e 50 2a 94 31 95 4e b1 86 ca 89 1c 4b 37 9b 5d a4 d0 47 94 44 d1 54 27 5b 9c 38 ba 0f b8 4c 56 d6 a3 ba 10 8d c6 76 0d 51 94 c1 0d c8 51 68 ac 8a 94 eb 51 15 a2 28 54 1f 28 2a 72 c2 32 82 91 aa ff e3 a8 71 0a ef 71 2b 95 52 c3 6a 70 b9 00 3d 6a 17 a5 e2 3e dd 4a c9 20 3b 03 9d 0a ed 9e 50 aa 91 2d d2 34 64 23 6b 84 b6 24 2d d3 d0 a5 6e a9 8a 22 17 75 81 52 52 db 91 56 4b 2e cd 16 7f fd eb 47 ed 9f d5 ae d5 6a 99 16 69 2d d6 76 40 b5 a3 5a d2 2a b5 2d 54 28 72 83 35 50 db 31 5b 14 45 91 15 69 78 d4 22 5b 84 6a c9 16 d9 2a 4d 3f 6b a5 Data Ascii: FmVUi$'Vy,-(yC-EqA$.nl^3Jf=\MwWFQqNP1NK7]GDT'[8LVvQQhQ(T(r2qq+Rjp=j>J ;P-4d#k$-n"uRRVK.Gji-v@Z-T(r5P1[Eix"[j*M?k
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 6e 23 70 81 f3 e1 0e 41 d1 64 15 e8 66 53 cb 94 2e 9f e5 7a b4 9a 0a 74 c3 32 0c 7c 2b 59 da da 50 72 87 34 44 df 41 d6 52 b2 35 b9 48 83 86 2d 69 89 76 6a ba ed 2c eb 12 6e cc 5a 4d 4e a5 36 96 b9 e3 76 b1 f1 ad d9 9a a1 d0 91 4e 58 a4 ad 92 6b 14 b5 52 27 54 ab 65 5d 67 b6 1a 72 2d ed 6e 84 6a c9 2d 6b 8b 8e 76 8d 2c 54 6d 49 ae 01 1f c5 bb 49 56 4d db 25 dc 49 ca 46 9d 44 2b 71 6e 3e 5c 73 ab bd 4c 4e ac 66 99 bc 25 9b 36 72 da b4 45 e4 6e b1 53 64 6b 09 a7 64 e9 26 27 e1 04 ab b5 52 97 61 b5 8b 3a 2e ba a2 2b bb e6 bd 58 74 ee 4d fe 44 ee 8a d0 ab a7 de 6c 36 55 b6 df 22 db 45 f2 0f e7 a0 db fc 29 bc 69 b6 76 c8 af a8 0b e2 fb 56 6a 01 de 29 ed 58 a9 55 b6 b7 54 43 35 a7 92 95 a8 9b b1 75 b5 6e 77 a6 9d 15 95 a2 8e 9b 5a 81 6e 67 b8 92 82 17 bd 13 21 Data Ascii: n#pAdfS.zt2\|+YPr4DAR5H-ivj,nZMN6vNXkR'Te]gr-nj-kv,TmIIVM%IFD+qn>\sLNf%6rEnSdkd&'Ra:.+XtMDl6U"E)ivVj)XUTC5unwZng!
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 85 6f c9 e2 ce f6 6d c3 1d c5 2f 96 31 8a 4a ab cd ac 2b 5c 14 ed 4b 72 fe 49 1f 95 bc db a4 d1 c5 1d 5f 5d 6f ce f7 d5 cb d7 47 f3 94 1d 2a 40 b1 1c 2a b1 c0 18 ad d4 11 61 61 d6 f6 85 fc e9 67 3f 64 0a 00 05 a1 84 41 80 c0 20 8c 3e 00 aa aa 12 a9 62 b7 39 de 22 51 75 ee 40 a1 51 54 28 05 db 0f 5f fe d5 47 6b a3 aa 50 32 81 c5 4e b0 00 68 30 4c 9c c2 00 54 19 9d 25 a3 94 94 c0 47 8d 13 28 90 5a 0d 7f f6 c9 0e ce f6 ed 92 13 45 5e a6 4e a9 5a 19 fb 22 0b 84 6f 4d 4e a7 f8 be 33 ed 35 6a a9 d2 de 1a ae dc e4 9d 8f 7d 2d e9 1f ce f6 96 55 29 de eb 26 b7 2f d5 df 57 0f a7 cc b5 ba 69 bf 4c ae 8d d2 8e d5 12 22 51 53 ad be a2 bb ec 8c fd c3 5c d1 91 3f 1e 36 ac fa f6 6e 74 25 1f fc 74 2d da 90 13 8b fc f2 77 7f 95 73 ca 78 18 87 d2 b1 f8 16 a1 f7 43 dd 0e ba Data Ascii: om/1J+\KrI_]oG@aag?dA >b9"Qu@QT(_GkP2Nh0LT%G(ZE^NZ"oMN35j}-U)&/WiL"QS\?6nt%t-wsxC
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: c6 17 fc 82 9a e7 6f f8 99 af fd 3d ff f9 73 fe e9 96 df fe e2 e7 ff 7f e5 de ad 7f aa 14 49 1b 0e 2d 05 8a 2c cb c4 aa 51 11 29 4c e8 7a d3 e9 bc f1 ee d7 d7 5f c2 57 3e fd 52 48 30 8a 48 a4 2b 81 a8 af 9a 92 00 e9 ee cf aa 32 3e c3 79 26 15 1a 40 b2 6a 00 02 c1 98 a2 4b 25 c3 b9 14 7c 39 5e 71 5a a7 ce 08 88 1a 5d 55 40 90 a8 82 42 39 41 41 40 dd 04 00 be 1a 6f 7d 06 75 05 85 31 63 cc 9b 08 95 59 9a 59 2c 9c ec d4 a2 93 6c 11 f3 65 38 10 09 69 4d 31 55 89 b6 59 e6 9a 68 6f a6 bd 65 d5 15 d8 35 8a 8c 53 37 f5 c7 68 7b 74 fb f7 32 ed b7 6b 6e a7 9b fc 07 b9 d5 b1 fe 69 ea 9b a5 85 d1 76 47 12 9b 2c c9 bd 13 66 c9 54 76 19 dd 95 b5 ed 0c bf a4 28 94 ee ba 0b 9e fd a3 cf bf f2 99 eb e6 eb 6f e2 67 fe c1 af 3e ef 1b 77 cd df fc df cf 6f 5a 23 3e f7 0b be f2 Data Ascii: o=sI-,Q)Lz_W>RH0H+2>y&@jK%\|9^qZ]U@B9AA@o}u1cYY,le8iM1UYhoe5S7h{t2knivG,fTv(og>woZ#>
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 22 01 6a c2 28 2c 42 b8 69 4a 08 30 b5 42 95 10 6a 96 19 a5 82 04 9a 25 22 14 09 40 51 41 81 18 55 ca 20 55 4a 18 62 d3 9c 6b 8f 2f 44 94 d2 2a 05 88 03 50 e0 34 18 64 d8 48 32 9a 28 f7 e0 51 d2 a2 49 c3 c5 d2 5e 98 82 a4 62 d4 ff 30 7e f8 88 b4 0b 4d ac 4c e4 a9 4b e9 4b d3 b6 1e 9a 69 86 a6 2d 4a 1a 1b de fa ed 68 7f 90 9b dd fa 7e 3b 73 fe 45 c7 f7 4f 93 6f e9 6e bd 33 7d ff 2c b5 42 48 77 ce 94 aa aa 2f 67 17 2a 2a 96 5d f7 25 9a 20 de 97 1f 1d 61 eb bb 43 50 53 05 0f 1a 03 5a 53 80 a7 46 95 94 79 4e b9 28 dd 63 0f 9a 2b b0 0c 5b e9 59 b1 ea 5a d4 dd ba 15 9c 00 c2 0a 62 59 85 35 24 88 a8 42 0d 91 a9 94 40 59 41 19 0b 4d 20 88 12 82 52 53 f4 40 04 59 e7 8a 38 14 9c 13 2f 84 05 20 53 b1 12 ac 12 02 35 4e 53 70 42 20 e0 24 c2 c2 1a 08 14 56 d6 9f dc 62 Data Ascii: "j(,BiJ0Bj%"@QAU UJbk/DP4dH2(QI^b0~MLKKi-Jh~;sEOon3},BHw/g*]% aCPSZSFyN(c+[YZbY5$B@YAM RS@Y8/ S5NSpB $Vb
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 5c 6d 28 91 6c e2 1a f1 ac 89 84 a8 f3 23 e4 96 89 1a 31 5a ba 89 16 97 ae a1 32 29 d8 4e 2a 09 32 3a 0b f9 4c c1 9e ed f9 16 ab 21 4e 25 c2 b6 da 74 86 38 93 66 74 46 96 59 1e 6b 12 2a 7a 7c 59 92 8a 60 2d d1 42 0c 86 58 01 db 28 61 51 99 3a 94 ca aa 50 a1 4c 4e e1 7b 94 14 89 fb 14 dd 18 3c 6e 6a b7 01 73 4b c3 7d 88 8b 83 c8 c8 50 3e 26 89 5a 34 04 5e 16 5b de 69 6e fd e5 b7 08 0f b4 4d ec 9a 21 4d b2 8f 50 d4 f4 9d 46 b6 d1 92 8b 76 3b ac 50 bc 37 0f 4e 05 61 8b b0 57 25 1d 4e 98 24 0b a9 b2 cb 77 71 df 92 ce ba 9d 54 76 52 ac 34 f1 02 16 82 d2 04 7a b2 f4 fd 98 2c 4d 96 74 bc 2b 6b c9 92 e0 22 76 42 96 40 52 a9 b2 cc 70 1b a9 f8 fe d6 93 bf a1 6e dd a5 76 17 ee a2 83 13 7b 11 15 2a 21 db 32 6f de a5 65 6a 29 b7 e2 96 1d 47 bb 9b 84 51 32 b8 b6 65 1c Data Ascii: \m(l#1Z2)N2:L!N%t8ftFYkz\|Y`-BX(aQ:PLN{<njsK}P>&Z4^[inM!MPFv;P7NaW%N$wqTvR4z,Mt+k"vB@Rpnv{*!2oej)GQ2e
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: a5 10 4c f7 d4 29 90 4c 5a 74 96 40 c8 56 5d 23 c2 47 cd d8 5e 1e 5a 43 1a e4 56 66 d2 dd b4 26 34 f3 54 f9 9f bb 2b 6d 98 36 ba 7c 40 43 66 69 2b f7 11 71 64 21 90 44 32 da fa e4 56 e2 70 16 c5 a8 e3 68 9c e0 c3 28 ed 51 f9 49 09 82 2d 67 c6 90 d1 66 cc 6a 25 68 6c 15 ab 43 a7 9d 98 8d 93 6a 70 f3 32 57 5a b6 c2 a5 70 3b 6d 29 2d 2b db 33 72 9a 15 66 84 db 4a 90 c9 42 e6 26 de 28 01 57 ca d6 30 aa 2a 65 e9 50 d5 c7 0e 77 d1 69 37 4a 07 89 ce 6c 16 ad 82 3e eb a2 f4 2e 36 4a 32 a5 09 38 54 31 d7 3d 14 bb 7e 31 24 4c a0 cd 51 17 16 a8 ea b1 75 6a 15 27 19 43 a5 2a c8 28 e4 16 4f 4e 25 af 48 b5 36 f9 96 5c f1 97 7a 8b 19 c0 32 3d 92 7d d0 4e 16 de df df f0 a5 e1 1b 4d d2 5b b5 3c 29 d1 61 7c 5b 45 be e4 3b 50 65 b1 49 3a b8 ea 4a c7 74 43 85 0a 9c b1 c8 48 Data Ascii: L)LZt@V]#G^ZCVf&4T+m6\|@Cfi+qd!D2Vph(QI-gfj%hlCjp2WZp;m)-+3rfJB&(W0ePwi7Jl>.6J28T1=~1$LQuj'C(ON%H6\z2=}NM[<)a\|[E;PeI:JtCH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49804	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1092	OUT	GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 622 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:15 GMT Expires: Sat, 20 Apr 2024 13:08:15 GMT Cache-Control: public, max-age=86400, no-transform Age: 3478 ETag: "v116" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	622	IN	Data Raw: 52 49 46 46 66 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 1f 00 00 1f 00 00 56 50 38 20 1e 02 00 00 d0 09 00 9d 01 2a 20 00 20 00 3e 6d 2a 90 46 a4 22 a1 a1 37 e8 00 80 0d 89 6c 00 9d 32 84 7e 27 81 a9 44 d2 65 98 26 dc 71 28 c8 32 47 ff 1a f0 16 c7 fa ce 93 d3 3e 8a fd 58 c6 df ed 12 e8 59 fb d1 46 f4 a3 81 58 2f be d9 e7 46 ba ec 19 a9 3a a6 70 e1 40 1e 10 00 fe e9 a7 35 27 db 81 7d 83 b0 d6 39 09 d9 12 01 d7 36 0a e0 11 59 29 f1 0d 86 e5 cd ec 37 9a 74 fb cb 64 fc 57 82 92 5d e3 67 84 5b 37 f6 e6 c4 1a 64 93 e5 a0 f7 84 6c 46 f2 e9 3e c3 30 b1 12 37 50 92 53 68 38 bd d2 a4 e8 6b 3f 58 1e 86 37 04 d2 39 3d e1 1a 9a a5 ff 1c 28 27 35 af 74 51 c8 df 7e fb f8 64 dd 8b 09 e8 08 79 bf 69 a9 23 38 ce 10 42 3f af b0 c0 7e 38 85 2a 67 34 e0 84 f8 Data Ascii: RIFFfWEBPVP8XVP8 * >mF"7l2~'De&q(2G>XYFX/F:p@5'}96Y)7tdW]g[7dlF>07PSh8k?X79=('5tQ~dyi#8B?~8g4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49806	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	529	OUT	GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10312 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3479 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 40 28 00 00 57 45 42 50 56 50 38 20 34 28 00 00 10 95 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 11 aa 9d d4 28 04 04 b4 b7 70 b6 e0 8f 7c 30 c0 de 07 cc 97 e2 bf 00 3e 59 67 80 e7 71 fe bd fb 19 c0 81 ea 01 fb 1d ec 01 fa dd e9 a3 ec 7d fb 81 e8 97 ff ff 59 0b ce 3f d5 3b 5a fe d3 f8 e1 e7 6f e2 bf 1c fd 3b f1 93 fb bf ff 1f f3 bf 0b 1f be f8 44 ea ff b3 3f 72 7f 8a 7d 59 fa a7 f7 2f d8 1f ed ff b9 5f 7b 3f 9c ff 0b e1 6f c7 ff e3 7d 40 bf 1d fe 3d fd 33 fb 07 ec 8f f6 ff da 0e 39 9d 5b cc 17 d4 7f 98 ff 73 fe f1 fe 2f fc e7 f6 ef dd 7f 65 5f da 3f 2f bf b7 7c 21 f5 df fa f7 e5 3f f7 7f b0 0f e3 1f cc 3f b4 ff 71 fd 95 fe fd ff e7 ea ff f3 9f e9 3c 74 7e d9 fe 9b fc c7 f9 2f 80 2f e4 7f d2 7f c8 ff 65 ff 4f ff a3 fd 77 ff ff b6 8f e5 7f Data Ascii: RIFF@(WEBPVP8 4(*((>AD(p\|0>Ygq}Y?;Zo;D?r}Y/_{?o}@=39[s/e_?/\|!??q<t~//eOw
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 8d 54 66 c8 0d d6 2d 5f 30 52 22 5b db a6 d4 92 85 46 ef 0e 48 b0 53 43 b6 f8 a6 1a 39 54 82 68 a3 be 17 d5 3f 90 85 77 15 50 0e 0f fa ac f7 07 ac 0c 1f 30 04 d2 da ae 25 6f f6 f3 11 ad d9 ae f5 37 06 2d 63 7f a9 4b 26 34 08 0a fc 52 d2 79 42 16 3c 78 f0 e8 d8 6f c7 f1 d2 de e9 c4 94 70 b7 3e 16 36 20 08 f0 a3 d9 8d cb b0 62 79 5b 36 23 b2 3a 66 df a4 16 bc 23 a9 d6 9c 8e bc c7 09 fa a5 7b cd f3 e3 29 1f 11 85 d4 b6 dc fb 10 61 5b b1 13 b7 9f 09 9c 31 93 a2 d4 7a a8 cf 26 dc 8d 24 31 0d f0 b1 c2 90 18 9f 5b 06 53 f8 02 b1 eb 03 8d e2 9c 76 8d a2 6a f7 1c 8d ff 5b 3a ae 39 6e 33 91 b7 08 1e 13 c2 29 69 69 22 96 4e 0e cb 13 2b 41 c5 fc cc d0 c6 aa cb 7f 47 28 07 ef f4 0f 8f 6e 4c 5a b1 2d d5 ea df 55 58 97 40 c9 61 b5 99 7e 09 f6 c3 23 9e e0 d4 29 b6 11 8a Data Ascii: Tf-_0R"[FHSC9Th?wP0%o7-cK&4RyB<xop>6 by[6#:f#{)a[1z&$1[Svj[:9n3)ii"N+AG(nLZ-UX@a~#)
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: a3 cc 72 ca a4 f3 ec 7f 9b 1b 7e eb 75 28 34 a9 d9 fd 64 bb 7f ac ad 2c d4 8e 79 27 9b 30 c5 83 31 fe 57 55 44 a3 ef 4e 7a dc 31 c3 fa 2c 74 d9 33 d8 b7 a6 87 c4 92 4e 0d c8 a2 34 ab 58 45 77 f4 9b 44 ed fc 86 65 79 56 ce 21 a8 33 c7 79 64 83 b8 91 f7 af 62 e0 f1 ec e9 a4 9b 4d 55 79 4b 01 0d da 56 7a 19 a1 33 99 a6 e4 d3 05 a1 09 4d b6 8d f8 a5 96 41 f3 70 cc 8e c4 ed 90 37 7e 13 a6 86 5f 6b a8 e5 4b be d1 c1 13 ea b5 6f 36 3a 4d ab de 80 4f c0 ef c0 ff 31 1b a9 d9 7b d1 d8 9d 79 97 68 3c 43 42 56 98 f5 1a 8a 44 e6 37 28 af 56 5d bf 2a bc ba dd 00 1d b2 6b b1 0d 31 b3 76 13 e8 cd b3 3c 1b 7f c2 5d 51 23 8d 03 8b c5 32 25 5b fa d9 0d 99 e9 27 bb c7 ec d6 18 53 19 0e 0e 5f 0d ae 23 b0 02 d9 81 98 8f 89 20 4e b2 36 eb 80 c4 b6 a2 f0 00 fc 7f 66 72 1b 67 11 Data Ascii: r~u(4d,y'01WUDNz1,t3N4XEwDeyV!3ydbMUyKVz3MAp7~_kKo6:MO1{yh<CBVD7(V]*k1v<]Q#2%['S_# N6frg
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 83 88 af bf 35 6f f9 37 cb 92 1c a8 ad 4f e1 a0 e0 b2 7f cf da fd f0 6a ed 57 97 a9 d3 88 42 d5 d1 7b a5 25 56 e8 13 b3 01 74 c1 54 47 20 e1 51 68 b9 98 c4 be da be a2 03 ef b2 b3 17 5e ab 78 12 5c b9 19 9d 78 57 e3 19 51 29 d6 60 25 24 fe 7f b0 2f 08 49 a2 6e 90 bd 8a a2 0e b5 41 a7 71 1d ef e7 c3 45 e7 e4 63 d2 3e 7a 5d 4d 3a 39 3e 90 dd 4c fa 63 37 97 a0 ad 34 48 96 7b ec 49 15 cb 73 c7 54 87 7b 49 03 84 8a ec 01 c3 f4 a6 6a 01 69 0a 0c ca cc 82 73 ef d8 58 da f0 87 73 41 33 58 3b 8c 3b 5d bd dd 95 75 41 56 64 9b 57 0a 00 c0 55 1e be f0 77 ca a0 4d 50 03 0f 06 bd d9 fe e9 c6 d9 d9 0b 68 e6 d9 9d 4c 0c eb 87 9a 83 f6 77 d7 df 21 8a 6f 5f 34 ff cb a5 91 08 66 61 d1 4f 76 e6 41 91 1d 2e 1f 06 8f 08 f6 9b ff 3d 83 ad 5a 3c a8 b9 21 ad e2 a2 da ce f1 9c ad Data Ascii: 5o7OjWB{%VtTG Qh^x\xWQ)`%$/InAqEc>z]M:9>Lc74H{IsT{IjisXsA3X;;]uAVdWUwMPhLw!o_4faOvA.=Z<!
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: bf 2b 35 f9 2f 51 43 2a 11 9c ab 5a d0 70 45 37 12 01 5d 4f 71 aa c8 b5 77 33 1e 9d 22 23 ad 02 15 de 1c 59 71 76 39 58 fd 66 c3 0c ec 11 ea 2a 76 e8 dc 12 eb b2 56 06 9b 90 b7 ca d3 67 ee 1f aa a6 a6 cf f4 46 89 9a 86 dd 70 10 0c ff 72 6c b2 72 31 bb 1d 44 2c 27 6c 84 7e 76 cd 8a 9f 3c d7 af ad 61 87 57 e0 ed 54 f9 38 91 4f 00 c1 ee 51 10 da 08 f6 a0 ed cc d1 e6 e8 e2 fd 0a 90 7e 35 3a 7c 0e f1 e2 38 1d 5e dd a6 0f 02 66 fe b8 bd a4 ae 87 ea b6 af e1 ad 66 98 f7 0a 1a e6 99 72 93 09 dc 8a e9 50 80 77 31 4d 9b 89 13 d8 16 ad 65 cf 53 e6 09 b4 38 ec 99 9d 4d c7 a2 4f 60 34 25 15 dc 59 a7 3c b7 b3 db c8 bd 39 39 f1 fe f7 c3 c7 f3 b0 75 0f f1 b9 5e c6 a5 3e d0 dd b8 17 4e e8 ea 8b 3e 9c a9 da 7e 2f f7 ea bd c1 50 22 08 c2 7f 14 a4 61 75 13 fa 58 b6 c2 12 8d Data Ascii: +5/QCZpE7]Oqw3"#Yqv9XfvVgFprlr1D,'l~v<aWT8OQ~5:\|8^ffrPw1MeS8MO`4%Y<99u^>N>~/P"auX
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: a9 c9 de f0 bd 0d 1a 4f 56 c7 68 a3 ec ed d7 78 d4 1e 8a 6f 8d 62 8c 6a ec 79 14 1c 1b a5 26 25 87 57 38 b0 4c 00 dc 8d 22 e8 89 94 84 56 5b 5f 36 79 28 12 b5 85 3a 0a f9 8b 9a f4 99 0c 21 9a 21 40 ed 93 5e 71 87 a6 21 6c 57 4a e0 1e 04 42 73 04 96 9d 2c 67 f7 67 e0 67 ad ff 8b 05 ca 87 f5 dc 0b 36 63 2f 9d 24 01 21 e5 b8 85 14 1e 8c bf dc 4f 71 f1 5e c3 c5 91 10 c5 6b c3 11 5c 01 a7 0c 84 27 db 55 95 e5 63 84 96 c5 bf 4c 6a f5 d9 83 4f ff 92 a4 d2 25 99 4d fe 74 d9 cf 20 c5 53 83 ee 60 ef 0a 7d 57 60 0b db 2a 1a 5f 84 ca a6 18 11 7e 98 32 5e 3e c1 ab 39 c0 81 17 a8 4a 7a 04 04 4c 13 c7 9c 53 03 b0 40 7d c3 cd 24 0b cb 04 fb f1 75 98 6a e0 24 1a 9b 3d 2e 00 0b 79 28 c3 73 63 80 4b 26 70 19 9e 29 43 0b 26 1f 90 54 72 c0 e0 6b 04 d7 e4 43 56 10 b5 e8 cf 3f Data Ascii: OVhxobjy&%W8L"V[_6y(:!!@^q!lWJBs,ggg6c/$!Oq^k\'UcLjO%Mt S`}W`*_~2^>9JzLS@}$uj$=.y(scK&p)C&TrkCV?
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 17 cc 7b 1f cd 47 58 9f 81 ea 81 ee 6e 7d 21 4d 77 ae 42 b2 98 5e d0 1b 4e 41 6d 4a ba 49 51 6d b9 6c e1 62 22 32 2a 64 d4 ca 53 c0 b9 59 c2 73 d5 a7 39 d7 16 50 9b 92 6e fb b7 d2 25 18 4a ee fe 05 6a da 9f 75 61 21 ad 42 ea 56 1c fd 0c 53 3a 29 19 ae d2 f7 ae ae 74 ce bd 46 cf 27 21 8d 4a 7e d8 ff ea 3c 40 7f 9e b2 cd 30 0e d0 72 d3 56 51 f5 d6 5e 29 bb 1e 35 e3 24 40 18 aa 65 21 63 f0 08 1b 81 3b 1f 4c e9 77 4a 94 7c 84 64 4f a8 4b 2e a8 c3 f7 6f 48 4a 26 8a dd ca 22 73 f5 f0 be 94 32 06 8f e5 c6 0d 7e 84 05 ba 58 60 e2 23 db 57 05 1b 6a 2b ac 58 4f 2e 38 ca 86 9b a4 63 b7 24 86 01 09 4e 8f 54 20 cc e4 ff e6 cf 7c c6 b7 e4 5f 0f 06 b5 a6 23 f9 12 f6 93 aa 86 39 c4 1f f6 0d 39 1d 39 b5 10 d3 83 ff 0a 60 3d d7 30 75 de e7 d8 76 6b 6e 82 22 78 77 f2 c5 03 Data Ascii: {GXn}!MwB^NAmJIQmlb"2*dSYs9Pn%Jjua!BVS:)tF'!J~<@0rVQ^)5$@e!c;LwJ\|dOK.oHJ&"s2~X`#Wj+XO.8c$NT \|_#999`=0uvkn"xw
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: f8 59 b1 c0 bd 88 84 3f 30 81 9b 21 b9 97 5e ce 17 56 b7 b1 b1 99 63 e1 90 a5 7b 26 57 c1 f2 68 f7 23 e9 38 f6 f3 63 7e 9a 04 a9 00 0d 07 ce e0 6a 8b 54 32 35 15 f8 48 3a 13 08 6f 33 81 96 1a 3c b7 8b 81 d6 de 1c f6 b6 db 40 4f 3e 4c f3 f1 20 34 42 77 ef a2 71 cc 39 11 d5 df dd 84 2f a2 c0 eb c4 d9 4f be fe 3f 79 48 a2 f9 e4 88 25 2d 63 47 8f 81 28 4e 44 5b 0c 93 a9 85 17 9b cf ae eb 73 4d d9 da 5f 7d df 8f ba c1 b3 97 a5 8e 50 ab db 98 09 70 dc a1 40 70 04 aa c4 7e 61 25 12 9c 8e e7 d5 4e ee a3 22 43 90 ea 22 3c ce 29 9d de 31 c6 d5 f3 ea d2 80 20 9e df 7a ed 7c e6 81 73 48 64 91 11 7f 0a f1 06 82 52 36 e0 06 33 73 de ee e1 1e 92 f4 41 4a 3d ab 94 ce 66 a1 0f fe 1a 18 03 6d d7 e6 ab e3 6e bc bb 89 8f 6d 4e 47 00 cd 79 f3 d7 f3 8f d7 97 e9 dd a7 36 e0 8c Data Ascii: Y?0!^Vc{&Wh#8c~jT25H:o3<@O>L 4Bwq9/O?yH%-cG(ND[sM_}Pp@p~a%N"C"<)1 z\|sHdR63sAJ=fmnmNGy6
2024-04-19 14:06:13 UTC	806	IN	Data Raw: be 8c 0b 55 89 49 1d 63 a0 f5 d9 46 9f 06 24 6f c4 9b bd 30 f3 07 f8 e7 d0 cb 32 27 20 c2 10 0a 55 bc f7 de ae d3 c0 1c 5e 1d 20 f4 40 73 0f a5 8c 73 3c b3 49 a7 79 a5 84 27 68 47 40 a0 86 13 45 d8 91 07 a2 7e b8 eb 5c 1f 55 93 43 02 34 8d 71 31 65 cf 98 46 c6 92 3d 1b b7 d3 32 ea f4 e9 35 36 67 21 cd 87 e2 c4 a4 f1 cc 7c 5a 14 4e 2c c6 5d a3 05 8f 71 b7 b0 e6 aa 46 9c 9e ea 09 3a 9a af 15 06 6f 01 94 54 37 d8 10 93 e3 2f ee 08 38 59 c4 ad f9 ee d3 33 b1 b6 de b2 53 36 06 11 43 59 60 ac 4a a0 68 3a 16 29 49 8e 92 34 ea e7 42 be d5 71 21 b3 3c a2 15 df 2a 85 65 e8 49 95 23 cd 1d de 32 d7 d3 b9 02 66 75 a0 f5 05 67 1a d5 85 a1 f5 2e 45 38 cb 3f e3 64 14 3b cb 76 77 df ff fb 65 c0 5b a7 22 d3 c8 b8 af b6 7c ef 8b 5d ef 8a 6c e9 b3 c6 bc 1a 35 06 43 ad d3 13 Data Ascii: UIcF$o02' U^ @ss<Iy'hG@E~\UC4q1eF=256g!\|ZN,]qF:oT7/8Y3S6CY`Jh:)I4Bq!<*eI#2fug.E8?d;vwe["\|]l5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49805	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1101	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2196 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:05:29 GMT Expires: Sat, 20 Apr 2024 11:05:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 10844 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 8c 08 00 00 57 45 42 50 56 50 38 4c 7f 08 00 00 2f 3f c0 0f 10 09 86 6d db 46 82 e3 be 27 ef bf 70 ae 3b 44 f4 7f 02 f4 a6 ab 64 e0 aa 84 13 28 b1 4d b3 f5 93 24 ed b9 50 d3 46 92 e3 ea ea 4f 00 96 3f cd 4f 14 d4 b4 6d 04 19 c4 f1 c7 f6 4e 37 1d 04 06 6d 23 39 ce f9 7a bf 7b 00 df ff 09 c0 2b 9d 1f 74 00 cb d7 7c d8 b3 9a 35 7c b9 bc a1 69 c9 22 6c 65 b0 99 0c ff 11 00 06 3e 45 76 dc ff 57 24 db 39 35 73 f9 5e 33 33 b3 33 66 b6 23 8a 5e ea 90 99 22 47 76 c4 b4 03 cb 19 33 33 33 33 33 b3 2f 43 77 95 b9 46 9d d9 d1 2f 7a 1b b0 8e fe 3a 49 ad a0 0d a5 ab 23 95 46 c7 9c 59 7a 30 2a 63 ef e0 f1 7b bf c8 3b f8 eb 6f 2c bd 05 54 76 55 99 77 60 3d c6 1d 98 71 0f 8f 12 c9 b1 6d ab 56 35 d7 3e f7 e2 2e c9 b8 5b 02 24 44 1e 04 40 8f b6 5b 2a b4 e1 bb de Data Ascii: RIFFWEBPVP8L/?mF'p;Dd(M$PFO?OmN7m#9z{+t\|5\|i"le>EvW$95s^333f#^"Gv33333/CwF/z:I#FYz0c{;o,TvUw`=qmV5>.[$D@[
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: dc ad ef 5c f6 7f 65 07 95 11 61 0c 72 d1 ed 36 1b de 65 7a ee 47 58 d9 2a f3 56 aa 2a 53 d8 83 9a 01 85 0a 08 35 4f 4f f3 e5 04 02 03 70 da 89 db 99 3c e8 f2 b1 b5 86 4d 54 72 25 47 c6 84 a5 71 64 e9 3c a9 dc 74 59 1e ff 35 2d a3 36 4f 2d 23 e4 1a a0 da b7 8a 02 78 a8 28 3d cd 73 01 3a 91 4e 8e 31 9b 2b 7c bc 85 cd a6 1f 77 b3 83 52 86 01 d8 7d 6d e4 5a 0b 93 c7 7d c3 ea 3e b4 59 64 27 04 95 9a a7 0a 3d 55 94 de 50 5e 28 c7 10 4c 67 1d ec 25 ff 7e 88 29 25 4d f8 d2 9c 70 26 e4 5c 0b 9d 37 bf db b2 0a 11 70 09 90 5e a1 e6 a9 a2 a0 8a 2e 80 df e3 ff 12 4d ec 61 5f 46 9f 70 d4 31 25 9d 7d 49 11 d9 63 94 70 09 c2 db bf c9 8a 42 a6 64 41 41 c0 1e a4 37 7a 7a 51 a8 41 a1 e5 36 4d 18 21 dd 29 69 64 ba fb d5 59 cb 08 07 75 b3 19 13 9a 08 40 4e 47 ed 83 b3 7f 6c Data Ascii: \ear6ezGXVS5OOp<MTr%Gqd<tY5-6O-#x(=s:N1+\|wR}mZ}>Yd'=UP^(Lg%~)%Mp&\7p^.Ma_Fp1%}IcpBdAA7zzQA6M!)idYu@NGl
2024-04-19 14:06:13 UTC	220	IN	Data Raw: 9f e1 4b c7 0b 76 5d 76 70 31 19 b9 cc d4 90 0a 40 24 a4 8a 8c 04 24 8b 28 00 cc 95 66 1c ac 4e 46 0e fd 86 18 a2 55 40 64 d4 c3 2a 44 02 c8 b0 2e d2 a1 7e 07 db 93 31 72 6a ce 12 62 11 00 88 dc a3 8b 1c 32 41 48 15 19 09 c4 cf 0d 5f 9b 1d 1c 4e c6 16 ba c4 4a 1a 01 91 31 78 7c f9 c8 48 0c 3e 12 23 bb 84 83 8f c9 70 ca 98 49 15 03 e0 ff 41 00 31 fc 84 00 22 23 21 73 a9 60 32 c7 1a 62 90 0c e1 3f 14 91 7b 14 88 1f 10 19 cd 29 83 b4 8c 13 23 55 24 a4 8a 56 01 d1 5a 4a 85 7f 68 24 26 75 a5 73 77 5b eb 5f 89 02 a0 3a cc 57 7b 10 43 e5 34 54 02 a0 92 76 45 66 6f 27 c3 41 d0 41 e1 e7 0e fe b1 c0 7f 76 f0 f8 9d 1f 4f 02 1c 44 1d 44 16 ee 50 07 3f f8 da 25 00 Data Ascii: Kv]vp1@$$(fNFU@d*D.~1rjb2AH_NJ1x\|H>#pIA1"#!s`2b?{)#U$VZJh$&usw[_:W{C4TvEfo'AAvODDP?%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49807	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1100	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 984 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:05:42 GMT Expires: Sat, 20 Apr 2024 12:05:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 7231 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	723	IN	Data Raw: 52 49 46 46 d0 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 88 03 00 00 2f 3f c0 0f 00 e7 04 a1 91 24 47 52 0e 7f c6 67 2a ce ff 43 70 d0 36 92 24 35 7f a6 87 60 ef ab d8 41 db 48 92 d4 fc 99 1e 82 bd af e2 f9 5f 07 0c 21 b8 e3 ce 36 10 00 14 80 e0 4e 70 27 ac 6c b3 12 56 b6 79 1f c0 1d 45 01 05 56 f6 ff 83 15 05 82 3b 8a f2 51 d9 26 28 ee 6c 13 94 fb 46 59 51 00 f6 ff 83 b0 b2 4d 00 d8 66 1b b0 01 77 0e 00 20 04 80 00 0a dc 37 95 00 e1 f6 fb b1 51 14 e5 fe fb a9 ec ff b7 62 73 7d 1e 07 ca ed 79 6c 53 b1 f1 ff ab c0 29 83 df 8f 52 b1 69 73 79 bd 84 10 82 12 de da 54 ce 9d 73 e7 7e c7 9d 7f 70 07 b4 6e 6d 4f db 58 df 30 33 33 33 33 33 33 33 cf 1c 3e c3 3c 6f 99 2b 47 76 ec 58 e6 fe db c8 ca 27 5f ce 55 44 ff 27 00 Data Ascii: RIFFWEBPVP8X??VP8L/?$GRg*Cp6$5`AH_!6Np'lVyEV;Q&(lFYQMfw 7Qbs}ylS)RisyTs~pnmOX03333333><o+GvX'_UD'
2024-04-19 14:06:13 UTC	261	IN	Data Raw: 24 47 77 a3 69 55 04 08 31 8e 67 5a d4 0d 44 ab 9a 1a dd 1c 50 ab 89 e8 81 44 5b b1 80 98 d7 a7 80 7c 40 44 ab 15 58 e5 53 22 4a 3a d0 38 4a ec b7 3d 74 24 44 f4 54 f2 a0 98 41 2b 14 c4 07 e2 1f 25 07 a0 56 d0 8c 02 cc f2 21 ed f7 91 2d b1 40 9b 15 fc fd f4 50 72 21 9f 7f cc ab bd 22 ab 9f 84 77 6c 7e 0e 76 f1 ee a0 a7 56 da d9 11 78 07 df 09 3e 38 9f 45 40 76 27 a6 fd 9f 1d d8 ec 77 fe b2 44 b5 ae 7e d8 15 5f 6c a9 76 d8 0e b7 d9 39 5e 87 fd ec 94 8d 3b 11 aa d8 f8 7f 0e d7 a2 9f 75 54 d3 29 2e 4e e2 98 f5 30 17 a8 6a 9b 97 df 5c d6 ca 9a e7 b9 44 95 db 64 e4 de d8 b5 78 ca 68 a2 b1 d3 96 ef 7d 18 aa 1a 2a df 27 03 95 64 79 96 26 ca 97 5d f8 7d 15 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 Data Ascii: $GwiU1gZDPD[\|@DXS"J:8J=t$DTA+%V!-@Pr!"wl~vVx>8E@v'wD~_lv9^;uT).N0j\Ddxh}'dy&]}EXIF"II1Pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49809	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1101	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2226 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:29:41 GMT Expires: Sat, 20 Apr 2024 12:29:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5792 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	722	IN	Data Raw: 52 49 46 46 aa 08 00 00 57 45 42 50 56 50 38 4c 9e 08 00 00 2f 3f c0 0f 00 4d 30 68 24 49 51 06 ee ee a1 cf bf e0 07 0d 11 fd 9f 00 fd cc ed 4a f2 ba e1 94 d8 b7 40 ba f1 9a 96 ca 58 3b 7a c2 db 73 c1 b8 6d 23 47 da f8 dc fe cb 4b 97 a3 b1 af c3 15 b0 35 b0 8d 24 c9 49 d7 5b 6f 69 81 0c 00 9b fc 03 c3 a2 d8 46 92 d4 68 d0 2e f9 47 b7 26 f0 5a 4b a3 ff 09 46 0f 0e 3a 00 00 d8 fe 5f f7 91 29 d3 86 cd 0c c0 06 1c 97 7c 28 3f 65 02 00 6c d8 be d4 db c3 4e 4c 02 60 0a 22 2a 71 7d 6c 6a b3 7d 3f 00 80 ee fe 7b 56 b5 59 6d 04 03 0f 25 f8 ff 0c c9 d2 3f ab 7b 7a 3c b3 b6 6d db b6 8d bb 6d 7b 6f b6 6d db b6 bd cf b6 cd 79 af bb 2b 97 33 d5 3d b7 77 fa 45 bc 5b e6 c4 cb e5 43 45 ad b7 df 8b 5e 9c 1e 26 32 76 4f 4f db 7b dc cd c5 89 b5 3c d9 e8 08 49 b7 b6 19 92 f4 Data Ascii: RIFFWEBPVP8L/?M0h$IQJ@X;zsm#GK5$I[oiFh.G&ZKF:_)\|(?elNL`"*q}lj}?{VYm%?{z<mm{omy+3=wE[CE^&2vOO{<I
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: bc 04 20 93 c2 4b 18 01 32 d4 ce b7 c2 66 62 d0 80 b9 0b 93 4c 9d 41 30 c6 f8 69 63 91 06 fa f1 40 12 70 c1 28 c4 fa 1a 09 2e 14 40 20 ce c8 ef aa f6 b5 69 ff 59 e7 6e 55 e4 e9 90 86 74 14 00 d5 2f 4d 92 41 06 5a 73 8e d6 16 94 48 c2 4d c9 04 60 04 60 86 66 e4 d9 fa 5e d5 ad 5f ce dd 65 ba a0 c1 f7 a1 00 10 99 ee 39 c8 b8 1c 19 aa 23 d1 31 12 08 2c c7 60 8c 26 61 84 4f 1c f8 02 44 81 b0 b8 2c cb c8 47 6b bb 8d 63 51 10 55 84 48 2f 01 01 65 e0 33 82 34 44 22 d5 2e 5c f4 76 61 9e bc 8c 17 35 c4 d5 e6 6d 35 5f 5a 79 75 2a 27 83 ee 19 30 c8 fa e8 99 32 c4 4a c0 70 82 be c1 15 cc c2 21 0e 2d 45 99 4a a9 1f 01 65 4c 7a 90 db 21 ac fd 75 f5 4e d4 cd fd 6d de 82 00 b8 b1 ea 35 1e 1c d9 66 67 92 99 62 10 f6 54 9e 2b 24 47 7d 01 01 b2 e1 0a 38 4d 0a 23 41 50 b9 80 Data Ascii: K2fbLA0ic@p(.@ iYnUt/MAZsHM``f^_e9#1,`&aOD,GkcQUH/e34D".\va5m5_Zyu*'02Jp!-EJeLz!uNm5fgbT+$G}8M#AP
2024-04-19 14:06:13 UTC	249	IN	Data Raw: c7 aa 5c 18 a3 f6 e4 2e f9 79 04 ad 07 a3 12 46 69 9d 92 da eb 93 02 00 9b 6c 05 a7 73 6a ef cd cf 13 88 f9 48 a9 ff ac d9 e1 f5 82 92 ba e4 eb e5 8e df ba 0e af fb 26 8f 62 6b 0c 00 f8 04 fb 6a 8f 98 14 34 38 01 85 0e 30 53 b8 6b fe c2 54 e9 f3 88 cf fb 94 b7 82 90 91 71 6c 2e 9b 2d 7f 31 6a 2c 8f 32 b6 29 c3 20 17 26 bd 24 80 ae b0 0d d8 32 bb 9d 37 6f 01 71 3b f8 7a cf 0a 66 c8 d2 92 b1 fc c5 f2 1e e5 bf 01 30 49 e5 bd dd 12 2e 93 c0 fa c5 f3 88 eb 16 da 4b 9d a6 b9 48 48 d7 8b e5 e5 ef f5 48 82 a1 38 89 b2 57 26 20 b6 2d e8 10 f7 55 d1 5e 6c 53 1e 34 da 48 8f f7 00 22 18 2c 82 d8 34 a9 46 8e ef 50 1a 6f e6 f6 6a 7b c8 34 65 19 87 c1 86 61 f2 95 b5 9c 2c 9e da a2 94 76 46 dd 6b aa 02 a8 2b 20 30 01 32 b3 64 d1 a4 42 a9 b6 48 74 eb 0a Data Ascii: \.yFilsjH&bkj480SkTql.-1j,2) &$27oq;zf0I.KHHH8W& -U^lS4H",4FPoj{4ea,vFk+ 02dBHt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49808	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1100	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1832 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:48:51 GMT Expires: Sat, 20 Apr 2024 11:48:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 8242 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	722	IN	Data Raw: 52 49 46 46 20 07 00 00 57 45 42 50 56 50 38 4c 14 07 00 00 2f 3f c0 0f 00 09 45 6d db 40 ca be cd f8 03 be 30 44 f4 7f 02 78 aa 06 92 ab 36 5c d0 66 cc 0b 16 6c 1b 49 52 54 87 0f d6 ea 2d 86 fc f3 bc 1c d8 36 92 a4 a8 74 d6 ea ac 0b 00 f3 8f 0f 1e 0d 45 6d 23 b9 49 3f f7 7a 21 b0 c7 e0 fa 9f ca c3 28 03 d0 33 60 bf 7f 66 e5 05 5c e0 5e 56 66 76 10 02 10 66 d6 64 0b b5 ce f8 01 c2 cf 7f ec 7a a8 01 00 33 49 12 3f 18 45 74 e5 ff 53 64 2b 33 b3 72 0d 77 77 77 77 78 01 22 32 e7 05 34 75 32 77 77 88 c9 c8 29 22 77 77 d7 eb ee b2 bb d3 c8 de 5b 33 37 24 fa bd 03 f5 af 7f 61 1d e1 9c 6c ab ab 70 49 b7 0a 6d f4 bc 01 72 ed ff 04 64 53 93 75 88 67 5b 8b 9e 1c d7 f3 00 b8 47 16 3a d9 4d e4 d8 b6 6d da d6 98 7b 3f eb db b6 ad 1a 30 b3 19 fa 67 ca 6c c4 0a 55 01 db Data Ascii: RIFF WEBPVP8L/?Em@0Dx6\flIRT-6tEm#I?z!(3`f\^Vfvfdz3I?EtSd+3rwwwwx"24u2ww)"ww[37$alpImrdSug[G:Mm{?0glU
2024-04-19 14:06:13 UTC	1110	IN	Data Raw: f0 a9 d1 5c a9 37 b8 fb 2c 60 14 50 d5 0d a3 98 3a 3f c9 ee 43 3c eb 4a 03 cc c4 ac b6 77 66 39 f4 c6 e0 af 3e 05 5f c5 49 f3 7d ee a9 b4 aa c0 d4 6b 14 7e ae 02 9a 58 3a 3e ce da 2d 9f 8d c5 9a 88 2c b5 69 66 0a 3d 68 41 ef f6 c4 75 3b bc 3b ff d6 2c 63 8e e1 44 f6 5e 92 8a 00 00 ab 3f 5a a5 90 08 25 c5 57 b6 47 1d cb 8e ad 6a 1c d6 74 e3 d7 2a 9b 1b b0 fe 63 f7 9c 3d c7 23 3b 76 1a 65 70 9f d1 9a 9d 8f 0c 78 41 d6 be 00 92 20 12 60 20 10 67 bb fb 74 72 61 e5 75 05 00 cb 2e 6c 7d b1 27 9c 7b 63 96 b9 43 03 b0 0c 07 df d1 04 b0 ab 21 de f3 ef 9a 83 09 aa 67 cc 3a 5e a2 75 75 27 ad 93 6f db 3d 98 65 42 34 80 16 e8 fb b4 97 40 1d 1e a9 38 52 b2 98 45 c7 d1 e7 93 6e e2 21 0b 65 27 1a 8c 1b f8 8b 32 8a 34 01 30 80 66 cf 82 49 d7 5d 43 b6 1e 7b 2f dc 9e 71 e9 Data Ascii: \7,`P:?C<Jwf9>_I}k~X:>-,if=hAu;;,cD^?Z%WGjt*c=#;vepxA ` gtrau.l}'{cC!g:^uu'o=eB4@8REn!e'240fI]C{/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49813	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1221	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:14 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 19 Apr 2024 14:06:14 GMT Date: Fri, 19 Apr 2024 14:06:14 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:14 UTC	727	IN	Data Raw: 35 37 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 57e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-19 14:06:14 UTC	686	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 76 61 72 20 73 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 2c 74 74 3d 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 63 70 3d 74 74 26 26 74 74 2e 63 72 65 61 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var s='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js',tt=w.trustedTypes,cp=tt&&tt.crea
2024-04-19 14:06:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49814	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1100	OUT	GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2620 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:09 GMT Expires: Sat, 20 Apr 2024 13:08:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 3485 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 34 0a 00 00 57 45 42 50 56 50 38 4c 28 0a 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 97 eb fd 2c 7f c4 3f 30 44 f4 7f 02 d8 a7 66 5b 36 68 34 03 e4 c3 1f 5a cb 5a 1a 3b c3 11 1a 1b 5b 68 2c cc b4 6d e3 b3 fc e1 ed 1a 97 90 50 d4 36 92 63 ed d5 e7 42 b9 c6 1f da 49 49 23 49 52 39 58 fe f8 b7 75 23 e1 f0 1d e9 7f 22 09 49 92 4f 00 c0 07 e1 20 42 00 40 14 00 a8 00 41 e0 09 82 0a 50 dd 1b b3 f7 fb d7 98 cb 05 60 d2 01 10 d9 91 b6 4d 91 6c 27 e7 9e cb cc cc cc cc d7 14 33 33 33 4b 2e 33 5b cc cc cc cc cc ac 83 97 99 99 51 d3 1d d1 9d 55 3d 67 56 f0 da 62 ca c8 68 a7 4c 59 ed 4c 4c 94 57 02 4b 1e 75 b4 a7 1d 30 7c 22 53 66 c6 ef 89 ec f6 26 4a b4 87 36 25 2d 62 56 22 47 0e 64 db a6 6d cd b9 0f be 6d db b6 ed 67 db 2f fb d1 8f 6c 1b 91 6d db b6 6d f3 d9 d6 Data Ascii: RIFF4WEBPVP8L(/?m9,?0Df[6h4ZZ;[h,mP6cBII#IR9Xu#"IO B@AP`Ml'333K.3[QU=gVbhLYLLWKu0\|"Sf&J6%-bV"Gdmmg/lmm
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: b0 8d 35 ab b3 58 71 6a 32 f7 fb 04 34 5c 62 4f 19 4f 25 23 63 b3 7a 58 01 af 38 ce b3 4f b0 42 15 16 2b ce cb e5 66 47 00 a3 ea 59 15 15 db 95 2c 33 45 cb 10 e0 39 bb 79 da 09 36 6c c0 62 c5 b1 1f b8 f5 49 80 1e ea 47 df c9 52 e6 7c ab 7b 55 1c 87 23 e8 4d 17 b9 f5 71 76 6b ce ca d5 99 70 9c 9d c1 27 af f1 34 97 cb af 01 08 2d 27 df c2 3c a7 6e 4f f4 13 5e be f1 12 b7 3e c6 ae cd 59 a5 3a 13 8a b3 d2 f9 d4 75 9e 26 5c 61 0d 00 d4 fd 38 18 04 93 25 63 20 68 9b 2a 56 16 23 7e be e9 12 b7 3c ce 6e cd 58 a5 0a 9d f5 c9 eb 3c 03 5c 7e 35 00 10 7b 31 11 a6 d4 76 95 44 db 40 1f 55 e4 e4 9b 2f 73 eb 6d ec 5c 8f cf e6 6b ee 6d fe 73 b9 95 90 cd 96 93 ef ca a6 cc b3 62 3f 8a 61 fe 7d e0 cd f7 b8 ed 36 76 ac c7 67 b3 9a 7f 97 a7 80 cb 2d 03 72 22 10 cc b7 29 24 cf Data Ascii: 5Xqj24\bOO%#czX8OB+fGY,3E9y6lbIGR\|{U#Mqvkp'4-'<nO^>Y:u&\a8%c h*V#~<nX<\~5{1vD@U/sm\kmsb?a}6vg-r")$
2024-04-19 14:06:14 UTC	643	IN	Data Raw: c0 9f c7 80 5d c0 6b ad 90 ae 3f e2 81 0b fd e8 12 bf 68 5c f1 06 c9 7a 2f e4 c6 1f 72 78 74 86 56 74 c7 3e f5 7e 23 6e dd 6c b0 af 15 d1 e2 34 8d 6b c0 a8 35 df 6a 08 98 67 c9 66 b4 63 65 5f 7f 53 66 f9 4a da a3 5b d6 35 86 9e bf fa f0 d3 d2 8b f5 fa 91 64 9c d0 85 25 c8 68 8e 88 37 bb b1 50 a1 13 dd b8 f3 c0 db c7 39 a1 05 f4 d3 ac 0e e9 51 4a 2f d0 42 da 7d f8 e1 67 3f 4d cd 83 13 9f 75 b4 be d8 4e e0 24 75 7d 43 f0 5c 32 63 36 46 bb 5a fe f0 db 02 a7 a8 f8 af f3 da 79 04 90 24 96 04 73 00 73 20 96 50 f0 3e 89 4b 0d 79 22 49 ba 56 bf 87 6e c0 8d d3 20 49 7a 9a d2 63 dd 8a 9b 39 2d 1f 39 5c 2e 2c 4b 63 c4 d1 65 6c 95 68 37 44 49 20 25 6d 56 dd f7 3e 6c 78 86 64 97 38 6d 6b 8f 1d 6e d2 fe 97 d2 0b 54 79 97 f0 08 ad ec eb 94 8f 32 af a6 f8 10 58 a4 25 d7 Data Ascii: ]k?h\z/rxtVt>~#nl4k5jgfce_SfJ[5d%h7P9QJ/B}g?MuN$u}C\2c6FZy$ss P>Ky"IVn Izc9-9\.,Kcelh7DI %mV>lxd8mknTy2X%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49815	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1100	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1494 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:59:25 GMT Expires: Sat, 20 Apr 2024 12:59:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 4009 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 ce 05 00 00 57 45 42 50 56 50 38 4c c1 05 00 00 2f 3f c0 0f 00 09 45 6d db 40 4a f7 cc f8 23 be 28 44 f4 7f 02 38 8a 48 94 1e 2a 0e 49 23 a0 3e e6 05 a3 36 92 1c 59 fb ca f9 00 2c 7f 9a a7 e5 60 b4 6d db a4 f1 d0 e0 d0 14 02 41 88 9e e0 ff 39 13 fa 3f 01 b6 78 cf 05 40 80 cb 3e 73 7c 00 80 78 1d 0e e0 82 78 32 19 00 08 c8 64 e7 07 05 80 86 b7 88 8e fc 7f 8a 6d a5 7b 8e 3e c7 dd 5d 72 52 77 77 77 0b 5f 84 86 ee 64 4e e8 ee 99 43 ea ee ee 0e d7 fd 74 a3 67 e4 e1 d1 2f 62 07 a7 fe e8 95 0c cb 6e 0d 3a 45 4a 7c 6b b2 b3 83 5b 4f 4e d5 7f 01 14 d9 54 67 bd 02 fc 5a ce 0e 6e bd 65 9c 5d 90 91 c8 c1 b6 ed d8 9b eb 79 df d8 b6 6d 8f d9 8d cd 9c 9c d5 a9 ed cd 76 77 b7 a3 dd cd 36 a6 d8 f8 1e d9 b5 b6 1d 7b 74 dd ef ff bf ff 17 db 4e ce ac 43 67 d4 c5 Data Ascii: RIFFWEBPVP8L/?Em@J#(D8H*I#>6Y,`mA9?x@>s\|xx2dm{>]rRwww_dNCtg/bn:EJ\|k[ONTgZne]ymvw6{tNCg
2024-04-19 14:06:14 UTC	772	IN	Data Raw: 3b bd 3e d9 01 17 8c d7 c1 71 d1 ea 7b 52 db 34 1f 71 c2 96 03 c4 66 c0 c0 08 ef ff 59 86 af b8 98 5b 24 3b 1c a3 3c 7d ad f6 d9 6f 01 2b d6 e7 9f e5 3a 92 01 05 6c 8c 44 c1 51 24 ed 48 61 18 50 2e 28 77 7a fb 6a cb ac 8e d4 67 d2 d5 98 27 91 39 c3 3a d4 54 29 45 cc 3c 50 c1 6b c9 0d 79 43 4c 4c 3c 40 f3 32 7e 5c 77 cd 9c 31 00 ab 1e 78 d9 cc db 08 64 92 0a 73 ca 21 ed 90 46 d2 e8 bf b4 6b 94 e0 42 08 19 32 4f ca 42 cc a4 14 82 51 2c 8f 0d 01 c0 2c 61 f9 56 de 80 b9 c2 86 a5 fa 6e 2f dd e3 a5 02 40 ba c6 d6 f7 4f 0a 06 17 33 9f 9e bd 20 c1 0b 32 bf 19 18 8c 3c cd d5 1d b6 9e c1 03 af 02 56 28 d3 bc e5 0d 85 e9 38 50 21 b6 7d 7d 59 55 16 04 fa ba 53 ba 16 e0 52 a2 31 d0 e9 05 2b c7 c6 30 f1 0b 33 27 f6 7a 79 fd 73 bd a6 b5 4a e6 5e fa 2f 4c be 78 e1 01 ee Data Ascii: ;>q{R4qfY[$;<}o+:lDQ$HaP.(wzjg'9:T)E<PkyCLL<@2~\w1xds!FkB2OBQ,,aVn/@O3 2<V(8P!}}YUSR1+03'zysJ^/Lx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49816	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1100	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1670 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:53:00 GMT Expires: Sat, 20 Apr 2024 11:53:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 7994 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 7e 06 00 00 57 45 42 50 56 50 38 4c 71 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 31 ea f8 5d 8f 3f e1 45 21 a2 ff 13 80 33 17 18 80 30 76 0d c4 98 7c 80 85 eb 48 b6 95 a8 71 d7 2f 97 fc a3 22 04 8a 18 d8 8d 41 49 23 49 52 c1 cd a2 95 30 fe 15 ee 3d 80 51 24 49 8a 73 a9 60 19 8f ff d7 ff 09 30 1f fe 54 ee f8 c8 c9 d1 c6 0f 40 0a d0 6a 9b 50 02 f5 a3 17 7b 89 d4 1b b9 1c 4a 97 24 0f 0b 78 78 99 f6 02 8f 3c 00 de 7c f8 2d a2 23 ff bf e2 c8 e9 d7 c3 cc 68 76 c4 ec 88 f1 02 be 04 3b f2 0d 7c 03 47 2e c7 8e 1d 31 33 33 33 33 ce 88 07 5a ea d7 55 d6 13 cc 38 c4 9f 49 d1 a6 ff 7a d5 06 45 1b 8e 23 97 aa 5e d0 97 50 29 db 1b 6c 39 fb 1f c0 a9 4a d9 3b c1 46 74 12 33 3b df dc 77 58 07 72 68 db 36 b5 67 9d 87 ff 8f 6d 9b 95 ad ca 36 2b 3b 55 52 da b6 6d db 49 Data Ascii: RIFF~WEBPVP8Lq/?Em1]?E!30v\|Hq/"AI#IR0=Q$Is`0T@jP{J$xx<\|-#hv;\|G.13333ZU8IzE#^P)l9J;Ft3;wXrh6gm6+;URmI
2024-04-19 14:06:14 UTC	948	IN	Data Raw: 08 df a4 b5 05 f2 a2 96 12 12 b7 a1 71 cb 03 d0 05 4e 50 9d 75 cb 74 07 76 6f 9b 7b b5 54 67 1e 95 c7 60 b1 91 99 76 f8 41 db 88 d9 6a 26 45 04 03 81 1a bc a3 96 90 66 89 5e 48 00 52 ec 0b fd 78 52 58 1f 08 6c 42 19 0e e9 91 43 4b c4 11 eb 86 e3 46 69 5b 39 9c 38 77 7c 01 22 1b 45 cd 3a 54 ad 45 0c cd 60 0d 87 f0 18 12 fc f1 c4 c2 62 dc 9f 9c f0 a7 ba 90 84 d0 c0 6a 58 04 46 5e 40 eb 4e 0e d4 be c2 2a 83 9d 07 90 fb ef 7a a0 34 23 1b 15 d7 98 58 1b f6 25 ba 84 21 fa b6 e4 84 4b 04 62 63 b5 01 2c 10 28 b0 32 20 0f 9d 15 29 dd f9 55 92 c5 58 49 00 6f 88 f8 1d 48 3d 69 26 c5 b6 ee 2b 23 16 53 46 83 8a ad c4 0c 0b 46 ae e0 08 16 60 18 90 25 f8 21 fa 5b fb f4 cb 2e c9 8b 78 5d 03 9b 14 7f a3 61 28 84 41 08 53 a9 4e db 75 52 67 3a 09 5f cc 80 40 cb 5a e7 0d 3e Data Ascii: qNPutvo{Tg`vAj&Ef^HRxRXlBCKFi[98w\|"E:TE`bjXF^@N*z4#X%!Kbc,(2 )UXIoH=i&+#SFF`%![.x]a(ASNuRg:_@Z>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49821	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1280	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:14 UTC	4331	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 35 37 32 37 38 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535572785",null,null,null,null,
2024-04-19 14:06:14 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:14 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:14 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 35 37 34 36 34 36 22 5d 0d 0a Data Ascii: 1a["900000","1713535574646"]
2024-04-19 14:06:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49822	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	530	OUT	GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13388 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 44 34 00 00 57 45 42 50 56 50 38 20 38 34 00 00 d0 a2 00 9d 01 2a 28 01 28 01 3e 45 20 8d 44 a2 a2 21 12 1a 0d a4 28 04 44 b3 b7 70 b9 f8 88 57 cd 05 bd bb c5 cf 87 31 56 eb a7 f2 7f 74 de ec fd 40 79 80 7e 9f fe 9c 75 80 fe 67 e8 03 f9 17 f6 7f d8 cf 64 df f5 5f e9 3d c4 7e b3 7f 8e f7 00 fe 4d fe 1b ac 03 f5 77 d8 17 f9 97 f7 af 55 9f f6 ff b8 5f 04 9f b7 3f b7 ff 00 ff b2 5f fb 7a c0 3a 8f fa 35 fc fb f1 6b cc a7 e5 5f ce ff 19 3f bb ff d5 f5 7f f1 1f 92 7e 9d fd 97 f5 c3 fb 6f fc 5f f4 bf 0d 5f c3 f8 49 e5 ff f0 bf 99 7e e6 ff 0b fa 83 f4 af ec bf df ff bc ff 65 ff e1 fe af ef 37 ef bf e0 ff 28 bc e1 f8 27 fb 9f e5 17 f6 bf 90 2f c7 ff 8b ff 56 fe cb fb 0d fd c3 f6 bf dc 97 fa 1e d9 9d 3f fd 2f f8 0f 50 5f 4c be 55 fd eb fb 6f f9 6f f7 5f Data Ascii: RIFFD4WEBPVP8 84*((>E D!(DpW1Vt@y~ugd_=~MwU_?_z:5k_?~o__I~e7('/V?/P_LUoo_
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 83 1a 6f f6 df 24 a0 3b 6d 67 23 02 5f ed be 49 38 a6 39 0e 2a 92 ed 60 bd 74 35 f1 1f ff f4 42 f2 76 fb 08 b6 c6 ed 2d fd 38 48 93 f1 0d 93 7a 9c 2e 59 f1 37 e3 fe 3d 94 ba 20 b9 9c 2b 77 17 2a 16 d1 0e 14 c5 8f 4e c1 57 73 bc 0a 91 c0 39 f9 6b 04 4f 32 71 a3 14 c5 1f d8 a7 70 7c 9d 4b da f2 66 0d db 07 b2 0d fb f2 f6 7d a6 1e 1a df 5c cf b0 c4 d2 ee 74 7a bf 69 16 e4 04 c6 fb 71 da 7c 0b f5 61 a6 30 60 2f 4c 64 8e 76 89 a4 58 be a4 20 53 d9 d0 64 8b 92 c7 16 fa af 20 31 22 5d a4 39 a6 f0 1d ed 8e f7 43 4d 55 b4 3d 64 41 27 88 09 e7 cd 70 46 56 f3 8f 50 5a 3d 04 b2 70 8d 69 38 1e 22 2b ce 08 66 6c 58 3b 1b 0d 75 d5 b6 60 63 37 ee 85 b3 c7 1e 5c 44 1d 2f bd 37 ed 8f 30 3c 85 b1 9e 30 71 7f 05 fd 1f a0 c4 83 93 f6 57 ba 9d 5b 8f 1b d6 d8 4f d1 a4 74 18 af Data Ascii: o$;mg#_I89`t5Bv-8Hz.Y7= +wNWs9kO2qp\|Kf}\tziq\|a0`/LdvX Sd 1"]9CMU=dA'pFVPZ=pi8"+flX;u`c7\D/70<0qW[Ot
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 5f be 57 8b 7b df e4 0f b8 a0 df ef f4 f9 08 80 80 1d 20 84 21 b6 d0 40 25 d5 0f 8f 98 3e 63 77 05 49 70 c1 f1 84 07 7a 32 b0 06 dd 6e 04 35 b4 b9 ee fa 44 c2 91 ca 00 b9 2f d1 b7 5d 91 06 15 68 09 73 fc e5 11 63 b7 5d 0f 17 6f 50 08 a6 05 e3 16 36 56 fb dd 73 02 9c 23 c4 3c f3 a7 5a 64 17 c8 33 6c 87 72 bf d2 2f 29 1a 7c 7c 76 de 54 1c af 7f 8a a0 ea c2 bc dc c2 8f 62 aa f3 3b a6 96 4c 44 57 1f 2d 06 b8 8d 41 74 6a 8d 26 ff 51 d1 20 11 e7 af 6e 58 9a 41 07 83 1b 8e 3c f0 38 4c b5 33 b7 07 8e 6d be 0c 49 72 b6 1d cd 95 85 1f e9 82 e0 91 25 11 77 c1 fc 43 93 ad f4 22 82 91 67 95 06 f3 d3 4f 1c 18 a3 94 65 d8 cb a6 ab 97 cb b2 9b ef 31 ca 51 44 8b 4e 4f 60 d1 e1 89 33 33 17 e6 0b 6e a9 b3 39 89 38 a9 a8 e8 aa 24 dd 52 20 37 0a 6d 90 ce f4 39 17 81 be b4 9f Data Ascii: _W{ !@%>cwIpz2n5D/]hsc]oP6Vs#<Zd3lr/)\|\|vTb;LDW-Atj&Q nXA<8L3mIr%wC"gOe1QDNO`33n98$R 7m9
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 86 91 53 a7 44 66 f2 ad a1 df 18 9b 67 6c 39 5d e4 36 93 93 db c6 bf 3b 8e ac 0e 7c 74 32 ec 39 c6 2d ea 9a ee 28 fd 3d f9 cb d5 86 b3 71 c6 1b f6 42 ad ac bc 08 18 48 a0 3f 2c 61 4a 09 f8 78 6d c9 7a 19 2b 7c 9d 02 64 dc a5 de 92 cd 64 f0 87 4f 5a 49 e8 ea 1c f3 75 94 ea b3 64 cc 7e 74 65 0b 73 be 8c cb ba 6e 5f 61 57 cf 51 39 f3 b8 3a 29 bd d5 25 2e 59 8b 79 a1 19 0c 68 5e 98 a0 fe 5b 32 ff 64 21 0a 1b 1b a9 a2 f3 7d 23 6c 11 6c fd a6 e6 22 81 f9 e2 1d 4f e8 b6 11 2b 76 6d 05 66 11 6c 9c aa fb f1 80 e6 85 84 48 a7 ef be f7 75 01 f6 ed 7d 75 ff 55 a6 1c 34 de 3e 1e 87 1a f2 23 3f ac 3c 85 a3 33 a1 3f 6b 09 b1 64 41 82 e1 db be 8d 15 23 cb 99 47 19 4a 49 5f e1 06 ed ac 4a 40 7a ef ea 75 6f c8 ea f4 23 40 8c 13 fe df 46 f7 fa 2f 60 f2 b3 41 05 1e 00 84 40 Data Ascii: SDfgl9]6;\|t29-(=qBH?,aJxmz+\|ddOZIud~tesn_aWQ9:)%.Yyh^[2d!}#ll"O+vmflHu}uU4>#?<3?kdA#GJI_J@zuo#@F/`A@
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: f5 0f 7c 8e 3a 96 af a7 b8 9d e5 77 c8 c0 95 79 d4 41 4a f2 c3 b4 ad 7a 88 55 61 92 c6 70 97 4e f5 4a ed ff 43 70 fa 50 cb 41 02 42 2b d6 02 41 1b 58 61 9e e2 23 f8 56 20 40 8f 94 bc 56 30 7f 44 50 4a d5 7e be 18 3b 6b ba 94 17 92 73 d6 62 c0 d7 84 e6 1c 37 ab 72 ba e4 90 fa 17 22 f1 97 60 9c f9 f7 9f ee aa 3e ac 5a 92 26 0b f3 e9 43 85 93 6b 8a 81 47 50 2a 86 d4 75 a6 36 fb eb 75 97 c2 de 85 22 ee 8a ac f8 57 49 d1 47 16 85 ab be 7e 79 d2 97 94 4d 0b 1d d8 1d eb 0e 36 54 85 6b d5 46 03 cc 14 24 05 08 9a 0a 1c e6 65 c8 d5 26 c0 11 c7 a5 27 66 c0 57 96 27 d3 87 50 df a1 2f f7 e6 04 9b 7f 7a 24 5d b6 61 fc bf 8e f8 53 f3 67 cf e4 e6 f8 45 4f 47 70 77 dd ed 90 1b f0 2f 52 99 c7 8d 68 cf 5d a3 28 e3 8f f8 af 0f e0 af f4 be 44 94 3f 67 c8 d2 8b d3 24 dd 22 71 Data Ascii: \|:wyAJzUapNJCpPAB+AXa#V @V0DPJ~;ksb7r"`>Z&CkGP*u6u"WIG~yM6TkF$e&'fW'P/z$]aSgEOGpw/Rh](D?g$"q
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: dc 31 c1 f7 1b 4b 1e 78 38 60 f6 24 86 ad ef c5 be 4b ea f9 1d 92 22 14 d5 4f f2 66 c5 a2 bd 30 69 9e aa 06 c3 04 ca 1a 91 d2 8e e1 25 a1 28 28 3a 5b 27 fd 0f 79 3d 14 57 83 41 5b 2a 64 e8 71 ee 09 3c f7 6f d8 d1 30 5b f2 dc 04 32 31 84 0b f5 b3 65 b7 c7 2b ff 13 34 ae a0 e9 3f b2 1a b7 a6 de e8 2e 56 53 34 9f 1e c6 78 9f a1 e0 d2 8b d1 fa 82 ce 8d 37 9d eb 2b 03 86 f6 a1 ff 26 3c 5d ec 25 4b 65 99 41 cd cc e0 71 93 92 3e e0 66 ec 53 98 b9 62 3e 58 b2 13 2e d7 95 f3 a9 9a c6 42 06 c9 df 85 ce f7 68 46 4f 11 26 78 4e 73 fe 44 51 55 5a 5b 82 2c a1 17 95 4a 55 e2 d4 4b 00 10 ea e1 a3 4e d7 fe 93 e5 36 6c 76 72 78 a6 98 bf 2c cb 10 56 f8 9c 6a 06 1a b8 11 83 95 73 0d da d7 e9 6d b7 70 3e b4 f2 cc 85 45 c4 19 cd 79 a6 d2 d2 63 e6 b7 5b d0 f1 a1 da fc e5 1a f7 Data Ascii: 1Kx8`$K"Of0i%((:['y=WA[*dq<o0[21e+4?.VS4x7+&<]%KeAq>fSb>X.BhFO&xNsDQUZ[,JUKN6lvrx,Vjsmp>Eyc[
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: fb 67 ce e7 d3 63 db 7e 16 0c 13 bf 4f c4 f1 9e 2b fd 7b 80 b3 39 c1 c2 e8 e8 32 58 f6 de c3 1d ba 32 f6 90 7d 14 26 a1 7b b5 b9 4a 49 97 b1 f8 f6 51 d9 52 e4 30 a2 6a 58 fc 9b e2 74 ff 40 a8 95 3f cb 84 a2 8a 56 70 d7 82 a9 36 b6 f0 45 15 7c ed 86 15 d1 7f bb e0 92 bd 30 11 48 cf e3 64 66 8b 86 df 80 bd 35 f0 6e b5 bc 08 d3 3c 0d 4e bd f7 e2 9d c9 b9 ef f6 fe 64 7c 52 22 4a 68 3d be 61 5d 56 0f d0 d0 b8 c3 0a 56 a9 61 ba cb 45 49 a8 1e 4d b2 f4 42 70 df a3 47 0b 2a d6 a7 e7 88 76 82 bc 20 56 2c 0b d4 b2 82 43 9d 56 e7 35 c0 a8 60 89 20 1b 4c 1c 0d 96 b2 ae 26 66 fb e9 d8 e7 49 ba 55 14 53 b2 c8 d2 46 c3 aa 9d 97 95 b2 c8 9e 52 b9 f1 af 4b 15 23 b3 9f 46 59 40 ef 72 fc 8e c2 ad 6e 71 68 66 bd bc 20 72 58 93 99 52 be 48 93 4b f8 d5 3b f3 2f f2 68 1b f5 60 Data Ascii: gc~O+{92X2}&{JIQR0jXt@?Vp6E\|0Hdf5n<Nd\|R"Jh=a]VVaEIMBpG*v V,CV5` L&fIUSFRK#FY@rnqhf rXRHK;/h`
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: a0 22 c3 51 6d e0 1d 59 92 c4 09 27 0b 60 03 b8 bc fc e0 a5 3f 20 0e 19 f3 74 55 08 ed 1f 7f 9d 8a e5 c8 11 ef d5 e9 41 b5 7b a5 49 1c 4b 84 63 2f 90 b5 85 6a 01 ec 68 a7 99 d9 9c 72 3f d8 3f f6 07 ea 48 7f 5d 9a 25 f9 12 0f dd ab a5 4e 14 da e3 be 54 02 34 e5 66 54 e2 65 e4 eb 00 c8 7e e9 d8 da 93 53 fb f3 6d ab 1c 6a 73 16 3a 7f 2b 22 e5 39 f9 21 8e 4c b4 87 2b c5 34 67 0e 28 6f 12 02 32 62 28 05 b9 c5 a4 83 a1 40 29 e3 04 24 2e 36 c7 79 36 86 65 66 2f 35 58 e1 94 bc 65 d5 e4 44 53 b6 ea c3 a6 df 22 2e 71 d8 53 8b cd e9 f8 7f 33 75 60 20 5e 5e 7d 3b 5b 7f 83 09 31 bf f0 ce 65 6d 10 54 2b dd 7f 13 ef 88 37 6c c8 06 7b b8 83 63 47 6e 08 76 a7 22 c9 34 97 07 cc c7 7e ef f6 f0 71 a5 2f 47 7e 80 df 59 7b 9b 31 8e dd 31 92 2c d4 cf b5 76 71 de 08 2c 3e a0 53 Data Ascii: "QmY'`? tUA{IKc/jhr??H]%NT4fTe~Smjs:+"9!L+4g(o2b(@)$.6y6ef/5XeDS".qS3u` ^^};[1emT+7l{cGnv"4~q/G~Y{11,vq,>S
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 31 5f 00 d8 9c 17 42 c5 c4 b2 09 0b 24 17 8f c5 ac c4 e2 99 29 fd 12 7e 92 ce 09 1e c6 44 4b 74 c9 fd 40 3c 69 bd c8 22 1c 2f 05 9c 3a b8 e7 59 ef 4d 24 d0 e6 a5 6f 72 5b ac 7b a8 bb 64 af e4 3f c8 f6 08 f5 17 90 61 92 58 73 30 8e c0 4f 04 9c 9e bc f0 d0 52 a9 e3 d7 92 7e fd f0 c3 b6 a2 98 29 77 49 0f 79 52 a4 35 bc 25 14 e4 a2 a7 fe 89 03 d3 68 69 e8 f9 19 26 a2 26 6a 59 cc 4a a5 af ce 72 e5 cd 84 cb ff 3a be 51 2a b9 2d 02 29 2d 54 1a 72 86 f4 04 2c 12 1a 79 0c c9 c1 1e 33 21 4c 77 0e 4a f2 dd 81 34 e7 d1 6d ae c1 20 73 16 a6 dd ca 91 5f 21 c6 98 77 6e 76 1e 59 75 3f c4 e1 fd e0 03 54 c2 7c 8a fe 96 92 68 70 1e e8 5c 65 0e 25 e2 c5 fd 2d 89 ea c9 e5 89 c0 35 a6 26 c6 b6 b7 e6 d6 6e ac 05 24 1c 51 81 05 9a c9 d8 ab 25 4a 7d 9f 56 a6 6a ab ce 89 20 2e c7 Data Ascii: 1_B$)~DKt@<i"/:YM$or[{d?aXs0OR~)wIyR5%hi&&jYJr:Q*-)-Tr,y3!LwJ4m s_!wnvYu?T\|hp\e%-5&n$Q%J}Vj .
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: e5 38 99 89 88 73 80 4f c6 fb 8a 13 00 37 f7 0a 91 9b b3 ca e8 05 a3 ef dd dd ad cc 0a 12 73 14 65 a5 51 f5 5b 1b bf 26 97 61 88 b6 72 8f 3f a2 e7 38 1d 65 e4 17 35 86 91 67 50 ba 3a 4b 50 92 b8 c6 ac 41 0e 1e a4 c8 24 47 91 0e cb a2 e0 43 28 83 f7 dc 4d 56 e5 5a a2 94 96 c3 93 e6 e0 1c 37 4d d0 bc 04 9f e6 6d 0d 7d e0 aa b1 a3 70 31 dd 3e 21 d1 72 9c 2d 3a 77 a4 5b c7 7b 40 86 13 da 07 55 cd b7 d8 eb 6f e8 f4 dd e9 7a bb 81 9b ae 3e bc a7 37 24 5a 5e 51 3b f0 69 78 bd 23 58 25 57 33 90 77 e9 37 9e e8 a1 93 d0 89 a7 21 1e 71 de 8e 54 25 33 97 d5 d2 8c c7 e8 ff 3c 9d 1c 3a 4e f3 15 18 50 e8 02 9b b7 c1 10 86 ae 00 5b 51 f6 9f 8d 6a 9e c4 a4 dc df 5f 2b c8 2e e9 9f 65 6d 01 bd eb db 4c 65 8e 9c a1 19 c1 56 cb de a8 70 f7 ac 18 21 1b d1 99 53 af 79 10 37 9f Data Ascii: 8sO7seQ[&ar?8e5gP:KPA$GC(MVZ7Mm}p1>!r-:w[{@Uoz>7$Z^Q;ix#X%W3w7!qT%3<:NP[Qj_+.emLeVp!Sy7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49824	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	529	OUT	GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33456 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 a8 82 00 00 57 45 42 50 56 50 38 4c 9b 82 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 74 72 cd 53 1e f7 e4 1f 70 f7 f4 5e 08 11 fd 9f 00 db ee 2e db bd 3b b9 bb 6d bb bb 1f b7 bd f2 ca 93 bf ba 2c b5 d5 5e 3c ed b6 8f 23 4a 2a a9 85 3d b9 db fb 3d b5 7f 6d db 6c 26 4c cf f3 08 6a 75 41 02 3c 24 11 49 0a 40 1f 43 14 9b d1 71 1c cd 90 14 b4 d0 ad 3a ea 50 55 92 f0 3d 3e 24 a5 04 64 51 75 64 62 29 01 4c 07 49 18 d3 7a ba 93 40 36 46 55 f5 2d 69 0a 59 a9 ea f2 62 f0 3d 02 d8 92 c8 2f 45 04 a9 a2 d6 fa 90 c2 e6 42 d2 5f 76 c6 04 91 94 00 49 3e aa 22 25 7c 47 07 e2 1f 24 71 48 30 76 06 70 1d 23 d2 98 77 ba 15 08 80 a7 31 08 d2 06 50 74 de f7 92 a4 1d 21 dd fa 09 a2 73 ef 0f 48 92 f3 65 87 02 92 44 4b 28 40 02 49 b2 ef d5 77 82 ad 4b d2 b5 39 42 ce f3 bd Data Ascii: RIFFWEBPVP8L/IM@lHtrSp^.;m,^<#J*==ml&LjuA<$I@Cq:PU=>$dQudb)LIz@6FU-iYb=/EB_vI>"%\|G$qH0vp#w1Pt!sHeDK(@IwK9B
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 97 5b f8 5a 3b 0b 04 1e d1 d0 9c 36 a7 63 fd 00 70 bf 10 ec 3c 77 0a 02 8f 80 d6 58 3c 8c 71 06 70 6e a1 87 1e da 46 df ea 21 64 92 49 26 05 69 e7 81 70 19 00 e8 18 03 80 de 42 8b 75 8e be da ba ea 5a 00 00 5c d2 f9 6a 74 6c ac e3 1c 02 de 97 cf e5 6d 79 5b ab 3d 6c 3e 3b 3b a1 39 0d 97 26 00 86 4b 00 1a 7c 7d 89 f3 7c 71 cb e7 7a dc 37 00 04 4e 4e 00 02 3b c0 04 7c 0e 2c 9e 01 a4 cf d2 8d 74 2b 3d 0a d6 90 40 a4 90 90 e3 bf 76 d9 7a 74 0a 70 f9 e8 f3 5f 1f 11 53 c4 14 31 45 4c d9 f4 cf 94 4d 11 93 7d 3c 01 2c b1 2c 00 68 f0 eb d1 4c 6c 1e 60 a7 09 b0 c4 12 04 d0 5c 03 18 36 6c 58 b7 31 eb d6 ad 0f 00 03 10 c0 e7 3e 8e 3f 19 43 b7 6a cd 9a 6d 0c 60 d5 61 bb 03 f6 0b 4c 00 9c 01 e7 c4 7f 5c 6a 26 00 c0 8f 4b e5 e4 9c 50 8e 00 4c 07 18 0e e3 61 3f 40 7d 02 Data Ascii: [Z;6cp<wX<qpnF!dI&ipBuZ\jtlmy[=l>;;9&K\|}\|qz7NN;\|,t+=@vztp_S1ELM}<,,hLl`\6lX1>?Cjm`aL\j&KPLa?@}
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: b6 25 49 42 92 f3 b4 56 9d ff 8c 74 18 3a 85 ba d6 77 16 d3 92 24 c9 92 14 a9 45 71 5e 8e ce 27 ec 33 3d 26 80 ce b6 6d 6a e3 ea 1d 90 21 b6 cc 14 66 66 a6 3e 39 f4 07 4f 8b fd e9 c3 cc cc 6c 7b 49 66 ad d9 82 29 64 cd ee 64 e5 3e 22 26 e0 ff eb ff a1 0e 28 96 4a 77 42 85 74 a9 53 02 25 e9 4a 27 25 2a 75 4a 4a 77 91 e0 2e a4 53 81 4a 95 c2 51 4c 0a a9 54 2a 44 a9 22 00 01 09 00 ca 16 83 25 80 24 50 2a d5 40 a7 04 ba 98 a2 fb 54 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d a8 54 29 95 4a 17 4b a5 bb 90 02 fa 44 4a 1d a8 54 ba 13 aa 14 a2 a4 44 1d 25 92 44 85 54 aa 40 a7 a8 54 54 50 a9 53 28 29 a5 4e a5 22 91 4a a5 4e a1 54 71 c1 77 01 25 2a 95 4a d5 38 8d 19 e9 8a f5 e6 74 a4 d8 60 b5 53 8d 84 ac 0b 3a 3a aa 91 b9 05 41 e5 dc c2 a6 52 54 ab 18 29 aa 29 57 77 Data Ascii: %IBVt:w$Eq^'3=&mj!ff>9Ol{If)dd>"&(JwBtS%J'%uJJw.SJQLTD"%$P@TTDTDT)JKDJTD%DT@TTPS()N"JNTqw%*J8t`S::ART))Ww
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 21 04 44 62 15 0a 83 58 a0 58 96 50 21 70 a9 04 a8 14 c5 42 92 65 21 87 42 55 e3 0d d8 bd 94 69 09 dc 52 c6 64 ca 0b 69 74 4d a6 b3 9d 0e 4d 27 94 53 b6 29 55 ec 96 ed 76 ea 86 2b ec 74 ca 54 d0 75 04 ad 10 da e7 dc a8 52 8d 72 14 6f 48 e9 ea 3e d3 a5 bb dc 45 70 4b 0a c1 75 4a 8a 52 d4 c5 1a e9 1a 52 6e 47 8a ae 84 d6 82 94 3a d5 2d 57 13 46 e3 c8 e9 c8 94 4a d7 29 33 a5 a4 4e 39 37 4a ba 16 bc 82 14 4a 5a ab 6e 94 64 64 de a6 9a 8c 9c 73 50 2b a4 6e 9c 1b 2a 6d e4 9c 92 4d 06 d9 5b d6 94 ba e4 ca 39 51 da 06 78 81 a1 9c bb a8 c0 19 f0 5a c4 b9 c3 55 b7 98 f1 c6 ab 06 b4 5b 16 21 56 ad 45 3b 77 aa 52 75 bd 8c aa 44 8d 2b a5 18 46 2a 46 60 90 99 31 08 99 50 86 dc 21 ad 22 62 2c 86 c2 d5 46 67 21 69 4b 05 96 55 95 f1 66 07 0c 6e 23 e7 f1 f2 5a 8a 33 56 a9 Data Ascii: !DbXXP!pBe!BUiRditMM'S)Uv+tTuRroH>EpKuJRRnG:-WFJ)3N97JJZnddsP+nmM[9QxZU[!VE;wRuD+FF`1P!"b,Fg!iKUfn#Z3V
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: e7 a9 b5 6b 82 ce 37 be 6e 54 d3 bd aa bc f7 e9 cc 49 e0 1b b8 89 e5 3c 85 bd 28 a9 db 59 4f 74 7a 66 29 4f dc 4e 52 53 2f ce e9 8b 19 c6 8a aa 43 96 50 b7 8a a9 09 b8 8a 64 12 e3 19 57 c2 95 4b 46 ab 4f 9d a5 62 15 bd 29 13 96 d3 42 02 a5 c9 2d 46 aa c4 b5 4b 25 04 3b 6b 0a 39 76 3a a3 1a 15 0b d9 99 c8 62 f3 b2 82 07 ca 95 13 4b c8 42 d5 2d a9 cf 9b e5 ad 60 79 63 8c 83 96 34 60 59 36 ad 25 96 31 d1 aa 55 08 45 ab 40 38 99 95 60 aa bc 20 18 06 b1 a0 6a c6 92 19 98 ad 24 58 82 d9 f4 28 92 55 19 19 75 b5 a1 a1 0a e7 8b 62 2d 8d aa 8c ba 62 28 0a 5d 23 18 d2 d2 24 a7 47 49 14 bc 0b 8c b9 60 aa d2 40 22 15 53 90 02 ec 56 75 d3 51 54 63 3a 64 2c 06 b7 5c 13 8a f4 b0 35 34 5d 63 b4 a4 08 ea 94 8c 19 20 2d 82 36 95 6a 84 6e 54 a9 14 d5 8e 4c 25 4a 9b 5b 6f 8a Data Ascii: k7nTI<(YOtzf)ONRS/CPdWKFOb)B-FK%;k9v:bKB-`yc4`Y6%1UE@8` j$X(Uub-b(]#$GI`@"SVuQTc:d,\54]c -6jnTL%J[o
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 94 5d 64 4a 09 2e b6 54 05 c2 ae 41 01 5a 1f 97 52 12 09 89 70 d2 9b 5e a1 e1 3d 40 22 50 d0 a1 b8 66 28 11 22 8c 30 59 2b b0 91 02 9c c2 d0 92 81 17 e0 19 b3 63 4c b7 b2 96 4a 41 38 de 43 e9 3c 4a 00 42 4c 78 69 16 51 44 51 e9 15 b3 38 45 10 5e 47 92 8e 96 ce a2 8a 14 42 f0 1e 08 95 22 c1 72 da 00 8e 51 54 a2 0a 2c 81 cd 84 c8 2a a6 22 59 88 61 a6 2b 13 b6 2a b4 6d 64 50 a5 32 dd 12 32 28 5a db 18 51 c1 a7 46 c6 32 ce 6c 6b 54 00 52 21 a1 a0 76 41 5d 4a d2 e5 5c a9 d4 cd 32 6f c1 c0 8e f6 b6 a2 07 e9 d6 6b 71 0a 8d 65 5b f6 ca 34 48 ed c5 b9 f7 81 37 08 0d 73 45 96 9a d2 e7 7a 7b a3 9f ff 76 5d fe 97 dd b2 39 ec 8e 49 2c 41 33 2d 44 19 b1 aa 42 43 bc f0 9a ea 24 54 11 19 9f fa cf 37 72 6a b6 02 20 1e 5d e2 df bf ba 60 0b 8e 09 48 60 b4 a5 24 0b 20 65 56 Data Ascii: ]dJ.TAZRp^=@"Pf("0Y+cLJA8C<JBLxiQDQ8E^GB"rQT,"Ya+mdP22(ZQF2lkTR!vA]J\2okqe[4H7sEz{v]9I,A3-DBC$T7rj ]`H`$ eV
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 35 8d 6b 79 bc c5 e7 6f d8 d3 fb 72 56 cf ed 92 6d 9e 1c d8 36 2e cd b3 37 9c 0f ae 7f 3e b1 6b 8f 1f f1 94 d0 f3 a6 08 3c f1 c9 ff 7e 68 c3 5c d8 fd 74 e7 c6 bf 9e b8 fa ed 3b 97 74 fa f4 0f ed 3f ef 23 07 5a d7 55 3b fd 61 11 26 9e 47 6e c9 62 c0 fa 6c 51 c1 d4 94 a5 5b 78 2b 99 72 1f 8b 2c a6 66 33 ac f1 14 a5 7e 4a 6c 2e c6 f3 61 b6 da 18 ef 6a e6 55 48 89 ca b9 40 18 e9 ba 45 75 a9 b3 5d cc 94 a2 13 2a cd 62 2a 66 d1 9b 64 04 93 8f 46 61 8f 71 7a 36 29 db 98 26 75 d9 96 dc 50 5d fa 53 ff 73 ed 27 f3 4d 0f 5c 32 84 40 4e ed 95 b9 d9 77 ff d1 9a ff 7e df ec a3 51 d8 2e 19 51 22 30 66 46 0f a9 48 a0 29 74 b2 8b b8 8c 66 02 4c de ec 41 5c b0 10 85 02 a8 00 92 37 51 88 18 05 64 43 44 95 7a 73 ab 1f 3e e4 5b 2f 1f d1 2a f6 0f ae ba 6d f3 8a 9d 78 41 cf 9a Data Ascii: 5kyorVm6.7>k<~h\t;t?#ZU;a&GnblQ[x+r,f3~Jl.ajUH@Eu]bfdFaqz6)&uP]Ss'M\2@Nw~Q.Q"0fFH)tfLA\7QdCDzs>[/*mxA
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 52 a9 54 a0 08 61 22 00 15 a1 52 f0 b0 36 67 2d 21 86 f7 ee 6c a7 b5 36 26 eb 3f bb ae c4 d4 14 ef ee a3 68 95 75 9e 4f 37 6e 29 ca fa b1 77 59 72 b5 d6 bc 6b eb 60 85 7e fd 70 7c 93 49 a1 b8 51 4b 74 49 59 95 c1 ba fb 14 18 05 28 6b 97 ec 63 1b 84 8a a9 29 c5 48 62 ae 2a 59 db 93 55 5c 55 85 98 2b 0e f6 88 f4 86 53 d1 f2 00 3c c0 71 50 f8 64 1b 95 00 c4 05 5a 2a 22 3d 40 23 52 5d fa 12 10 a0 17 2e 15 38 40 3a 0a c6 12 80 86 2e 28 c0 c5 49 e2 82 c1 f5 0a bd 11 94 c9 2c 21 ce 27 71 78 9f a8 43 34 44 02 41 08 15 71 e1 90 0a 66 db 84 11 c5 a8 a1 53 84 11 85 60 a2 f0 53 a5 c3 fb c9 40 89 33 a9 74 6d 4f 1e 72 eb e6 a6 8b aa 5e 5b a1 b8 6c aa 1f d3 4d 9e 02 9f 4b cd 16 b3 76 72 15 39 6e d8 d4 22 a9 46 b0 6a 5d 6e 34 fd 72 cd 60 0f 4a 67 b6 9c 6f 47 ee 7d d6 f5 Data Ascii: RTa"R6g-!l6&?huO7n)wYrk`~p\|IQKtIY(kc)HbYU\U+S<qPdZ"=@#R].8@:.(I,!'qxC4DAqfS`S@3tmOr^[lMKvr9n"Fj]n4r`JgoG}
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 96 40 ce e4 2c 40 44 cc 3d ce 3f c6 6e 7a e9 fa d7 39 df ab cb 73 86 c4 a4 9e 13 6b dd 8e 8c 6a 29 a7 4e 65 50 d9 aa 6f 49 2e 26 d5 eb 67 ef a4 64 ca 79 74 cb e6 64 38 31 f3 3c 18 75 ac 4f 3d 5a 4b 65 52 b3 3e d5 93 34 ac 45 a3 2e cc aa db 09 51 e1 74 bd da 5e 47 a5 ab 9e a2 5d b9 92 bb cd 1d 53 4e b5 5e 57 3b 76 50 92 3e 36 b2 3c 6c 7b eb 37 9b 9d 59 1a b7 91 0f d9 a9 3e 75 29 2c f0 ea d7 c2 cb f0 9a f5 19 64 79 b3 fb 58 3f 1f c0 58 99 8f 24 36 8f f5 a1 a7 aa 36 eb c7 8d fb 50 5a 2a b4 fd 2f 45 c6 23 33 d3 9f 84 d8 e9 ce 56 1f 1f ec 4a 96 b6 ff ec ba 05 9b 42 b2 36 a5 07 19 96 25 8e ca 5a 9e 07 67 24 53 cb 29 81 5c 10 58 25 d6 86 4c 46 48 0c 21 d0 08 0a 54 4b 9b b0 f7 90 0b ec 76 a9 2b 13 cb 55 cd e6 c4 bc 61 c8 b1 db 12 16 81 22 6c 83 a1 ac 9b 22 6f 8a Data Ascii: @,@D=?nz9skj)NePoI.&gdytd81<uO=ZKeR>4E.Qt^G]SN^W;vP>6<l{7Y>u),dyX?X$66PZ*/E#3VJB6%Zg$S)\X%LFH!TKv+Ua"l"o
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 8f 74 c2 2d b7 bf a8 f5 b4 47 fb d7 7c 5d e5 a4 de 86 fd eb 60 e8 d0 7e 1b ba c9 4d e7 6f 4a 47 63 c9 a5 f2 05 2e 83 f2 ad ca 55 32 3c 2c be 52 4d 8e 16 5f 6c 43 50 f7 d5 f6 8e 94 d0 20 6e 9e 0c 87 9b f2 dc aa 7a 8b e5 3c 5a de ff 18 e5 d1 87 f2 14 12 6b 5b ae d2 be 4f 51 b2 49 5c ce 42 a4 cb 36 65 81 94 ad 56 e5 f2 71 38 9c 92 1e 55 85 02 d0 48 2a 51 16 36 6a b3 fd d8 48 91 e1 56 dd 12 e0 71 eb 6e a5 31 d3 d2 7d e8 e8 52 d5 d0 0e 8b 54 31 26 6d 8b 2d d5 ee da 47 a2 b6 55 e1 bf 69 b0 a2 5a a9 d9 48 85 67 f8 ac d9 07 76 f0 43 e3 58 50 9a da e9 72 18 e6 47 3d e5 98 ca a6 d9 94 dc 96 c2 27 c1 98 b5 36 37 0b 4f b5 c5 ad 4f 99 ca 5a e1 3f a7 ae 3a db 9a cd e8 03 db 2e b5 40 5e 41 83 90 d6 b8 46 55 ab d6 de 62 e6 63 41 45 a4 35 b0 d3 73 4a b9 9b bd 53 46 d7 48 Data Ascii: t-G\|]`~MoJGc.U2<,RM_lCP nz<Zk[OQI\B6eVq8UH*Q6jHVqn1}RT1&m-GUiZHgvCXPrG='67OOZ?:.@^AFUbcAE5sJSFH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49827	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	527	OUT	GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34202 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 92 85 00 00 57 45 42 50 56 50 38 4c 85 85 00 00 2f a5 c0 49 00 4d 40 8c 64 2b 6c 93 bb 8f 65 be 1e ee bf 60 90 26 25 44 f4 7f 02 ba bb e7 ac ee 9e 6f b7 9e 73 76 77 cf 39 ef 9e dd a7 3e f5 d6 a7 a9 76 b7 da b3 ed ee 7b f6 9c 0e 13 d5 24 e9 e3 9c dd 73 f6 fb b9 cd 7f e8 e6 65 c2 76 df b7 50 55 a8 17 24 c0 4d 32 54 80 2a e6 c3 92 73 12 88 63 0c 0f 05 79 ac 51 c3 2a d9 03 90 c4 37 52 1b 49 55 8d 9c 58 39 70 18 24 40 ad e0 8b 6f a2 7a 19 a8 cd aa f9 75 ff 23 72 dc ae 56 a1 48 c8 21 40 b7 de 43 4d 12 92 43 11 17 cb 3c fb 40 48 12 4c e2 41 e5 ef 8f e7 03 44 de 6f 55 71 59 58 4f 03 a9 c8 eb a5 ca 50 ed ee 59 6a eb 02 ae b1 12 48 f2 35 92 6c 73 9a f8 7a 11 54 47 40 73 ca ef 77 1d 46 f9 72 7d 3d 50 40 81 09 f1 73 52 17 7b f6 cf 8f 0d 78 22 89 47 a8 02 Data Ascii: RIFFWEBPVP8L/IM@d+le`&%Dosvw9>v{$sevPU$M2TscyQ7RIUX9p$@ozu#rVH!@CMC<@HLADoUqYXOPYjH5lszTG@swFr}=P@sR{x"G
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 0a 16 14 af f7 0b c5 e7 ea fd 98 01 47 e1 d3 7b 9f 3e 18 97 82 82 37 54 34 b7 82 b1 be 3b 04 02 83 1b 68 c3 ab 77 63 5e 8f c1 4d 01 40 c7 76 e2 c4 ea d8 51 3c dd 6d f3 76 e2 cd a9 a1 3a 17 4f 00 30 dc 4e c8 e3 6f de 1d fb 09 80 82 e6 74 84 d3 35 e0 21 0a 56 1f 8f 27 ff fe f3 e2 0c 67 61 c1 d2 00 50 01 50 fa 56 fa fe d6 f7 47 df 9d b9 de 58 20 ee 4e 42 07 ee d1 e6 11 3e 14 03 1f b0 03 76 34 9c b0 e1 c6 a7 27 79 da ef 91 9c bd 6b 00 d4 7d f7 7f 37 76 b9 c2 71 bc 08 ed c9 7d 17 a3 d2 0e 73 97 cb 09 f7 10 c0 d0 7b 34 90 f2 09 3d 00 a0 eb d6 ce 28 be f0 09 6d 68 68 c0 86 ed 04 db cc 87 16 b1 78 cd b8 d2 c6 70 19 c0 d2 87 16 cf 40 68 68 f1 bd 8d 61 1b 80 b3 2f df 05 d0 df 8d ca 15 48 4e b9 c9 36 31 a6 b2 4f ab 22 78 f8 b4 b6 4b 00 6c d7 e7 ee 07 7c d7 0c 9d 8e Data Ascii: G{>7T4;hwc^M@vQ<mv:O0Not5!V'gaPPVGX NB>v4'yk}7vq}s{4=(mhhxp@hha/HN61O"xKl\|
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 a6 74 a9 a6 33 2d 56 ae c1 d6 5d 29 8a a8 53 ce 94 4a 69 39 2d 4b 15 51 27 b6 31 84 5a 55 53 2a 6a ac d2 42 2a 39 d7 89 33 23 29 2d 33 05 ea da b9 ba 30 29 0e a6 b3 0d 48 d7 74 a6 85 96 24 57 2f 23 d9 b9 d2 19 95 81 a8 c8 a0 28 ae 34 ce 95 05 a2 b5 48 07 61 dc 92 44 87 66 57 8c 04 4e 65 d7 bb 42 c3 72 37 0b 4b c8 23 b5 85 a1 9c b0 47 58 11 96 89 90 64 e7 cc aa 91 ec a4 b8 62 86 25 65 cc c8 a1 24 a7 c7 a3 d1 c0 b8 92 3a 4a 92 73 da 59 08 67 b5 33 2a 16 cc 5a 04 76 aa b8 a2 77 76 08 27 7a 16 01 a9 1b ad 1a 10 64 95 4e 39 8a 24 f5 54 12 0a a9 2b 5a c0 88 4a cb a3 c2 29 b3 3c 23 84 e4 8a c6 52 74 14 a3 20 4c 18 85 a2 24 27 8d 72 b9 88 0e 20 8a 4e 55 09 42 a1 4c 50 25 0e 03 8e 62 14 85 08 47 85 d4 54 87 41 Data Ascii: XT\t3-V])SJi9-KQ'1ZUSjB93#)-30)Ht$W/#(4HaDfWNeBr7K#GXdb%e$:JsYg3*Zvwv'zdN9$T+ZJ)<#Rt L$'r NUBLP%bGTA
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 65 31 66 28 89 12 8a ff 72 aa 72 48 be e5 46 c8 85 8a 51 c1 62 09 69 29 9d e5 b2 bb ba 11 82 02 66 0a 75 c8 a4 5b 51 a1 04 a6 94 24 51 26 30 a6 a8 0d 4e 8a 24 ea 5c 5d 28 52 29 0d 6a 44 08 ae e9 94 54 0a 9a 64 4a 77 b9 cb a5 9a 3b 2a 5d 2a 95 22 29 25 35 50 d3 09 55 3a 55 0a 52 21 36 25 05 95 d2 91 25 22 36 43 a6 54 2a 95 32 52 12 1d d5 00 53 8a 2a 05 53 ca 54 48 72 51 23 34 9a a4 46 4e 2a a5 6a 33 43 2c 19 a3 a6 ac 58 4a ad 65 06 9c da 41 67 94 88 16 8c 98 b1 b1 58 8f 32 89 a9 35 d0 c4 94 d3 b0 31 d5 58 42 4d 94 44 19 a6 53 a6 b3 a8 e0 1c 81 3a 96 d2 cb 89 18 d5 51 31 12 a9 ec cc e9 98 88 52 6d 6c 8d 2a 75 28 8e d0 d4 f8 cc ee 50 4a 95 da 7d b6 21 35 6a 9f 69 64 aa 71 d0 12 ba 24 d5 38 da 28 04 89 74 28 75 92 d5 7d 44 a5 52 66 79 82 14 82 69 21 49 42 bd Data Ascii: e1f(rrHFQbi)fu[Q$Q&0N$\](R)jDTdJw;]")%5PU:UR!6%%"6CT2RSSTHrQ#4FNj3C,XJeAgX251XBMDS:Q1Rmlu(PJ}!5jidq$8(t(u}DRfyi!IB
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 25 69 8d e9 71 c2 04 9d 58 23 60 3a 17 6d 6c b1 4d e5 84 4a 86 ca 2e 98 a4 29 a7 55 1b 00 7a b3 9d 52 a6 06 73 0a 86 6c 70 62 4e 64 b1 94 ab 29 46 b3 54 c7 59 2d 75 61 56 9d 0d a5 8e 7d 95 af 94 5e 96 b4 b5 6a 67 32 89 bc 7d 4a 99 ce 82 37 cc 01 37 f9 ca ec 24 53 33 ca 47 aa 46 d2 f5 94 6b 10 3a a7 b0 63 21 16 d1 76 a1 44 95 9c 72 46 80 3a 65 e3 62 d9 7a aa 9d 65 85 80 8e ab 1a 09 dc 4c d1 82 20 9f b5 c7 92 54 ac 56 d5 41 4e 5d ef 8a 3d 90 96 2a 1e c1 10 60 ab 72 26 91 02 fa 4e 29 41 f0 55 d5 41 d5 76 ba 95 c7 94 54 44 7d ca ea a8 53 6d 2d 76 d0 d4 91 f9 46 49 a9 c8 b7 4a e7 4a a9 1e aa 36 2a 5f 00 11 00 51 d8 d9 81 d1 b1 ab 06 48 65 b9 0d 06 ac 20 0a 45 96 32 4b ba 64 f1 8c 99 b8 28 2a 11 26 a8 14 56 ed 10 72 44 a1 b8 b3 28 b5 51 81 49 38 17 04 a1 60 4e Data Ascii: %iqX#`:mlMJ.)UzRslpbNd)FTY-uaV}^jg2}J77$S3GFk:c!vDrF:ebzeL TVAN]=`r&N)AUAvTD}Sm-vFIJJ6_QHe E2Kd(*&VrD(QI8`N
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 0b 1b 36 5e 18 5d 00 54 85 2a 7a 0b 14 16 50 a9 b0 80 70 1d 83 af 6d f8 90 84 29 5c 00 9f fd dc 8d bf 3f 72 14 b0 c8 78 8b 44 c5 87 cc 24 02 03 50 65 92 b8 d8 88 04 01 c0 b9 8c 9b b3 8c 00 11 76 e2 08 83 2a 28 23 0a af be 67 3d d2 b7 b7 2e 01 6f 88 7a 8a 62 a1 ec 01 06 61 9e aa 9c 0e e9 7a a6 da 36 d5 10 b9 ed 2a 5a 6c b0 e7 b2 c7 9c dc c9 d1 76 51 11 d2 d9 ae d2 3d 57 6e 8f 16 a7 48 5b 5c b5 0f 95 b6 92 d3 64 c9 39 60 46 3a f7 4b 6f fb 76 b4 b5 8c 48 20 c5 ca 16 53 8e 06 31 a5 66 bf 72 f3 16 06 b5 68 1a 5d 34 a8 05 ea 03 ab 34 6c 63 0d 5b 37 12 4c ed 6a f7 f9 21 23 62 03 8e 6a 41 60 5c 14 11 2e b4 85 81 49 0a 39 e4 22 a6 30 a5 ae a8 d5 bd 47 e6 d6 5d c9 84 49 2c 43 34 62 04 98 c4 ca b8 8b 3d 18 62 0a c5 a6 dd 92 8e 63 54 ee 9a f4 05 e7 be 11 e4 ec ee ec Data Ascii: 6^]TzPpm)\?rxD$Pev(#g=.ozbaz6*ZlvQ=WnH[\d9`F:KovH S1frh]44lc[7Lj!#bjA`\.I9"0G]I,C4b=bcT
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 67 e4 1d ef 78 f5 b6 cb ae 4b c7 f6 12 09 31 5b ef d9 91 6f 3e b0 66 8a 63 5b a8 c7 5b c9 94 bb 2d b2 98 9a 8b 61 8d a7 28 f5 53 62 73 31 9e 9b d9 6a 63 bc ab 99 57 21 25 2a e7 00 61 a4 eb 14 d5 a5 ce 76 30 53 8a 4e a8 34 8b a9 18 c9 b8 04 83 18 1a e2 8f 3e f2 8f 82 8a c1 c4 bb 9e 68 46 d5 88 c7 af 7f f5 ed 1f 3f f9 bd d8 bc 6b d9 8f 3e fb a1 97 bb e7 ce aa d3 e6 7d cf 3b 17 02 20 25 00 b0 b2 20 01 90 b2 26 ed 13 40 4d 5c bf 5c 75 86 3e 62 25 d5 71 d8 b1 e3 39 64 5d e2 72 38 4f 4e 4a 70 de 73 a0 57 eb 43 f7 3f 7b 76 74 e7 83 b7 cf 3d 8f 87 7f f2 d5 81 ed 9d 3f 65 79 0c ca 93 aa af 10 4a dd f7 7c ea aa 2a 8a 02 d5 51 50 34 1d 9b ab 74 95 a6 3a 78 f5 c5 68 e2 c3 b8 0a 50 40 d1 e0 eb 00 f4 45 cf e1 eb 8c 53 5a af df a5 10 90 20 83 4f e2 fa b9 0d 15 08 a3 ce Data Ascii: gxK1[o>fc[[-a(Sbs1jcW!%av0SN4>hF?k>}; % &@M\\u>b%q9d]r8ONJpsWC?{vt=?eyJ\|QP4t:xhP@ESZ O
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 3c 89 1b 99 25 75 83 84 93 49 56 8a a9 20 45 08 5c 56 88 a3 5e 41 92 ac cf 4c ba 38 93 a0 26 2e ad 86 a6 4a 6c 57 cf db fd f1 de eb ef ff e6 a3 25 b3 ef 9f 3f f3 48 55 63 63 41 c1 05 11 f1 94 d4 86 b5 5c 11 9a 00 74 a7 65 c8 e7 45 a1 07 73 59 c3 56 89 db 88 b3 84 05 30 a6 9a 87 94 e3 04 28 e8 68 3a b6 4a 82 1c b0 3c b1 50 a3 a9 34 11 32 9e 11 d7 ea 39 de fc 18 ff f5 83 c7 5c e4 85 17 97 a5 ee 21 fb 38 67 7e 48 37 d1 46 8b 09 83 aa cd ba ab 78 4a e7 88 a8 86 ee 2a 45 52 55 bd b2 43 6e 15 c8 b2 55 a5 c4 d4 14 cf ba 5d 58 65 ed e7 ee c6 2d 45 59 2f 7b 96 25 57 6b cd b3 2e 6d ac d0 af 17 db 37 99 14 8a 1b b5 44 97 94 55 19 ac bb bb c0 28 40 59 57 c9 6e bb 10 c0 87 d6 99 98 10 4d 8c 69 20 00 d6 d0 11 08 d4 e4 32 c8 31 86 01 e4 72 83 04 08 92 aa 64 ca 06 b9 2c Data Ascii: <%uIV E\V^AL8&.JlW%?HUccA\teEsYV0(h:J<P429\!8g~H7FxJ*ERUCnU]Xe-EY/{%Wk.m7DU(@YWnMi 21rd,
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: fe f8 55 5d ba 78 65 d9 e2 5a de 7b 51 dd ad 1b 8b 8a 52 cf ae f8 2a 74 f6 b6 f2 ee a8 d6 ec aa fd 85 ae 5d 52 f2 51 b5 6f a9 52 ed 2a bf f1 76 2c 82 77 67 0e 1a 9d 8f 96 76 87 5a 51 dd 7d 84 b5 ec a8 ad d2 31 56 6e cf 32 8f b1 0d 23 5f 5f 57 69 62 c9 17 b2 33 8c fd 02 a7 3b 2d f9 c6 f9 d2 d6 74 c8 5b e4 64 bc e4 03 ed 61 32 f5 45 79 d3 7e 27 4d ea 0d 7c 98 6b ea 89 6f 9f bb 69 a7 1d 68 bf 4c 1d 6b c6 3e 1d f5 d5 30 3a e5 bc 3b a5 d5 a6 f6 2b 9d d3 1d 4b f7 91 f3 65 ea 30 9d f3 63 a4 25 94 37 ce 23 55 ea dd e7 bc 19 3b e9 a5 eb a7 73 3e 57 db e4 ad aa 5f eb 4c ac 75 db 32 aa a5 9c 3d 8b b0 38 ad 77 b7 8d 31 a9 5e af bd 9d 92 29 a7 7c 75 f7 01 2b 79 d6 6b 36 46 1d eb ae 6f ad a5 32 a9 59 77 f5 24 0d 6b d1 a8 0b b3 ea b6 43 54 38 5d cf ba bc 46 a5 ab 9e a2 Data Ascii: U]xeZ{QRt]RQoRv,wgvZQ}1Vn2#__Wib3;-t[da2Ey~'M\|koihLk>0:;+Ke0c%7#U;s>W_Lu2=8w1^)\|u+yk6Fo2Yw$kCT8]F
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: b9 a9 14 85 1e a0 6a 54 a2 02 df 14 b5 34 9a 4f 0a 1b 53 52 89 2f 75 24 51 74 da 14 05 c3 06 79 ba 11 4a 45 cb 4d 21 8e 4f 4a 27 a6 28 a8 8e 92 9e 2c cd 49 d3 51 01 4d b5 42 e5 42 ae 6a 2e 17 e5 2c 1b 5c c4 21 74 eb 22 55 10 ab 6b 0c 60 72 4e 4f f5 7e 06 86 48 5f 3f 53 b5 4f f9 72 ef ad ab 1e 49 dd 7a 16 9f 98 93 90 db c7 5d b6 8d d5 ed ab 7b fb c8 74 ce 5c f9 08 6b 69 4b fb 6e 57 3b 25 26 7b aa f7 c1 35 19 57 bd 37 95 31 6d f1 1e 77 d5 37 ca d8 ac ca bb 54 b3 36 8b 77 e9 0c 3b e6 dd 68 a3 49 ea 5b cb be d2 09 a7 dc de 51 eb 69 8f f6 d3 7c 1d e5 a4 9e 86 fd 74 30 74 68 bf 0d 9d e4 a6 f3 9e d2 d6 58 72 a8 7c 80 c3 a0 7c aa 72 94 0c 5f 16 1f a9 26 5b 8b 0f b6 21 a8 fb e8 f2 b6 94 70 54 de 7b ac d1 b8 c5 4f 57 d5 5b 2c e7 ab e5 fd 65 d4 54 af c5 5f 55 f5 ed Data Ascii: jT4OSR/u$QtyJEM!OJ'(,IQMBBj.,\!t"Uk`rNO~H_?SOrIz]{t\kiKnW;%&{5W71mw7T6w;hI[Qi\|t0thXr\|\|r_&[!pT{OW[,eT_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49825	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	523	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2840 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:05:42 GMT Expires: Sat, 20 Apr 2024 12:05:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 7232 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 10 0b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c7 0a 00 00 2f 3f c0 0f 00 4d 28 6e db 36 82 94 f4 e5 74 ff 81 af 19 22 fa 3f 01 7c ae a0 60 e2 12 b2 e7 62 eb 0c 74 0b 75 90 2a de 0b b7 b5 6d 2b d1 5e 44 84 54 40 44 ff 45 b9 eb b8 fb d4 c0 36 92 24 27 fd c2 a4 30 bf 30 2f ff e8 d0 1a 8a 6d 23 49 8a ea 33 f9 fc 23 62 66 36 d9 e8 ff 04 e0 cf 5a 38 8a ee bf 18 00 39 de 33 6c f3 6a 4c 11 1b e0 ac 98 ce 7b 05 67 25 3a 20 57 25 ad da cf 95 ee d7 57 02 50 ee 57 24 6b 55 7d ad 0c 15 00 10 04 6b 65 ac 8c 3e be 1b 2c 6d db 76 4c 92 74 dd ef f7 85 13 55 d5 63 db b6 6d ef fa 98 bd f1 07 66 69 db f6 cc ca b6 6d 97 6d 27 23 11 11 df 7b 2f 32 aa fa 8b 58 f6 ea 09 0f b4 6d 9b b6 6d db 56 cc b5 cd e1 31 96 6d db b6 ad Data Ascii: RIFFWEBPVP8X??VP8L/?M(n6t"?\|`btu*m+^DT@DE6$'00/m#I3#bf6Z893ljL{g%: W%WPW$kU}ke>,mvLtUcmfimm'#{/2XmmV1m
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: d6 3a 5b 50 00 28 85 84 82 cb 98 21 73 b5 14 33 34 62 18 82 03 84 69 66 25 28 13 41 8a dc 50 59 0c 4b 25 bb f2 f8 bf 57 ef 73 9a 97 98 c0 5f df d7 77 4e 22 42 2d 9a 89 5c 79 ae 63 4d ae 85 21 97 b2 87 f9 f8 16 d8 5d 1e 20 03 04 1c 41 10 43 94 20 a0 b2 e0 86 9a dd 41 90 ea 56 8b d3 fe 5b fe 00 f5 5d 5a 41 ff e3 45 13 48 74 32 1d 15 ff 1a e2 d0 d2 fc 96 e5 76 28 12 85 24 e4 a8 4a ed c7 74 db 87 e6 e8 fe e5 66 00 11 21 40 62 47 e1 40 83 20 06 30 69 4e 66 f6 44 0e 3f 54 87 1b a8 0b fe ef f3 66 8d 73 d5 1c 62 69 fa 9f 6f ed e8 1b 4b 65 6e 99 ee 39 2a 05 a7 44 82 82 62 b1 9b 49 cb e1 c4 70 d6 e7 9c f9 90 f6 4f 43 88 80 02 ec 08 10 07 24 d0 ec 30 73 0c 65 a6 ec b2 8e f6 ea a7 6a 5d 97 56 52 fd a3 74 06 7e 77 c8 eb 5f 3b e4 d9 5b 45 25 cd 66 05 15 ac a8 60 62 00 Data Ascii: :[P(!s34bif%(APYK%Ws_wN"B-\ycM!] AC AV[]ZAEHt2v($Jtf!@bG@ 0iNfD?TfsbioKen9*DbIpOC$0sej]VRt~w_;[E%f`b
2024-04-19 14:06:14 UTC	863	IN	Data Raw: 76 7c 87 c7 9f d9 01 a8 7b 7e 6e 7d ff 7b 8e d5 20 53 b8 b4 43 58 e1 ff 8d b9 d7 0a 89 00 cd b9 f8 dd 9b f4 85 d7 7a 4c af 71 f7 3e ef 70 c2 fa 16 8f 3d bf f3 b3 07 47 ff a0 5a a5 bc b5 e4 61 d0 f8 9c 93 4e 6a ed 39 ec fa f8 37 8b c8 00 b5 9b ff bc e2 f7 93 5f 1e 8b 02 44 84 45 28 ac d0 7e a5 d7 45 22 8b 30 dd 6a 4e ef 7f d4 c1 97 5e ff e3 8e 08 17 5b f3 d3 e6 ce 69 b0 c8 70 44 1e 09 a4 46 6b 9c ce 14 dd 69 12 c0 04 97 eb ef 6f 3e f7 ef ee 42 75 82 02 44 84 c2 16 f6 26 ba 9d 4c 20 22 ee b1 0b 1f 7f c4 de 5b 9f fc f9 eb 5f 74 89 02 98 de 6d d3 5f 96 ef 55 dd 4c 21 c6 16 f4 97 d2 5c 0b 61 07 c5 ed 76 d1 1f 5e 32 fd 5e ff 93 1f dc fd c8 0b 4e bd 29 57 6b b8 68 a8 2f 56 fd f7 bb 2f 4c 9d c5 0a 22 2c 22 4a fc 3b ec 1e 0b 43 0c 76 b6 77 81 45 9d 9d f7 40 79 e7 Data Ascii: v\|{~n}{ SCXzLq>p=GZaNj97_DE(~E"0jN^[ipDFkio>BuD&L "[_tm_UL!\av^2^N)Wkh/V/L","J;CvwE@y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49828	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	524	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:45 GMT Expires: Sat, 20 Apr 2024 11:12:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 10409 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 f2 76 7e 5d fe 84 2f 0c 11 fd 9f 00 9f 61 90 96 a1 ca 3a b0 dd 8f 21 f1 5e b0 8d 24 c9 49 5b 88 d7 26 9a cb 3f 4f 88 81 71 23 49 8d 0a 13 00 22 ff 18 3d 67 5f 6a db 48 52 63 7e 88 f9 43 ec 7f 2a 1f df 44 a2 91 00 30 28 24 a9 f9 89 25 03 b6 17 b6 77 5d 6b 0c 7b 7b 01 05 44 13 23 23 01 a8 ae bf c4 a9 71 5a ac 76 9d 00 20 31 b1 b0 80 1f 0f 1d d8 d6 d6 48 8e a4 96 86 67 96 cd cc cc cc cc 8c 91 d7 d1 da 11 33 73 c6 cc cc cc cc cc cc cc 3c cc 33 2d f8 03 75 ab 5a da 6c a3 bb 9e 4c ea 2a 99 3d a5 ea da d0 ec 70 c1 cc f6 62 64 66 7b 29 34 43 e4 2a 39 b4 b6 1d 92 f4 7e ff 5f d5 e6 28 5a db b6 6d db de cc 66 ba 99 bd 91 6d db b6 cd b1 3d d5 7d ba 1a 7f 7d 72 64 db 56 6d 65 ae Data Ascii: RIFFWEBPVP8L/?EmIv~]/a:!^$I[&?Oq#I"=g_jHRc~CD0($%w]k{{D##qZv 1Hg3s<3-uZlL=pbdf{)4C*9~_(Zmfm=}}rdVme
2024-04-19 14:06:14 UTC	1247	IN	Data Raw: ab c5 3b 72 55 6b 97 f9 ed fb 6e a4 5a 11 0a 78 49 06 d8 05 21 48 96 50 8b ca 3c 6c c7 e6 de f3 7f 85 ff bf a1 d5 ba fe ef a1 82 5f 9b be d9 33 61 bb 11 0f d4 94 73 c2 3e 9d b7 ae 37 16 e6 11 10 3c 72 83 1c 94 36 c8 38 15 20 13 43 40 88 01 cd be bf 99 6d 5a db b5 db 3e 56 5b f5 e9 b7 46 ce 43 63 89 8c d3 0f 91 89 10 87 c2 52 03 f4 df 23 d9 b8 64 c6 91 51 86 40 96 24 42 9a e4 1f ea c0 22 5a f9 42 81 ca a1 8c 16 a7 39 59 10 0a 45 35 f8 d5 95 f2 42 b6 1c b8 61 18 f9 53 22 20 08 fd cf c0 c7 80 72 75 26 77 78 68 96 82 08 28 a6 74 55 2c 15 47 94 45 d8 7c 89 00 18 02 df 37 ae b3 5e 28 b9 71 c8 46 b5 c5 0f 41 0e 6d 00 81 8e 18 de ed e9 59 af 5b 24 83 00 99 42 05 d7 20 ae 31 aa 6c 2a 21 41 18 84 41 18 c8 1a 02 e5 ac 73 b8 d0 10 e6 9c 9d 31 b4 fe 3b 13 84 41 28 81 Data Ascii: ;rUknZxI!HP<l_3as>7<r68 C@mZ>V[FCcR#dQ@$B"ZB9YE5BaS" ru&wxh(tU,GE\|7^(qFAmY[$B 1l*!AAs1;A(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49826	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	523	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:15:12 GMT Expires: Sat, 20 Apr 2024 10:15:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 13862 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 4c 44 07 00 00 2f 3f c0 0f 00 4d 28 6a db 48 92 3b cf 2e 7f c2 27 85 88 fe 4f 80 cf 6c 4d 42 ba bf a0 9d 83 59 27 2c 58 45 92 1d a5 2b 3a e2 5f d7 9d 70 83 02 3e c1 82 99 b6 6d cc 1f 5e cf 02 a8 76 0e 82 81 b4 6d b2 fd fe 35 4e 4a ff 13 5f 64 29 10 e0 80 25 57 f6 47 2e 5d 80 85 8b 01 3c 02 2c 0c 1e 18 63 c0 c2 0b 22 01 fc c3 43 8b da 3f 43 d2 53 dd 3d 58 7c 5e c4 b6 6d 5b 57 b6 6d e7 3a 27 57 b6 6d 5f da 36 3e db b1 b1 f6 56 5f ec ec a6 bf d9 bb f0 b7 27 ae ae 9c 09 fb 4c fa 4c e6 2e b6 f3 8f 93 9e 9c 54 9c 4c 6c dc da 4e 8e ec 48 92 14 c9 8a a8 ee 7b cc 4c 22 3c fd e5 a1 ff 63 9e ee 4a b9 d6 b6 29 92 f2 7e 55 d5 33 8b bb bb 6b 04 a1 66 ae f7 e0 ee a4 e4 dc 02 b9 bb 84 ae 19 c4 ee ee 30 33 2b 6d 55 7f 4c 80 09 Data Ascii: RIFFPWEBPVP8LD/?M(jH;.'OlMBY',XE+:_p>m^vm5NJ_d)%WG.]<,c"C?CS=X\|^m[Wm:'Wm_6>V_'LL.TLlNH{L"<cJ)~U3kf03+mUL
2024-04-19 14:06:14 UTC	1159	IN	Data Raw: 38 56 19 94 92 b6 a0 98 f3 8e 26 82 b5 c5 e4 f1 77 61 a5 f7 c7 f3 7b 78 43 ff 65 f8 3b 8d 01 99 b8 74 70 19 e8 d0 10 b2 d1 62 4f 4e 9e ca 90 33 7b 78 ba 7d 7d f9 35 8d fe 8d f0 df 58 64 62 44 5c 91 17 d4 a5 62 1c 49 ad 91 0a f4 4e 39 29 af d3 f7 2f 0a 6a fa 3e 0c c3 ef 41 eb 6b 00 a5 a1 7a f0 92 86 00 04 20 3b 96 a7 2b c4 86 a9 af 06 a4 e1 1a c0 4b 77 58 c4 81 e8 0a 99 df 9a f5 a9 1f c3 80 6a 9b a6 b5 d4 cd dd cc 49 d2 06 a3 68 c4 60 33 51 53 99 18 43 77 30 a8 ea d7 32 a0 4f 48 b8 d9 80 3b 60 b1 24 47 d1 df 39 49 79 51 05 a2 fa 12 40 15 90 03 3a 32 a2 9c 44 43 23 9b 38 36 f9 1d 23 5e 1c e9 cb 46 7a 35 fc 7a a3 91 55 dc 52 6c f3 57 d3 19 23 19 03 f4 16 1f de 06 22 a7 bb 2e 8b 6e 2b 94 e2 42 94 26 eb df c6 e3 af fa a3 cd f7 41 4d 7b fd b0 e5 ba b7 06 ac 6b Data Ascii: 8V&wa{xCe;tpbON3{x}}5XdbD\bIN9)/j>Akz ;+KwXjIh`3QSCw02OH;`$G9IyQ@:2DC#86#^Fz5zURlW#".n+B&AM{k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49829	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1166	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:15 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:15 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-B_mINoYxIbfrYDuHvgb8ng' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49832	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	523	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1552 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:32 GMT Expires: Sat, 20 Apr 2024 11:26:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 9583 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	722	IN	Data Raw: 52 49 46 46 08 06 00 00 57 45 42 50 56 50 38 4c fc 05 00 00 2f 3f c0 0f 00 09 05 6d db 30 da bf fc 11 77 c3 10 d1 ff 09 a0 e7 ea 31 7c 54 15 a0 65 d0 bb 44 44 33 08 2e 14 b5 8d e4 78 f7 2a 7f b4 fb bf 82 41 71 db 36 6e 8a 69 d7 5e a7 a6 6d 24 c9 dd ee de 0f e1 f8 a3 3b 00 57 f4 7f 02 fc 8b 77 a7 73 fb e5 4d 8e 4d a7 90 ea 00 d0 cd 89 c6 f1 02 00 3f e5 74 ba 83 4f 0f 5d f7 ff 14 db cd cc ae 99 99 99 19 3b 07 9f c1 e9 f0 09 9c 2a 4a cf cc 79 04 e6 57 60 66 66 c6 cb 7c ed 0b 67 67 27 70 d6 d2 d9 ed 5c 7d c3 c9 6c 94 95 dc 79 65 9d 36 cc b8 92 cb 80 19 ee 54 ae ac 9c ca 15 bb 8d 24 0b 92 64 d3 b6 7a 36 ef 3a d7 f7 e8 da b6 9e 6d db e6 97 6d db b6 df 97 6d db b6 6d db 6f 63 20 47 92 a4 48 8a a8 39 66 7c 9d fe aa 2d d3 31 cc 5c 65 4c 80 06 ac 80 d8 fa 05 6d d2 Data Ascii: RIFFWEBPVP8L/?m0w1\|TeDD3.xAq6ni^m$;WwsMM?tO];JyW`ff\|gg'p\}lye6T$dz6:mmmmoc GH9f\|-1\eLm
2024-04-19 14:06:15 UTC	830	IN	Data Raw: 34 be 10 ac 93 41 4d a9 5d eb ab 0e c1 4e 83 35 31 c0 a6 38 8f fa c3 2d 8e 45 b7 14 b6 ba 66 27 d9 0e ad bb 4a b2 b1 93 61 c5 52 42 f0 b9 0f 53 f2 e7 90 b5 79 78 6a e6 be ba cf 67 97 18 5c 3b e6 57 2d 64 d5 67 89 e3 c7 d2 d1 8f ea 17 85 7b bf 83 c0 4d 04 be b0 7c 5f d1 f9 ad 33 70 a0 76 21 14 7e b5 18 0d 9d bc cf e6 5b 63 08 b4 ed 17 ef 30 d8 76 10 c4 ef b5 17 3f 2a 37 75 c3 80 57 e7 4f c9 30 85 0f a9 15 b6 32 b0 5b ee 77 e1 14 93 61 b0 18 f0 90 2c 08 06 34 3a ee d5 a7 1a 2f 8e 65 43 57 fa 88 9e 82 cf 0a 20 45 72 6f 28 9c 0f 3a 00 63 31 e4 00 cb 2d 15 1f fe f6 77 f1 a6 ff 19 51 c3 b1 ae d3 e1 da e0 d9 48 35 c2 a2 70 8a f3 47 6a c9 bb 7d b9 5e be 3f 5e dc 66 36 16 57 47 47 3e df fd 92 13 2e fd 9e 98 e9 f4 e0 41 48 91 82 c2 29 42 03 41 92 7f d3 da a0 d6 9f Data Ascii: 4AM]N518-Ef'JaRBSyxjg\;W-dg{M\|_3pv!~[c0v?*7uWO02[wa,4:/eCW Ero(:c1-wQH5pGj}^?^f6WGG>.AH)BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49835	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	530	OUT	GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8956 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3481 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	722	IN	Data Raw: 52 49 46 46 f4 22 00 00 57 45 42 50 56 50 38 20 e8 22 00 00 50 8b 00 9d 01 2a 28 01 28 01 3e 41 20 8d 44 a2 a2 21 12 69 35 18 28 04 04 b2 b7 70 b6 c8 fe bc 43 a2 f1 eb d2 91 7d 2b f2 a3 fa a7 ec 77 ca cd 33 f9 c7 e1 3f 60 1d 22 c5 a3 d5 3f 72 3f 43 fd d7 f1 ef dd 5f f8 ff 61 1f 9a 7f ca fb 82 7e 8b ff 84 fe f5 fb 7b fe 7f ff ff cb bf a8 0f d6 ff 50 7f d1 ff b3 ff cc ff 49 fb ff f2 d3 fd cb f5 c3 dc f7 fa af ec bf a7 7f e6 7e 40 3f a4 7f 93 eb 0b fd 6b f6 08 fd 5e f4 a7 fd b8 f8 31 fd 8e fd bd f8 11 fe 83 fe 2f fe cf e7 ff 70 07 52 7f 56 7f cb 76 b9 fd c3 f2 a3 d0 3f 0f 3e 43 f5 d7 fb 7f fe 2f 82 4f e3 3c 1d 74 c7 fc bf 44 3f 8f 7d 95 fb cf f7 bf da 8f f0 7f b6 ff 78 ff 98 ff 5d e1 2f c7 9f f2 7d 41 7f 1d fe 5b fd df f2 9b fb bf ee 7f 1e 28 00 fc b7 f9 df Data Ascii: RIFF"WEBPVP8 "P*((>A D!i5(pC}+w3?`"?r?C_a~{PI~@?k^1/pRVv?>C/O<tD?}x]/}A[(
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 23 18 59 94 f9 f3 a0 a0 1b ef bd ac de ea 49 03 ab 1d 2a 23 09 4a 0b 32 44 81 30 1a aa 62 44 3d 60 23 55 6e 5a 50 67 64 f0 dd 80 3e 77 0d 3f 83 c7 d6 e3 1d 4f 9e a7 d4 d0 f8 fe 14 23 94 74 28 66 7f ce 51 73 3e 5b 1e b4 fe df bd 5b ab 4c e3 b3 57 5c fd fd 44 80 90 39 2d c3 f9 05 1e 48 d5 e3 57 b2 55 08 25 f8 17 90 1b b4 4f 39 4b 84 a2 12 4d 0a c2 9f 36 ab 54 2a 27 50 4a f3 43 14 bf 39 ad 09 bc 3b 2b 35 47 1d 88 4f ee 49 54 45 25 2b da 70 b3 a9 dd df 7e cf e7 57 8c c6 32 f2 5a e8 0f 9d 37 9d bf 46 21 89 16 9c b7 85 ff f6 73 36 12 5b 3c e8 70 dd 60 36 d7 fc 73 a3 58 a3 21 cf de 94 b0 78 df 99 9a 28 7b 96 a1 20 fc 9a a9 4c 13 6d 22 16 b6 6f dd 61 a2 9b 61 c1 e6 f5 99 57 1d ee 8a 3c 85 74 16 ab f9 00 a4 63 00 b8 9c 80 91 09 f3 15 45 f9 c0 b7 dd 4b c8 50 7c 50 Data Ascii: #YI#J2D0bD=`#UnZPgd>w?O#t(fQs>[[LW\D9-HWU%O9KM6T'PJC9;+5GOITE%+p~W2Z7F!s6[<p`6sX!x({ Lm"oaaW<tcEKP\|P
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 5c fa 46 85 75 cc 3b 9f 41 fd 57 b0 ea 59 40 0e 66 0e 8d e1 fe 73 26 12 11 bf 6c 3d ca c9 ce 03 03 e1 89 5a f2 9e 1b fe 77 63 3f 4d ad b4 eb cb 21 df e5 f9 c5 45 96 5c 69 28 ff 0f 38 96 fc b5 54 04 f6 ff d3 56 3f d5 48 d0 4b 75 97 b8 5b 5e f4 d0 7a da 22 d5 80 82 82 d3 d9 74 ca 90 56 91 ab 89 dd 2b 7e ef fd 31 9d a2 c5 95 fe 62 5e 40 7c 04 bc 8b 5a c8 b3 80 eb a3 ab 27 8e 51 0e 9e af 66 d3 c0 80 26 79 ae 51 00 20 1d 80 cd 04 e2 0d a5 92 49 91 3a f5 ef 10 e5 99 bc e1 a0 f8 10 5b c9 a3 1c ee 8d bc aa 53 42 09 8c 8b c6 f1 e9 ce 81 3d 8f 84 86 25 d8 27 71 e4 13 5d 5d 18 66 4d 81 0b 86 d0 2d c2 45 25 97 26 46 c3 67 84 0d 09 6c 27 24 69 9b 41 81 00 2f 42 3e f0 f0 86 28 75 83 ee db 41 97 68 c4 9f 53 d0 bc 60 ca 12 70 3b 89 f1 f5 a4 2e 9e 2c 14 33 74 25 b8 2e 06 Data Ascii: \Fu;AWY@fs&l=Zwc?M!E\i(8TV?HKu[^z"tV+~1b^@\|Z'Qf&yQ I:[SB=%'q]]fM-E%&Fgl'$iA/B>(uAhS`p;.,3t%.
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: bd 23 f1 7c c0 15 f7 b9 f6 c4 8c 38 2f 1b 5c 5f d1 27 09 1d 05 a6 5c a8 6a 6a e0 5d d2 5d f5 4c 96 bc 1a 9a 44 e8 96 3f 21 30 c5 43 a1 5b 67 eb 11 b4 8c eb 6b de f9 b9 b0 26 e2 50 47 9d e4 b1 af 78 f9 41 2d bf 42 a5 ab 3c 32 6d 44 8f 21 74 fb e1 ac 6d cd 62 5e f4 59 38 e8 3a e3 d2 d1 43 20 39 6d fe ca f8 0d d2 13 83 84 f0 4f 73 5a d9 2b 73 9e 50 c5 70 2c 57 ae d2 27 54 1a 8b 77 89 db 56 f7 3c 07 4f 72 3c 42 c6 c7 fa 11 14 ac cd 32 c7 71 27 79 94 6c 54 5e d2 2f 94 97 62 4d 41 b4 83 3c 24 f8 07 b6 58 90 4c 10 2b 5d 17 b0 a5 33 8e 5d 97 ba fb 57 7b 7d 46 b3 a8 2c ae a7 1e 9e 5a 3c 69 da 35 d9 30 4f d9 bc c6 ab 0c 11 48 f3 df 2b af ec 79 c3 c4 f7 62 1f 0a 2c 16 c3 ef 23 5e 4e 7b 86 01 63 1e bb a6 c2 69 d6 2b 0a 51 cb 4e 8c 84 c5 f0 c3 f2 8c e5 a3 90 c5 ad 7b Data Ascii: #\|8/\_'\jj]]LD?!0C[gk&PGxA-B<2mD!tmb^Y8:C 9mOsZ+sPp,W'TwV<Or<B2q'ylT^/bMA<$XL+]3]W{}F,Z<i50OH+yb,#^N{ci+QN{
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 22 06 9a d7 96 99 d3 bf 5a 63 9c 1e 31 32 da 1c a8 d5 5c cb 69 7f ee 5f 53 29 dd 8a 15 a2 29 b0 58 f8 4f 1d e8 55 f3 dc 8b a2 41 e0 c6 1e 87 31 98 27 ec e4 7c 4b a6 00 1a 2a e3 3f 11 c7 4d 76 ef 44 3a 6e f7 68 c8 20 77 9d 22 0d 0f 5e a2 e2 d4 c3 89 2c 39 cc 3c ab 9d 6f c0 bc b4 b6 1d 33 7a 51 d7 55 e4 28 81 19 32 08 cc f1 91 c2 08 87 eb 6b 53 e4 00 a7 ac 93 b3 47 69 c2 43 7b d7 72 3a 30 db 10 b7 55 45 60 a8 76 8d 53 a4 1e 23 6c c8 38 03 3a be 59 3c 52 03 85 81 82 19 5f cb 72 ab f8 71 b2 1b 6e 38 fa 9f fb e0 85 7c da 00 af 0e f9 c5 7a 3f 21 64 bd ca 97 57 4a 8f 0e 81 6a 57 46 17 23 f8 ed a3 d0 b2 6d ea e3 e7 ea 5d f9 6d 85 f8 27 4f 53 a7 f1 f8 fe 6c ea be 49 bf c7 40 7b 85 a1 b6 94 30 ee 72 ff df 4c 58 20 88 ce de 86 ac a8 df b1 e4 98 9b 64 d5 63 77 ec bc Data Ascii: "Zc12\i_S))XOUA1'\|K*?MvD:nh w"^,9<o3zQU(2kSGiC{r:0UE`vS#l8:Y<R_rqn8\|z?!dWJjWF#m]m'OSlI@{0rLX dcw
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 0a 16 96 71 85 ca ec 2f b1 05 fd 8f d4 c4 28 f3 bd 0b 1c bb c3 c2 7e 80 df 3b 8d a8 7d b5 b1 f3 6e d1 18 1c 9b c4 18 e6 a1 8b e9 47 00 50 2d e1 00 50 0f 49 91 fc 61 bb a9 6f 9d 98 0d 9a 6f 4f 69 f5 5e 78 b8 cc b3 cf 88 c8 a0 4f db 25 18 95 32 52 3f c6 c6 0f 5a 39 8a 90 40 33 71 18 f9 d5 e8 2f 34 7d 30 37 8e d6 c9 94 0b 66 6d d8 3c 7d d8 ee d0 54 a0 9e f7 b0 af 25 e1 9a bb bb ea 07 70 39 f3 35 5b a6 77 ce 13 e5 0c d4 e3 b5 f9 7e 04 7c f3 7c e6 af 65 50 15 9f 23 ce 54 c7 b7 7b 34 61 58 90 3f b4 65 0e 12 e9 d9 44 b0 5e f1 a0 2e 8f 06 f6 d5 71 18 9b 01 2d 0c 62 0b ce 44 a8 56 f7 db e5 d1 fb 8f 4a d7 4e 5d 8c 8c 1f 95 63 7e 1b 00 7b 71 cc 65 82 c1 81 7f f3 06 47 72 72 eb 4e e2 f2 d1 d7 2e 9a 62 4a ff 99 96 d6 cd f6 50 a0 9c 9d 39 ba b3 c8 74 5e 92 d0 15 8b 30 Data Ascii: q/(~;}nGP-PIaooOi^xO%2R?Z9@3q/4}07fm<}T%p95[w~\|\|eP#T{4aX?eD^.q-bDVJN]c~{qeGrrN.bJP9t^0
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: a3 65 c2 fa 21 d4 bb 7b 57 31 bb 4c 6c 9a 59 f0 78 1c a4 9f 65 75 ab 3e 53 07 8e c6 21 71 ca bb ed c0 b6 e2 a6 11 88 fe 1b fb 6e ee e4 12 37 e2 d7 0a 9f f0 17 c2 b2 d6 26 a9 8c 0d 44 5f ad 11 46 4a 48 f8 1b 75 b3 04 bb f6 bc e2 3e 53 c9 8e b2 53 a8 e2 a4 ff 82 88 c3 88 5e 8e 13 c7 0b 02 10 74 d1 b0 c8 5a 4e 6c e4 7a a4 9d 3c aa e3 b6 ef 99 fb 1c c9 8b 68 9d 29 9f f1 00 3a e9 bc c1 8b 97 2d ef af 3b cb b1 7b 18 0e 02 44 04 36 00 a5 61 39 1c 74 c1 f6 7b 91 64 94 ea 8c 36 e8 5d d9 33 ec 37 12 23 e8 c6 54 a3 ce d1 dd c8 a0 2b e9 34 83 b5 11 b4 c6 8d 7c e0 f5 2e f3 53 6a 40 47 6c 4f da 20 99 ce be 39 de d2 a3 82 20 0b e7 e5 24 d6 5e 6f f4 36 71 1f 7b b0 20 87 21 c5 0a e6 1b e4 40 e4 f9 ea 7a fa cb 34 3c 76 3e 0b 28 08 3b fc 13 48 d4 14 d1 0b 88 ee 9f db e0 57 Data Ascii: e!{W1LlYxeu>S!qn7&D_FJHu>SS^tZNlz<h):-;{D6a9t{d6]37#T+4\|.Sj@GlO 9 $^o6q{ !@z4<v>(;HW
2024-04-19 14:06:15 UTC	704	IN	Data Raw: 06 a4 f2 50 f2 d8 53 60 bb fd 02 c9 45 92 93 e3 b4 01 95 7b 87 49 db 1f a3 6f 60 2c 0f 59 71 5a 83 7b 90 3d bd 73 6f cc 80 28 0e fa a5 8e 8b 91 79 b3 fb 03 1b 90 2f 78 b7 d7 30 18 00 7c 8f e9 80 34 9b a6 a6 82 6b 07 e9 f3 e5 05 87 ff 87 f9 fd d9 37 33 89 cf 1d 16 a0 e7 a2 50 c4 3c 55 d1 67 41 af 0c bb 9b 3b 16 d6 f5 73 62 47 21 4d c4 aa f9 af b7 00 2d a3 67 e7 52 65 cb 80 5f d7 87 e4 50 60 2d 1f 80 d5 51 e5 33 f9 85 35 c9 e6 ef c4 a6 fa 87 38 60 39 04 65 ab 73 3a 4b 14 63 e1 4b 61 84 3f fa 31 27 1b 92 4b 1f 01 35 4f 4f e1 ce e5 0b 6d 1a 60 3a 06 bb 60 b4 82 c7 09 81 f7 ff 2e 7f 79 40 f1 8a 5c b1 f1 42 96 7c 25 d6 61 ea 96 8f af 22 cb 46 0d 53 b1 42 58 5b 8e c3 0a ae f5 14 c5 87 3f a0 6d 66 b4 71 de aa 21 90 ff 9e 02 c2 db 63 40 5d 34 dc 08 b4 1f e7 03 48 Data Ascii: PS`E{Io`,YqZ{=so(y/x0\|4k73P<UgA;sbG!M-gRe_P`-Q358`9es:KcKa?1'K5OOm`:`.y@\B\|%a"FSBX[?mfq!c@]4H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49836	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	533	OUT	GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:39:39 GMT Expires: Sat, 20 Apr 2024 12:39:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 5196 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	244	IN	Data Raw: 52 49 46 46 ec 00 00 00 57 45 42 50 56 50 38 4c df 00 00 00 2f 13 c0 04 10 35 b8 8d 00 46 6d 34 88 57 23 e9 ec 2e 30 44 ce 5d a0 e7 1d 98 4a 7f 17 ac 72 d9 c6 6c e9 32 81 14 e1 36 b6 6d 55 f9 91 0b 0e 35 b8 43 fc 28 e5 bf 18 0d b5 04 27 76 69 c7 aa b0 08 52 dd 0a dc 46 6d 02 74 97 f5 0c fd 83 e4 d5 5c 08 e8 5f 10 eb 9f 59 ee 92 d8 0c d5 ee 92 63 3b 20 f2 8a da b5 d3 8d 17 1c 1d 90 10 c2 7c 20 d6 c9 b1 15 12 70 6b e5 a9 d9 62 bc ce e3 cd bf 60 b9 a6 ab 81 96 8b f8 81 a4 07 70 bb fc 82 85 2f c2 82 37 32 3c e6 f9 ee fc b3 06 f1 f3 8c 98 cf 41 51 96 af e4 01 0b 9f cd 0d a7 59 c3 d5 40 cd 45 72 45 d2 03 f8 9a fd 64 1c e9 a5 5d 3a 9a ae 4b 47 92 5e 05 40 4c d6 53 8e 8f 67 9b e1 7a c4 f7 5e fb 67 c4 7a 67 81 b3 5c 98 4a 45 01 00 Data Ascii: RIFFWEBPVP8L/5Fm4W#.0D]Jrl26mU5C('viRFmt\_Yc; \| pkb`p/72<AQY@ErEd]:KG^@LSgz^gzg\JE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49837	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	532	OUT	GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 332 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:37:28 GMT Expires: Sat, 20 Apr 2024 10:37:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 12527 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	332	IN	Data Raw: 52 49 46 46 44 01 00 00 57 45 42 50 56 50 38 4c 37 01 00 00 2f 13 c0 04 10 95 c0 ae 6d db d8 73 db fc 63 db f6 ab 6d db ce ab 5b 48 15 e9 c0 da b1 0b 58 d1 97 71 bf 7c 88 80 63 5b db f1 2a b6 6d 1b 23 b0 4a 77 99 45 3a bb 75 72 6f c7 0e 9d d5 7a 00 b6 6d 5b ef 04 f0 11 4a b2 98 6c 1d 6c 19 58 4e 48 fa 8c f5 44 3c 24 41 22 58 ef 6b 29 fb a4 be ba 97 bd 79 e1 84 13 57 f6 96 37 54 7d 82 e4 09 90 b7 c4 83 b9 cb 56 ea 47 0c a9 76 34 01 64 05 89 1d 90 25 01 5a bb 1e da 8a 7f 79 29 6f 10 e1 a7 dc bb fb 02 c8 b8 cd 5d 7e e0 30 6a 53 2f 8e 02 12 19 84 a1 a5 de 24 81 97 7c fb 4b ce a9 ad 9c 96 19 c8 38 4d f8 00 0c 3d fe cb 49 fc 71 9d 7f 83 aa 5b c8 39 73 1c f9 11 2f 0e 46 3a 01 6a 87 cf a2 05 7b 6e e8 00 32 c4 ff 64 1c 23 41 3c ac 54 ee 41 ce 69 c8 83 b3 8d 2f 09 Data Ascii: RIFFDWEBPVP8L7/mscm[HXq\|c[*m#JwE:urozm[JllXNHD<$A"Xk)yW7T}VGv4d%Zy)o]~0jS/$\|K8M=Iq[9s/F:j{n2d#A<TAi/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49838	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	532	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 266 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:03:19 GMT Expires: Sat, 20 Apr 2024 12:03:19 GMT Cache-Control: public, max-age=86400, no-transform Age: 7376 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	266	IN	Data Raw: 52 49 46 46 02 01 00 00 57 45 42 50 56 50 38 4c f6 00 00 00 2f 13 c0 04 10 07 a1 10 92 24 67 ae ce df ed 18 fe 11 72 5e 0d 45 8d 24 45 bd fe e5 e1 00 7e 38 d8 03 9a 41 db 48 8e cc 1f dc 41 38 1d 8c f2 25 6c 23 db 56 72 bf ff 1f b9 62 39 0d 50 03 fd b7 c0 10 d1 81 4e 00 00 5b 6e 1a 50 b4 02 09 14 81 82 ac ef b4 ef 36 5c e8 77 1c 2b e8 bc e7 fe fc 86 58 a3 fd f7 d3 55 27 cc dc 06 23 ef 7d b8 ef bd d3 59 db ae bb c8 00 41 02 78 64 42 04 fd 00 86 91 24 25 da 77 77 e3 f1 fc c3 74 c8 20 a2 ff 0a dc b6 51 7c cc f0 0c f8 a1 2c 11 0d 03 91 92 0c b1 c4 c4 71 08 16 89 44 14 40 21 48 d0 aa 4e 98 70 aa 35 a4 a2 bb b5 d3 2a 60 ee e9 d5 b4 6d 73 d1 7e f6 6c 9c 06 02 df 5c 2f ad 5b 2f d4 f4 75 3d 14 81 40 1f d7 ed 58 16 c7 1d 34 6a 3d c6 7d ff ff 65 64 69 dd 69 cb d2 fe Data Ascii: RIFFWEBPVP8L/$gr^E$E~8AHA8%l#Vrb9PN[nP6\w+XU'#}YAxdB$%wwt Q\|,qD@!HNp5*`ms~l\/[/u=@X4j=}edii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49841	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	532	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:53:17 GMT Expires: Sat, 20 Apr 2024 12:53:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 4378 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c db 00 00 00 2f 13 c0 04 10 ff a0 a0 8d 24 65 fc 1b bc 27 15 cc bf 36 94 46 92 14 75 fe 11 a2 f0 48 d4 0f ab a8 6d 24 27 fc f1 dd ef 50 f4 3e 3b 4c 02 00 4c 33 66 c5 53 0c fa fd 2b 51 85 07 00 a5 59 00 02 08 d0 00 02 08 10 10 c0 82 92 6a 9e 73 2e aa 18 29 fe ff d3 77 bf e2 7f 42 3f 86 56 d2 79 3f f0 bb 9f 8e 39 cd 8f ef dc cb f5 be a8 7e 60 01 12 43 01 8e 31 b3 62 00 86 91 24 29 59 ec f1 c3 e5 8d cd 3f 4f 1c 02 88 e8 ff 04 e0 ed 79 2b d2 e6 67 ca 69 1c 56 92 5c 87 71 2a f7 66 9e 9e f7 a0 35 0e b5 c6 a1 31 c8 8a 20 28 32 18 73 aa a3 52 ec ae 08 e3 98 f2 77 3d 95 62 7f ca 1a 84 29 90 86 30 f6 c8 f9 28 89 95 8a 93 c8 bb a3 65 e3 e1 b6 1c a1 a9 a5 12 a9 a4 6e f0 6e 00 Data Ascii: RIFFWEBPVP8L/$e'6FuHm$'P>;LL3fS+QYjs.)wB?Vy?9~`C1b$)Y?Oy+giV\q*f51 (2sRw=b)0(enn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49845	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	516	OUT	GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 622 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:15 GMT Expires: Sat, 20 Apr 2024 13:08:15 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v116" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	622	IN	Data Raw: 52 49 46 46 66 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 1f 00 00 1f 00 00 56 50 38 20 1e 02 00 00 d0 09 00 9d 01 2a 20 00 20 00 3e 6d 2a 90 46 a4 22 a1 a1 37 e8 00 80 0d 89 6c 00 9d 32 84 7e 27 81 a9 44 d2 65 98 26 dc 71 28 c8 32 47 ff 1a f0 16 c7 fa ce 93 d3 3e 8a fd 58 c6 df ed 12 e8 59 fb d1 46 f4 a3 81 58 2f be d9 e7 46 ba ec 19 a9 3a a6 70 e1 40 1e 10 00 fe e9 a7 35 27 db 81 7d 83 b0 d6 39 09 d9 12 01 d7 36 0a e0 11 59 29 f1 0d 86 e5 cd ec 37 9a 74 fb cb 64 fc 57 82 92 5d e3 67 84 5b 37 f6 e6 c4 1a 64 93 e5 a0 f7 84 6c 46 f2 e9 3e c3 30 b1 12 37 50 92 53 68 38 bd d2 a4 e8 6b 3f 58 1e 86 37 04 d2 39 3d e1 1a 9a a5 ff 1c 28 27 35 af 74 51 c8 df 7e fb f8 64 dd 8b 09 e8 08 79 bf 69 a9 23 38 ce 10 42 3f af b0 c0 7e 38 85 2a 67 34 e0 84 f8 Data Ascii: RIFFfWEBPVP8XVP8 * >mF"7l2~'De&q(2G>XYFX/F:p@5'}96Y)7tdW]g[7dlF>07PSh8k?X79=('5tQ~dyi#8B?~8g4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49847	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	525	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2196 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:05:29 GMT Expires: Sat, 20 Apr 2024 11:05:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 10846 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	721	IN	Data Raw: 52 49 46 46 8c 08 00 00 57 45 42 50 56 50 38 4c 7f 08 00 00 2f 3f c0 0f 10 09 86 6d db 46 82 e3 be 27 ef bf 70 ae 3b 44 f4 7f 02 f4 a6 ab 64 e0 aa 84 13 28 b1 4d b3 f5 93 24 ed b9 50 d3 46 92 e3 ea ea 4f 00 96 3f cd 4f 14 d4 b4 6d 04 19 c4 f1 c7 f6 4e 37 1d 04 06 6d 23 39 ce f9 7a bf 7b 00 df ff 09 c0 2b 9d 1f 74 00 cb d7 7c d8 b3 9a 35 7c b9 bc a1 69 c9 22 6c 65 b0 99 0c ff 11 00 06 3e 45 76 dc ff 57 24 db 39 35 73 f9 5e 33 33 b3 33 66 b6 23 8a 5e ea 90 99 22 47 76 c4 b4 03 cb 19 33 33 33 33 33 b3 2f 43 77 95 b9 46 9d d9 d1 2f 7a 1b b0 8e fe 3a 49 ad a0 0d a5 ab 23 95 46 c7 9c 59 7a 30 2a 63 ef e0 f1 7b bf c8 3b f8 eb 6f 2c bd 05 54 76 55 99 77 60 3d c6 1d 98 71 0f 8f 12 c9 b1 6d ab 56 35 d7 3e f7 e2 2e c9 b8 5b 02 24 44 1e 04 40 8f b6 5b 2a b4 e1 bb de Data Ascii: RIFFWEBPVP8L/?mF'p;Dd(M$PFO?OmN7m#9z{+t\|5\|i"le>EvW$95s^333f#^"Gv33333/CwF/z:I#FYz0c{;o,TvUw`=qmV5>.[$D@[
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: dc ad ef 5c f6 7f 65 07 95 11 61 0c 72 d1 ed 36 1b de 65 7a ee 47 58 d9 2a f3 56 aa 2a 53 d8 83 9a 01 85 0a 08 35 4f 4f f3 e5 04 02 03 70 da 89 db 99 3c e8 f2 b1 b5 86 4d 54 72 25 47 c6 84 a5 71 64 e9 3c a9 dc 74 59 1e ff 35 2d a3 36 4f 2d 23 e4 1a a0 da b7 8a 02 78 a8 28 3d cd 73 01 3a 91 4e 8e 31 9b 2b 7c bc 85 cd a6 1f 77 b3 83 52 86 01 d8 7d 6d e4 5a 0b 93 c7 7d c3 ea 3e b4 59 64 27 04 95 9a a7 0a 3d 55 94 de 50 5e 28 c7 10 4c 67 1d ec 25 ff 7e 88 29 25 4d f8 d2 9c 70 26 e4 5c 0b 9d 37 bf db b2 0a 11 70 09 90 5e a1 e6 a9 a2 a0 8a 2e 80 df e3 ff 12 4d ec 61 5f 46 9f 70 d4 31 25 9d 7d 49 11 d9 63 94 70 09 c2 db bf c9 8a 42 a6 64 41 41 c0 1e a4 37 7a 7a 51 a8 41 a1 e5 36 4d 18 21 dd 29 69 64 ba fb d5 59 cb 08 07 75 b3 19 13 9a 08 40 4e 47 ed 83 b3 7f 6c Data Ascii: \ear6ezGXVS5OOp<MTr%Gqd<tY5-6O-#x(=s:N1+\|wR}mZ}>Yd'=UP^(Lg%~)%Mp&\7p^.Ma_Fp1%}IcpBdAA7zzQA6M!)idYu@NGl
2024-04-19 14:06:15 UTC	220	IN	Data Raw: 9f e1 4b c7 0b 76 5d 76 70 31 19 b9 cc d4 90 0a 40 24 a4 8a 8c 04 24 8b 28 00 cc 95 66 1c ac 4e 46 0e fd 86 18 a2 55 40 64 d4 c3 2a 44 02 c8 b0 2e d2 a1 7e 07 db 93 31 72 6a ce 12 62 11 00 88 dc a3 8b 1c 32 41 48 15 19 09 c4 cf 0d 5f 9b 1d 1c 4e c6 16 ba c4 4a 1a 01 91 31 78 7c f9 c8 48 0c 3e 12 23 bb 84 83 8f c9 70 ca 98 49 15 03 e0 ff 41 00 31 fc 84 00 22 23 21 73 a9 60 32 c7 1a 62 90 0c e1 3f 14 91 7b 14 88 1f 10 19 cd 29 83 b4 8c 13 23 55 24 a4 8a 56 01 d1 5a 4a 85 7f 68 24 26 75 a5 73 77 5b eb 5f 89 02 a0 3a cc 57 7b 10 43 e5 34 54 02 a0 92 76 45 66 6f 27 c3 41 d0 41 e1 e7 0e fe b1 c0 7f 76 f0 f8 9d 1f 4f 02 1c 44 1d 44 16 ee 50 07 3f f8 da 25 00 Data Ascii: Kv]vp1@$$(fNFU@d*D.~1rjb2AH_NJ1x\|H>#pIA1"#!s`2b?{)#U$VZJh$&usw[_:W{C4TvEfo'AAvODDP?%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49846	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	524	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 984 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:05:42 GMT Expires: Sat, 20 Apr 2024 12:05:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 7233 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	723	IN	Data Raw: 52 49 46 46 d0 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 88 03 00 00 2f 3f c0 0f 00 e7 04 a1 91 24 47 52 0e 7f c6 67 2a ce ff 43 70 d0 36 92 24 35 7f a6 87 60 ef ab d8 41 db 48 92 d4 fc 99 1e 82 bd af e2 f9 5f 07 0c 21 b8 e3 ce 36 10 00 14 80 e0 4e 70 27 ac 6c b3 12 56 b6 79 1f c0 1d 45 01 05 56 f6 ff 83 15 05 82 3b 8a f2 51 d9 26 28 ee 6c 13 94 fb 46 59 51 00 f6 ff 83 b0 b2 4d 00 d8 66 1b b0 01 77 0e 00 20 04 80 00 0a dc 37 95 00 e1 f6 fb b1 51 14 e5 fe fb a9 ec ff b7 62 73 7d 1e 07 ca ed 79 6c 53 b1 f1 ff ab c0 29 83 df 8f 52 b1 69 73 79 bd 84 10 82 12 de da 54 ce 9d 73 e7 7e c7 9d 7f 70 07 b4 6e 6d 4f db 58 df 30 33 33 33 33 33 33 33 cf 1c 3e c3 3c 6f 99 2b 47 76 ec 58 e6 fe db c8 ca 27 5f ce 55 44 ff 27 00 Data Ascii: RIFFWEBPVP8X??VP8L/?$GRg*Cp6$5`AH_!6Np'lVyEV;Q&(lFYQMfw 7Qbs}ylS)RisyTs~pnmOX03333333><o+GvX'_UD'
2024-04-19 14:06:15 UTC	261	IN	Data Raw: 24 47 77 a3 69 55 04 08 31 8e 67 5a d4 0d 44 ab 9a 1a dd 1c 50 ab 89 e8 81 44 5b b1 80 98 d7 a7 80 7c 40 44 ab 15 58 e5 53 22 4a 3a d0 38 4a ec b7 3d 74 24 44 f4 54 f2 a0 98 41 2b 14 c4 07 e2 1f 25 07 a0 56 d0 8c 02 cc f2 21 ed f7 91 2d b1 40 9b 15 fc fd f4 50 72 21 9f 7f cc ab bd 22 ab 9f 84 77 6c 7e 0e 76 f1 ee a0 a7 56 da d9 11 78 07 df 09 3e 38 9f 45 40 76 27 a6 fd 9f 1d d8 ec 77 fe b2 44 b5 ae 7e d8 15 5f 6c a9 76 d8 0e b7 d9 39 5e 87 fd ec 94 8d 3b 11 aa d8 f8 7f 0e d7 a2 9f 75 54 d3 29 2e 4e e2 98 f5 30 17 a8 6a 9b 97 df 5c d6 ca 9a e7 b9 44 95 db 64 e4 de d8 b5 78 ca 68 a2 b1 d3 96 ef 7d 18 aa 1a 2a df 27 03 95 64 79 96 26 ca 97 5d f8 7d 15 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 Data Ascii: $GwiU1gZDPD[\|@DXS"J:8J=t$DTA+%V!-@Pr!"wl~vVx>8E@v'wD~_lv9^;uT).N0j\Ddxh}'dy&]}EXIF"II1Pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49848	74.125.136.154	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	1207	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&gjid=1062576857&_gid=2128404613.1713535574&_u=YEBAAEAAAAAAACgDI~&z=1324626100 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	593	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 14:06:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49849	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	1475	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5x HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:15 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:15 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-XsvY7FwlMUmcmb6j1OgHAg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:15 UTC	364	IN	Data Raw: 32 61 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af2<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 73 76 59 37 46 77 6c 4d 55 6d 63 6d 62 36 6a 31 4f 67 48 41 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="XsvY7FwlMUmcmb6j1OgHAg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 72 31 7a 33 62 4b 74 5a 46 4b 42 59 79 76 34 4e 41 38 38 4f 4c 46 43 41 7a 30 36 79 4f 58 6f 67 37 68 76 58 4b 30 74 72 78 6e 47 63 74 34 71 63 6a 69 35 57 74 6b 4f 70 35 30 4d 79 57 66 58 59 66 41 62 30 75 66 76 69 54 36 57 6a 77 44 78 37 37 76 62 47 61 5f 43 56 6a 64 43 6a 37 64 62 78 63 5f 4b 75 50 6e 7a 5f 72 48 54 71 50 5f 72 4d 65 69 52 5a 62 68 65 53 36 50 58 5f 69 79 68 6c 75 36 34 46 46 6c 59 71 62 32 37 34 67 42 4c 61 43 59 70 50 33 4c 44 53 55 41 4b 4e 64 65 6b 66 6d 32 38 77 66 73 34 46 34 51 4a 77 31 75 50 66 47 76 77 77 70 67 59 51 55 66 70 62 63 46 35 67 4c 53 6e 72 5f 5f 41 57 51 6e 71 4e 35 75 39 69 41 7a 62 37 6e 48 51 7a 72 34 51 43 6c 51 4d 68 61 6f 61 56 58 59 6e 54 6b 35 58 58 4e 30 56 63 79 53 62 39 34 66 45 5f 33 6e 47 77 47 49 67 Data Ascii: r1z3bKtZFKBYyv4NA88OLFCAz06yOXog7hvXK0trxnGct4qcji5WtkOp50MyWfXYfAb0ufviT6WjwDx77vbGa_CVjdCj7dbxc_KuPnz_rHTqP_rMeiRZbheS6PX_iyhlu64FFlYqb274gBLaCYpP3LDSUAKNdekfm28wfs4F4QJw1uPfGvwwpgYQUfpbcF5gLSnr__AWQnqN5u9iAzb7nHQzr4QClQMhaoaVXYnTk5XXN0VcySb94fE_3nGwGIg
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 78 55 5f 43 43 6f 43 6e 67 46 50 39 37 42 33 55 63 76 52 68 67 72 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 58 73 76 59 37 46 77 6c 4d 55 6d 63 6d 62 36 6a 31 4f 67 48 41 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: xU_CCoCngFP97B3UcvRhgrQ"><script type="text/javascript" nonce="XsvY7FwlMUmcmb6j1OgHAg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:06:15 UTC	598	IN	Data Raw: 70 68 64 6a 4e 71 64 55 6c 72 4c 32 30 77 4d 32 4a 6a 64 30 56 5a 4e 47 70 75 4d 79 39 30 51 58 70 51 4d 6b 5a 54 65 6c 63 72 5a 56 6c 4d 53 47 78 69 53 6a 4e 79 51 7a 46 6f 55 54 6b 78 59 56 6c 4a 62 30 51 77 61 56 68 31 4b 30 63 31 4e 44 5a 76 4f 48 6f 31 61 6d 68 5a 4e 44 6c 6c 53 53 38 35 56 54 42 57 53 48 67 35 64 56 5a 49 65 46 68 56 54 56 6c 59 61 58 68 70 4e 47 70 72 51 56 46 4a 5a 55 39 6d 61 46 64 4e 53 56 4a 78 4d 6b 68 77 56 46 68 79 59 32 68 76 4f 55 70 72 56 55 46 32 55 58 56 77 55 33 55 30 53 46 52 78 54 46 70 44 5a 6d 4a 75 53 57 46 69 53 6c 6c 50 55 6a 4a 58 65 57 77 33 54 32 39 70 62 58 42 79 64 58 49 34 56 46 41 30 55 7a 4e 49 61 69 74 6e 52 6d 56 71 64 6c 45 34 62 44 52 74 55 33 5a 58 59 31 42 6d 62 47 38 7a 63 48 56 55 5a 6a 67 32 52 Data Ascii: phdjNqdUlrL20wM2Jjd0VZNGpuMy90QXpQMkZTelcrZVlMSGxiSjNyQzFoUTkxYVlJb0QwaVh1K0c1NDZvOHo1amhZNDllSS85VTBWSHg5dVZIeFhVTVlYaXhpNGprQVFJZU9maFdNSVJxMkhwVFhyY2hvOUprVUF2UXVwU3U0SFRxTFpDZmJuSWFiSllPUjJXeWw3T29pbXBydXI4VFA0UzNIaitnRmVqdlE4bDRtU3ZXY1BmbG8zcHVUZjg2R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49850	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	525	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2226 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:29:41 GMT Expires: Sat, 20 Apr 2024 12:29:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5794 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	722	IN	Data Raw: 52 49 46 46 aa 08 00 00 57 45 42 50 56 50 38 4c 9e 08 00 00 2f 3f c0 0f 00 4d 30 68 24 49 51 06 ee ee a1 cf bf e0 07 0d 11 fd 9f 00 fd cc ed 4a f2 ba e1 94 d8 b7 40 ba f1 9a 96 ca 58 3b 7a c2 db 73 c1 b8 6d 23 47 da f8 dc fe cb 4b 97 a3 b1 af c3 15 b0 35 b0 8d 24 c9 49 d7 5b 6f 69 81 0c 00 9b fc 03 c3 a2 d8 46 92 d4 68 d0 2e f9 47 b7 26 f0 5a 4b a3 ff 09 46 0f 0e 3a 00 00 d8 fe 5f f7 91 29 d3 86 cd 0c c0 06 1c 97 7c 28 3f 65 02 00 6c d8 be d4 db c3 4e 4c 02 60 0a 22 2a 71 7d 6c 6a b3 7d 3f 00 80 ee fe 7b 56 b5 59 6d 04 03 0f 25 f8 ff 0c c9 d2 3f ab 7b 7a 3c b3 b6 6d db b6 8d bb 6d 7b 6f b6 6d db b6 bd cf b6 cd 79 af bb 2b 97 33 d5 3d b7 77 fa 45 bc 5b e6 c4 cb e5 43 45 ad b7 df 8b 5e 9c 1e 26 32 76 4f 4f db 7b dc cd c5 89 b5 3c d9 e8 08 49 b7 b6 19 92 f4 Data Ascii: RIFFWEBPVP8L/?M0h$IQJ@X;zsm#GK5$I[oiFh.G&ZKF:_)\|(?elNL`"*q}lj}?{VYm%?{z<mm{omy+3=wE[CE^&2vOO{<I
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: bc 04 20 93 c2 4b 18 01 32 d4 ce b7 c2 66 62 d0 80 b9 0b 93 4c 9d 41 30 c6 f8 69 63 91 06 fa f1 40 12 70 c1 28 c4 fa 1a 09 2e 14 40 20 ce c8 ef aa f6 b5 69 ff 59 e7 6e 55 e4 e9 90 86 74 14 00 d5 2f 4d 92 41 06 5a 73 8e d6 16 94 48 c2 4d c9 04 60 04 60 86 66 e4 d9 fa 5e d5 ad 5f ce dd 65 ba a0 c1 f7 a1 00 10 99 ee 39 c8 b8 1c 19 aa 23 d1 31 12 08 2c c7 60 8c 26 61 84 4f 1c f8 02 44 81 b0 b8 2c cb c8 47 6b bb 8d 63 51 10 55 84 48 2f 01 01 65 e0 33 82 34 44 22 d5 2e 5c f4 76 61 9e bc 8c 17 35 c4 d5 e6 6d 35 5f 5a 79 75 2a 27 83 ee 19 30 c8 fa e8 99 32 c4 4a c0 70 82 be c1 15 cc c2 21 0e 2d 45 99 4a a9 1f 01 65 4c 7a 90 db 21 ac fd 75 f5 4e d4 cd fd 6d de 82 00 b8 b1 ea 35 1e 1c d9 66 67 92 99 62 10 f6 54 9e 2b 24 47 7d 01 01 b2 e1 0a 38 4d 0a 23 41 50 b9 80 Data Ascii: K2fbLA0ic@p(.@ iYnUt/MAZsHM``f^_e9#1,`&aOD,GkcQUH/e34D".\va5m5_Zyu*'02Jp!-EJeLz!uNm5fgbT+$G}8M#AP
2024-04-19 14:06:15 UTC	249	IN	Data Raw: c7 aa 5c 18 a3 f6 e4 2e f9 79 04 ad 07 a3 12 46 69 9d 92 da eb 93 02 00 9b 6c 05 a7 73 6a ef cd cf 13 88 f9 48 a9 ff ac d9 e1 f5 82 92 ba e4 eb e5 8e df ba 0e af fb 26 8f 62 6b 0c 00 f8 04 fb 6a 8f 98 14 34 38 01 85 0e 30 53 b8 6b fe c2 54 e9 f3 88 cf fb 94 b7 82 90 91 71 6c 2e 9b 2d 7f 31 6a 2c 8f 32 b6 29 c3 20 17 26 bd 24 80 ae b0 0d d8 32 bb 9d 37 6f 01 71 3b f8 7a cf 0a 66 c8 d2 92 b1 fc c5 f2 1e e5 bf 01 30 49 e5 bd dd 12 2e 93 c0 fa c5 f3 88 eb 16 da 4b 9d a6 b9 48 48 d7 8b e5 e5 ef f5 48 82 a1 38 89 b2 57 26 20 b6 2d e8 10 f7 55 d1 5e 6c 53 1e 34 da 48 8f f7 00 22 18 2c 82 d8 34 a9 46 8e ef 50 1a 6f e6 f6 6a 7b c8 34 65 19 87 c1 86 61 f2 95 b5 9c 2c 9e da a2 94 76 46 dd 6b aa 02 a8 2b 20 30 01 32 b3 64 d1 a4 42 a9 b6 48 74 eb 0a Data Ascii: \.yFilsjH&bkj480SkTql.-1j,2) &$27oq;zf0I.KHHH8W& -U^lS4H",4FPoj{4ea,vFk+ 02dBHt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49852	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	524	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1832 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:48:51 GMT Expires: Sat, 20 Apr 2024 11:48:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 8244 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	722	IN	Data Raw: 52 49 46 46 20 07 00 00 57 45 42 50 56 50 38 4c 14 07 00 00 2f 3f c0 0f 00 09 45 6d db 40 ca be cd f8 03 be 30 44 f4 7f 02 78 aa 06 92 ab 36 5c d0 66 cc 0b 16 6c 1b 49 52 54 87 0f d6 ea 2d 86 fc f3 bc 1c d8 36 92 a4 a8 74 d6 ea ac 0b 00 f3 8f 0f 1e 0d 45 6d 23 b9 49 3f f7 7a 21 b0 c7 e0 fa 9f ca c3 28 03 d0 33 60 bf 7f 66 e5 05 5c e0 5e 56 66 76 10 02 10 66 d6 64 0b b5 ce f8 01 c2 cf 7f ec 7a a8 01 00 33 49 12 3f 18 45 74 e5 ff 53 64 2b 33 b3 72 0d 77 77 77 77 78 01 22 32 e7 05 34 75 32 77 77 88 c9 c8 29 22 77 77 d7 eb ee b2 bb d3 c8 de 5b 33 37 24 fa bd 03 f5 af 7f 61 1d e1 9c 6c ab ab 70 49 b7 0a 6d f4 bc 01 72 ed ff 04 64 53 93 75 88 67 5b 8b 9e 1c d7 f3 00 b8 47 16 3a d9 4d e4 d8 b6 6d da d6 98 7b 3f eb db b6 ad 1a 30 b3 19 fa 67 ca 6c c4 0a 55 01 db Data Ascii: RIFF WEBPVP8L/?Em@0Dx6\flIRT-6tEm#I?z!(3`f\^Vfvfdz3I?EtSd+3rwwwwx"24u2ww)"ww[37$alpImrdSug[G:Mm{?0glU
2024-04-19 14:06:15 UTC	1110	IN	Data Raw: f0 a9 d1 5c a9 37 b8 fb 2c 60 14 50 d5 0d a3 98 3a 3f c9 ee 43 3c eb 4a 03 cc c4 ac b6 77 66 39 f4 c6 e0 af 3e 05 5f c5 49 f3 7d ee a9 b4 aa c0 d4 6b 14 7e ae 02 9a 58 3a 3e ce da 2d 9f 8d c5 9a 88 2c b5 69 66 0a 3d 68 41 ef f6 c4 75 3b bc 3b ff d6 2c 63 8e e1 44 f6 5e 92 8a 00 00 ab 3f 5a a5 90 08 25 c5 57 b6 47 1d cb 8e ad 6a 1c d6 74 e3 d7 2a 9b 1b b0 fe 63 f7 9c 3d c7 23 3b 76 1a 65 70 9f d1 9a 9d 8f 0c 78 41 d6 be 00 92 20 12 60 20 10 67 bb fb 74 72 61 e5 75 05 00 cb 2e 6c 7d b1 27 9c 7b 63 96 b9 43 03 b0 0c 07 df d1 04 b0 ab 21 de f3 ef 9a 83 09 aa 67 cc 3a 5e a2 75 75 27 ad 93 6f db 3d 98 65 42 34 80 16 e8 fb b4 97 40 1d 1e a9 38 52 b2 98 45 c7 d1 e7 93 6e e2 21 0b 65 27 1a 8c 1b f8 8b 32 8a 34 01 30 80 66 cf 82 49 d7 5d 43 b6 1e 7b 2f dc 9e 71 e9 Data Ascii: \7,`P:?C<Jwf9>_I}k~X:>-,if=hAu;;,cD^?Z%WGjt*c=#;vepxA ` gtrau.l}'{cC!g:^uu'o=eB4@8REn!e'240fI]C{/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49853	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	524	OUT	GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2620 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:09 GMT Expires: Sat, 20 Apr 2024 13:08:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 3486 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	722	IN	Data Raw: 52 49 46 46 34 0a 00 00 57 45 42 50 56 50 38 4c 28 0a 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 97 eb fd 2c 7f c4 3f 30 44 f4 7f 02 d8 a7 66 5b 36 68 34 03 e4 c3 1f 5a cb 5a 1a 3b c3 11 1a 1b 5b 68 2c cc b4 6d e3 b3 fc e1 ed 1a 97 90 50 d4 36 92 63 ed d5 e7 42 b9 c6 1f da 49 49 23 49 52 39 58 fe f8 b7 75 23 e1 f0 1d e9 7f 22 09 49 92 4f 00 c0 07 e1 20 42 00 40 14 00 a8 00 41 e0 09 82 0a 50 dd 1b b3 f7 fb d7 98 cb 05 60 d2 01 10 d9 91 b6 4d 91 6c 27 e7 9e cb cc cc cc cc d7 14 33 33 33 4b 2e 33 5b cc cc cc cc cc ac 83 97 99 99 51 d3 1d d1 9d 55 3d 67 56 f0 da 62 ca c8 68 a7 4c 59 ed 4c 4c 94 57 02 4b 1e 75 b4 a7 1d 30 7c 22 53 66 c6 ef 89 ec f6 26 4a b4 87 36 25 2d 62 56 22 47 0e 64 db a6 6d cd b9 0f be 6d db b6 ed 67 db 2f fb d1 8f 6c 1b 91 6d db b6 6d f3 d9 d6 Data Ascii: RIFF4WEBPVP8L(/?m9,?0Df[6h4ZZ;[h,mP6cBII#IR9Xu#"IO B@AP`Ml'333K.3[QU=gVbhLYLLWKu0\|"Sf&J6%-bV"Gdmmg/lmm
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: b0 8d 35 ab b3 58 71 6a 32 f7 fb 04 34 5c 62 4f 19 4f 25 23 63 b3 7a 58 01 af 38 ce b3 4f b0 42 15 16 2b ce cb e5 66 47 00 a3 ea 59 15 15 db 95 2c 33 45 cb 10 e0 39 bb 79 da 09 36 6c c0 62 c5 b1 1f b8 f5 49 80 1e ea 47 df c9 52 e6 7c ab 7b 55 1c 87 23 e8 4d 17 b9 f5 71 76 6b ce ca d5 99 70 9c 9d c1 27 af f1 34 97 cb af 01 08 2d 27 df c2 3c a7 6e 4f f4 13 5e be f1 12 b7 3e c6 ae cd 59 a5 3a 13 8a b3 d2 f9 d4 75 9e 26 5c 61 0d 00 d4 fd 38 18 04 93 25 63 20 68 9b 2a 56 16 23 7e be e9 12 b7 3c ce 6e cd 58 a5 0a 9d f5 c9 eb 3c 03 5c 7e 35 00 10 7b 31 11 a6 d4 76 95 44 db 40 1f 55 e4 e4 9b 2f 73 eb 6d ec 5c 8f cf e6 6b ee 6d fe 73 b9 95 90 cd 96 93 ef ca a6 cc b3 62 3f 8a 61 fe 7d e0 cd f7 b8 ed 36 76 ac c7 67 b3 9a 7f 97 a7 80 cb 2d 03 72 22 10 cc b7 29 24 cf Data Ascii: 5Xqj24\bOO%#czX8OB+fGY,3E9y6lbIGR\|{U#Mqvkp'4-'<nO^>Y:u&\a8%c h*V#~<nX<\~5{1vD@U/sm\kmsb?a}6vg-r")$
2024-04-19 14:06:15 UTC	643	IN	Data Raw: c0 9f c7 80 5d c0 6b ad 90 ae 3f e2 81 0b fd e8 12 bf 68 5c f1 06 c9 7a 2f e4 c6 1f 72 78 74 86 56 74 c7 3e f5 7e 23 6e dd 6c b0 af 15 d1 e2 34 8d 6b c0 a8 35 df 6a 08 98 67 c9 66 b4 63 65 5f 7f 53 66 f9 4a da a3 5b d6 35 86 9e bf fa f0 d3 d2 8b f5 fa 91 64 9c d0 85 25 c8 68 8e 88 37 bb b1 50 a1 13 dd b8 f3 c0 db c7 39 a1 05 f4 d3 ac 0e e9 51 4a 2f d0 42 da 7d f8 e1 67 3f 4d cd 83 13 9f 75 b4 be d8 4e e0 24 75 7d 43 f0 5c 32 63 36 46 bb 5a fe f0 db 02 a7 a8 f8 af f3 da 79 04 90 24 96 04 73 00 73 20 96 50 f0 3e 89 4b 0d 79 22 49 ba 56 bf 87 6e c0 8d d3 20 49 7a 9a d2 63 dd 8a 9b 39 2d 1f 39 5c 2e 2c 4b 63 c4 d1 65 6c 95 68 37 44 49 20 25 6d 56 dd f7 3e 6c 78 86 64 97 38 6d 6b 8f 1d 6e d2 fe 97 d2 0b 54 79 97 f0 08 ad ec eb 94 8f 32 af a6 f8 10 58 a4 25 d7 Data Ascii: ]k?h\z/rxtVt>~#nl4k5jgfce_SfJ[5d%h7P9QJ/B}g?MuN$u}C\2c6FZy$ss P>Ky"IVn Izc9-9\.,Kcelh7DI %mV>lxd8mknTy2X%

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49855	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 33 33 38 53 55 33 32 38 4d 45 4f 58 6e 71 66 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 30 39 31 66 61 64 65 63 31 62 66 39 32 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 338SU328MEOXnqfg.1Context: ba091fadec1bf920
2024-04-19 14:06:15 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:15 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 33 33 38 53 55 33 32 38 4d 45 4f 58 6e 71 66 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 30 39 31 66 61 64 65 63 31 62 66 39 32 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 338SU328MEOXnqfg.2Context: ba091fadec1bf920<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:06:15 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 33 33 38 53 55 33 32 38 4d 45 4f 58 6e 71 66 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 30 39 31 66 61 64 65 63 31 62 66 39 32 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 338SU328MEOXnqfg.3Context: ba091fadec1bf920<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:06:16 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:16 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4b 4b 56 63 46 75 4b 34 43 55 4f 6c 4e 6a 52 4a 4a 48 6b 4a 59 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: KKVcFuK4CUOlNjRJJHkJYw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49856	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	524	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1494 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:59:25 GMT Expires: Sat, 20 Apr 2024 12:59:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 4011 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	722	IN	Data Raw: 52 49 46 46 ce 05 00 00 57 45 42 50 56 50 38 4c c1 05 00 00 2f 3f c0 0f 00 09 45 6d db 40 4a f7 cc f8 23 be 28 44 f4 7f 02 38 8a 48 94 1e 2a 0e 49 23 a0 3e e6 05 a3 36 92 1c 59 fb ca f9 00 2c 7f 9a a7 e5 60 b4 6d db a4 f1 d0 e0 d0 14 02 41 88 9e e0 ff 39 13 fa 3f 01 b6 78 cf 05 40 80 cb 3e 73 7c 00 80 78 1d 0e e0 82 78 32 19 00 08 c8 64 e7 07 05 80 86 b7 88 8e fc 7f 8a 6d a5 7b 8e 3e c7 dd 5d 72 52 77 77 77 0b 5f 84 86 ee 64 4e e8 ee 99 43 ea ee ee 0e d7 fd 74 a3 67 e4 e1 d1 2f 62 07 a7 fe e8 95 0c cb 6e 0d 3a 45 4a 7c 6b b2 b3 83 5b 4f 4e d5 7f 01 14 d9 54 67 bd 02 fc 5a ce 0e 6e bd 65 9c 5d 90 91 c8 c1 b6 ed d8 9b eb 79 df d8 b6 6d 8f d9 8d cd 9c 9c d5 a9 ed cd 76 77 b7 a3 dd cd 36 a6 d8 f8 1e d9 b5 b6 1d 7b 74 dd ef ff bf ff 17 db 4e ce ac 43 67 d4 c5 Data Ascii: RIFFWEBPVP8L/?Em@J#(D8H*I#>6Y,`mA9?x@>s\|xx2dm{>]rRwww_dNCtg/bn:EJ\|k[ONTgZne]ymvw6{tNCg
2024-04-19 14:06:16 UTC	772	IN	Data Raw: 3b bd 3e d9 01 17 8c d7 c1 71 d1 ea 7b 52 db 34 1f 71 c2 96 03 c4 66 c0 c0 08 ef ff 59 86 af b8 98 5b 24 3b 1c a3 3c 7d ad f6 d9 6f 01 2b d6 e7 9f e5 3a 92 01 05 6c 8c 44 c1 51 24 ed 48 61 18 50 2e 28 77 7a fb 6a cb ac 8e d4 67 d2 d5 98 27 91 39 c3 3a d4 54 29 45 cc 3c 50 c1 6b c9 0d 79 43 4c 4c 3c 40 f3 32 7e 5c 77 cd 9c 31 00 ab 1e 78 d9 cc db 08 64 92 0a 73 ca 21 ed 90 46 d2 e8 bf b4 6b 94 e0 42 08 19 32 4f ca 42 cc a4 14 82 51 2c 8f 0d 01 c0 2c 61 f9 56 de 80 b9 c2 86 a5 fa 6e 2f dd e3 a5 02 40 ba c6 d6 f7 4f 0a 06 17 33 9f 9e bd 20 c1 0b 32 bf 19 18 8c 3c cd d5 1d b6 9e c1 03 af 02 56 28 d3 bc e5 0d 85 e9 38 50 21 b6 7d 7d 59 55 16 04 fa ba 53 ba 16 e0 52 a2 31 d0 e9 05 2b c7 c6 30 f1 0b 33 27 f6 7a 79 fd 73 bd a6 b5 4a e6 5e fa 2f 4c be 78 e1 01 ee Data Ascii: ;>q{R4qfY[$;<}o+:lDQ$HaP.(wzjg'9:T)E<PkyCLL<@2~\w1xds!FkB2OBQ,,aVn/@O3 2<V(8P!}}YUSR1+03'zysJ^/Lx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49857	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	524	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1670 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:53:00 GMT Expires: Sat, 20 Apr 2024 11:53:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 7996 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	722	IN	Data Raw: 52 49 46 46 7e 06 00 00 57 45 42 50 56 50 38 4c 71 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 31 ea f8 5d 8f 3f e1 45 21 a2 ff 13 80 33 17 18 80 30 76 0d c4 98 7c 80 85 eb 48 b6 95 a8 71 d7 2f 97 fc a3 22 04 8a 18 d8 8d 41 49 23 49 52 c1 cd a2 95 30 fe 15 ee 3d 80 51 24 49 8a 73 a9 60 19 8f ff d7 ff 09 30 1f fe 54 ee f8 c8 c9 d1 c6 0f 40 0a d0 6a 9b 50 02 f5 a3 17 7b 89 d4 1b b9 1c 4a 97 24 0f 0b 78 78 99 f6 02 8f 3c 00 de 7c f8 2d a2 23 ff bf e2 c8 e9 d7 c3 cc 68 76 c4 ec 88 f1 02 be 04 3b f2 0d 7c 03 47 2e c7 8e 1d 31 33 33 33 33 ce 88 07 5a ea d7 55 d6 13 cc 38 c4 9f 49 d1 a6 ff 7a d5 06 45 1b 8e 23 97 aa 5e d0 97 50 29 db 1b 6c 39 fb 1f c0 a9 4a d9 3b c1 46 74 12 33 3b df dc 77 58 07 72 68 db 36 b5 67 9d 87 ff 8f 6d 9b 95 ad ca 36 2b 3b 55 52 da b6 6d db 49 Data Ascii: RIFF~WEBPVP8Lq/?Em1]?E!30v\|Hq/"AI#IR0=Q$Is`0T@jP{J$xx<\|-#hv;\|G.13333ZU8IzE#^P)l9J;Ft3;wXrh6gm6+;URmI
2024-04-19 14:06:16 UTC	948	IN	Data Raw: 08 df a4 b5 05 f2 a2 96 12 12 b7 a1 71 cb 03 d0 05 4e 50 9d 75 cb 74 07 76 6f 9b 7b b5 54 67 1e 95 c7 60 b1 91 99 76 f8 41 db 88 d9 6a 26 45 04 03 81 1a bc a3 96 90 66 89 5e 48 00 52 ec 0b fd 78 52 58 1f 08 6c 42 19 0e e9 91 43 4b c4 11 eb 86 e3 46 69 5b 39 9c 38 77 7c 01 22 1b 45 cd 3a 54 ad 45 0c cd 60 0d 87 f0 18 12 fc f1 c4 c2 62 dc 9f 9c f0 a7 ba 90 84 d0 c0 6a 58 04 46 5e 40 eb 4e 0e d4 be c2 2a 83 9d 07 90 fb ef 7a a0 34 23 1b 15 d7 98 58 1b f6 25 ba 84 21 fa b6 e4 84 4b 04 62 63 b5 01 2c 10 28 b0 32 20 0f 9d 15 29 dd f9 55 92 c5 58 49 00 6f 88 f8 1d 48 3d 69 26 c5 b6 ee 2b 23 16 53 46 83 8a ad c4 0c 0b 46 ae e0 08 16 60 18 90 25 f8 21 fa 5b fb f4 cb 2e c9 8b 78 5d 03 9b 14 7f a3 61 28 84 41 08 53 a9 4e db 75 52 67 3a 09 5f cc 80 40 cb 5a e7 0d 3e Data Ascii: qNPutvo{Tg`vAj&Ef^HRxRXlBCKFi[98w\|"E:TE`bjXF^@N*z4#X%!Kbc,(2 )UXIoH=i&+#SFF`%![.x]a(ASNuRg:_@Z>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49858	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	1344	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&_u=YEBAAEAAAAAAACgDI~&z=1595821917 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:16 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 14:06:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49862	142.250.105.155	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	616	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&gjid=1062576857&_gid=2128404613.1713535574&_u=YEBAAEAAAAAAACgDI~&z=1324626100 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 14:06:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49863	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	1610	OUT	POST /_/PlayStoreUi/browserinfo?f.sid=3039460499094154015&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=57976&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; _ga_6VGGZHMLM2=GS1.1.1713535575.1.0.1713535575.0.0.0; _ga=GA1.1.702310893.1713535574
2024-04-19 14:06:16 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 30 25 32 43 30 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C0%2C0%5D%5D&
2024-04-19 14:06:16 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:16 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Cross-Origin-Opener-Policy: same-origin-allow-popups Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:16 UTC	15	IN	Data Raw: 35 63 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 Data Ascii: 5c)]}'[[["f
2024-04-19 14:06:16 UTC	83	IN	Data Raw: 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 32 35 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 35 2c 22 38 39 35 38 38 34 30 34 39 38 30 39 35 36 37 39 34 33 35 22 2c 31 30 34 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 32 5d 5d 5d 0d 0a Data Ascii: .mt"],["di",25],["af.httprm",25,"8958840498095679435",104],["e",4,null,null,92]]]
2024-04-19 14:06:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49865	74.125.136.104	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	769	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=702310893.1713535574&jid=737118814&_u=YEBAAEAAAAAAACgDI~&z=1595821917 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:16 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 14:06:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49866	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	1365	OUT	GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:17 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18291 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 13:20:10 GMT Expires: Wed, 16 Apr 2025 13:20:10 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 261967 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:17 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 21 28 77 3d 28 7a 3d 6e 75 6c 6c 2c 61 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,creat
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 46 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 22 22 2b 46 7d 7d 28 61 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 69 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 28 28 77 2e 70 75 73 68 28 7a 5b 30 5d 3c 3c 32 34 7c 7a 5b 31 5d 3c 3c 31 36 7c 7a 5b 32 5d 3c 3c 38 7c 7a 5b 33 5d 29 2c 77 29 2e 70 75 73 68 28 7a 5b 34 5d 3c 3c 32 34 7c 7a 5b 35 5d 3c 3c 31 36 7c 7a 5b 36 5d 3c 3c 38 7c 7a 5b 37 5d 29 2c Data Ascii: reateScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 73 36 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 43 3d 74 68 69 73 2e 50 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 75 72 6e 20 77 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 68 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 62 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 6e 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 43 2f 74 68 69 73 2e 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 2c 71 29 7b 28 74 68 69 73 2e 50 2b 3d 28 71 3d 6d 2d 74 68 69 73 2e 50 2c 74 68 69 73 2e 6e 2b 2b 2c 71 29 2f 74 68 69 73 2e 6e 2c 74 68 69 Data Ascii: 55,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},s6=function(z,w){function a(){this.C=this.P=this.n=0}return w=(a.prototype.Nh=(a.prototype.bP=function(){return 0===this.n?0:Math.sqrt(this.C/this.n)},function(m,q){(this.P+=(q=m-this.P,this.n++,q)/this.n,thi
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 7a 29 2c 4d 29 2e 52 3d 5b 5d 2c 7a 2e 5a 3d 3d 7a 3f 28 76 28 7a 29 7c 30 29 2d 31 3a 31 29 2c 42 28 7a 29 29 2c 30 29 3b 71 3c 77 3b 71 2b 2b 29 4d 2e 52 2e 70 75 73 68 28 42 28 7a 29 29 3b 66 6f 72 28 3b 77 2d 2d 3b 29 4d 2e 52 5b 77 5d 3d 47 28 7a 2c 4d 2e 52 5b 77 5d 29 3b 72 65 74 75 72 6e 28 4d 2e 6b 74 3d 47 28 7a 2c 61 29 2c 4d 29 2e 4f 4f 3d 47 28 7a 2c 6d 29 2c 4d 7d 2c 47 63 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 29 7b 69 66 28 21 77 2e 44 29 7b 77 2e 4b 2b 2b 3b 74 72 79 7b 66 6f 72 28 71 3d 28 61 3d 28 4d 3d 76 6f 69 64 20 30 2c 77 2e 57 29 2c 30 29 3b 2d 2d 7a 3b 29 74 72 79 7b 69 66 28 6d 3d 76 6f 69 64 20 30 2c 77 2e 47 29 4d 3d 4b 49 28 77 2c 77 2e 47 29 3b 65 6c 73 65 7b 69 66 28 71 3d 47 28 77 2c 36 34 29 2c 71 Data Ascii: z),M).R=[],z.Z==z?(v(z)\|0)-1:1),B(z)),0);q<w;q++)M.R.push(B(z));for(;w--;)M.R[w]=G(z,M.R[w]);return(M.kt=G(z,a),M).OO=G(z,m),M},Gc=function(z,w,a,m,q,M){if(!w.D){w.K++;try{for(q=(a=(M=void 0,w.W),0);--z;)try{if(m=void 0,w.G)M=KI(w,w.G);else{if(q=G(w,64),q
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 7d 2c 66 61 6c 73 65 2c 7a 29 2c 61 7d 2c 50 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 79 4d 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 29 7b 66 6f 72 28 3b 7a 2e 6c 2e 6c 65 6e 67 74 68 3b 29 7b 6d 3d 28 7a 2e 67 3d 6e 75 6c 6c 2c 7a 2e 6c 29 2e 70 6f 70 28 29 3b 74 72 79 7b 61 3d 62 73 28 7a 2c 6d 29 7d 63 61 74 63 68 28 71 29 7b 6e 28 7a 2c 71 29 7d 69 66 28 77 26 26 7a 2e 67 29 7b 77 3d 7a 2e 67 2c 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 28 7a 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 61 7d 2c 78 34 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 29 7b 66 6f 72 28 4d 3d 28 7a 2e 64 31 3d 28 7a 2e 67 31 3d 61 57 28 7b 67 65 74 3a 66 75 Data Ascii: },false,z),a},P={passive:true,capture:true},yM=function(z,w,a,m){for(;z.l.length;){m=(z.g=null,z.l).pop();try{a=bs(z,m)}catch(q){n(z,q)}if(w&&z.g){w=z.g,w(function(){O(z,true,true)});break}}return a},x4=function(z,w,a,m,q,M,t){for(M=(z.d1=(z.g1=aW({get:fu
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 7d 29 29 2c 7a 29 2c 7a 29 2c 30 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 29 7b 28 4b 3d 47 28 28 79 3d 30 21 3d 47 28 46 2c 28 79 3d 42 28 46 29 2c 4b 3d 42 28 46 29 2c 79 29 29 2c 46 29 2c 4b 29 2c 79 29 26 26 41 28 36 34 2c 46 2c 4b 29 7d 29 29 2c 30 29 2c 30 5d 29 2c 67 29 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 21 44 28 74 72 75 65 2c 66 61 6c 73 65 2c 4b 2c 46 29 26 26 28 4b 3d 57 74 28 46 29 2c 79 3d 4b 2e 4f 4f 2c 62 3d 4b 2e 6b 74 2c 46 2e 5a 3d 3d 46 7c 7c 79 3d 3d 46 2e 48 5a 26 26 62 3d 3d 46 29 26 26 28 41 28 4b 2e 56 6f 2c 46 2c 79 2e 61 70 70 6c 79 28 62 2c 4b 2e 52 29 29 2c 46 2e 41 3d 46 2e 59 28 29 29 7d 29 2c 7a 29 2c 5b 5d 29 2c 66 75 6e 63 74 69 6f Data Ascii: })),z),z),0),z),function(){}),function(F,K,y){(K=G((y=0!=G(F,(y=B(F),K=B(F),y)),F),K),y)&&A(64,F,K)})),0),0]),g)),z),function(F,K,y,b){!D(true,false,K,F)&&(K=Wt(F),y=K.OO,b=K.kt,F.Z==F\|\|y==F.HZ&&b==F)&&(A(K.Vo,F,y.apply(b,K.R)),F.A=F.Y())}),z),[]),functio
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 47 28 46 2c 42 28 46 29 29 29 3b 49 28 62 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 59 2c 5a 2c 78 2c 66 2c 72 29 7b 66 6f 72 28 72 3d 28 5a 3d 28 66 3d 5b 5d 2c 30 29 2c 5b 5d 29 3b 5a 3c 53 3b 5a 2b 2b 29 7b 69 66 28 21 28 78 3d 6c 5b 5a 5d 2c 57 5b 5a 5d 29 29 7b 66 6f 72 28 3b 78 3e 3d 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 70 75 73 68 28 42 28 59 29 29 3b 78 3d 66 5b 78 5d 7d 72 2e 70 75 73 68 28 78 29 7d 59 2e 48 3d 55 36 28 28 59 2e 47 3d 55 36 28 64 2e 73 6c 69 63 65 28 29 2c 59 29 2c 72 29 2c 59 29 7d 29 7d 29 29 2c 7a 29 2e 50 5a 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 41 28 28 4b 3d 42 28 28 79 3d 28 62 3d 42 28 46 29 2c 42 29 28 46 29 2c 46 29 29 2c 4b 29 2c 46 2c 47 28 46 2c 62 29 7c 7c 47 28 46 2c 79 29 29 7d 29 29 2c 37 34 29 Data Ascii: G(F,B(F)));I(b,F,function(Y,Z,x,f,r){for(r=(Z=(f=[],0),[]);Z<S;Z++){if(!(x=l[Z],W[Z])){for(;x>=f.length;)f.push(B(Y));x=f[x]}r.push(x)}Y.H=U6((Y.G=U6(d.slice(),Y),r),Y)})})),z).PZ=0,function(F,K,y,b){A((K=B((y=(b=B(F),B)(F),F)),K),F,G(F,b)\|\|G(F,y))})),74)
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 6c 73 65 20 41 28 36 34 2c 46 2c 46 2e 57 29 7d 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 2c 57 2c 64 2c 6c 29 7b 66 6f 72 28 62 3d 28 6c 3d 28 57 3d 28 4b 3d 28 64 3d 42 28 46 29 2c 4d 78 28 46 29 29 2c 22 22 29 2c 47 28 46 2c 31 33 35 29 29 2c 6c 2e 6c 65 6e 67 74 68 29 2c 79 3d 30 3b 4b 2d 2d 3b 29 79 3d 28 28 79 7c 30 29 2b 28 4d 78 28 46 29 7c 30 29 29 25 62 2c 57 2b 3d 74 5b 6c 5b 79 5d 5d 3b 41 28 64 2c 46 2c 57 29 7d 29 2c 41 29 28 33 30 32 2c 7a 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 74 73 28 46 2c 31 29 7d 29 29 2c 7a 29 2c 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 29 7b 28 46 3d 28 4b 3d 42 28 46 29 2c 47 28 46 2e 5a 2c 4b 29 29 2c 46 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: lse A(64,F,F.W)}),z),function(F,K,y,b,W,d,l){for(b=(l=(W=(K=(d=B(F),Mx(F)),""),G(F,135)),l.length),y=0;K--;)y=((y\|0)+(Mx(F)\|0))%b,W+=t[l[y]];A(d,F,W)}),A)(302,z,0),function(F){ts(F,1)})),z),{}),function(F,K){(F=(K=B(F),G(F.Z,K)),F)[0].removeEventListener(
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 28 7a 2e 42 3d 74 72 75 65 29 2c 77 5b 34 5d 26 26 28 7a 2e 69 3d 74 72 75 65 29 2c 77 5b 35 5d 26 26 28 7a 2e 49 3d 74 72 75 65 29 2c 77 5b 36 5d 26 26 28 7a 2e 54 3d 74 72 75 65 29 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 6b 34 29 7a 2e 42 3d 74 72 75 65 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 63 74 29 7b 7a 2e 49 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 7a 2e 46 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 74 72 79 7b 61 3d 7a 2e 46 5b 6d 5d 2c 61 5b 30 5d 5b 61 5b 31 5d 5d 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 4d 29 7b 7d 7d 63 61 74 63 68 28 4d 29 7b 7d 28 30 2c 77 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 4d 2c 74 29 7b 7a 2e 6f 73 28 4d 2c 74 72 75 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 28 Data Ascii: (z.B=true),w[4]&&(z.i=true),w[5]&&(z.I=true),w[6]&&(z.T=true),z.j(w);else if(q==k4)z.B=true,z.j(w);else if(q==ct){z.I=true;try{for(m=0;m<z.F.length;m++)try{a=z.F[m],a[0][a[1]](a[2])}catch(M){}}catch(M){}(0,w[1])(function(M,t){z.os(M,true,t)},function(M){(
2024-04-19 14:06:17 UTC	1255	IN	Data Raw: 77 5b 6d 5d 29 7d 2c 41 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 28 77 3d 67 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 7a 3d 6e 75 6c 6c 2c 21 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 53 45 7d 29 7d 63 61 74 63 68 28 61 29 7b 67 2e 63 6f 6e 73 6f 6c 65 26 26 67 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 7a 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 2c 46 2c 4b 29 7b 69 66 28 28 28 28 74 3d Data Ascii: w[m])},As=function(z,w){if((w=g.trustedTypes,z=null,!w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:SE,createScript:SE,createScriptURL:SE})}catch(a){g.console&&g.console.error(a.message)}return z},D=function(z,w,a,m,q,M,t,F,K){if((((t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49867	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:17 UTC	1377	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:17 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 19 Apr 2024 14:06:17 GMT Date: Fri, 19 Apr 2024 14:06:17 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:17 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');
2024-04-19 14:06:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49871	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:19 UTC	1469	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6537 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=ha0arjrgjd5x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:19 UTC	6537	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 34 31 44 6c 30 47 52 48 6a 4b 73 4a 75 32 62 66 6f 70 41 44 45 70 68 4d 58 45 53 47 7a 46 56 41 47 64 53 38 36 5a 5a 61 5f 43 59 67 43 4b 6f 41 65 64 66 6a 69 32 41 32 74 4d 37 30 44 33 77 65 56 42 34 4d 59 31 6a 33 61 73 6f 6c 72 49 6c 72 4d 41 32 76 30 53 44 46 73 51 56 36 56 44 4f 79 5f 59 31 47 79 7a 69 32 59 44 35 75 43 45 2d 43 78 49 79 41 61 5f 73 47 37 39 59 53 4c 45 51 50 4f 61 37 2d 35 66 5a 64 64 70 6c 71 6e 7a 4d 45 59 67 75 50 77 37 39 79 76 37 75 30 45 33 76 59 30 39 46 70 4c 55 4a 4e 4d 47 50 45 59 34 31 6a 43 50 4c 2d 44 6e 41 6d 6d 57 48 36 6a 54 49 66 68 4a 6e 6b 79 6f 68 79 48 41 37 48 35 2d 59 77 6e 41 59 41 6a 42 6c 49 37 67 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA41Dl0GRHjKsJu2bfopADEphMXESGzFVAGdS86ZZa_CYgCKoAedfji2A2tM70D3weVB4MY1j3asolrIlrMA2v0SDFsQV6VDOy_Y1Gyzi2YD5uCE-CxIyAa_sG79YSLEQPOa7-5fZddplqnzMEYguPw79yv7u0E3vY09FpLUJNMGPEY41jCPL-DnAmmWH6jTIfhJnkyohyHA7H5-YwnAYAjBlI7g
2024-04-19 14:06:19 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:06:19 GMT Expires: Fri, 19 Apr 2024 14:06:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOajOHZZBN-hHGcVN016Y57cTwWF_qpyxc1mk6RBbKmxlLUWNI0wCWDpKHz9Rv1Nwz1OE7yQdwZAeixXMhts;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:06:19 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:19 UTC	559	IN	Data Raw: 61 36 32 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 34 68 4b 75 59 77 49 43 65 47 41 4b 75 5f 65 4e 57 6f 45 48 5a 53 75 50 69 69 39 68 73 6d 6d 75 38 69 57 66 49 56 49 5a 5f 50 59 32 4c 7a 36 70 56 59 37 70 68 56 6e 75 31 4b 52 4a 73 6c 52 57 4b 53 32 4d 69 32 76 66 73 42 74 75 5f 36 51 58 54 41 76 7a 7a 39 48 6d 6b 53 65 73 64 31 5f 4a 4f 6f 4d 52 71 65 36 34 76 30 67 4c 30 62 48 59 5f 66 39 54 35 61 44 4c 56 76 53 52 77 75 51 58 63 6e 67 2d 41 64 54 63 77 43 76 6b 75 55 5f 30 53 6a 5f 69 34 55 31 77 53 68 4e 2d 41 57 78 6c 72 5f 79 6c 7a 2d 67 73 43 7a 54 42 43 6d 68 51 31 51 6b 38 53 49 35 63 54 69 38 69 55 69 5f 58 67 56 55 42 51 6d 64 65 57 6f 68 71 79 55 69 44 39 55 33 4a 72 69 76 5a 68 72 65 4b 63 68 45 71 62 49 Data Ascii: a62)]}'["rresp","03AFcWeA64hKuYwICeGAKu_eNWoEHZSuPii9hsmmu8iWfIVIZ_PY2Lz6pVY7phVnu1KRJslRWKS2Mi2vfsBtu_6QXTAvzz9HmkSesd1_JOoMRqe64v0gL0bHY_f9T5aDLVvSRwuQXcng-AdTcwCvkuU_0Sj_i4U1wShN-AWxlr_ylz-gsCzTBCmhQ1Qk8SI5cTi8iUi_XgVUBQmdeWohqyUiD9U3JrivZhreKchEqbI
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 62 67 77 4d 54 47 66 64 4e 48 31 67 68 32 46 59 78 75 73 33 7a 50 4d 6d 55 62 51 65 41 58 6e 6e 52 52 42 64 39 66 65 70 55 51 4e 78 4c 6e 79 2d 62 57 30 38 44 44 4c 58 5f 30 48 4c 6c 49 4e 71 58 78 77 45 35 43 44 57 71 6d 51 55 71 4b 62 67 74 6e 64 78 42 65 61 7a 43 75 74 72 76 65 49 36 56 4a 65 65 67 56 39 38 56 72 47 30 50 38 36 63 66 35 4d 6b 43 33 78 6d 44 73 61 54 6b 56 7a 78 2d 64 79 75 36 59 33 7a 61 31 39 6f 4a 37 5a 6f 46 47 77 74 5a 30 63 41 4c 4a 6a 79 62 71 37 6f 71 35 45 35 76 73 64 4d 4e 64 56 76 62 64 4a 79 69 4b 6a 69 37 6d 49 6e 32 58 59 2d 63 4b 55 47 73 4b 6f 56 38 59 6d 70 68 65 78 34 68 39 63 47 33 54 31 38 48 6c 71 44 73 33 62 6a 59 34 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: bgwMTGfdNH1gh2FYxus3zPMmUbQeAXnnRRBd9fepUQNxLny-bW08DDLX_0HLlINqXxwE5CDWqmQUqKbgtndxBeazCutrveI6VJeegV98VrG0P86cf5MkC3xmDsaTkVzx-dyu6Y3za19oJ7ZoFGwtZ0cALJjybq7oq5E5vsdMNdVvbdJyiKji7mIn2XY-cKUGsKoV8Ymphex4h9cG3T18HlqDs3bjY4",null,120,null,null,null,["bgdat
2024-04-19 14:06:19 UTC	851	IN	Data Raw: 34 72 4c 32 64 76 4e 55 63 7a 52 31 67 32 52 56 5a 78 4b 31 6c 5a 53 6c 70 74 61 6b 4a 58 51 6e 56 70 65 58 4a 48 4e 54 42 46 63 6d 63 35 52 48 46 4e 4d 44 4d 77 4d 31 5a 52 52 6a 46 47 63 46 4d 78 65 56 5a 46 54 30 35 43 64 31 46 46 5a 6a 4a 32 4f 58 4e 4b 5a 6a 67 72 4b 30 6c 47 59 30 6c 6f 65 6a 67 76 4f 55 64 59 62 54 5a 4e 55 7a 68 70 52 30 31 4a 64 6a 68 70 4f 45 5a 6a 4d 6d 52 6f 4e 31 5a 33 4b 79 74 42 4e 45 64 61 51 6e 6c 51 63 6e 6f 72 64 30 6c 6f 59 6d 4a 76 62 48 46 56 5a 46 68 55 55 6b 51 72 4d 30 35 4e 5a 6b 78 58 54 30 4e 36 51 57 52 78 63 6a 64 34 61 56 4e 61 5a 6e 64 56 53 31 64 48 64 57 70 53 5a 6b 39 6e 4f 47 34 72 4e 6d 4e 49 4e 46 67 72 4d 7a 46 42 59 31 6b 31 4e 32 55 33 61 48 64 6d 54 6e 5a 57 5a 6c 6c 53 4d 47 70 77 4f 55 5a 6f 4e Data Ascii: 4rL2dvNUczR1g2RVZxK1lZSlptakJXQnVpeXJHNTBFcmc5RHFNMDMwM1ZRRjFGcFMxeVZFT05Cd1FFZjJ2OXNKZjgrK0lGY0loejgvOUdYbTZNUzhpR01JdjhpOEZjMmRoN1Z3KytBNEdaQnlQcnord0loYmJvbHFVZFhUUkQrM05NZkxXT0N6QWRxcjd4aVNaZndVS1dHdWpSZk9nOG4rNmNINFgrMzFBY1k1N2U3aHdmTnZWZllSMGpwOUZoN
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 32 35 30 36 0d 0a 78 53 6b 5a 32 57 57 38 34 4f 45 68 4f 59 6b 74 56 56 58 4a 31 56 44 5a 74 53 55 74 4b 54 30 68 53 64 6e 46 6b 4d 55 63 77 56 54 4e 33 57 6e 4a 42 65 45 4d 79 54 6d 39 57 64 7a 64 33 4b 31 6c 4f 53 31 70 44 63 47 74 5a 53 48 5a 31 56 55 39 4c 4b 79 74 76 52 6c 56 58 59 6c 59 34 5a 7a 68 51 56 32 35 52 4e 6a 68 50 55 6d 78 43 4d 7a 42 4c 63 45 4a 50 64 48 68 6f 65 55 45 35 55 57 4d 72 52 57 68 55 62 55 4e 50 57 6a 45 33 52 31 4e 4d 64 30 39 35 62 58 56 32 54 7a 46 42 4f 56 70 48 51 33 5a 34 56 47 39 6e 63 32 68 6a 53 48 4d 31 52 45 68 72 59 56 6c 6c 54 57 4a 73 56 57 59 7a 53 44 4e 55 4d 30 78 45 59 6b 31 72 64 30 31 72 63 6b 78 49 55 6e 59 76 63 6d 6c 4e 63 53 39 5a 52 55 30 33 54 32 52 42 4c 30 46 4c 55 30 6f 72 57 47 31 4c 53 48 52 50 Data Ascii: 2506xSkZ2WW84OEhOYktVVXJ1VDZtSUtKT0hSdnFkMUcwVTN3WnJBeEMyTm9Wdzd3K1lOS1pDcGtZSHZ1VU9LKytvRlVXYlY4ZzhQV25RNjhPUmxCMzBLcEJPdHhoeUE5UWMrRWhUbUNPWjE3R1NMd095bXV2TzFBOVpHQ3Z4VG9nc2hjSHM1REhrYVllTWJsVWYzSDNUM0xEYk1rd01rckxIUnYvcmlNcS9ZRU03T2RBL0FLU0orWG1LSHRP
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 54 32 35 4e 56 46 59 72 51 6d 56 50 61 6b 56 56 64 44 56 6b 62 33 4e 56 55 47 64 32 4d 46 45 76 63 46 5a 50 52 45 35 73 65 48 45 35 63 6e 5a 72 61 47 77 32 61 54 42 4f 53 6d 5a 44 53 7a 64 7a 55 7a 68 7a 57 58 42 77 65 45 59 79 52 7a 4e 4c 64 44 59 77 62 30 4e 72 53 30 52 4c 52 6d 74 35 59 7a 56 4e 53 6d 35 4d 64 57 73 32 4d 6d 5a 71 4d 45 73 72 5a 6a 68 4d 62 6a 46 74 52 56 46 70 59 58 52 48 51 32 4a 6d 4d 58 52 50 53 30 6c 5a 62 57 46 4e 57 57 51 79 61 48 63 34 62 47 45 78 4f 58 42 54 4d 30 68 72 52 6e 56 79 5a 45 64 52 55 6d 30 30 51 6b 68 7a 62 6c 6c 30 51 31 5a 55 51 32 6c 32 4d 6d 39 59 61 45 5a 48 63 44 68 47 61 6a 64 6a 53 46 52 6a 4e 47 4a 6c 62 69 39 58 55 56 64 6b 51 30 64 55 54 6d 63 33 64 45 5a 61 52 57 56 68 65 6c 64 32 4c 32 74 42 4d 6c 70 Data Ascii: T25NVFYrQmVPakVVdDVkb3NVUGd2MFEvcFZPRE5seHE5cnZraGw2aTBOSmZDSzdzUzhzWXBweEYyRzNLdDYwb0NrS0RLRmt5YzVNSm5MdWs2MmZqMEsrZjhMbjFtRVFpYXRHQ2JmMXRPS0lZbWFNWWQyaHc4bGExOXBTM0hrRnVyZEdRUm00Qkhzbll0Q1ZUQ2l2Mm9YaEZHcDhGajdjSFRjNGJlbi9XUVdkQ0dUTmc3dEZaRWVheld2L2tBMlp
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 32 53 47 68 45 56 47 46 71 53 48 70 7a 52 55 46 35 4d 47 56 50 52 57 31 79 57 6d 35 6e 4f 57 73 7a 61 47 6c 4b 52 6a 49 79 54 6a 63 78 61 57 31 30 61 47 39 74 4b 30 52 31 63 55 45 32 63 6e 70 53 62 47 77 35 62 6c 70 35 65 54 51 77 4f 57 56 50 52 54 64 49 61 47 4e 73 54 58 67 33 4d 54 56 6c 57 45 4a 74 63 31 49 78 59 6d 39 6e 64 7a 67 7a 54 79 73 77 59 30 68 4a 56 43 74 35 4f 55 31 51 64 6b 6c 6c 54 56 55 72 4d 7a 56 54 65 6b 6c 72 55 6a 52 71 65 55 78 50 57 46 70 58 62 57 64 4b 55 55 74 36 56 46 46 4a 63 6b 64 46 65 58 64 43 4e 6e 42 4c 4d 44 46 45 52 6b 4e 33 4e 44 42 51 5a 54 52 68 57 57 74 69 63 56 4e 55 57 57 74 56 53 32 68 50 57 45 35 55 53 58 51 35 4d 30 31 77 56 30 78 34 62 30 68 72 62 57 46 59 52 57 5a 4e 54 6d 31 35 62 6d 4a 6c 5a 31 64 4c 62 7a Data Ascii: 2SGhEVGFqSHpzRUF5MGVPRW1yWm5nOWszaGlKRjIyTjcxaW10aG9tK0R1cUE2cnpSbGw5blp5eTQwOWVPRTdIaGNsTXg3MTVlWEJtc1IxYm9ndzgzTyswY0hJVCt5OU1QdkllTVUrMzVTeklrUjRqeUxPWFpXbWdKUUt6VFFJckdFeXdCNnBLMDFERkN3NDBQZTRhWWticVNUWWtVS2hPWE5USXQ5M01wV0x4b0hrbWFYRWZNTm15bmJlZ1dLbz
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 70 6a 59 55 4e 58 51 55 35 44 54 47 64 52 65 47 4d 79 51 56 4e 4a 55 44 67 79 53 32 6f 30 54 55 31 78 55 32 4e 46 64 58 5a 31 4d 32 74 6a 61 30 74 77 55 44 42 73 53 55 38 79 55 31 67 34 63 57 35 32 55 57 74 61 55 46 68 4f 57 44 41 35 5a 6c 4d 32 56 48 56 48 4d 6d 56 52 4e 56 49 32 55 79 39 4a 54 6c 68 4a 65 57 35 56 65 58 46 36 52 58 70 30 5a 54 52 31 57 43 39 78 53 44 4a 7a 52 55 49 30 4f 45 4e 73 65 48 46 61 59 6d 45 79 61 43 74 56 5a 30 39 58 53 56 68 34 56 45 4e 33 63 46 5a 52 53 6d 46 45 64 55 56 34 56 30 64 72 59 58 64 78 4d 6e 56 42 4f 45 4e 51 5a 6d 45 33 64 54 46 72 65 6c 63 31 62 46 4a 73 63 48 5a 6a 4e 33 55 30 62 48 64 6f 52 6c 4e 73 54 55 31 4b 4f 43 74 52 51 53 39 36 65 44 4a 53 51 6c 52 77 52 7a 46 73 61 6e 4e 43 59 55 6f 32 54 31 42 79 4f Data Ascii: pjYUNXQU5DTGdReGMyQVNJUDgyS2o0TU1xU2NFdXZ1M2tja0twUDBsSU8yU1g4cW52UWtaUFhOWDA5ZlM2VHVHMmVRNVI2Uy9JTlhJeW5VeXF6RXp0ZTR1WC9xSDJzRUI0OENseHFaYmEyaCtVZ09XSVh4VEN3cFZRSmFEdUV4V0drYXdxMnVBOENQZmE3dTFrelc1bFJscHZjN3U0bHdoRlNsTU1KOCtRQS96eDJSQlRwRzFsanNCYUo2T1ByO
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 43 74 42 4d 6d 46 52 52 6b 6c 55 5a 55 4a 35 64 46 70 78 65 47 74 75 4b 30 4e 46 54 55 4a 44 62 48 51 30 54 58 42 74 62 30 31 31 63 54 5a 6e 53 47 52 4d 55 30 68 78 63 44 4e 71 62 69 74 68 57 6c 70 52 55 48 70 75 63 33 52 4a 5a 33 6b 78 55 6c 70 4d 54 31 4a 72 61 32 4a 79 61 55 35 52 4e 56 70 46 4d 6a 46 49 65 55 59 34 55 57 5a 52 5a 6c 4a 4f 4e 6e 5a 53 61 47 59 35 59 32 39 6f 53 46 70 31 4b 33 64 45 4e 7a 4e 71 64 6b 78 71 4e 6a 4e 4b 57 44 46 31 4e 47 70 33 62 46 70 54 52 54 55 35 57 57 46 4b 62 6b 70 74 51 6c 68 6c 62 46 5a 71 52 33 64 79 52 46 6c 61 52 6d 31 48 62 46 70 43 61 57 74 70 55 58 6c 72 59 30 5a 57 53 54 64 56 4d 30 46 32 52 55 68 4d 4d 45 64 59 51 33 56 32 52 47 64 53 62 43 39 6b 4f 46 5a 4e 52 7a 68 36 61 6b 64 49 51 6b 39 6c 4e 47 45 7a Data Ascii: CtBMmFRRklUZUJ5dFpxeGtuK0NFTUJDbHQ0TXBtb011cTZnSGRMU0hxcDNqbithWlpRUHpuc3RJZ3kxUlpMT1Jra2JyaU5RNVpFMjFIeUY4UWZRZlJONnZSaGY5Y29oSFp1K3dENzNqdkxqNjNKWDF1NGp3bFpTRTU5WWFKbkptQlhlbFZqR3dyRFlaRm1HbFpCaWtpUXlrY0ZWSTdVM0F2RUhMMEdYQ3V2RGdSbC9kOFZNRzh6akdIQk9lNGEz
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 56 6c 70 68 4f 55 63 7a 63 6e 46 32 51 6c 42 70 59 30 5a 33 4d 44 64 48 56 32 30 72 56 48 42 6d 61 6d 39 47 64 58 46 4b 53 56 6c 6e 55 31 6c 33 56 47 46 58 56 6d 6f 33 5a 30 4a 36 51 55 70 56 4d 56 6c 4d 61 6c 56 45 54 55 51 31 55 48 6c 76 59 7a 46 6d 55 6d 49 7a 54 44 46 4b 62 6c 68 6a 52 46 68 50 63 6b 4a 52 65 45 35 79 64 31 52 75 5a 54 4a 75 4d 33 6c 4c 59 6e 56 57 61 44 51 30 55 7a 42 73 64 56 67 76 4e 30 74 31 64 6c 56 6b 4d 33 70 43 4d 6e 41 31 4d 6e 68 35 62 6c 42 48 62 58 52 36 63 6b 52 56 52 7a 46 4d 55 33 42 42 56 45 68 79 59 31 6c 4a 53 47 46 33 59 32 74 35 57 57 52 4d 57 6b 39 73 52 6e 68 68 5a 47 6c 43 64 56 67 77 56 44 59 32 57 55 56 77 57 57 64 72 56 31 42 42 64 45 5a 70 63 57 4a 79 64 32 59 31 56 44 4e 31 51 6d 56 68 56 6c 41 35 4d 30 6c Data Ascii: VlphOUczcnF2QlBpY0Z3MDdHV20rVHBmam9GdXFKSVlnU1l3VGFXVmo3Z0J6QUpVMVlMalVETUQ1UHlvYzFmUmIzTDFKblhjRFhPckJReE5yd1RuZTJuM3lLYnVWaDQ0UzBsdVgvN0t1dlVkM3pCMnA1Mnh5blBHbXR6ckRVRzFMU3BBVEhyY1lJSGF3Y2t5WWRMWk9sRnhhZGlCdVgwVDY2WUVwWWdrV1BBdEZpcWJyd2Y1VDN1QmVhVlA5M0l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49873	13.107.246.41	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:19 UTC	791	OUT	GET /completeRedirect/lxDNVZKK?correlationId=0eb9bac7b89eba1d42ca7d0628a379db&platformSelected=iOS HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=99.36680174381405; x-ms-routing-name=self
2024-04-19 14:06:20 UTC	471	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 14:06:19 GMT Content-Length: 0 Connection: close Location: https://apps.apple.com/us/app/id951937596?referrer=kmas_id%253d2b5e41e0-2876-ce7d-04eb-ed9b5556ab0e%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140619Z-15497cdd9fd7zlxcshs1xwhzsn00000001kg00000000qfnu X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49875	74.125.136.104	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:19 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajOHZZBN-hHGcVN016Y57cTwWF_qpyxc1mk6RBbKmxlLUWNI0wCWDpKHz9Rv1Nwz1OE7yQdwZAeixXMhts; NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:19 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:06:19 GMT Expires: Fri, 19 Apr 2024 14:06:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:19 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:06:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49878	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:22 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 57 38 68 6d 4e 70 6d 32 41 55 69 76 6e 47 31 65 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 38 33 38 30 30 63 62 66 62 36 63 63 34 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: W8hmNpm2AUivnG1e.1Context: 8a83800cbfb6cc47
2024-04-19 14:06:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:22 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 57 38 68 6d 4e 70 6d 32 41 55 69 76 6e 47 31 65 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 38 33 38 30 30 63 62 66 62 36 63 63 34 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: W8hmNpm2AUivnG1e.2Context: 8a83800cbfb6cc47<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:06:22 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 57 38 68 6d 4e 70 6d 32 41 55 69 76 6e 47 31 65 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 38 33 38 30 30 63 62 66 62 36 63 63 34 37 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: W8hmNpm2AUivnG1e.3Context: 8a83800cbfb6cc47
2024-04-19 14:06:22 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:22 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 33 57 42 39 4d 59 6f 63 4c 6b 43 35 4b 71 75 4b 38 74 33 79 6b 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 3WB9MYocLkC5KquK8t3ykQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49945	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:28 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 48 54 72 47 48 36 78 5a 30 6b 53 50 51 2f 67 41 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 63 63 65 62 38 66 63 39 33 34 64 39 31 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: HTrGH6xZ0kSPQ/gA.1Context: e5cceb8fc934d918
2024-04-19 14:06:28 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:28 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 48 54 72 47 48 36 78 5a 30 6b 53 50 51 2f 67 41 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 63 63 65 62 38 66 63 39 33 34 64 39 31 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: HTrGH6xZ0kSPQ/gA.2Context: e5cceb8fc934d918<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:06:28 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 48 54 72 47 48 36 78 5a 30 6b 53 50 51 2f 67 41 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 63 63 65 62 38 66 63 39 33 34 64 39 31 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: HTrGH6xZ0kSPQ/gA.3Context: e5cceb8fc934d918<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:06:28 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:28 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4e 55 71 72 2b 4a 35 69 73 30 36 4d 44 62 58 66 4c 72 6f 65 56 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: NUqr+J5is06MDbXfLroeVw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49954	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:37 UTC	1486	OUT	GET /store/games HTTP/1.1 Host: play.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.0.1713535576.0.0.0; OTZ=7520526_48_52_123900_48_436380
2024-04-19 14:06:38 UTC	2281	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:38 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: script-src 'report-sample' 'nonce-TDavFnB5zl5vyxpLUcuK-Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/PlayStoreUi/web-reports?context=eJzjitDikmII1JBikPj6kkkDiF-sZWV-B8T6x1mZjYE4-hQrcxwQr33OyrwZiL--YGX-CcRO6TNYg4DYp34GawwQt948xzoViJP-nWctAmIhbo53Xzo3sgnM-HI3BwBTJyh_" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 37 32 61 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 66 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 Data Ascii: 72a9<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://play.google.com/"><link ref="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><meta
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 73 68 69 70 32 5c 22 2c 5c 22 61 69 72 2e 45 70 69 63 42 61 74 74 6c 65 46 61 6e 74 61 73 79 35 5c 22 2c 5c 22 61 69 72 2e 62 67 2e 6c 61 6e 2e 4d 6f 6e 6f 70 6f 6c 69 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 62 75 72 61 63 6f 70 72 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 61 63 68 65 74 61 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 68 69 6e 63 68 6f 6e 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 64 6f 6d 69 6e 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 6d 65 67 61 6a 6f 67 6f 73 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 70 61 72 63 68 69 73 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d Data Ascii: ship2\",\"air.EpicBattleFantasy5\",\"air.bg.lan.Monopoli\",\"air.br.com.buracopro.mobile\",\"air.br.com.cacheta.mobile\",\"air.br.com.chinchon.mobile\",\"air.br.com.domino.mobile\",\"air.br.com.megajogos.mobile\",\"air.br.com.parchis.mobile\",\"air.br.com
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 68 62 6c 6f 63 6b 33 64 5c 22 2c 5c 22 61 70 70 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 5f 61 70 70 5c 22 2c 5c 22 61 70 70 2e 66 78 72 6f 79 61 6c 65 70 72 6f 2e 63 6f 6d 5c 22 2c 5c 22 61 70 70 2e 73 75 70 65 72 6b 69 63 6b 6f 66 66 5c 22 2c 5c 22 61 70 70 73 2e 72 2e 74 77 6f 74 68 6f 75 73 61 6e 64 66 6f 72 74 79 65 69 67 68 74 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 6a 69 67 73 61 77 2e 70 75 7a 7a 6c 65 2e 6f 6e 6c 69 6e 65 2e 66 72 65 65 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 70 61 69 6e 74 2e 62 79 2e 6e 75 6d 62 65 72 2e 67 61 6d 65 2e 70 75 7a 7a 6c 65 2e 66 72 65 65 5c 22 2c 5c 22 61 74 61 2e 6b 72 61 6b 65 6e 2e 73 69 6e 67 6c 65 63 69 74 79 5c 22 Data Ascii: hblock3d\",\"app.fourequalsten.fourequalsten_app\",\"app.fxroyalepro.com\",\"app.superkickoff\",\"apps.r.twothousandfortyeight\",\"art.color.planet.jigsaw.puzzle.online.free\",\"art.color.planet.paint.by.number.game.puzzle.free\",\"ata.kraken.singlecity\"
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 2c 5c 22 62 79 2e 72 65 64 74 6f 77 65 72 2e 41 34 61 71 75 61 50 72 69 6e 74 5c 22 2c 5c 22 62 79 2e 76 6f 73 74 72 61 77 2e 67 61 6d 65 2e 72 75 2e 6b 65 79 62 6f 61 72 64 5c 22 2c 5c 22 63 61 2e 68 79 70 65 72 68 69 70 70 6f 2e 61 64 76 65 6e 74 75 72 65 61 67 65 73 5c 22 2c 5c 22 63 61 2e 6c 62 63 73 74 75 64 69 6f 73 2e 68 65 6d 70 69 72 65 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 66 69 73 68 69 6e 67 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 70 6d 33 5c 22 2c 5c 22 63 61 66 65 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c 5c 22 63 61 72 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c 5c 22 63 61 72 2e 70 61 72 6b 69 6e 67 2e 67 61 6d 65 73 2e 6d 61 73 74 65 72 2e 6a 61 Data Ascii: ,\"by.redtower.A4aquaPrint\",\"by.vostraw.game.ru.keyboard\",\"ca.hyperhippo.adventureages\",\"ca.lbcstudios.hempire\",\"ca.roofdog.fishing\",\"ca.roofdog.pm3\",\"cafe.games.toddlers.and.kids\",\"car.games.toddlers.and.kids\",\"car.parking.games.master.ja
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 75 64 69 6f 2e 47 72 61 73 73 4d 61 73 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 45 76 6f 54 41 70 70 73 2e 47 61 6d 65 4f 66 45 76 6f 6c 75 74 69 6f 6e 5c 22 2c 5c 22 63 6f 6d 2e 46 34 6e 74 6f 6d 47 61 6d 65 73 2e 47 65 6f 6d 65 74 72 79 4a 75 6d 70 33 44 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 42 61 6e 61 6e 61 4b 6f 6e 67 42 6c 61 73 74 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 31 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 32 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 6c 61 6e 6e 65 2e 4d 69 6e 75 74 65 73 54 69 6c 6c 44 61 77 6e 2e 72 6f 67 75 65 6c 69 6b 65 2e 73 68 6f Data Ascii: udio.GrassMaster\",\"com.EvoTApps.GameOfEvolution\",\"com.F4ntomGames.GeometryJump3D\",\"com.FDGEntertainment.BananaKongBlast.gp\",\"com.FDGEntertainment.CoverOrange1.gp\",\"com.FDGEntertainment.CoverOrange2.gp\",\"com.Flanne.MinutesTillDawn.roguelike.sho
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 4c 69 66 65 5c 22 2c 5c 22 63 6f 6d 2e 4f 4f 5a 4f 4f 47 4f 52 41 45 2e 43 68 61 72 61 63 74 65 72 4d 61 6b 65 72 5c 22 2c 5c 22 63 6f 6d 2e 4f 72 79 75 67 65 6e 2e 57 6f 72 6c 64 4f 66 50 72 61 6e 64 69 73 42 65 74 61 5c 22 2c 5c 22 63 6f 6d 2e 4f 73 4f 73 2e 54 69 6e 79 41 72 63 68 65 72 73 5c 22 2c 5c 22 63 6f 6d 2e 4f 77 69 6e 67 73 2e 41 72 72 6f 77 57 61 72 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 43 6f 6f 6b 69 6e 67 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 49 6e 54 68 65 53 75 70 65 72 6d 61 72 6b 65 74 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 69 72 74 68 64 61 79 50 61 72 74 79 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 48 Data Ascii: Life\",\"com.OOZOOGORAE.CharacterMaker\",\"com.Oryugen.WorldOfPrandisBeta\",\"com.OsOs.TinyArchers\",\"com.Owings.ArrowWar\",\"com.PSVStudio.BarboskinsCooking\",\"com.PSVStudio.BarboskinsInTheSupermarket\",\"com.PSVStudio.BirthdayParty\",\"com.PSVStudio.H
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 72 57 61 73 68 39 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 63 61 72 77 61 73 68 34 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 65 6e 74 69 73 74 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 6f 63 74 6f 72 56 65 74 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 72 65 73 73 55 70 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 66 61 72 6d 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 68 61 69 72 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 64 73 42 75 73 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 6e 64 65 72 67 61 72 74 65 6e 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6d 65 6e 74 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 Data Ascii: rWash9\",\"com.YovoGames.carwash4\",\"com.YovoGames.dentist3\",\"com.YovoGames.doctorVet\",\"com.YovoGames.dressUp\",\"com.YovoGames.farm5\",\"com.YovoGames.hair5\",\"com.YovoGames.kidsBus\",\"com.YovoGames.kindergarten3\",\"com.YovoGames.ment\",\"com.Yov
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 74 2e 6e 61 75 74 69 63 61 6c 6c 69 66 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 68 61 71 75 65 73 74 2e 70 65 74 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 65 6e 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 72 75 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 72 61 63 69 6e 67 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 64 69 6e 6f 73 61 75 72 2e 67 61 6d 65 73 2e 6c 69 74 74 6c 65 2e 6b 69 64 73 2e 74 Data Ascii: t.nauticallife\",\"com.alphaquest.pet\",\"com.amayasoft.bookstorem4.en\",\"com.amayasoft.bookstorem4.ru\",\"com.amayasoft.cars.kids.racing.toddlers.garage.game\",\"com.amayasoft.cars.kids.toddlers.garage.game\",\"com.amayasoft.dinosaur.games.little.kids.t
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 6d 2e 61 74 72 69 6c 6c 69 6f 6e 67 61 6d 65 73 2e 63 68 65 73 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d 2e 61 75 65 72 2e 64 61 77 6e 62 72 65 61 6b 2e 74 72 69 61 6c 2e 73 69 6e 67 6c 65 2e 70 6c 61 79 65 72 2e 66 72 65 65 5c 22 2c 5c 22 63 6f 6d 2e 61 75 74 75 6d 6e 69 6e 74 65 72 61 63 74 69 76 65 2e 6d 79 72 75 6d 6d 79 5c 22 2c 5c 22 63 6f 6d 2e 61 76 65 63 74 6f 72 2e 69 74 77 2e 69 74 77 6d 6a 31 36 68 64 5c 22 2c 5c 22 63 6f 6d 2e 61 76 6f 6b 69 64 64 6f 2e 67 61 6d 65 73 2e 74 68 69 6e 6b 72 6f 6c 6c 73 5f 6b 69 6e 67 73 5f 61 6e 64 5f 71 75 65 65 6e 73 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 69 61 6e 61 6e 6f 76 65 6c 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 Data Ascii: m.atrilliongames.chessnew\",\"com.auer.dawnbreak.trial.single.player.free\",\"com.autumninteractive.myrummy\",\"com.avector.itw.itwmj16hd\",\"com.avokiddo.games.thinkrolls_kings_and_queens\",\"com.awardsmediagroup.diananovelsnew\",\"com.awardsmediagroup.d
2024-04-19 14:06:38 UTC	2281	IN	Data Raw: 66 75 72 6e 69 73 68 2e 68 6f 6d 65 2e 67 61 6d 65 73 2e 68 6f 6d 65 73 63 61 70 65 73 2e 6c 69 66 65 2e 6f 63 64 5c 22 2c 5c 22 63 6f 6d 2e 62 66 61 2e 62 61 74 74 6c 65 6c 69 6e 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 67 66 2e 6d 65 72 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 67 61 6d 65 73 2e 62 61 74 61 6b 6f 6e 6c 69 6e 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 6f 6f 73 2e 6d 61 72 72 69 61 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 69 62 6f 6f 6d 2e 69 64 6c 65 73 68 65 6c 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 76 65 72 73 65 2e 77 6f 72 64 2e 73 65 61 72 63 68 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 77 6f 72 64 73 65 61 72 63 68 2e 63 72 6f 73 73 77 6f 72 64 2e 70 75 7a 7a 6c 65 2e 67 61 6d 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 Data Ascii: furnish.home.games.homescapes.life.ocd\",\"com.bfa.battlelines\",\"com.bgf.merge\",\"com.bhgames.batakonline\",\"com.bhoos.marriage\",\"com.bibiboom.idleshelter\",\"com.bible.verse.word.search.game\",\"com.bible.wordsearch.crossword.puzzle.games\",\"com.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49965	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1099	OUT	GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:40 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8594 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:27:51 GMT Expires: Sat, 20 Apr 2024 11:27:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 9529 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:40 UTC	722	IN	Data Raw: 52 49 46 46 8a 21 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 41 21 00 00 2f 3f c0 0f 00 4d 28 8c 24 19 32 63 fd e4 1f b0 24 22 fa 1f 54 35 4c 96 0e 27 4c 33 54 66 a3 8e de 8f 1a c6 30 a6 fe 53 a0 90 77 38 07 ee c2 41 24 49 8a 54 c7 e8 5f 1d 33 33 df 4f bc 0e b6 91 6d 2b 39 1f 88 a8 80 fe eb 71 22 42 22 77 f7 3b 8c db 48 52 54 bb 77 f9 c7 58 af 63 66 be fe 87 8e 34 43 71 1c c9 30 45 47 99 38 c3 e0 0d b6 cf c1 bb c4 7b f3 2d 8d 32 b6 61 70 0d b6 e1 28 06 9a 9f aa b0 69 7d 4a a8 22 ea 48 cd f3 4d 4d 76 4e e9 01 0d b4 20 54 38 eb c2 ab e7 87 0c 7e 12 64 51 86 66 23 59 78 11 c0 41 f9 e7 91 21 97 e1 9f 70 41 8a 84 03 00 e0 81 05 2e e4 82 21 65 02 02 fa 39 e0 01 00 44 98 a6 ff 5f e4 48 ce ff 9f 50 59 a0 02 15 89 19 5b 6a Data Ascii: RIFF!WEBPVP8X??VP8LA!/?M($2c$"T5L'L3Tf0Sw8A$IT_33Om+9q"B"w;HRTwXcf4Cq0EG8{-2ap(i}J"HMMvN T8~dQf#YxA!pA.!e9D_HPY[j
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 4e 9b 5f 9b 65 a3 62 19 46 56 4d d6 87 b1 f9 0d ab d9 ed 7c 0e 54 9c 92 29 71 c2 e5 75 fd dd d5 90 9a 7f c8 b3 2c b1 ce 30 2a 39 58 e3 6c 1e 9b 15 0d 09 36 56 66 f1 a7 b4 be 41 48 08 91 a1 cd e6 7f 05 eb c3 21 8a b8 40 07 75 77 66 81 7b 40 30 25 77 10 1b 04 75 cb b0 b2 61 e6 65 74 55 e6 27 87 4e ad 14 14 b1 fd 6a 20 d9 34 fb 74 4e 5f 92 36 b9 7e 9e fb ba 7c df 34 ff f5 2b 43 df 7f 57 c4 87 6e 00 50 1d d7 58 41 89 93 1a fa ff bb a7 bd ba 78 87 47 4e 33 b5 44 4a 40 4a 19 9c 86 27 2c d7 5a 39 11 4a 96 86 19 95 0a 4f 1b e4 ba 30 5d b4 3d 1f 0c e6 6b dc d1 ad 97 b8 77 69 5c ee 89 12 05 9c ab 9b c2 95 26 7f 11 a1 c2 92 46 6c b1 69 cc 2b 92 0d 31 a8 fc ce a0 5b 96 9b 89 65 7a 30 0e 79 b3 56 3e 8d 1c fd f4 49 e2 34 f3 6c 2d bd 7f 63 e2 fa 44 c6 e4 0d 91 ea 80 aa Data Ascii: N_ebFVM\|T)qu,0*9Xl6VfAH!@uwf{@0%wuaetU'Nj 4tN_6~\|4+CWnPXAxGN3DJ@J',Z9JO0]=kwi\&Fli+1[ez0yV>I4l-cD
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 65 87 f9 d5 7e f7 4c 53 ff 1d 1d 97 85 0a 50 79 4b 5f cc e7 cd e7 02 a3 57 a5 59 53 d8 54 56 c2 64 14 0b 1a 15 8f f9 cb 3f 5c c3 28 94 bc 73 75 8f 80 d6 e4 f2 af be b4 5f 9d 46 bb ca 1b 46 d5 5f 70 4d ff e9 73 c7 1f 38 60 50 fe ac b4 f8 3c 98 52 5b 43 5d c2 a7 21 b8 1a e0 4b 33 fe f8 cd ca d1 83 72 5c a4 08 0d 41 22 a1 a6 99 60 76 bc 4f 3b c6 c8 ec 5c 7b 39 1a 41 92 08 14 61 0a 66 e8 10 a2 99 47 95 a1 32 85 b5 23 eb 3a 77 c8 3f 32 7b 7b 62 d2 76 39 a1 f7 25 9b c3 a6 75 d0 ce e7 aa dd d0 30 9b 69 da 48 34 d3 c4 8c 80 df 4f 13 bb ba 70 c7 7f a8 55 3e df a8 dd 12 b7 37 d3 7f 4c 25 91 8a 6b 42 f7 8e da d9 77 47 a6 2f 58 f9 d8 a4 e6 69 2d a8 5e fd 94 ff fc b1 ea f5 96 bf d9 50 b8 5c 99 54 ed 83 ba 10 12 a9 c6 cb 32 75 af 4b 7a 7a ac 8e 46 31 89 68 88 c0 44 87 Data Ascii: e~LSPyK_WYSTVd?\(su_FF_pMs8`P<R[C]!K3r\A"`vO;\{9AafG2#:w?2{{bv9%u0iH4OpU>7L%kBwG/Xi-^P\T2uKzzF1hD
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 5a fe 0c 0b f6 ea ce 3e b3 38 13 18 da 4a f0 7b c8 22 99 b3 3b 59 75 e7 8d 86 d9 be 85 31 7c fa 42 83 3d ea 77 1d 4f 1a 14 f1 9f 43 f8 75 c6 6a 8a 24 44 b1 b7 cd 0e c9 e1 20 ed 0f 86 13 9f fc 73 d3 ec cd 85 73 2c 98 f7 d3 f9 92 29 6e 79 e3 45 7f 3a 0f 1c ee 8a 8d a3 24 d5 05 a1 58 7e f7 f0 06 9d 21 64 4e b7 c1 e6 52 c3 c8 aa fc a8 0a dd 13 2a 91 52 90 82 dd 0b c6 cd b4 fe ba 20 de 15 4e c1 0e ff d5 54 07 8f 1a 55 42 cb 07 dc b1 e0 5d d7 0b b7 59 24 b3 bc 6c f2 ab ae 8f 99 6b c5 6c c4 ac e0 d5 22 0c 8a 0c 8a 18 9b ae cf 98 02 66 19 a6 59 f3 c3 d8 26 81 68 8e 07 03 bc 94 a9 5d 27 14 06 de 7f 24 06 eb a5 74 e6 8c 8f ef a9 ef 5f b5 60 b2 6c 6d 86 fb c6 af cc ff 08 14 ce 97 3a 71 ed ba 28 56 c5 25 2b 52 c3 65 f5 c4 6f ad d4 6a d2 d1 b3 67 e7 95 c2 2a 35 e3 3b Data Ascii: Z>8J{";Yu1\|B=wOCuj$D ss,)nyE:$X~!dNRR NTUB]Y$lkl"fY&h]'$t_`lm:q(V%+Reojg5;
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: f3 85 d9 ce da a6 e6 31 5c df 3c bb ca d2 cd d4 ca e1 6c 58 08 a1 86 a8 9d ec 06 f9 f4 ec d3 65 ef 80 50 13 6e 7c fc bd 3a c4 aa 08 15 dc a1 f5 3a 79 b1 28 50 8c 8f 6e 3f 6f 6d ba ef 39 75 ce 42 a7 c0 8e 89 9e ae 3c a9 6b 94 08 c9 43 60 0c 73 8a 27 52 84 12 09 04 49 04 90 24 90 81 80 f1 3e 4c ef 69 08 fb 55 cf 72 f2 07 fe 64 29 e7 3a 67 0f 94 84 7f 6d 79 d0 de f7 f1 8f 14 07 13 c7 c5 23 77 7a f3 0f 9f 59 58 d9 32 c6 71 b0 66 b0 04 30 80 32 06 44 08 43 14 cd 83 7c 07 67 a9 8f 3f 75 fa 05 cf 9e 7c c7 cc 83 96 47 5c 74 50 14 74 58 df 3a 7f 59 b8 ba ee 51 19 e6 b7 ad cd 3a 65 5d 9c 96 b3 eb 03 7e 4f 96 30 66 5c 73 6c 23 d4 9f 29 08 3e 93 10 92 84 e1 52 3f f4 13 18 40 97 8c 29 8a 6c 8c e3 f6 84 11 71 9e 75 58 56 3e 62 1e d7 f2 66 0f 9e bc 7a 73 41 78 42 1b e6 Data Ascii: 1\<lXePn\|::y(Pn?om9uB<kC`s'RI$>LiUrd):gmy#wzYX2qf02DC\|g?u\|G\tPtX:YQ:e]~O0f\sl#)>R?@)lquXV>bfzsAxB
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 21 90 e1 7d ed a1 a1 b0 6a 7d 43 95 64 75 f7 70 dd 5f fa 92 79 fc 30 1d a8 42 89 71 38 aa 4b a2 23 40 3c 8a 4d d0 15 aa 33 3e 18 05 bd b2 37 8e 49 ca a5 3d 5d d8 10 a6 14 62 5e d0 a2 4a 9c a0 70 96 5d 7d 3d d2 ac 0b 09 00 10 28 cb ef 2f d2 f0 c8 82 b6 7b d9 79 e3 f4 41 70 8a 02 80 04 92 04 b2 1c 80 b5 21 a8 0d 24 e4 4d 43 f0 bf b1 ff bc 2f dd 55 69 b7 ea e4 d5 0f 79 e5 df 3e f5 f8 58 c2 d4 4c 27 d6 3f 20 21 b2 1f a2 04 d0 a0 f3 21 3c 53 7c 78 0f 12 21 cb 94 9a f5 62 97 14 44 c8 9b dd c0 d4 50 36 b5 3e 72 ec 56 43 08 c4 06 00 39 2a 12 14 38 48 f5 18 35 19 20 a7 16 c7 50 65 bd 84 06 32 c8 00 2f 56 43 2e 86 10 b2 5f d9 de e3 b9 2f d6 9d a6 83 67 7c e1 9c fe 70 df f0 8e b0 fd a9 3c 4b eb d1 9f 46 ec 6c 00 e2 bd 14 ed c5 00 0c 53 88 29 0e bb 31 0c 49 c3 96 2c Data Ascii: !}j}Cdup_y0Bq8K#@<M3>7I=]b^Jp]}=(/{yAp!$MC/Uiy>XL'? !!<S\|x!bDP6>rVC9*8H5 Pe2/VC._/g\|p<KFlS)1I,
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 05 e1 c5 0c 90 0c 56 2a 92 bd d4 8e a2 49 30 84 01 6c a0 01 1e a1 74 9a 95 cc b3 f9 1e f3 44 08 38 01 78 36 00 a6 52 d0 c3 20 a1 48 cb 11 12 88 10 25 42 2a c0 06 92 f1 d1 7f 40 1b 08 0d 99 26 dd 73 20 c0 5a 72 1f df 20 dc 96 2c 0e b1 4b 80 5b 6f 82 25 42 a1 1e 71 fc 04 c5 a0 f4 97 87 99 7f df 9b f5 1b a7 b3 ff f6 6a e3 8d c5 0a 3d 68 07 79 98 20 66 af 12 82 c5 e3 14 19 a6 99 89 b0 a1 66 4b 00 5d 87 0b 32 b3 22 05 1a 14 7b 07 00 27 50 01 80 25 97 1d 7e 6a ba df ed dc 1b 43 d2 79 af ed 68 34 7b 08 0c b1 2a a3 d4 b9 83 ae f7 f8 d3 cf 5c 39 fa dc dc 80 08 5c 60 04 84 1e c2 2a 74 97 41 73 41 80 f4 80 a6 c4 12 87 b6 06 45 1d f9 c6 c3 66 d3 5f ab a5 ff 38 3f e2 ff 6e ae 17 f8 29 25 93 48 50 90 ca 68 84 da ac 56 12 4d d9 76 00 39 80 12 70 ad d8 06 d4 8f 80 5a 20 Data Ascii: VI0ltD8x6R H%B@&s Zr ,K[o%Bqj=hy ffK]2"{'P%~jCyh4{\9\`tAsAEf_8?n)%HPhVMv9pZ
2024-04-19 14:06:40 UTC	342	IN	Data Raw: de c1 9d 2c 29 e0 ad 4a 68 64 c4 5b 45 30 c1 20 0c e0 07 fc 26 47 6a 54 0a 50 01 30 d0 5b 29 20 4a 41 bc 80 f3 34 8d 7a 9e c9 1b b0 d0 59 83 3a 45 78 41 36 40 11 14 11 68 1a 78 33 75 99 da 58 fa a4 89 24 d7 94 a8 ed 03 4e 51 53 57 54 c8 d2 91 6f ef 8a 53 3f c6 d0 0c a8 02 0a f8 29 cb 72 c6 28 02 67 9d 7d ec 49 46 53 0f 31 88 c0 ee c4 83 58 ff fc d8 fe 4f 3b 0f f5 bd f2 88 16 a2 20 ba 42 c3 6e 5b 46 52 41 86 71 c5 40 45 84 de a3 24 c3 37 a2 7d e0 cf 32 c4 2b 31 85 40 44 fc f7 f7 68 55 66 30 28 3a a3 70 6a 05 37 ed d5 a1 22 b6 21 12 e8 5b 76 07 91 61 76 70 9a 72 83 59 02 03 e2 ae ba ac da 6b 39 f7 42 50 42 eb 7c 5d bd 1e aa fb 02 09 b1 08 0b be ec cb de c8 83 ad ae 97 ba 3d 14 0d 5d 44 51 3e f4 bd b9 18 50 3c 6f e9 d6 bb c5 33 ee 35 55 11 aa cc 8d 81 6a 65 Data Ascii: ,)Jhd[E0 &GjTP0[) JA4zY:ExA6@hx3uX$NQSWToS?)r(g}IFS1XO; Bn[FRAq@E$7}2+1@DhUf0(:pj7"![vavprYk9BPB\|]=]DQ>P<o35Uje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49964	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1105	OUT	GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:40 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19102 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:02:21 GMT Expires: Sat, 20 Apr 2024 12:02:21 GMT Cache-Control: public, max-age=86400, no-transform Age: 7459 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:40 UTC	721	IN	Data Raw: 52 49 46 46 96 4a 00 00 57 45 42 50 56 50 38 20 8a 4a 00 00 10 f1 00 9d 01 2a a0 01 ea 00 3e 55 24 8e 45 a3 a2 21 24 28 78 ab 70 80 0a 89 63 6d a5 44 f8 49 72 74 30 38 58 94 79 37 e3 d9 e3 f5 8b b2 64 a5 ca 9e 7d 2f 9f ff 6b d7 3f f6 af 50 df eb 3e 98 7d 3d 79 8f fd c4 f5 83 f4 8f fe 07 d4 1f fb bf 53 57 a1 17 ed 8f a7 77 b3 8f f7 ff fc 3e 98 1e a0 1f ff f7 be 66 2d cd 9f c7 7e 47 fe eb fb 0b e4 db d2 fe d1 7f 7a ff bb fe d7 e4 cf 43 7e a9 fd d7 fd ff 44 bf 96 fd d7 fc 77 f7 af da 5f f0 9f b8 ff 74 ff aa ff 93 e3 4f cc df f4 fd 42 3f 29 fe 75 fe 07 f2 b3 fc 87 ee 9f 2b 95 bb f4 08 f6 c3 e9 ff ea 7f c0 7e ea ff 8a f8 07 fa 2f f7 9f e3 ff 6c 7d da fb 11 fe db fc 67 ee d7 f7 2f b0 0f e5 3f d1 ff ce 7f 7c fd bf ff 03 ff ff fe ef de df ee 3f ee 78 ec 7d f7 fe Data Ascii: RIFFJWEBPVP8 J*>U$E!$(xpcmDIrt08Xy7d}/k?P>}=ySWw>f-~GzC~Dw_tOB?)u+~/l}g/?\|?x}
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: cd d4 60 06 81 e3 ea 6e 4e 1f d0 ca 64 79 a9 f8 4b b7 98 e8 e1 10 30 e1 42 98 be fe d7 1b 7a 62 4a a1 56 81 85 0b 90 f3 1f ed a8 23 cd e4 66 f3 a2 9d 59 3c 51 69 21 af c1 13 09 6c f0 2b 1c 76 c4 82 d8 fb cc dc ed e2 a5 ce 29 1a d9 24 d0 76 22 9c 76 c7 86 e5 14 12 66 62 7f 15 e9 ec 65 24 7d ca c2 a2 64 50 ce 4e 0b 88 28 4f d0 14 29 0c 43 cb 97 81 02 ee 89 91 4d e8 59 5d cf 05 65 c0 07 d5 fb 9d 93 3b 4f 9d 64 17 d1 ea 38 dc 84 59 44 45 d4 db fd a3 57 16 dc 26 5d 06 9c 27 ca da fc 97 e2 1e 8e 72 b0 9b 06 48 7d f5 c7 88 9f db 60 30 8d a6 b7 e8 10 47 28 4a b8 89 64 d7 8d 45 55 c5 01 4f 93 f2 5b 06 3a 26 38 e1 a8 29 38 09 ed 1e 7a 98 0e ba 5b d4 3b 10 bc 2f 42 1c de 14 d6 44 fe 72 54 54 11 d8 34 e7 0a e4 d4 6c 8b d5 27 f1 7f a7 df ca 2d 7e 10 8b 6b c5 78 04 7c Data Ascii: `nNdyK0BzbJV#fY<Qi!l+v)$v"vfbe$}dPN(O)CMY]e;Od8YDEW&]'rH}`0G(JdEUO[:&8)8z[;/BDrTT4l'-~kx\|
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 4c e6 d9 c7 d0 dc 30 0d 3b f8 4e 78 5c df f6 a8 7c 13 3b 46 30 26 ca 73 55 45 f9 1b ca c3 ce 57 69 b7 38 63 2a 55 43 b2 f8 82 80 62 ac 7a ae 41 51 d5 ac ef cb 9f 17 89 9d 62 f2 1f 91 7e 77 fe 0d e4 15 41 03 51 98 b0 e2 eb 56 cf 40 3b 8b 2a 3b e8 21 1b 04 e6 de 2b 06 37 49 fe 36 f4 bf 23 32 ec fd 07 a2 5a 53 bc 1c 95 b3 7f 04 4d 72 30 0b b1 4e 35 6a c8 b2 58 c9 05 7a d4 d2 11 b7 73 db ad 07 3a d5 8f 7e 97 6d b3 5c 2d c6 c4 3f b6 25 8f 56 8b 29 be 88 c6 ff b8 17 2d a4 8f 5c de e4 b7 83 75 e4 2c 68 74 34 0e dd 69 e9 c8 61 1b b1 d3 27 4d 19 16 2d 9f b4 83 a0 b8 30 90 3a 95 4f 5a 05 d2 be d9 c6 d0 16 d5 2b 0d c9 f5 a8 d1 dc a7 d5 0b af d9 da 69 87 86 83 ea 26 94 d5 4d 81 f3 a4 b0 f5 d9 14 87 43 6a 4f a2 47 6c bd 52 03 fe 6c e0 a0 74 76 c9 1f 29 09 31 49 f4 b0 Data Ascii: L0;Nx\\|;F0&sUEWi8cUCbzAQb~wAQV@;;!+7I6#2ZSMr0N5jXzs:~m\-?%V)-\u,ht4ia'M-0:OZ+i&MCjOGlRltv)1I
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 3f df af f8 fa 92 5e 3b 6e 93 5b 43 2f bf 98 ff b6 80 2a a2 6b dc be 06 42 03 9f 6b 4b 9e 5c 6e 13 f1 2e 48 e0 75 d1 06 0b af fa 72 b1 19 e6 0f aa 06 a2 63 f4 45 01 3a 2c 0e 1a 7c 21 f4 67 5f f6 c8 1d c3 db 0b 60 5b 0b a4 c6 b8 5d f4 67 a9 71 e8 51 a7 df 5c 0a 42 2f 69 c1 4f ad a4 09 b4 a0 61 cd 96 53 18 23 15 c8 d8 bd 6e 23 5f cf 95 de 61 04 a7 65 f8 84 77 9d ed c3 ad 70 fb f1 3b 92 e4 99 df 45 cd 21 5a 67 64 54 5a d7 73 ab 1e 33 09 ee 0a d5 a5 72 74 76 64 a1 40 a7 0c 17 e1 42 5e 01 4e 97 bc 94 36 ed b5 6b 5f 38 23 03 ff b5 3c a1 0a 76 28 ba 57 08 b0 d1 55 14 37 33 d4 56 70 68 a1 ea 22 84 f0 8e 77 58 c2 04 9b f6 68 62 f8 18 21 24 f9 01 a2 38 9c 04 cc 7b ce c7 f3 58 24 25 ab 05 81 f8 24 e0 45 06 29 4d d3 79 9f 71 40 e7 42 37 39 9e 0d f9 77 b7 90 37 50 2c Data Ascii: ?^;n[C/*kBkK\n.HurcE:,\|!g_`[]gqQ\B/iOaS#n#_aewp;E!ZgdTZs3rtvd@B^N6k_8#<v(WU73Vph"wXhb!$8{X$%$E)Myq@B79w7P,
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 19 a6 fc 1a 3e 0a 5b 23 4d 5e a8 dd 4b ba a5 78 67 25 43 da e3 d8 5a d5 e5 48 1d 35 75 8f b5 9b 3f aa 7a ec 50 7f 91 b8 44 34 17 18 f2 12 35 08 68 89 9d 7c 31 3d 36 90 7c a8 d3 89 19 1c 7e 6a ff 98 39 d7 fa 65 db e9 59 da 02 e5 af 9b 86 2c b9 3f af 4f 61 22 d5 35 fd d0 20 c8 aa 45 3b ea a4 80 ea 97 83 d5 78 01 a7 82 6b d2 49 09 62 1d f6 16 fd 3b 40 e6 b2 39 5c c6 b3 62 e3 b0 c1 46 02 5c 62 ed c3 04 14 5c 21 fe 4e 51 f7 79 82 da b6 23 51 62 19 88 54 c5 61 1c 77 0e 8b 47 f3 7f 0d 97 aa 1e e3 2a fa bf e9 f1 d2 e2 dd fb 40 8f 1d b1 45 ed 98 16 54 bf 99 50 5b d5 b1 96 fd df 81 19 b5 e9 5c 97 50 24 ae eb c1 42 15 95 88 23 78 b7 e4 3e c2 cf 03 d7 8d 12 e2 74 57 b4 1d 35 22 00 71 f8 db 94 42 de 19 d7 14 4b d3 6f 71 3d 46 8c 7c 4a 36 c3 b6 e2 0e 2e b8 5c b4 50 d9 Data Ascii: >[#M^Kxg%CZH5u?zPD45h\|1=6\|~j9eY,?Oa"5 E;xkIb;@9\bF\b\!NQy#QbTawG*@ETP[\P$B#x>tW5"qBKoq=F\|J6.\P
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 6d 0e bd 40 a4 95 39 5f 1c ab 63 71 d4 46 28 41 91 19 e2 96 d4 9c a7 41 68 9d 6d 87 5a 13 04 c1 bd a3 b2 71 44 70 ec 8a bd 7f 9c b1 07 62 fb 00 33 b1 70 f1 1a 5a a4 d9 e0 2e 72 2c 41 f7 a1 b1 99 cc d4 d7 34 8c ff 08 3d 87 b9 ad e4 90 ff 86 91 f4 62 20 24 77 0b 66 01 28 8e a0 76 1e 46 d9 dd a7 95 16 16 36 9d 2b 0a 40 15 81 97 ca f1 c0 1d 18 c0 94 7a c3 9e 09 5a d1 a7 bf 3e 9b 8a 76 cd 20 d5 dd 5f f2 18 90 76 de aa 56 0d 24 ee 12 1e 9b 0c 69 0a 41 53 aa aa 4e 19 75 c2 fd 43 37 8b 5f 45 7f a6 cd df e1 36 ca 6f ff 9e e2 a4 79 9d e7 b3 bd c7 b2 7e e5 b7 db 06 f1 14 6e cb 48 30 c2 17 f9 b9 b1 bc 34 18 2a bd c8 2b 60 ce b0 35 a0 0c d2 3a df 38 76 66 c1 03 fc cf 4c 4f 56 8c 15 dd f6 b3 c9 1b 12 49 25 9e 28 81 bf d4 86 30 7c 2d c9 0b 7d 19 b8 91 44 c8 58 6e aa 7b Data Ascii: m@9_cqF(AAhmZqDpb3pZ.r,A4=b $wf(vF6+@zZ>v _vV$iASNuC7_E6oy~nH04*+`5:8vfLOVI%(0\|-}DXn{
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: e1 f1 30 4f f5 b6 05 78 4a 73 87 dc e8 86 fe 1c e2 38 fe 5b a9 7d 36 28 19 e1 86 19 7b a2 a1 04 f9 93 3a 93 d3 a9 c0 30 74 cd 10 19 d8 e3 ca 56 b0 47 e1 a7 6b de 8a 74 e3 ce 16 05 dd 82 42 42 eb f0 73 4e 0e 7e 30 0c 62 70 77 75 4d da b4 f7 fc e5 b9 2d b5 4a f7 85 e6 66 aa e0 ff 64 e3 bb b5 7d 96 d8 04 2f b7 64 c7 63 38 e2 28 15 e1 e4 12 7c cd 10 ba db 4a 00 05 4c f1 7a ff e2 9c f8 c2 91 1d 94 c0 15 bd c9 50 68 1e 52 96 63 3d 74 17 d7 a2 9b e4 ab 4a 13 bf bb 7b 3a 1a de fb 9d 0f ce 4e 5a 86 0d 5a 4c 06 04 aa ea 01 33 42 73 71 1a b5 72 8a df 7a 70 31 4f f8 b1 f5 f7 b7 08 ed cb 7b e6 98 74 1c f6 02 cc 2d 9e 95 8f 9f 56 08 04 46 8d be 8d 3e 20 bd 13 e9 59 87 34 dd c5 c3 e3 70 3a 24 4c 6f 6e 08 60 a8 f0 d9 c3 f2 5a 42 c4 d3 79 88 e5 74 65 21 85 07 b6 b0 99 10 Data Ascii: 0OxJs8[}6({:0tVGktBBsN~0bpwuM-Jfd}/dc8(\|JLzPhRc=tJ{:NZZL3Bsqrzp1O{t-VF> Y4p:$Lon`ZByte!
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: e0 f9 3a 87 02 5a 92 7f 96 a4 19 b6 30 29 5a f2 c3 81 61 25 84 81 57 a2 47 54 15 c4 76 9d 50 b4 fc c4 37 ca 06 d7 66 61 28 57 8a 95 21 a8 c9 4b b7 29 06 31 69 02 45 b0 0b d1 80 aa 52 ea 73 fb cb 78 be 54 4e be 0a ff da f0 2c 93 b4 8f 89 e1 c8 08 c8 e0 f5 c6 87 c2 c6 32 2a 52 fa 9b f6 53 aa 1d 36 53 9e 26 02 0b 18 66 cb 2e 7d 22 3a db e3 81 32 15 f4 81 ad 9f 52 af b1 37 6a 63 4f 86 ba 92 d7 49 2a 7d 14 a3 a7 0c 83 a3 da 12 08 90 6e 13 b2 91 56 4a 9e 7b 9b be 75 fb fe 89 34 bf c8 5d 1e 6e e5 7b 26 fa ae 4a d7 57 d3 af cd 04 1f e0 c7 22 cb 80 50 3f 19 73 d4 3a 95 f5 95 97 76 62 b5 10 56 e8 a3 68 ff 31 75 21 e6 95 af f1 e1 aa d2 94 50 d5 0f 7a f6 22 e1 6e c9 ae 82 ca 1e c1 a7 13 cf 25 1d 33 f3 5d 9d 73 1f 3c 38 66 07 d2 73 7b 2f dc 73 95 b9 16 ed 2d f8 01 56 Data Ascii: :Z0)Za%WGTvP7fa(W!K)1iERsxTN,2RS6S&f.}":2R7jcOI}nVJ{u4]n{&JW"P?s:vbVh1u!Pz"n%3]s<8fs{/s-V
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 85 ec 4a c5 51 be 67 7f 42 f7 d1 85 0f d3 ea dc 4b 9d 6f d3 11 0f 75 7b 53 6c 31 60 c7 3e 2c b6 bb 34 36 6f ad b6 d3 98 2a f4 78 0a 5c 0b dc 56 4e 64 13 b9 8a 31 a0 ea 04 60 ef 75 f5 bf 2a 82 46 51 35 4b d9 33 21 43 8f 37 59 92 25 fb 71 26 5d ad 28 50 6c 48 cf 6f ae 36 1c 29 33 9a af 82 b3 24 90 50 0c 33 8b 66 09 f4 96 54 84 3d 92 1a 58 5c 2d d2 93 8c d1 c2 07 28 43 05 55 b1 54 d9 47 0f f1 2f c6 cb b5 bc c8 69 49 9f b6 2a 9e b5 e6 de cc e7 e0 ec 2c f3 89 2d 60 ee 53 71 79 86 88 93 ff 1a ff cd 95 88 d2 0a b8 91 e5 c9 01 09 b7 e1 5e ab bc a7 09 7a 33 39 1c b6 28 2a 86 0f 60 f0 eb e0 f2 a7 b5 3a 18 b6 f8 0d 35 83 e2 30 ff e9 e9 cb 98 39 b7 bf 26 45 f7 c3 ad 25 2b 98 31 a7 1d aa 85 a7 f0 c3 db 9b b9 96 73 81 f4 c9 92 93 e4 8f f8 83 42 a3 c2 63 81 fd 78 0d 4e Data Ascii: JQgBKou{Sl1`>,46ox\VNd1`uFQ5K3!C7Y%q&](PlHo6)3$P3fT=X\-(CUTG/iI,-`Sqy^z39(`:509&E%+1sBcxN
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 68 07 77 55 9c d8 cd d0 e3 2a a2 81 fb e1 ae 6a 30 cf f0 c5 23 50 a9 54 74 21 87 9e f1 35 5f fa 99 65 b9 c2 22 d0 93 a4 46 0b d6 f6 86 ce 79 94 b5 af 74 2f 2a cd 9f 4b 76 5a 2a 21 0b 72 8f 71 27 5a ed de 1b 2f 32 33 7e 9e da 80 58 41 ca 63 5e 58 e0 f5 27 aa d8 a7 b6 6d f8 46 9f cf 10 4a 24 3d a5 fd 5d 65 ff 87 86 1d a1 a2 a0 d8 63 9f 35 c8 75 b8 6d e1 6d 73 46 c4 6a c0 2a 99 24 9c cc 4c 30 f5 57 72 c0 97 aa ff a7 cd 3c 4b 4d ae 6f db 7a 8a fc e1 88 21 12 4e ff d2 32 5d 16 5e 04 02 77 df ea 9c f6 e1 c5 6e db 55 a0 a1 f5 a7 c2 8b 34 bf c9 dc ff 6c 08 f2 52 14 38 1e 52 e3 ff 85 b4 9f cb a6 51 e3 df dc 39 87 de e8 68 8c 4a 20 57 7e ae db d0 8b b5 a2 86 9c 73 9c 17 a2 bb 32 3c 08 08 88 e5 cb 5d 24 cb ed 74 11 80 4e 32 78 95 fc b7 b4 16 5a aa ec a4 3b b3 d9 0f Data Ascii: hwUj0#PTt!5_e"Fyt/KvZ!rq'Z/23~XAc^X'mFJ$=]ec5ummsFj$L0Wr<KMoz!N2]^wnU4lR8RQ9hJ W~s2<]$tN2xZ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49961	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1101	OUT	GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:40 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6438 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:56 GMT Expires: Sat, 20 Apr 2024 10:12:56 GMT Cache-Control: public, max-age=86400, no-transform Age: 14024 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:40 UTC	721	IN	Data Raw: 52 49 46 46 1e 19 00 00 57 45 42 50 56 50 38 4c 12 19 00 00 2f 3f c0 0f 00 4d 30 70 db 36 6e 34 92 bb 23 f0 16 d1 ff 00 66 f6 98 a4 dd 98 16 e6 63 bb 3c 8a 42 2b 47 bd aa a5 b9 9e ba 3f 1b 60 c1 28 92 24 45 15 f7 42 2d e7 5f ce c6 29 a0 85 c1 d5 c1 36 92 24 27 8d 96 01 90 7f 6c 14 d6 9b 02 75 06 db 48 92 9c 0c 1a 13 f2 4f ee e5 1e 85 ad 75 ff 03 00 7a 83 11 56 1f 57 ec 10 26 08 fa a4 f5 59 ea 53 3c 78 24 66 31 1b a8 79 a9 f9 0b 07 08 e2 d4 19 73 8d 4d e2 93 fc 5b fa 00 80 45 d8 ac b7 04 56 6b e9 7f 00 b1 0b 47 ad 3d 15 01 f1 82 6b d4 7d 39 31 89 3b 9e a2 2b a4 5e 0b e0 9e e4 ba ba b7 5e e2 97 3a 44 1e 39 5c c9 ce e0 7f db 3e 43 92 fc ff bb 23 22 59 6c 4f 77 d7 68 bb 07 cf ed f5 70 ad a7 6d db 36 7e b2 6d db b6 39 66 8f 8d b6 ab 59 66 66 46 3c 9e a8 ac aa Data Ascii: RIFFWEBPVP8L/?M0p6n4#fc<B+G?`($EB-_)6$'luHOuzVW&YS<x$f1ysM[EVkG=k}91;+^^:D9\>C#"YlOwhpm6~m9fYffF<
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: e9 63 c4 27 c4 24 e2 fa 9c 6e ab 72 57 d1 5d 9b f6 8f 11 b7 ae e9 0a c7 d3 de e9 1d e9 d8 18 b2 5b c8 bb 11 1e 97 35 c3 62 67 a1 b5 25 cc b4 cb 2b 61 10 41 ba 09 87 1d a2 8d 91 35 d3 87 74 a8 ad 8d 38 b6 e1 d4 c8 2e bf 4f e8 3a 43 13 04 2d 40 00 02 92 ab a8 e3 2a 6d 84 27 10 10 9f 12 0f 25 d3 63 88 29 c4 24 e2 65 62 62 3a 5e 47 bc 4e 3c 44 3c 42 7c 60 d5 8a b4 da dc b9 97 1b 7d 94 7a 0d 70 d4 32 58 83 e0 4e ad ae 94 35 9f 2d 6f f4 b3 9d be 72 19 af ab 37 7c fc 69 ee b7 b3 56 58 0e 30 69 7f 1f d5 91 36 3b 02 6d d4 cf 8c cc b9 ba db 45 46 b1 21 a7 09 28 40 00 28 b5 c2 60 fc 16 2e 25 10 04 84 27 ee ac ea c6 a2 9b 42 b4 11 4b 88 47 5d 5e 28 58 3b f1 09 f1 05 f1 a4 ab b7 87 93 55 53 eb c3 c4 91 b4 87 28 0b 55 08 41 9e 8a 0a 54 05 f2 ed a2 9e d7 b8 11 db 59 2f Data Ascii: c'$nrW][5bg%+aA5t8.O:C-@*m'%c)$ebb:^GN<D<B\|`}zp2XN5-or7\|iVX0i6;mEF!(@(`.%'BKG]^(X;US(UATY/
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 65 7b f4 73 3f 40 b0 51 2f 49 ad f4 53 5a b1 c9 ee 04 f0 4b 83 21 d7 f3 f3 fe 82 36 d8 f9 e4 19 58 4a 85 12 19 de 73 65 36 1b 57 6a 34 cd 2f e2 cf 7f 0f db 2a 83 25 73 b2 8d e8 44 41 d5 d6 a0 17 ef 4f 3b 4f d8 20 a1 04 82 a0 e1 67 f6 34 6f 1b 0c 03 58 a3 8d 49 73 81 fa 00 3a 2c ea 66 bc df e9 89 c2 ea 99 ca 62 75 f1 e6 18 6b 51 95 4b 92 03 d1 81 7d 07 8a 7e 14 5a 35 d5 98 92 f8 90 d7 c1 2d c9 9e 47 a2 b6 fd c5 e9 d0 ee c5 8b df 39 71 a5 af 87 40 d0 8c 20 08 6e 62 b2 cb 9f fe 04 a4 e2 2a ae f0 27 00 a5 eb e7 fe b2 f2 7e 60 40 0d c0 c9 dd fe 3a 3a b5 89 b5 90 2e 91 f2 e4 a5 a8 44 55 40 17 e7 6a 15 79 bf 88 4c 8e 29 fa 51 73 09 81 a6 ad e2 4a a5 a2 9f 52 5f 07 9b f9 10 2b c0 d7 56 1e 83 21 43 96 fb 6d 23 19 cc f9 b2 63 07 dd 41 33 97 4b 39 c2 45 08 c0 44 44 Data Ascii: e{s?@Q/ISZK!6XJse6Wj4/%sDAO;O g4oXIs:,fbukQK}~Z5-G9q@ nb'~`@::.DU@jyL)QsJR_+V!Cm#cA3K9EDD
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 9e 10 22 39 e1 25 38 42 26 88 60 41 a5 58 35 86 76 a3 74 a6 9c 8a 97 da 78 d5 47 31 91 c8 c7 6d af dd 95 a4 6f a7 70 a8 46 d2 60 63 b6 1a 14 e2 2f 05 c4 21 52 f2 00 c0 de d0 c0 27 27 8f 8c 3f b7 aa ff c5 88 86 03 63 52 7b 27 25 19 44 a5 ae a3 99 b2 32 6f 88 e4 01 91 99 e5 81 14 81 52 09 2a 83 0b 6c d9 6a 44 ec 6c 14 23 e3 11 a7 33 6c 89 26 e6 b4 2c 41 95 83 3d 05 52 d2 c4 6c 0f 57 fa 4f 05 a8 ce c8 15 7a 00 82 f7 5f b4 f6 11 5f f9 6e 1a 4f ae d6 73 e8 36 91 da e8 fa ce b5 c9 49 a3 75 b3 ab 1d 9a 29 34 81 9c b0 48 04 50 14 69 60 50 44 40 66 ea 9f b1 ea 97 fe d3 64 3c 91 b6 2a 36 44 26 d1 f5 18 33 58 85 fd fd 44 03 dd df d7 84 2e d6 97 2c f1 27 e0 6a 4d 69 09 40 f0 ae bb 87 7f 79 5b b2 e6 60 9a 3b a9 05 69 ed 81 84 b2 65 d8 aa 5b 3e b6 b2 66 b7 a4 d5 ac e6 Data Ascii: "9%8B&`AX5vtxG1mopF`c/!R''?cR{'%D2oRljDl#3l&,A=RlWOz__nOs6Iu)4HPi`PD@fd<6D&3XD.,'jMi@y[`;ie[>f
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: cb 1b d1 0a 47 11 c1 24 2c 02 d0 10 34 c1 90 6a 2e 30 13 df 3b fb 44 1d 13 e3 7f 9f 69 9d 6c bb 1d ff 5f 81 d0 5a a0 0a 96 4e 93 cf 26 19 3b 36 77 16 2d c5 d0 79 29 39 27 5c 5c db b2 b8 f3 f5 43 c3 7a 97 53 7f 4d 07 b8 4b e5 95 74 c5 ec 12 b1 6d 66 3a c6 d9 4a 32 fe d7 ea 72 05 19 61 7e 30 9e 30 5b 09 22 4d 1c c7 16 59 66 2a 20 33 61 81 28 c9 22 b9 a8 01 4d ca 31 ce c0 e2 b5 33 6f 89 78 1b b7 db 6b 3f d1 a7 f7 fd 78 72 fc 7e 4b 3b d5 54 07 09 93 f9 3f b0 4c f1 f1 59 dc 50 14 58 5d ba f4 a5 d0 7f 83 b6 7a 64 73 ed 53 45 fb f9 7f 0d fb f2 8f 97 b9 45 ed f7 17 c3 3e 97 54 cd 73 c7 8a f9 c5 e0 a8 c7 b5 9c 61 bd c4 ce 26 92 4f 82 f6 c4 c7 05 85 ea 01 71 2c 1c 74 c8 8c 1c 2a 48 11 ca c4 88 9e 99 30 2f 06 5e 77 b9 3d bb fd 75 df cf 46 5f 38 ec 93 cd 2f d7 5d f7 Data Ascii: G$,4j.0;Dil_ZN&;6w-y)9'\\CzSMKtmf:J2ra~00["MYf* 3a("M13oxk?xr~K;T?LYPX]zdsSEE>Tsa&Oq,t*H0/^w=uF_8/]
2024-04-19 14:06:40 UTC	697	IN	Data Raw: 27 bf 81 dc c8 91 3d 66 9e 33 22 cd 92 22 81 5d f3 dd a3 be 73 3c d6 6a 0d 5b 0f 6b bf a5 ef b5 4e b6 2a e0 80 d3 70 02 86 48 59 b8 a4 b5 5c d1 78 20 02 0a 20 24 0a 96 43 a8 72 50 09 16 40 32 04 02 99 08 22 19 4a 46 2e 38 66 08 ef 18 bd 82 6e 8b 93 1b 51 f5 de ac b0 e2 04 10 06 66 54 46 44 35 1c ab e2 e0 52 ad 3d 16 28 a0 44 92 4a 6f 08 96 ba 3c 05 46 d7 82 e9 d0 df 7b 8c e5 0e 46 00 77 c6 ae c2 ac aa d5 1b bb c3 e6 63 37 3e d5 e1 6b 52 20 0c 35 54 a0 1a e0 a8 00 0a a7 a1 ad e4 08 15 52 01 84 93 c5 e0 58 03 6e 9b 6e 1b 0c f1 12 d1 4a 90 03 02 49 20 04 10 86 4a a4 13 98 6b eb fc 36 dd fd 4f c1 3a 7d e0 b8 ff 9f ef cb 58 26 2c 12 22 0c 32 8a 95 71 7e 4d 44 29 3c 11 12 c8 41 89 d4 81 17 c1 26 6c 69 3a d6 cd 64 cd 5b e3 ec aa 55 19 86 1b 98 f3 a1 6a 60 77 fb Data Ascii: '=f3""]s<j[kN*pHY\x $CrP@2"JF.8fnQfTFD5R=(DJo<F{Fwc7>kR 5TRXnnJI Jk6O:}X&,"2q~MD)<A&li:d[Uj`w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49960	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1100	OUT	GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:40 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8990 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6511 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:40 UTC	722	IN	Data Raw: 52 49 46 46 16 23 00 00 57 45 42 50 56 50 38 4c 09 23 00 00 2f 3f c0 0f 00 4d 30 68 db 48 d2 26 ed bd c3 1f f1 90 88 e8 7f 9c 9c 00 24 81 29 aa 97 76 1d 5f ed 30 4a db 6b 69 87 bd 5b 74 e1 b8 91 24 45 8a 65 86 e7 fa 6f e2 31 94 c6 0e d6 91 24 2b 19 9c 2f 0d 80 fc 83 f3 e7 ef b1 45 b1 8d 24 c9 c9 3c 1a f2 0f 70 2c b4 a5 35 f4 3f 5e 12 42 26 22 22 19 49 bf 8a d2 93 9a 22 3c 28 92 64 dc 53 c2 1f 15 ae 24 2a c8 11 1f f2 e7 be e8 4e d8 c2 19 a0 74 c7 8f d3 1f 8c 11 16 ac 9e c0 c1 38 f7 f6 1c 9f f1 30 1e a0 f0 ff dc 2b d9 1f 93 67 ac cd 5e 9b b7 40 9f 9e 1e 5f 46 e9 3e b7 fa da 87 1a b8 aa 0d df 3a 79 33 c2 e3 ff ff ab d3 f6 ff 3f b4 c7 f3 58 72 4e 4e 3c 01 42 80 14 77 6a ac 1d 1d f5 f6 b5 32 eb 5e 97 cb 2a 73 77 7d b9 ce dd f5 35 77 77 77 a9 bb 60 a5 c5 9d 20 Data Ascii: RIFF#WEBPVP8L#/?M0hH&$)v_0Jki[t$Eeo1$+/E$<p,5?^B&""I"<(dS$Nt80+g^@_F>:y3?XrNN<Bwj2^sw}5www`
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: dc 6f 8d 53 d9 78 b5 63 22 b8 21 03 78 78 73 d8 60 7a 06 7f e1 f6 16 5e 2e cc 78 d7 ca d0 4c 6c a4 06 60 a0 18 8a bc f9 8f ec 8f cd 7b 9f 10 31 50 d7 b3 9b 0f 7e 9b 92 23 4a bd e3 02 52 88 0f bb ec 95 d5 5b ff b3 b9 f4 7d 0f 1a e0 b4 42 64 fc 80 7b 22 4d 1f cb 67 28 0f 82 47 98 1e 61 0a 63 09 fc 6b 7a 3f 79 8e 6c 02 44 10 00 c0 93 30 41 c0 10 af fe fd fb a5 6c d9 d7 fa ca 0f 1e 8f 71 cf b1 40 a1 be 48 c6 69 28 52 bc 96 6f 36 8b c5 21 d5 58 16 79 1b 1b b5 69 27 eb 06 5a 86 14 8d 84 25 1f bf 7e e7 dd a3 3f 2c be 2a 00 2f 63 6b 82 29 fb 86 bf 63 9e c1 f7 7f ac aa 8f 45 ac f3 f2 a9 6f 9e eb 1d 1e 7e 24 e4 bd 9d fc e9 1e 9d f9 81 fb 43 7a db f9 c5 54 02 c8 11 9a 86 8b f9 c7 18 86 06 1f b5 33 df 43 3c 4e bc 49 0e e3 00 ec 80 06 69 34 4d a5 02 00 dd f0 db 0f f5 Data Ascii: oSxc"!xxs`z^.xLl`{1P~#JR[}Bd{"Mg(Gackz?ylD0Alq@Hi(Ro6!Xyi'Z%~?,*/ck)cEo~$CzT3C<NIi4M
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: f3 97 9f f8 69 d3 c5 da f6 f8 a8 c7 55 41 11 71 30 4a 98 5d d0 63 74 aa 4a cb f9 de 6e 17 58 0c 6b b6 76 fa 75 6c 98 cd 02 1b 0c 1e 66 a5 06 7d 58 4d f7 d3 c0 35 ba 2d a9 5d 9e 48 de d0 e7 fc 69 fc 23 b6 90 c2 50 96 68 8a 53 26 5f 9f 78 94 31 02 43 00 0b 40 31 29 48 32 e1 18 23 8b 95 33 06 10 50 8f e2 a3 5a ac 40 43 98 e0 19 67 98 2e 65 cb 8d 12 14 0b 93 17 94 bf d0 1c 79 7a 24 30 4b 6a 97 7e e2 61 f1 cd 17 3f e0 67 86 b3 9b 3e e6 53 a4 fa b2 52 92 f9 58 2b 00 11 61 7f f0 53 7d f3 55 34 94 20 bf 33 22 86 58 a9 ba d5 78 3a cd bb 9a 43 3b 4d c7 ad 6b a5 70 e7 7d bb 35 97 4a f5 95 b4 ed c3 37 b1 66 65 13 f1 1a 1a e4 c1 e0 89 8d b4 51 db 8f 94 cd 8c 12 42 04 80 30 2c a5 a8 a4 0c a9 9f c1 20 4c c2 89 6c 68 56 27 04 05 4c c7 00 2c a5 6e 66 11 67 62 91 84 d7 53 Data Ascii: iUAq0J]ctJnXkvulf}XM5-]Hi#PhS&_x1C@1)H2#3PZ@Cg.eyz$0Kj~a?g>SRX+aS}U4 3"Xx:C;Mkp}5J7feQB0, LlhV'L,nfgbS
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 96 0a 99 e9 0d 46 19 64 24 10 e9 06 ec a4 00 7b 6c 9a 90 23 56 9e 24 77 85 e2 be ff d2 0f ef 35 66 56 68 1a 09 d4 15 61 75 3f a9 01 b4 50 51 48 1d 9b 2b 52 1e 20 f5 27 cc 35 9d ff 58 22 1b 16 2f 44 28 1b 32 25 43 24 9d 84 31 c4 09 ad 89 a2 5b f4 1e e3 ee ae 92 78 14 f4 42 3b 22 00 0d 00 10 18 80 8d fa 54 86 8d dc 3d cf e1 5b c8 49 4e d0 03 48 32 d8 fb bd ad 6d de d3 cf 84 b4 d3 0e 53 60 d4 88 35 b1 10 1c 74 23 83 6b ce 9c 31 13 22 fb c0 c6 66 32 f7 11 5e 27 ea 87 6b c2 ea 31 52 09 0d d5 06 e4 8c 98 c1 08 91 29 18 4a 52 b9 2f aa a6 ee 6b df fb 73 f2 61 f1 05 20 61 fd 1e 93 82 02 55 d7 a2 1e e9 90 cd 83 ed 89 89 cc be 24 6d c1 a2 c1 49 1f 8a 30 66 70 3b 42 90 80 85 38 80 34 15 28 0c 88 88 2a 86 11 ba 07 b9 b5 22 13 e8 9f 2b 52 a7 94 2c 23 4f 0d 4e 4b f2 d4 Data Ascii: Fd${l#V$w5fVhau?PQH+R '5X"/D(2%C$1[xB;"T=[INH2mS`5t#k1"f2^'k1R)JR/ksa aU$mI0fp;B84(*"+R,#ONK
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 06 37 9d 48 80 e6 f3 6c da e9 46 ae a9 eb b6 b7 0a bf fa 4b ba b8 26 63 01 a4 24 10 44 92 90 23 86 80 93 18 4f d2 08 12 56 d0 d1 b9 dd 7d b5 e5 23 59 b0 78 b1 41 99 25 a7 91 9b 58 3a 9a db 5b 88 de 47 6b ee be 75 e7 c5 8d 13 ef 78 01 c5 b0 ee 23 d7 27 7f 86 e7 75 c7 bf de b9 6d 46 63 5d ae 32 4b 86 90 44 ce 61 48 85 ee 7b db b1 a6 34 09 61 11 67 cc 9e 7c f6 ab 37 af eb ad f0 f8 8e 38 f7 b6 4f eb 6e fd 88 dd d6 8f ba ff f3 93 cf 58 07 19 d1 16 86 53 66 96 70 4a 59 98 37 a6 ab 1e d1 e7 7d 89 93 00 29 59 31 10 4b c0 0a 39 b1 b9 ae 18 91 10 03 02 f1 c8 81 49 b4 5c 46 00 31 32 0a a8 2e 19 ed 0e 64 56 f6 be 7f 5e 35 b1 62 2e e5 94 74 07 25 b3 8b 0f ff e7 68 ef 06 77 5e e0 cb 07 8f 81 fe c1 bf e3 15 a7 fa 86 0e 54 23 01 90 e3 80 44 99 f8 6b 82 0b 05 6a 20 89 58 Data Ascii: 7HlFK&c$D#OV}#YxA%X:[Gkux#'umFc]2KDaH{4ag\|78OnXSfpJY7})Y1K9I\F12.dV^5b.t%hw^T#Dkj X
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: cd 14 94 01 c1 7f 01 20 00 00 58 f8 ef fd bf 0a 00 00 a4 40 97 33 00 a4 e3 d0 24 bb 8f 4d 5e 57 55 8c 0f 09 5d da 6d 3b 53 d7 9e 76 91 b4 8e c9 06 0d 59 c9 12 c1 61 77 71 af 90 09 03 44 0a f8 57 4b b9 fe 86 07 24 38 91 e5 1d bd b2 b7 4d cf fc f0 23 d7 95 d5 03 df be f7 d0 57 ee a4 3e 7d 9f be 76 d1 dd 7e 46 af 61 8d 9d 5e 1a 13 65 64 b5 b0 91 39 06 43 d9 71 6d bc dd bb 4e a4 6d 30 1b 11 20 80 ff 31 00 80 20 40 00 01 2c 00 40 c1 ed 39 5b 4f 46 92 e9 c4 38 5a 45 fb d3 b0 b9 9a c2 28 4b ce b4 4d 1f 38 f4 f7 c5 12 0a 27 34 d9 64 ea a1 b5 b1 21 c9 24 26 a2 16 7f 2d ba f4 e6 72 7a b9 43 28 b5 e6 26 da 0b 9e 5e 8b 60 2a 1f 8b 3d a0 b3 c8 15 fe d9 f8 78 51 de 8c e9 d6 d5 6e cf 39 65 42 08 51 c4 17 ba f4 e4 bc 78 73 f7 aa 28 a6 5f df 6d 00 d6 56 40 00 40 02 46 88 Data Ascii: X@3$M^WU]m;SvYawqDWK$8M#W>}v~Fa^ed9CqmNm0 1 @,@9[OF8ZE(KM8'4d!$&-rzC(&^`*=xQn9eBQxs(_mV@@F
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 91 a6 bd f6 e4 07 df 6e ef 7e b5 7e b4 f0 b9 db c6 57 dd f9 f6 7a 5b 69 5e aa 0c 8f 22 bc 79 90 ef 1b 7b cb 77 f9 9b 0f dc 79 45 87 30 5c b2 24 6f 1d 7b 7a c9 73 2b 31 5d c0 9e 9b 02 c4 d0 1d 3d eb 8d a8 22 b1 25 75 df 2c fb 13 9e 39 ca 13 12 37 08 11 a6 5b 57 03 91 22 35 43 de 87 e6 89 3d fa 23 55 87 d6 9b 04 32 b7 58 32 d4 dd 8a 9c 45 d1 a4 46 c5 b9 ab 9c b9 52 f2 82 f9 45 89 74 f2 a8 77 06 f1 2f cc 4a df b5 57 1b e6 61 19 aa 99 95 87 7b a3 86 a9 a6 72 46 61 25 26 c4 8d 4c dd 15 e6 3f a7 83 32 48 38 80 32 9e 3b 39 f1 fd f0 70 f6 17 fc 93 7b b1 13 29 6f 0b 96 b7 7e be b7 2b 5d 4b 93 68 3d ae 01 44 44 ce a5 c4 33 1b 2c 29 7f 20 57 1c a6 c0 74 09 70 0c b1 23 82 00 72 21 72 c1 35 94 ad 10 db 20 6e 69 11 72 8e 4e a5 21 15 15 92 2e 52 8c e4 e1 0c ea 5e 9e af Data Ascii: n~~Wz[i^"y{wyE0\$o{zs+1]="%u,97[W"5C=#U2X2EFREtw/JWa{rFa%&L?2H82;9p{)o~+]Kh=DD3,) Wtp#r!r5 nirN!.R^
2024-04-19 14:06:40 UTC	738	IN	Data Raw: 08 8d db 75 d5 d6 1d cd e0 98 ca 31 a2 19 45 eb 74 11 b4 8c 88 29 25 21 25 73 a8 c2 11 3e de 5d 85 eb 04 40 09 05 43 15 9d 82 2f e3 2a 43 ab 31 0b fe d9 e7 d9 ac d4 9d dc cd 1b 37 6e 67 c8 e2 47 37 80 f0 ac 6b 0f 36 bd f7 63 de e8 9d 0e 9c 85 c5 68 0a b0 08 11 00 69 41 dc 25 2c 3e 98 98 db ab d0 91 13 80 b8 29 20 14 46 cc 86 67 2c 78 b7 8e 57 3e d0 04 5d cb 20 1c 18 df 2f 19 cb 8e 7a d6 ec ec d3 0a bb 77 2b a5 b1 a0 69 ae 86 d4 a4 63 b3 08 d5 a9 23 9e 00 dc 71 f5 9b c6 64 b2 77 a0 07 95 33 c4 a4 5a 7d eb 4a a5 20 7c 0f 69 0b 6d 92 45 14 20 26 9e ca f7 4f 30 cc 95 c6 01 90 16 b3 e6 59 27 21 9f ca da c3 f1 78 67 e9 c5 eb 93 64 5d e7 4b 08 50 e6 86 08 08 80 08 da 40 91 8f 02 a1 33 81 0f 7a 21 e1 18 8e 60 8a 46 af 6b d7 9c d5 27 5f 51 94 19 78 46 69 9e 88 96 Data Ascii: u1Et)%!%s>]@C/*C17ngG7k6chiA%,>) Fg,xW>] /zw+ic#qdw3Z}J \|imE &O0Y'!xgd]KP@3z!`Fk'_QxFi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49963	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1101	OUT	GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:40 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:16 GMT Expires: Sat, 20 Apr 2024 11:17:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 10164 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:40 UTC	721	IN	Data Raw: 52 49 46 46 3a 1f 00 00 57 45 42 50 56 50 38 4c 2d 1f 00 00 2f 3f c0 0f 10 4d 28 6c db b6 8d 21 ab 4b 6a 44 ff a3 0a b5 fb d6 f5 8d 79 b9 a4 66 66 b2 16 29 37 82 44 89 48 60 f2 7f ba 89 50 74 c1 a0 91 24 45 7d 77 ff ef 5f d8 8b 60 66 e6 d1 c1 b6 91 24 45 6d 9d 2e 80 7b b4 18 f2 b7 3f 98 d3 5b cc 8c 62 d8 36 92 a2 f9 fe 7b 7c 1d 33 d3 f3 ab ff 01 c0 83 cd de e8 7c 23 7e 60 24 c0 03 1e f0 cc c4 5d 15 23 cc 89 f7 12 4e 42 04 3c 90 5d 01 43 e3 b9 21 35 13 34 01 e0 09 bc 83 73 0d 10 48 43 4d c4 88 b8 11 1f cc ac 3c 3e b6 6f 35 13 24 7a f9 c2 cf 5a 23 fd 65 cc 0f 88 3d e3 5b 54 5e 6c 53 e1 a6 79 42 05 0a e4 f8 f9 24 e9 e1 de 11 e5 19 2b 3d 2e fe 8b d2 b0 8e 7b 69 56 e6 50 d0 b6 0d 13 f3 a7 bd 43 21 22 a2 a0 26 79 f2 69 36 82 6a b6 ff aa 2d e7 b7 86 99 19 dc c4 Data Ascii: RIFF:WEBPVP8L-/?M(l!KjDyff)7DH`Pt$E}w_`f$Em.{?[b6{\|3\|#~`$]#NB<]C!54sHCM<>o5$zZ#e=[T^lSyB$+=.{iVPC!"&yi6j-
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 7f 77 60 a0 bf db 1d 70 60 10 82 98 13 72 62 c3 20 1c 1e b4 df 6a 78 2c 7e 18 e1 b2 d1 bd 6c 34 36 59 95 dc b5 d2 d9 29 1d 65 49 cb c1 c9 c3 e1 aa 4e 2c 9d fa a4 75 49 d4 45 4f dd e9 1c b5 eb cf 6f 5e f4 4b af bd f4 b7 5e 00 0a b8 29 e4 fe 88 22 59 5c 04 91 39 5a 8e ec e3 c1 c1 c1 1f 20 06 32 07 04 58 dd 6e bf 90 4a d2 44 1c c0 ac ac 73 8d 8a 41 db 1e 1e 8c 95 84 bf 3e fd 89 e7 1b 36 e9 c7 c3 fc 25 cf cc 5e 9d b0 1b 8c 51 b8 e7 12 73 d1 d5 26 4c 3e 2d f3 c3 a8 44 38 d3 1b 77 fb f0 d7 6c f6 a0 fb 4e 3a f3 b0 3d 3e fd 9c fb 79 c1 29 6c 20 70 53 71 85 41 2f f7 7a bf 3b 42 09 9a a4 2a 24 01 9c a4 90 46 51 48 aa 54 46 47 73 73 db 7e f5 b7 8a a6 0c b6 0f 3b ae 7d d3 89 f6 e6 67 00 c1 a7 0a d0 91 a1 12 44 34 66 d3 67 73 82 03 a6 82 21 e9 a1 d6 53 15 57 04 3b 0b Data Ascii: w`p`rb jx,~l46Y)eIN,uIEOo^K^)"Y\9Z 2XnJDsA>6%^Qs&L>-D8wlN:=>y)l pSqA/z;B*$FQHTFGss~;}gD4fgs!SW;
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 07 58 43 23 ab d5 02 f7 73 d5 77 54 b4 09 04 d5 d3 c3 76 0d 42 65 5a fd 54 ad 20 75 bb cc 64 e3 d4 b3 19 25 76 3a 81 39 10 9c 40 4d 8c dd a9 8e d3 ba 9a 5c ab 0b 68 83 89 7c 0d 11 13 63 e4 4c 8d e3 56 67 9e f2 97 95 c4 88 18 88 54 27 b7 8b 5c fe 50 ce 3e b0 26 0c 48 07 a4 f1 af fb 69 84 8c 50 28 a7 83 7b 2f 07 38 02 13 90 58 02 e5 e6 48 0e a7 87 a3 06 d5 4a 21 38 1d 15 b6 bd de 8e 74 90 9f fa a1 b2 c7 00 dd e5 10 df d8 86 42 5b 34 db 0f 8f d6 a7 87 4b ea 18 85 44 52 35 50 89 e4 8d a7 0c 8f f7 17 ab a7 5c 74 e8 b2 c9 36 09 46 01 c6 11 67 2d e0 18 09 7d 40 53 c5 88 60 96 21 a6 7a 2d 80 8c 50 38 03 04 60 9c 7b 1c 61 c8 ad b8 8e 43 d4 74 7a 5d 1a a9 08 a4 61 bb bc 90 c2 ab db af fe ea b6 1d 95 e6 a5 be f0 1f 07 23 51 3b c5 b6 36 c6 8d 31 eb 44 17 3b 8a d9 f0 Data Ascii: XC#swTvBeZT ud%v:9@M\h\|cLVgT'\P>&HiP({/8XHJ!8tB[4KDR5P\t6Fg-}@S`!z-P8`{aCtz]a#Q;61D;
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 9a 80 9f 32 1a 35 97 d3 d1 e5 9e b1 d6 f3 0e 76 e4 ae ad e7 7b 37 d0 ac bb db 28 81 84 19 a1 5c e2 35 b2 c7 dd e7 1e ee 1e 9f 4a 7c f3 2f bb 3d e3 5b 7b fc 68 fe f1 b9 2b b8 41 a7 52 bd fa f8 c2 eb 5d fe 24 4b 47 dc 85 fe f6 1e eb 85 1e 01 64 26 95 41 62 10 bc 60 20 e8 bd 34 77 7f 79 af 16 03 2d f4 97 1f eb 5f 84 6b 71 c4 63 20 68 12 c9 9d f9 ed 54 89 48 84 ac 0e 1e 87 75 2f 5a c2 d1 be a2 eb ec 55 ba 5d 87 46 81 1d 8e ad 5d d6 b9 ec 4e 97 ef 6c ae 66 6a a7 b7 b5 ed c8 68 d3 ca d4 87 4e 05 2a 44 24 97 8d 3c 64 2a d3 89 ff da 78 c8 c1 1f a7 be eb 53 b7 1e 6e df e2 21 5f 2b 5d f6 60 33 e3 bc c9 62 b0 f0 8d 56 d7 a3 4d db 9d 46 ed 51 6f ca 43 d0 03 b3 6c 26 d9 11 34 6b 32 b8 c9 37 ef 94 51 34 f6 ef e6 af 2f 9b 95 7a 61 a4 a5 29 91 56 63 68 cf 04 dd c0 07 d4 Data Ascii: 25v{7(\5J\|/=[{h+AR]$KGd&Ab` 4wy-_kqc hTHu/ZU]F]NlfjhND$<dxSn!_+]`3bVMFQoCl&4k27Q4/za)Vch
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 94 60 4d b1 11 83 5d 8f 83 3f 08 c8 08 32 03 74 62 7b 02 97 ab e4 27 26 ca 3b 4a d3 0b 2f fc d4 6e c7 5c 2c 2a 49 ae 60 77 2d 7c a9 e9 6b 46 08 b4 0e 66 ee ea 37 e7 ce 5a 3b f9 b0 ea 7b 66 ae ab 73 b8 4c dc 4c 3d 19 16 e2 bb c7 3b 56 d7 28 a4 c6 0a af ae 3b 90 c5 67 99 d7 b0 65 d9 5d f6 bf 8f 38 8b 0b 9c a9 da 54 30 8b 5e a7 36 dd 59 08 8f 93 4d 62 f3 6f e2 6e 85 20 31 a0 7a c0 a5 45 7e 17 8d cc 54 0e 88 dd e1 aa ae 0a 9d 98 0e c4 c2 4f fa 10 5e b1 1b eb c0 8b 62 a8 c3 18 ce 09 17 af 18 0e ba d2 b0 d7 e2 8a c7 29 f7 f8 e3 e5 fb 24 dc d7 2d 9e cc b6 0a c8 83 bc a5 73 9e 2a fd c0 37 cf 8a e5 c0 a5 a4 d3 12 c3 a8 79 74 ac bc 68 88 6a 3a 0b ea a5 c8 e0 cc 52 2f 63 f9 33 bb f0 89 f3 fc fc 6e 28 4f 77 54 71 e3 e0 32 bd 01 98 93 52 89 fa 61 55 bc f0 54 27 f4 cd Data Ascii: `M]?2tb{'&;J/n\,I`w-\|kFf7Z;{fsLL=;V(;ge]8T0^6YMbon 1zE~TO^b)$-s7ythj:R/c3n(OwTq2RaUT'
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 02 e3 cc b9 c8 ea 77 b5 7c 0b c8 4c a0 a0 c8 53 5e d8 bc 8b 5b ec b0 40 10 3b f2 ae 2b cc 9a b0 0a 4f eb de 29 38 27 05 5c 2f 59 de 36 dd 01 9a 52 c9 54 5f ca 1a b2 38 91 4c 27 19 85 89 27 d1 89 82 11 0e 1b 35 55 68 e3 5c 11 a7 5c 24 74 f7 e5 4e 0f f4 17 cc 54 4e 14 e7 ac eb f2 ac d4 93 09 4b 8f 3a f1 06 0f 82 e6 5b 5c 74 c0 6b 86 4d c1 31 31 d3 43 24 ce 46 4f 1c dc f5 9a db f4 45 5d d8 cb 65 66 32 0b 2f 34 da 9a af 6c 5c ea 7b 81 1d 72 14 23 00 2c ef 94 a5 3b 73 a6 f6 cc b0 87 3a 45 63 77 3d 0d b4 64 44 bc 83 7e 35 c9 5c 31 24 9f 3d cd 48 0e e7 14 a4 27 39 69 5d 11 49 cc ae 07 cc 34 6f ac 3e df bc 68 fc 88 48 62 7f 54 dc 8a a3 c5 de d2 c8 bf ee e4 d6 c7 9f b4 db f4 39 ed a9 e7 b2 50 34 0b 05 ad 38 03 45 a5 bf cd bb 6f fb fb dc a1 4b 22 02 e1 a1 ba a9 bf Data Ascii: w\|LS^[@;+O)8'\/Y6RT_8L''5Uh\\$tNTNK:[\tkM11C$FOE]ef2/4l\{r#,;s:Ecw=dD~5\1$=H'9i]I4o>hHbT9P48EoK"
2024-04-19 14:06:40 UTC	1006	IN	Data Raw: 8e 5f e0 08 08 72 e7 4b 53 f2 af 06 be 0e e8 2b 87 07 3d f6 41 23 9c 5b 81 0f 1a 86 9e 23 21 6e 0c f8 3a 22 4e a8 00 41 cf 05 e6 c3 ad dd b0 d2 ee b9 09 56 c1 a7 b4 8b 2b 4a d2 2e 7e 4f d8 fe ec 46 40 0a 92 23 4c 22 ec e9 9b 1b 2c 1e 4a 3b a2 a8 6b 17 c3 53 9b 4d fb fd ef f1 6d c3 b6 54 0c fc 95 3a e8 c7 1e b9 0b 05 cd 02 58 93 2c d3 1b 50 e1 fa b3 6f 3e 40 88 31 a4 22 39 b4 1a 28 9a 6b 1f 23 ff ad cb ac 7d 78 c0 63 cb d3 f0 1c dd 6f 58 39 7f 69 64 08 81 75 92 00 04 72 c1 00 7a 66 0d b3 1e a3 9b 61 e3 d2 b8 b1 d6 eb a8 6d 82 a3 60 e1 45 bb 45 ff b8 03 6c dc b6 a6 03 42 e7 79 a6 21 8a c2 87 25 4f 6d f2 b8 50 77 73 ac cc 50 77 81 1b 6a 27 22 ec f4 58 bb 36 2c 50 fc 94 33 f2 85 19 41 0d ab 19 7c 94 05 66 d3 63 4c 5c 70 02 60 31 00 20 4e ee fe a6 d1 4a af 6e Data Ascii: _rKS+=A#[#!n:"NAV+J.~OF@#L",J;kSMmT:X,Po>@1"9(k#}xcoX9idurzfam`EElBy!%OmPwsPwj'"X6,P3A\|fcL\p`1 NJn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49962	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1101	OUT	GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:40 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8086 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:04:21 GMT Expires: Sat, 20 Apr 2024 11:04:21 GMT Cache-Control: public, max-age=86400, no-transform Age: 10939 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:40 UTC	721	IN	Data Raw: 52 49 46 46 8e 1f 00 00 57 45 42 50 56 50 38 4c 82 1f 00 00 2f 3f c0 0f 00 4d 30 68 db 48 92 94 dd 7b 93 e1 0f 78 49 44 f4 3f a0 e0 1a 2c 8c 30 90 12 94 3c 4c 2e e0 08 9b c6 8f 36 b3 60 14 49 b6 93 29 14 70 c2 bf 28 04 0c f1 94 73 7a f5 75 b0 8d 24 c9 49 ff 23 2c f2 8f 8f c2 c4 d2 fa ea ca 75 24 db a6 b5 af ad 7f e6 9f 06 d3 98 8b 67 db af fa 1f 42 4b 75 aa 44 80 1e a0 e1 80 0b 69 a6 26 e5 c8 86 80 a4 08 92 bd b6 03 19 fa 61 19 6e 40 f3 e4 77 55 f3 c0 23 79 22 42 44 45 2a 41 84 bd e5 f2 ca 74 e3 02 20 95 e7 cb e6 6f f8 12 b6 00 7f 20 97 ed 1b df ab d7 07 9b e3 95 00 88 92 49 72 d2 cb 23 35 f2 97 01 67 83 f7 6d bb 55 bb 6d fe ef 1e 63 2e dc 6b ef 2d 69 8b 2c cb 1c 4e 0c 65 66 66 66 66 e6 f6 1d 3c cc cc cc cc 0c 65 6e c3 1c b3 1d a3 2c c9 e2 0d 0b e7 1c e3 Data Ascii: RIFFWEBPVP8L/?M0hH{xID?,0<L.6`I)p(szu$I#,u$gBKuDi&an@wU#y"BDE*At o Ir#5gmUmc.k-i,Neffff<en,
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: f3 f8 fe 17 9e 0a fb 91 79 ae 61 28 a4 84 41 eb 3a 5b c5 42 9b c3 33 9c 39 c3 b2 ca a1 f2 fc 2e 5e f5 02 e1 59 f2 43 7b c2 6f 67 fa 77 39 ff a4 22 88 48 51 04 50 00 78 05 56 79 28 00 0f c1 fd 92 64 47 e8 f0 ff 9e 8b df 74 f2 e9 9f be b2 f3 db fe 79 d3 27 de 71 f1 6f 05 39 0c 64 40 41 04 1e 04 00 5c 50 a4 b7 cd 53 f7 c9 26 25 70 51 5a cd e1 95 4f 71 dd 35 4f 44 5f 43 cf 72 6d df a8 65 0c 01 36 64 cc b9 2b 38 e2 50 29 00 d1 40 17 e9 8d 04 7a 18 d5 9f dd 75 f2 fe ac fc aa 4a 30 62 08 24 02 90 8a 15 15 18 54 81 00 d8 86 82 43 cc ff f7 86 be eb 87 56 37 fd 4a ee ee 12 cf a4 d5 7b 92 f6 bb 2e f7 fe 2f b7 21 85 05 08 db 88 90 03 86 36 28 fc 0d d3 3e ad e1 98 b4 54 03 24 3a 6f fd f2 bc 4e ed cd bf 74 57 e7 01 78 af e3 8c 56 a7 0d 88 2c 97 86 82 f9 16 ce ad 31 3b Data Ascii: ya(A:[B39.^YC{ogw9"HQPxVy(dGty'qo9d@A\PS&%pQZOq5OD_Crme6d+8P)@zuJ0b$TCV7J{./!6(>T$:oNtWxV,1;
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: a4 88 06 64 41 5a a6 40 90 61 12 58 25 66 84 a6 d2 3a b6 75 90 07 0e f2 0c d8 fe 79 98 41 8c 01 0a 6a 20 a1 fc 02 88 3d 62 9b 59 c0 45 57 7f df e5 ff bf ef f0 9f 4f e4 af 7e a0 61 3e b6 f9 13 a2 f5 5d c6 4e e3 cf af 0d d6 39 18 ee f1 b9 ee 5e ff 60 7b 65 1d 37 41 1e b4 8b 5a 33 da d6 fd 17 31 71 3b db 78 9f 1b 14 00 d3 a0 cc e8 2c b6 e7 f8 ec f0 0b e2 8e fe e1 6b ef f9 07 67 5e fc 95 5f bf 25 18 d8 33 83 67 c3 c1 07 92 de 7b 5f 52 7a 65 77 3a ed 28 4d 59 58 80 d8 61 bc 20 42 81 18 2c 8e bd 67 18 6f 94 d3 4b 64 c4 75 02 00 02 ea 80 e1 59 a8 96 86 6e fa f2 60 ea 43 8e be f9 ff 1f e8 f9 dd e5 97 bd 7f fe db b3 74 3f f8 26 cc 8d 98 0b 97 96 eb 89 97 d1 6a 08 6b 98 10 02 78 cf 88 4c e4 45 ea 28 ef e8 0f 40 e7 85 84 74 63 e9 dc fe cd d9 ad 5f df f5 39 81 9b 0e Data Ascii: dAZ@aX%f:uyAj =bYEWO~a>]N9^`{e7AZ31q;x,kg^_%3g{_Rzew:(MYXa B,goKduYn`Ct?&jkxLE(@tc_9
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 7e 6f 57 c4 68 21 fe eb e3 a0 cf 41 80 12 14 20 17 a1 08 c0 38 be df ff 57 ff b4 eb fb 7f eb 61 bf b7 b8 74 e1 7b c9 c5 33 f7 fd f5 e7 1c 3b 35 3c fe 3e 89 2b b5 fd 8e 25 f6 25 d2 9c ba 41 04 b6 ae 5e c6 ae 94 da e5 fa 6d 19 db ea 28 75 5c 75 ec c6 0e 1d 55 00 68 40 5b a9 a7 86 d1 a3 6e 4b 2d 72 7e e8 82 c4 a3 65 2a 6a 1d 2c 04 c4 51 76 94 29 92 3c fc 64 36 b2 cb d5 46 22 eb 35 f3 ab 1b f1 be 75 a1 ac 7c 70 fd d8 a7 ee 44 ae 7d e5 b6 0b 33 8b eb 8c e5 d5 5c 2b 50 4d 1c 52 80 a2 06 1b df af fd ce 53 4e 7c e4 af 1f fa b6 c5 da 2f 8c 8d 2f 8f df 7c b7 da b4 73 d7 cd 27 3b eb 6e 3a 60 af 32 0a 50 5b ac 10 e0 41 16 aa f4 b8 a2 c0 32 b3 d1 bb 2e 4d 58 6f a1 aa b5 b0 35 fe ec 02 78 7a 00 48 19 ec 1b ea 1d 47 75 2f 4d b9 4c 57 a1 54 97 7b 27 93 60 82 fa 45 c6 fb Data Ascii: ~oWh!A 8Wat{3;5<>+%%A^m(u\uUh@[nK-r~e*j,Qv)<d6F"5u\|pD}3\+PMRSN\|//\|s';n:`2P[A2.MXo5xzHGu/MLWT{'`E
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: b9 85 25 33 61 99 63 47 bb 19 f0 40 e9 9a 5d c4 64 0c 8e 51 d7 63 96 c7 f6 08 ba 2f 5b 9f 6c 28 00 a0 05 8e 6b b7 3f 30 79 2f 9b 68 60 68 6e c6 f8 f4 e5 3b aa 8d a3 c3 56 0b 5b 3a 19 37 dd 8e e1 55 8b ed c8 93 6f ae 71 f0 f2 cb 8e 0f 0d 4d c3 19 af 2e 2d f1 84 e8 cd 45 0f 25 56 20 26 4d 02 8d 10 81 0a ce 10 00 90 22 01 76 e8 04 37 fe 92 d3 db 6f 1c 23 cc bc 5a 8c bb fd 44 90 cf c8 35 e6 e2 8c ef 7b ef 63 f1 b5 83 cd 88 30 20 77 6e cc f5 7c aa 65 6c 4e 34 38 af 7f 76 b3 94 76 80 c7 d9 f4 be 74 fd d0 5f fa f0 94 1c 94 51 97 9b ed 55 28 76 88 93 f3 12 c7 b9 34 27 0e 1c 14 56 f1 c6 cd 63 ae bc f5 d6 2f 5e bb 61 d3 ee f8 5a f6 5c e7 6c c6 e9 95 2e 76 c6 9d a6 11 48 68 90 43 80 06 58 25 0e 52 00 aa 90 a0 53 74 de 74 ed d8 e6 ff bf 7d a8 37 cc b2 52 f9 f1 2c 1d Data Ascii: %3acG@]dQc/[l(k?0y/h`hn;V[:7UoqM.-E%V &M"v7o#ZD5{c0 wn\|elN48vvt_QU(v4'Vc/^aZ\l.vHhCX%RStt}7R,
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: a0 b0 21 c0 82 f5 4c 4e dc 37 bb f2 10 e5 8b f9 cf f5 e7 af 8c 2f 7d f6 b9 cf 3e f7 72 9b 9d 29 f1 9e 8d c7 99 57 92 38 f6 8a 1d 91 73 e8 88 9c a2 12 c5 64 7f f0 ad 3d f2 8e fd d6 38 5b a6 37 80 e5 e7 b1 ba 7c b7 bf 9f ad 71 4a a8 5d 95 b6 50 d3 e7 ff 3e 6a 3b 12 03 23 85 23 8e 76 c9 83 c4 4b 5d 66 25 76 88 42 59 78 9a d5 a3 3e be 6f 6f f9 e6 95 79 48 6f f8 9c 48 2c a2 58 63 51 a4 a8 c4 46 d4 50 85 14 89 18 c5 29 ea e0 33 47 5b 97 9e 1c f9 bb 3f 75 db d9 85 ae 5a 2d c5 f9 c5 f8 0a 28 a3 62 6f a3 0e 49 40 42 c7 a8 c4 d7 1f da a3 a4 47 59 cb 0e ee 4d bd 51 00 9c e1 02 9b 3a 9b 6d 99 9a b2 49 90 15 9c 57 e6 79 e4 13 3b c3 1c 0d c0 1c 89 32 e5 b0 90 78 e5 52 8b 30 42 a5 44 4c f1 82 5f c0 ce 27 3a c7 a7 3d 78 fe d4 2d 6f 78 32 5f 9c 8b 1a 95 48 14 59 91 6a 49 Data Ascii: !LN7/}>r)W8sd=8[7\|qJ]P>j;##vK]f%vBYx>ooyHoH,XcQFP)3G[?uZ-(boI@BGYMQ:mIWy;2xR0BDL_':=x-ox2_HYjI
2024-04-19 14:06:40 UTC	1090	IN	Data Raw: f8 a3 c1 3c 03 5a d8 6c 5c c8 b4 14 46 22 ad 99 b1 36 fb 40 e9 69 1a d7 37 db 43 50 ae 23 1d 9a 54 7a 25 26 4d 7b 67 eb 94 07 3c 49 40 88 80 b0 07 62 4a 08 23 0d 40 0c 93 10 16 2c 93 02 04 22 2a 10 28 a3 56 ee 9a c2 b5 47 7d 12 4d 20 a1 84 08 fa a6 0b 2b da ca db b8 5b dc dd 3d 8e 8e 9b 4b 9b d5 5e 1e dc f5 b4 b3 a6 1b 18 00 4c 12 5f 19 1a e0 89 8f 79 7a 62 fc 0c 07 99 a2 99 dc 26 40 56 bb 36 39 7b b4 37 3b 57 a9 ab cc e7 52 3e 5e 0f 1b 4a 2f 55 75 68 1a 2c 36 70 7d 84 6b 54 e2 0a 7c 01 8c 11 20 5b 34 36 b5 18 29 25 cc 06 2e a4 66 91 8a 8c a0 02 8b a3 d0 0c 65 d3 96 40 ec 20 28 d5 27 43 5b 6b 55 65 df e5 de fa ed 8d 7c 27 f9 aa 72 b7 ca ab a8 67 ac ff b2 bf 7f 47 60 60 1e 80 9b d7 95 a3 60 88 3d 5e dd 4f 9d 79 f8 1c 1b 16 8a 16 26 a4 d5 38 0e 6c d9 c3 12 Data Ascii: <Zl\F"6@i7CP#Tz%&M{g<I@bJ#@,"*(VG}M +[=K^L_yzb&@V69{7;WR>^J/Uuh,6p}kT\| [46)%.fe@ ('C[kUe\|'rgG```=^Oy&8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49966	108.177.122.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1036	OUT	GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:40 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 11258 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:10:43 GMT Expires: Fri, 19 Apr 2024 14:10:43 GMT Cache-Control: public, max-age=7200 Age: 6957 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:40 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 18 17 1a 1d 1d 1b 1f 1f 1d 20 1f 1f 1f 1d 25 1d 1d 1f 21 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2b 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2d 1b 1b 2d 57 3d 35 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 45 10 00 02 01 02 03 04 06 07 05 07 02 06 02 03 00 00 00 01 02 03 11 04 12 21 05 31 41 51 06 13 22 61 71 91 32 52 81 92 a1 d1 d2 14 16 53 b1 c1 15 23 Data Ascii: JFIF %!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W--W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"E!1AQ"aq2RS#
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: e8 71 3e 30 03 2f d9 df 70 ea 1f 70 dc 67 a5 9f c6 20 65 ea 1f 71 1d 43 ee 1b 87 4f 2f 8c 60 c9 d4 be e1 d4 be e1 b8 9d 3c be 31 83 b5 80 e8 c6 23 11 42 78 88 4a 9a 84 73 7a 4e 49 ca ca ee da 1c a7 41 f7 0d c3 a7 97 c6 20 64 ea 5f 71 b2 b6 64 f2 67 bc 6d e2 ee fe 03 70 e9 e5 f1 a4 0d 97 82 92 e3 1f 88 a7 81 9c 9d 93 8f c7 e4 37 0e 4c be 35 81 bf fb 22 a7 38 79 bf 91 67 b1 6a de d7 87 9b f9 0d c4 e4 bf 1c e0 74 aa ec 4a b0 69 37 0b bd 77 bf 91 92 7d 1e ac 96 6b c1 ae e7 2f 90 dc 39 32 f8 e4 83 7d ec 8a 8b 8c 3c df c8 d8 8f 47 6b 38 e6 cf 4a df dd 2b fe 43 70 e4 cb e3 90 0e a3 d8 35 56 99 a9 f9 cb e4 45 5d 87 56 1b e5 0f 63 7f 21 b8 bc 99 7c 73 01 d7 a5 d1 da d3 57 52 a7 ed 72 f9 15 7d 1f ac 9d 9b 87 9c be 43 70 e4 cb e3 94 0e 9d 3d 87 56 52 ca a5 0b f8 bf Data Ascii: q>0/ppg eqCO/`<1#BxJszNIA d_qdgmp7L5"8ygjtJi7w}k/92}<Gk8J+Cp5VE]Vc!\|sWRr}Cp=VR
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: de f7 64 92 ff 00 d0 4b 1e 82 a6 cf 8d 08 b9 65 bc a8 55 93 ab 17 69 c5 d3 93 96 4b a7 a5 bb 1b ff 00 af c0 c6 b2 c2 96 16 6e 14 a4 e6 a4 e7 4f 23 cf 51 67 b2 f8 27 6d c7 1e 78 da b3 cf 9a 4d f5 8a 2a 7f d4 a3 6b 5f c3 2a f2 36 69 6d 3a b1 54 d2 50 6e 9a b4 24 e0 9c a2 ae de 8d f7 b6 47 4c 65 74 e9 d0 51 a6 a4 f2 4e 2f 0d d6 b8 38 2e b1 37 78 de 2d 25 a2 92 4e f7 d1 1d 1d a1 46 52 d9 d8 65 1b 5d 27 2b bb d9 76 1c bf 24 cf 33 47 19 59 4a 9c 93 6e 50 4a 30 e3 a6 bd 9f 0d 5f 99 e8 b6 fd 49 47 03 43 2c 5d 3d cb 2d ef 6b c1 a7 1f 27 63 96 7e 63 a7 79 67 fb ea b5 f0 51 ea f6 66 2a ba 77 9c aa 46 8b 92 e1 0d 2f 6f 1b 96 86 03 11 85 c6 d2 96 1a 19 e4 e8 d3 94 a0 a7 18 b9 5e 36 9a b3 7a ab a6 fc 8e 3e ce c6 52 86 78 57 a4 aa 53 a8 ac da 4b ad a6 f8 4a 0d fe 5c 4e Data Ascii: dKeUiKnO#Qg'mxMk_6im:TPn$GLetQN/8.7x-%NFRe]'+v$3GYJnPJ0_IGC,]=-k'c~cygQf*wF/o^6z>RxWSKJ\N
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 4f 42 64 ca ac d8 69 5a 4f be 13 5f 06 68 d5 d6 9c 8d 9b db 71 af 35 d8 97 81 1a 99 39 64 95 04 74 da 41 00 68 da 41 00 68 da 41 00 69 36 90 40 06 d2 08 2f 4e 0e 4d 25 c4 8d 4e ea 9b 14 30 d2 9b dd a7 33 72 96 12 9c 57 69 a6 cc 95 31 b4 e3 a2 d7 c0 e3 73 b7 b6 31 ea c3 83 24 de 75 6a 18 38 c7 7e af bf 81 b0 ce 64 f6 94 9f a2 92 35 a5 89 9b e2 63 a5 9e 5d ed 75 eb f0 f1 ed 8c 6b a1 62 41 ea 7c dd 22 c0 92 00 12 00 04 5d 14 2c 88 de 2c 91 3d 3f 4a df ee 30 9f da ff 00 24 79 78 f0 3d 37 4a e5 fb 9c 22 fe 86 ff 00 23 8e 5f b4 75 be bf df 4f 32 ca b2 cc a3 3a c6 72 a8 65 49 21 9a 71 a0 00 a8 83 3e 13 f8 91 f1 29 4e 94 a5 ba 2d f8 23 6f 0d 80 9e 65 27 d9 5f 13 37 29 3c b7 86 19 5b da 3d 46 c9 af 9a 9e 56 f5 8b f8 3d c6 8e d9 52 a9 46 74 de f8 d4 cd 0f ed bb 56 Data Ascii: OBdiZO_hq59dtAhAhAi6@/NM%N03rWi1s1$uj8~d5c]ukbA\|"],,=?J0$yx=7J"#_uO2:reI!q>)N-#oe'_7)<[=FV=RFtV
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 8c 16 f9 34 97 8b 76 35 38 78 cf 4e 77 8f c4 bf e4 f6 1b 2b 09 95 d2 8c df 6a 4a 2d e6 e0 db f9 18 7a 4b 36 f1 ad 70 8c 52 ee 66 e6 3a 49 56 b7 f4 a6 8e 2e 36 a3 95 69 5d b7 a4 55 df b7 e6 74 c5 78 9f ae f6 c3 17 66 63 a9 a4 89 ab b8 ad 47 c4 57 91 d1 e8 ed 6c 98 ea 4f 84 f3 41 fb 62 ed f1 48 fa 02 8a 69 a6 93 5c 53 57 47 ce e9 61 1f d9 a3 8b a7 6c d4 6a ac ea fa d9 59 c5 f9 9d 6c 5f 48 65 d7 2a b8 59 4b 23 8c 73 42 6a f1 cd c6 dc b8 6e 31 66 cd 3b 18 ee 8e 61 ea ab c2 3d 54 b8 38 7a 3e d8 ee 3c ae 17 15 5b 03 89 9a 8c 52 97 a1 28 b5 75 2d 74 b7 13 ae ba 64 e2 bf 79 41 f8 c2 57 f8 33 4b 6b ed 1c 3e 3a 0a a5 17 d5 e2 21 b9 4a d1 94 97 2e f6 b8 09 2c 24 ae e6 03 a4 d4 aa 69 55 75 52 e7 7b c3 cf 81 bf b4 30 34 f1 54 72 b6 b5 d6 13 8d 9d 9f 34 72 30 90 a1 b4 Data Ascii: 4v58xNw+jJ-zK6pRf:IV.6i]UtxfcGWlOAbHi\SWGaljYl_He*YK#sBjn1f;a=T8z><[R(u-tdyAW3Kk>:!J.,$iUuR{04Tr4r0
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 6d e7 70 52 9c 55 b8 36 b4 35 31 55 65 56 6e a4 ed 99 da f6 49 2d 15 b7 2f 02 db a7 a6 70 72 f0 c9 1a 16 d5 ab be 67 a0 c3 74 79 d4 a7 19 c6 a4 1c 65 14 d6 fe 27 32 58 8c d0 85 e9 e4 59 52 5f d5 6e 27 b2 e8 9d 04 f0 30 cc bf 9a a2 5e 19 9d 8d 47 2e 36 1c 98 f3 3c f4 29 e3 70 0f b1 3c d4 fd 59 37 28 78 73 46 f6 d0 c4 d5 c5 e1 5b 9c 63 4e 8a cd 3a 8d 4b 34 ad 1d d1 dd a3 6f f2 3a 9b 7a 93 50 8d 28 3b ce a4 ad 15 c6 cb 56 fc 0e 3f 48 70 51 c3 60 24 a3 7c f3 70 8c a5 77 cd 5d 19 ca 77 72 96 65 37 5e 5e 82 cd 63 7b 19 0c b8 5a 4b d7 9c e4 bc 15 a3 fa 33 57 09 1b 44 e8 ed 34 94 30 b0 e3 1a 4e 4f 4f 5a 6e 48 d3 36 f7 68 42 16 48 8a cb b2 fc 19 37 d4 55 f4 5f 83 35 a4 71 48 24 82 36 90 41 20 00 01 40 02 06 c2 48 04 54 92 00 69 22 c4 02 2a ca 37 19 48 26 e5 11 61 Data Ascii: mpRU651UeVnI-/prgtye'2XYR_n'0^G.6<)p<Y7(xsF[cN:K4o:zP(;V?HpQ`$\|pw]wre7^^c{ZK3WD40NOOZnH6hBH7U_5qH$6A @HTi"*7H&a
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: 00 20 12 41 21 52 00 23 4b a4 49 22 c6 5e 8d 20 12 40 4a 86 41 6b 11 60 96 20 13 62 0a ca 19 7a ce f3 97 8b 2a 18 4d 20 00 11 0c ad 8b 10 ca cd 88 00 15 84 05 16 dd 96 f6 49 b5 b3 e9 de 4e 4f 87 e6 12 ba 29 12 45 c8 6c ae 6a d5 7a 58 c0 b7 a2 f5 27 a9 45 bc 2a f8 ad c6 24 65 c5 fa 3e c3 12 29 1b 18 4c 54 e8 54 8d 5a 6e d2 8f 93 5c 53 3e 85 b2 76 94 31 34 55 48 ef dd 28 f1 8c b8 a3 e6 e6 e6 c9 da 32 c2 d6 55 23 ac 5d 94 e3 eb 47 e7 c8 c6 58 ec d6 df 4a 06 1c 26 2a 15 a9 c6 a5 37 78 cb 77 c8 cc 73 60 06 3a 93 6b 72 35 a5 8e b7 f2 86 a6 36 f8 6e 83 45 6d 15 cb e0 cc f1 ae f4 bc 5a f6 05 b8 65 3c b3 82 13 d0 90 c0 01 cc db 3b 66 18 58 db 49 54 6b b3 0f d5 f7 02 4d af b6 76 bc 30 94 f3 3e d4 df a1 05 bd be 6f 92 3e 7b 88 af 2a b3 94 e4 db 94 9b 6d b2 d8 bc 64 Data Ascii: A!R#KI"^ @JAk` bzM INO)EljzX'E$e>)LTTZn\S>v14UH(2U#]GXJ&7xws`:kr56nEmZe<;fXITkMv0>o>{md
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: b3 d1 95 4f e6 dd 15 ce 4f 71 e1 e9 53 72 6e 52 7c 5b 6c dd da fb 4e a5 59 65 ac a2 9c 24 fb 30 dc 9f 7b bb b9 cc ab 89 94 95 b7 2e e3 a6 31 ac f2 df 84 62 6b 66 76 5e 8f 03 1d 8a d8 b1 b6 12 a4 f9 99 23 5e 4b 73 31 00 ae ae cb 84 aa d4 ed eb 4e 29 ca 7c 3b 3f fb b1 85 61 21 2c 3d 7a cd 7a 33 4a 0e fb ee de 9f 91 bf 82 8f 57 80 af 55 e8 e7 96 11 ef b3 ff 00 26 0c 4f 67 67 50 4d 6b 2a b2 7f 0b 11 9f 6e 2b 20 f5 18 2e 8c 53 ad 42 15 5d 49 c6 53 8d ed 64 d2 35 b1 9d 14 ad 0d 69 b5 55 72 5d 99 79 3f 99 36 eb cb 5c 00 66 c4 61 a7 4e 59 67 17 19 2e 0d 58 c2 56 7c 04 90 00 90 88 24 09 20 02 34 90 00 02 48 24 2a 50 20 90 d4 7d b4 30 0f 9a f0 0e 2b 91 cf c4 ec 2c 2d 5f 4a 8c 53 e7 15 91 fc 0e 80 12 b5 8e 79 63 df 1b a7 96 c4 74 32 2d b7 4a b3 8a e1 19 43 37 c6 e7 Data Ascii: OOqSrnR\|[lNYe$0{.1bkfv^#^Ks1N)\|;?a!,=zz3JWU&OggPMkn+ .SB]ISd5iUr]y?6\faNYg.XV\|$ 4H$P }0+,-_JSyct2-JC7
2024-04-19 14:06:40 UTC	1255	IN	Data Raw: df ba 2b 9c 8f 2b 88 a4 fa ac 2c 25 2d 6b d4 75 6a 3e 0d b6 92 f2 bb 35 8c f6 e7 9e 5e 98 f6 9c e4 a8 c1 4f f8 95 a5 d6 d4 f0 dd 08 f8 23 96 74 36 f5 4b e2 aa 2b 59 42 d1 8a ee 49 58 e7 9d 58 9e 00 00 10 7b 8e 8e e1 55 3c 2c 1e b7 9a cc fd bb be 07 87 3e 8b b3 e1 96 85 28 f2 a7 05 ff 00 6a 31 9b 78 46 c5 89 24 58 e4 ea 80 4d 80 10 2e 48 02 01 26 86 d8 da 51 c3 d2 6d be db d2 31 e2 fb fc 0a 8e 67 49 f6 ae 44 f0 f4 df 6a 4b b6 f9 45 f0 ff 00 ce 67 91 66 5a d5 65 39 39 c9 de 4d dd b6 62 3a e3 34 e5 95 da 6e 08 06 9c d2 08 2f 4e 0e 52 49 2b b7 b9 05 44 62 db 49 26 db dc 96 f6 7a 1c 5b 58 5c 14 30 e9 fe f2 6f 35 4e 7a f0 fd 0a d3 a5 0c 04 14 e7 da c4 c9 3c b1 de a9 df 8b e6 46 1a 86 48 bc 66 31 b9 49 fa 10 96 f9 3e 1a 7e 85 62 f7 5d 45 e1 70 0e 4f 4a 95 9d ad Data Ascii: ++,%-kuj>5^O#t6K+YBIXX{U<,>(j1xF$XM.H&Qm1gIDjKEgfZe99Mb:4n/NRI+DbI&z[X\0o5Nz<FHf1I>~b]EpOJ
2024-04-19 14:06:40 UTC	612	IN	Data Raw: 9b 39 35 fa 45 5e 54 fa b8 a8 52 86 ec b4 d3 8d fc 6e d9 83 07 b5 a7 46 4e 71 85 39 4b 5b 4a 69 c9 af 0d 46 aa 75 23 bd 43 0a a9 ff 00 fb 78 e7 79 3d 63 4d fa 52 7c 1b 47 3b 1d 8c a9 88 a9 9a 57 7c 21 15 ba 2b 92 47 37 13 b4 6a 55 9b 9d 47 9a 4f 8b 10 c7 ce 32 52 56 4d 34 d3 d7 7a 77 46 b4 4e 26 2f 7d d1 fe 8e 3a 31 eb 6a af de b5 a4 7d 45 f3 3a ee 9b 5b d1 e2 e5 d3 fc 5b 49 75 78 7d 3f a2 7f 51 57 d3 dc 5b ff 00 4f 0f ee cf ea 39 5c 2b 78 f1 e4 7b 42 ca 93 6a e8 f0 d2 e9 c6 25 ef a5 87 f7 67 f5 16 87 4e f1 6b fd 3a 1e ec fe a2 74 eb 57 8f 8b df e1 68 eb 99 9b 47 ce 17 4f f1 7f 87 87 f7 27 f5 13 f7 ff 00 17 f8 78 7f 72 7f 50 e9 e4 e3 97 13 75 f4 60 7c e7 ef fe 2f f0 f0 fe e4 fe a1 f7 ff 00 17 f8 78 7f 72 7f 50 e4 a9 cf 1f 46 68 8c 8b 92 f2 3e 75 f7 ff 00 Data Ascii: 95E^TRnFNq9K[JiFu#Cxy=cMR\|G;W\|!+G7jUGO2RVM4zwFN&/}:1j}E:[[Iux}?QW[O9\+x{Bj%gNk:tWhGO'xrPu`\|/xrPFh>u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49968	108.177.122.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1036	OUT	GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39997 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:44:07 GMT Expires: Fri, 19 Apr 2024 15:44:07 GMT Cache-Control: public, max-age=7200 ETag: "1689932701" Content-Type: image/jpeg Vary: Origin Age: 1354 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0f 10 0e 0f 0f 10 10 10 0f 0e 0e 0e 10 0d 0f 0d 10 0e 0d 0e 0f 10 0d 0d 0d 0f 0d 0e 10 0d 0d 0f 10 10 0e 0f 0d 0f 0d 0d 0f 10 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 16 15 12 15 15 17 15 16 15 15 15 17 17 15 15 15 15 15 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 ff c4 00 55 10 00 02 01 02 03 04 07 03 09 05 04 07 06 05 03 05 01 02 11 00 03 04 12 21 05 06 31 41 07 13 22 51 61 71 91 32 81 a1 08 14 23 42 52 b1 c1 d1 Data Ascii: JFIFh"U!1A"Qaq2#BR
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 2a 4b fd 0e dd eb ea 7f 2a f4 36 23 f7 af a9 fc aa 1d 63 79 ab 3a 97 f2 51 74 54 c2 6e f5 c3 cd 7d 5b fa 6b 6a c6 e8 5d 3c 0a 7a b7 f4 d7 0c ac 1c 54 85 3c 87 82 5d a2 9c 2c f4 79 7c fd 6b 5f cc ff 00 d1 5b 2b d1 86 24 fd 6b 5f cd 73 fe 9d 40 d5 44 3f d8 29 8a 39 8f fa 94 8d 45 59 1b 33 a1 9c 65 c7 44 46 b2 ce ec 11 57 3d c0 4b 31 80 35 b6 00 f7 9a b2 ed 7c 8c b6 b1 00 f5 d8 00 63 d9 37 b1 32 3c 0c 61 88 9f 22 47 8d 0d a9 89 db 39 42 4a 79 23 fd 42 cb 9b 28 ab 87 6a fc 9d 36 8d a7 36 dd ac 07 5e 2b 9e f1 d3 91 04 59 82 a7 93 0d 2a 3e f7 41 d8 c1 c5 ec 7f 35 ef fa 35 59 af 80 63 50 56 8a 19 c8 b8 69 55 Data Ascii: ("((B(("((B(("((B(K6#cy:QtTn}[kj]<zT<],y\|k_[+$k_s@D?)9EY3eDFW=K15\|c72<a"G9BJy#B(j66^+Y*>A55YcPViU
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 96 60 12 5d e1 44 e6 2d 97 c3 d9 9e fd 38 eb a7 89 12 bd 2b 6c 4d 2d ba 67 cc d7 32 10 19 a2 5a 48 23 5e c9 9e 4b 13 af 75 46 63 36 0a 3a e5 17 5b ad 0b da 65 b8 c5 d5 88 fb 40 c7 74 80 66 20 1d 0c d7 92 aa 0e 13 38 38 7c fd 16 fd 2b 9a 21 6d 8f cb d5 45 e3 36 8a 96 50 33 7b 26 61 e5 a0 02 4b 48 2d 00 00 78 f3 cb ce 33 40 de da b6 43 43 b2 06 04 e8 f7 c1 24 0e 0a 99 bb 19 8f da 7c ab 1d f5 8f 68 6c 35 b4 ac 2e 5f 24 99 92 dd 6b 13 97 b8 c3 49 04 b7 09 8e 1a 6a 2a a6 db 38 69 3c 3c 75 1d fc 35 3f 78 f1 aa c6 53 d1 b6 fb 29 1d a7 8e 0d 70 b0 5c b2 64 ae 60 c2 58 99 82 24 15 83 c8 91 a0 8d 0d 60 bb 83 ca 73 28 ec 9f 81 d3 4f 2e ea 8e bb 33 03 90 d7 f0 f7 f3 f2 a6 ac 0e 1f b0 b3 dc 27 de 28 91 fa 2c 53 4c 6e a1 62 a3 6d da 9a 8b db 18 58 24 c6 9c fc 3f c0 91 Data Ascii: `]D-8+lM-g2ZH#^KuFc6:[e@tf 88\|+!mE6P3{&aKH-x3@CC$\|hl5._$kIj*8i<<u5?xS)p\d`X$`s(O.3'(,SLnbmX$?
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: a6 ea ad 85 03 22 95 80 33 01 a4 c6 a0 f3 e3 30 79 8f 78 09 3b 7b 75 6c bc 9c a1 4f 90 83 e6 3f 2a a2 69 a2 8d da 5f 0f ff 00 a3 7f 55 7c 1d 6c 8d b8 98 fa 0b 7a 29 dc 77 42 57 7e ae 22 db fe fd b7 b7 f1 0d 72 ab dd 8b b1 ec 3d c5 b2 d8 a1 6e e3 de ea 53 fd 9e e5 cb 4e c5 f2 5b 2b 74 32 e9 70 c4 16 55 89 13 14 f9 b9 3b cb 88 b1 86 c7 5b 76 7b 82 ce 1c dc c3 31 2c ec ae 66 de 4c c7 b4 57 3b db 2a a7 d9 86 03 48 01 2b a3 2d 95 76 e6 37 08 a6 cb 2d b5 bc b7 0b 38 c9 1d 40 37 84 03 04 eb 6c 08 00 f1 ab 1c d8 09 8f aa 66 1d b8 24 e3 36 e7 e2 a4 c9 27 0d 93 ad 7f e9 d8 80 33 8b f2 f0 4d 1b 47 e4 ff 00 79 c1 1f 3a b6 24 cf f6 4f 23 48 fb 74 bb b4 3e 4b 77 1f 4f 9f da 0d dd f3 66 27 d3 af 06 ba 75 5b 5a e0 ae 91 15 2f 63 f1 58 91 a5 c7 c4 dc 64 ba ba 38 0b 71 ba Data Ascii: "30yx;{ulO?i_U\|lz)wBW~"r=nSN[+t2pU;[v{1,fLW;H+-v7-8@7lf$6'3MGy:$O#Ht>KwOf'u[Z/cXd8q
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 65 6b dc ed 24 83 6f 7d ea ec 1f 24 4c 47 fd be cf fe 5a e7 dd d6 d7 a1 f2 43 ba 64 0d a5 68 b0 e2 3e 68 da 79 ff 00 b4 4f c2 ba cc b6 b5 f9 c3 d3 4e 10 d8 db 3b 40 db 66 b7 71 71 d7 ae ad c4 62 97 14 df 73 7a 56 e2 10 cb a5 d8 04 19 8d 2a f2 23 02 f6 48 45 34 d2 9b 6a f9 05 67 6f 07 c9 2f 68 20 9b 37 f0 b7 e0 4e 56 eb 6c 31 f0 59 5b 88 49 fd a7 51 54 3e f6 6c 0c 46 16 f3 58 c4 5a 7b 37 93 53 6d f4 30 66 19 58 12 ae 86 0c 5c 42 ca 60 c1 31 5d b5 f2 47 e9 46 e6 d0 c2 dd b3 88 6c f8 ac 19 40 d7 4c 03 76 c5 d0 dd 53 b4 00 3a c5 28 e8 c4 71 ca 8c 75 73 5b 3f 2b dd cc b7 8a d9 57 ef 10 3e 71 81 43 89 b5 76 3b 41 12 0d fb 64 f1 28 f6 81 39 78 67 5b 67 ea d0 58 d3 b2 1b 52 f0 ed 2f 5c c1 d1 7f 44 58 5d a4 fd 4e 1f 6a 28 c4 0b 7d 6b 58 bb 80 bd 6c e5 10 1f 23 f5 Data Ascii: ek$o}$LGZCdh>hyON;@fqqbszV*#HE4jgo/h 7NVl1Y[IQT>lFXZ{7Sm0fX\B`1]GFl@LvS:(qus[?+W>qCv;Ad(9xg[gXR/\DX]Nj(}kXl#
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 2a 6b 15 7c 03 94 70 5e c8 f2 02 05 79 d8 e4 b3 cb ce fc 3e fe fb d6 a4 ad 21 81 a3 8a d7 df 5d a0 53 0e f0 61 ae 45 a5 3d d9 fd a2 0f 78 b6 1c 83 de 05 2a ee 46 10 1b d6 c4 68 a7 37 96 41 23 e3 15 b9 d2 36 26 6d d9 ee eb 58 fb c2 40 f8 31 ac bd 17 db 96 76 fb 2a 07 bd 8c fd cb 5d d4 65 a8 63 4f 0f ed 59 13 7a ba 67 3b 9d ff 00 09 ab 78 9b b1 1a 76 88 10 75 d3 89 d3 c2 96 6e 58 03 8c 03 dd 95 41 ef 8e 72 74 f0 e0 69 9b 79 30 c4 db 62 32 68 a4 fd 22 e6 5e 1a 4e a2 35 a8 5c 26 1e d1 b5 6c bd 9b 41 9e da b3 00 ba 49 12 60 1d 72 93 a8 04 9e 22 66 99 af 65 df 72 78 61 2d 4d 26 96 f9 a5 fc 6e 25 09 d6 54 01 a8 2c 46 ba 44 e5 3a c1 83 1a f0 9e e3 5e ba 3c 6b 2f 89 66 41 da b7 68 c9 0a c0 4b 90 a0 c9 3c 48 cd c0 0e 1c f8 d7 dd fb c5 5a c3 d9 53 6f 0f 64 bd c6 20 Data Ascii: k\|p^y>!]SaE=xFh7A#6&mX@1v*]ecOYzg;xvunXArtiy0b2h"^N5\&lAI`r"ferxa-M&n%T,FD:^<k/fAhK<HZSod
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 0f 2d 76 17 19 70 fd 4e 1f c2 e0 3e a4 77 57 d0 b5 27 bc db 1a ee 1a f5 cc 3d f4 36 ef 5a 6c ae 87 d4 32 9e 0c 8c a4 32 b8 d1 94 83 51 2e f5 60 ba d0 c7 05 f6 6a 43 75 b1 59 31 38 67 ff 00 87 89 b1 73 f9 2f 23 71 f7 54 40 b9 58 31 af d9 6f dd 3f 75 49 ad 37 51 71 c2 fd 55 bd 73 53 e7 5c 03 f2 b1 b1 93 6e 63 b9 07 36 2e 2f 0d 43 61 2c 02 7f 9c 30 d7 ba bb a1 f1 d3 0d f6 94 30 fe 20 0e 9e b5 4c f4 f5 bf bb 17 0f 8a b7 6b 68 60 0e 2a fb 61 d2 ea de 5c 2e 16 ec 59 6b 97 6d aa 9b 97 2f 5b bb d9 6b 4e 72 00 40 9d 35 26 97 86 62 e7 96 ac e8 bf c6 41 55 cf c8 1e cb 1c 66 39 c7 f6 6b 85 b6 8e 79 75 97 2f 66 b7 ef cb 6e ef c6 ac ef 96 3f 48 d6 f0 bb 3e e6 0c 30 38 ac 72 75 62 df 12 98 62 d1 7a eb 8e 41 94 35 a4 9f 69 98 90 08 b6 f1 63 ee 4d 9c 1d bb 08 d8 2b 76 2d Data Ascii: -vpN>wW'=6Zl22Q.`jCuY18gs/#qT@X1o?uI7QqUsS\nc6./Ca,00 Lkh`*a\.Ykm/[kNr@5&bAUf9kyu/fn?H>08rubbzA5icM+v-
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 13 5e 1e f0 61 23 d2 b4 b6 dd cd 00 f1 9f 4d 7e f1 f1 a8 cc 13 b0 62 4b 69 a0 1c b5 13 3e a4 8f ba be 6d cc 49 ed 1e 61 42 8f 36 fd 2d 4a 5a 90 62 3c d5 11 d3 da 40 92 f7 cb 14 7a b6 20 c3 31 90 7c f8 7b b2 8a 9a bb b5 43 85 ba be cd c5 0e 3c 27 88 3e 2a d2 a7 b8 a9 ee a5 6d f3 bb ec af 74 9f c0 7e 34 b9 b3 f6 eb 58 2c 32 f5 96 58 c9 b6 0c 32 b7 36 b4 4e 92 79 db 68 0c 40 32 a6 49 c6 63 f2 42 da 7d 3e a6 02 38 27 8d ea 26 e6 1d a3 56 b4 c2 e8 03 89 50 0a b8 1e 4a d9 bf 82 99 7a 21 4f f6 72 ff 00 6e e1 f4 50 17 ef 06 90 36 5e f1 d9 62 3a bb ca ad f6 2e 1e a6 e4 f7 43 91 98 8e 32 85 87 8d 39 ee fe d8 36 d4 28 b6 55 64 9e c0 95 ed 31 62 40 e0 24 92 74 31 ae 90 29 ca 59 5b 1c ba de 92 a8 89 e6 22 c6 f3 ba 72 db 9f d9 38 cb 9a 54 8c ba 6b 3a 73 d2 93 b6 9e 34 Data Ascii: ^a#M~bKi>mIaB6-JZb<@z 1\|{C<'>*mt~4X,2X26Nyh@2IcB}>8'&VPJz!OrnP6^b:.C296(Ud1b@$t1)Y["r8Tk:s4
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: fb c3 63 30 8c 4e 18 90 78 0c 4d 8f eb aa 2b 1f 77 e3 92 ad 8c 0e 17 2b 8f b1 9b 66 f6 1b 68 dd c4 59 7c 97 ac 63 2f ba 3f 1d 7a eb 8a 43 0e 68 ea 4a b2 1d 19 59 87 3a ec be 8c ba 43 b5 b4 30 a3 11 6c 64 b8 a7 ab c4 58 99 36 af 44 90 0f d6 b4 e3 b5 6e e7 35 90 61 91 95 79 7f a5 1e 8d ef 2e 23 15 7e d5 dc 2d ec 3b dd bd 89 0f 6f 19 85 cc b6 ee 3b 5e ca d6 9e ea dc 67 40 d9 72 da 57 2c 47 64 19 02 96 fa 3d de 5b f8 0c 40 bf 64 83 a6 5b b6 5a 7a bb d6 a6 4a 5c ee ef 57 1a a3 41 13 aa b3 d3 31 b3 33 07 3e f0 aa dc dd 75 47 4e 1d 1d db da 76 41 05 6d e3 6c a9 16 2f 1d 15 d7 56 ea 2f 9d 4f 54 c4 92 af a9 b6 c4 91 21 9d 5f 8b 36 ce 0a ed 9b af 66 ea 35 bb b6 98 a5 cb 6e 21 95 87 23 c8 82 20 86 12 18 10 41 20 82 7b 0f 77 ba 56 d9 f7 d4 30 c4 a6 1d fe b5 9c 4b ad Data Ascii: c0NxM+w+fhY\|c/?zChJY:C0ldX6Dn5ay.#~-;o;^g@rW,Gd=[@d[ZzJ\WA13>uGNvAml/V/OT!_6f5n!# A {wV0K
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 69 d1 18 0c d2 67 3a 5c 07 53 cc 69 4e 41 53 25 38 ea e5 18 bd c1 48 f4 af fc 52 37 3c d5 d1 da f6 b1 68 d8 e7 87 7f 72 4e dc fd 9e 6f e2 2d 58 04 2b 5f bb 6e c8 62 09 0a 6e 30 40 48 1a 90 26 69 87 77 af 94 74 cc 21 ad dc ca e3 b8 a3 e5 71 ee 82 2a e0 dc ed c7 d9 f8 6b 89 7a d4 bd d4 d5 2e 5e c5 5b 6c 84 8e 39 10 5b 4c c0 1d 0b 29 89 91 04 48 a9 77 b1 93 e7 b8 dc 84 32 1c 55 d7 05 48 65 fa 47 2e 72 91 a4 06 66 1a 77 55 a6 46 cb 70 17 93 8e e1 d6 2a f1 dd 4c 44 31 f1 86 1e ee c9 f8 15 ab 06 74 9e 40 4f ba a9 bd cb c7 cf 54 d3 ed 0c a7 cc af f5 01 56 8d ed a1 d8 58 90 60 6b cb 4d 3d e3 bc 69 56 50 54 88 5a fd 4b 23 a6 e9 f5 69 77 92 93 c3 3c fa fc 3f 5f 78 ad 8e ae a2 b6 56 26 3b 4c 75 9d 7c 40 d7 4d 64 71 8d 47 0d 6a 56 ee 31 55 03 dc 21 41 d4 71 e1 c8 01 Data Ascii: ig:\SiNAS%8HR7<hrNo-X+_nbn0@H&iwt!qkz.^[l9[L)Hw2UHeG.rfwUFpLD1t@OTVX`kM=iVPTZK#iw<?_xV&;Lu\|@MdqGjV1U!Aq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49970	108.177.122.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1036	OUT	GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39909 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:40:57 GMT Expires: Fri, 19 Apr 2024 15:40:57 GMT Cache-Control: public, max-age=7200 ETag: "1706713936" Content-Type: image/jpeg Vary: Origin Age: 1544 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0f 10 10 10 10 0f 10 10 10 10 10 10 0d 10 10 10 10 10 0e 10 10 10 0d 0d 0d 0d 10 0e 0d 0e 0d 10 10 0f 10 10 0d 10 0d 0d 15 0d 0f 11 11 13 13 13 0d 0e 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 18 15 12 15 17 18 18 17 18 18 18 17 15 17 18 18 18 15 15 15 17 17 17 17 15 15 17 15 17 15 17 15 17 15 15 15 17 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 03 02 01 08 09 ff c4 00 4e 10 00 02 01 02 04 03 05 04 06 05 09 07 04 02 02 03 01 02 11 00 03 04 12 21 31 05 06 41 13 22 51 61 71 07 32 81 91 42 a1 b1 c1 d1 f0 08 14 23 Data Ascii: JFIFh"N!1A"Qaq2B#
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 6e eb fa 2d 71 0f e5 b0 5f de 5f ff 00 0b 5e 8f e8 af c4 66 3b 6c 10 ff 00 fe 97 ff 00 c2 d7 38 82 f6 c5 60 d4 57 e8 3c 3f e8 93 c4 9b 6b f8 0f ef 2f ff 00 84 ae ff 00 f0 7d c4 ff 00 97 c0 7f 7b 88 ff 00 07 51 9a 88 c6 44 af 70 15 f9 d6 8a fd 0c ff 00 a2 27 12 1f f5 b0 1f de 5f ff 00 09 51 f1 1f a2 7f 12 1f f5 70 47 d2 e5 ff 00 f0 b5 d3 66 63 b2 05 72 ee e8 b9 58 0d 15 b8 bf e8 c3 c4 06 f7 70 7f de 5e ff 00 0b 5e 57 f4 64 c7 ff 00 2d 83 fe f2 f7 f8 5a 9b 01 50 f6 f1 f1 58 85 15 bb d8 fd 16 b1 e7 fe be 04 7a dc bf fe 12 a6 db fd 11 f8 91 da fe 03 fb db ff 00 e1 2a 27 c8 d6 fd 45 4a d2 1d a2 fc f7 Data Ascii: BEPQE!QEEQBEPQE!QEEQBEPQE!QEEQBEn-q__^f;l8`W<?k/}{QDp'_QpGfcrXp^^Wd-ZPXz*'EJ
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: bd f7 e1 85 72 1f a3 76 3b f9 5c 27 f6 ef 7f 86 af 00 b8 b8 5c 19 1a 0d 8a c5 e8 ad b4 fe 8d 18 ef e5 b0 7f de 5e ff 00 0b 55 e7 f4 7e c6 4c 76 b8 5f ed dd ff 00 0f 5d 32 37 3f e9 0b 97 cf 1b 3e a2 bf 6b e1 ee 86 00 f4 3f 57 8f c8 d4 a4 3e 72 3a 7f a7 4f ce f4 b9 cb b8 bd 4a 9e a4 c7 af 5f 98 d7 e1 57 b5 e5 6c 06 29 0b 37 6e e8 bc a4 9b b4 65 cf 8f 55 67 83 c4 c5 5a e1 71 fe 34 bb 87 b9 f9 eb f1 f1 f8 eb 53 ad 3d 55 4d 08 29 d0 eb 68 af 2e df 59 0b 23 33 02 54 13 05 a3 7c a0 fb d1 a1 20 4c 0d 6a ab 8d e3 5a d3 2b 64 6b 96 9a 11 d5 04 dd b6 d3 dd 74 1f 4d 5a 72 b2 1f 04 2a 41 24 1e a7 2b 80 19 43 00 64 48 d8 8d 8a 9d d5 87 46 10 47 42 2b 81 bb 7c 5d 50 32 bd 93 d5 bd f5 11 f4 98 75 06 40 39 4c 88 cc 49 04 95 a3 8b bd 6c b2 07 5d fd 39 ae 9c e0 02 ef 72 c2 Data Ascii: rv;\'\^U~Lv_]27?>k?W>r:OJ_Wl)7neUgZq4S=UM)h.Y#3T\| LjZ+dktMZr*A$+CdHFGB+\|]P2u@9LIl]9r
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 62 48 c6 da 23 f7 88 3e 87 71 f2 af b8 fb a3 13 61 b1 0a 00 bd 6e 3f 5c b6 04 02 18 85 5c 4a 01 b2 b3 10 b7 14 7b ae c1 a3 2b e9 3f d8 97 0f cf 8a 07 a2 89 a4 4b 5c cc 8a 5a 52 30 b8 1c b8 ad 7b 88 62 b5 61 11 04 8f 3d 0c 54 32 d5 1e d5 e2 cc cd d1 99 88 f8 b1 35 e3 13 89 03 d6 bd 6d 3e 13 81 aa 8c d4 5d b8 8a f1 8f c7 46 82 3c ea a4 3e bf 1a eb 6e d1 62 00 dc 98 1e a7 4a 70 e1 1c ac a3 29 7d 4e e4 74 3f e9 4e 4b 3c 54 6d ef 6a 52 2c 8e 5a b7 65 b9 2d 25 c8 69 f3 fa e6 9c b0 98 d5 65 1d d8 27 66 5f 1e aa c9 d0 8f 15 df c2 60 32 9e 27 06 46 c4 11 f5 fc 7f d2 a7 f2 de 26 0e 53 b1 d4 7a f5 1f 1f c2 98 da 50 89 a2 c6 cd 5b f6 df fb 4c 50 c8 62 93 0b b4 3e c2 bf 56 ae c9 7a a1 63 4b 01 99 75 23 a1 d9 87 81 eb b6 c7 71 e9 20 f8 e1 d8 d0 e2 40 20 f5 07 a7 c7 af Data Ascii: bH#>qan?\\J{+?K\ZR0{ba=T25m>]F<>nbJp)}Nt?NK<TmjR,Ze-%ie'f_`2'F&SzP[LPb>VzcKu#q @
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: f2 a2 16 57 52 96 0d 08 b6 7b 8a 61 67 7b 6c 41 06 46 e0 d4 fc 2e 34 37 91 ac 9f 9c f8 83 df 2b 74 b3 0b 83 46 20 90 7d 56 35 13 d6 2a a6 d7 30 e2 13 6b ad fd 68 7f ad c3 1f ae be dd b2 df f3 94 cd 7b ed 8a d9 db 4b af 8d ed 0d 9f 2d 14 e6 3b e5 c0 fe d6 f1 35 f1 ee 85 04 93 00 02 49 f0 03 53 f5 56 15 7f da 36 2d 36 36 d8 0e a6 db 1f 9e 57 02 a8 b9 83 da 1e 32 ea 94 6b b9 51 81 56 54 b6 16 41 10 41 68 2f 04 48 8c d0 41 a9 cd 23 81 b5 d7 91 b1 ce d5 2f f1 be 22 59 8b 6b 2c 49 d7 52 01 d7 5f 3f f5 aa 46 ae ce 6b 91 14 d0 16 c9 3d 23 cb 8a 60 e4 de 06 2e 4b b0 95 53 00 74 2d 12 67 c8 08 31 d6 47 98 2c 78 97 23 41 a0 1a 08 1f 67 87 c0 55 8f b2 ab 6a f8 67 51 ef 2b b0 61 d7 bc 03 2b 7a 6e 27 f9 a7 c2 ab b8 c7 10 4b 4d ab 02 c0 fb a2 18 cf 98 98 1f d6 22 a0 37 Data Ascii: WR{ag{lAF.47+tF }V5*0kh{K-;5ISV6-66W2kQVTAAh/HA#/"Yk,IR_?Fk=#`.KSt-g1G,x#AgUjgQ+a+zn'KM"7
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: ec 0b 89 8b 8b 76 cb 66 c8 c9 9c 06 8f de 5b 6c 44 13 13 99 7e 2a 3c aa 95 f5 0f fe f3 96 fb 8b 7b e6 ad c5 23 5a 03 9b a8 cf 24 a1 c7 71 b8 cb d8 70 2e 0e c5 98 09 60 63 ba 65 22 e2 90 cf 68 b3 02 48 59 21 72 10 c4 36 b3 f9 4f 04 6d 1e cf 0e 62 e3 25 b7 00 14 6c ae bd 8a 5d 01 95 15 7b 22 5a e3 41 06 51 04 cc 95 15 bc f5 83 b8 1c fe d3 35 97 2c 6d 33 76 8a af 94 85 87 40 ac a7 29 d4 a1 49 d4 19 19 a0 57 f2 37 19 b9 87 72 6c ad bb 8c d3 6c b3 cf 73 67 63 95 18 0e f6 9a e6 20 64 23 ac d2 cd 8d ae 65 ae 03 6f 73 6d d6 3c 7c 15 99 24 77 80 24 e1 b0 be 86 fc 47 8e 7f b5 fa 23 25 22 71 2e 68 5b 0f 78 65 17 1a 66 55 c0 95 05 dc 08 0a da a8 7c a4 1c b0 41 dc 11 55 6b c4 f1 78 c3 96 d0 84 06 1a e7 bb 64 78 eb bb 91 fb ab 24 69 b6 f4 dd c1 39 26 ca 20 17 15 6e dc Data Ascii: vf[lD~*<{#Z$qp.`ce"hHY!r6Omb%l]{"ZAQ5,m3v@)IW7rllsgc d#eosm<\|$w$G#%"q.h[xefU\|AUkxdx$i9& n
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 49 68 24 66 30 59 a3 4d 72 80 00 99 85 50 14 0e 93 24 a5 d9 3b e6 03 f7 04 a6 d7 aa 8d b1 3a 0f ee 36 f2 d5 57 8b 75 2b 01 6a 59 44 4c 90 23 e3 5d 5f 0f f0 ae 9c 3a d1 cc 0f 81 9a 7d ef ee 12 38 2c a3 1b df 03 9a 79 c2 db 00 0a 83 8f c7 41 81 5e ec 62 34 26 a9 ee 9e f7 c6 b1 d1 43 89 e7 16 e5 b3 c7 dd 16 54 38 5e 12 6f 31 bb 88 1a 19 16 ad 6b 08 a7 ab 6d df 23 59 fc 00 11 b8 ee 06 dd 84 90 3b ad a6 59 92 5a 3a 4e a4 46 fe 10 3c 6a b7 07 c7 1e c8 2b 00 f7 a7 bd 33 fd 10 27 49 f2 ae b8 3b 8b 75 9b 11 7c 8c b6 fd db 73 f1 02 3a eb fd a6 df 41 15 ae 63 67 a6 97 11 fa 46 40 0d fc 00 1f 94 9b 99 1d 44 79 e8 a2 60 ec 1c 8a 72 90 66 57 e7 bf c7 4d 0c 53 06 9a 4c 4f e6 75 af 9c 1e cd c3 6c 3b 8d 18 96 0a 06 a8 84 ca ff 00 48 47 86 a0 46 fa c4 9b b8 32 cb 23 50 35 Data Ascii: Ih$f0YMrP$;:6Wu+jYDL#]_:}8,yA^b4&CT8^o1km#Y;YZ:NF<j+3'I;u\|s:AcgF@Dy`rfWMSLOul;HGF2#P5
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 7b 10 64 15 3a 88 ac 93 9b 38 03 2b 87 37 94 76 92 cc 81 74 06 75 86 2c 0f 94 95 e9 e5 ac 7c 3f 39 9c 21 b1 bb a8 c4 1c eb 9a 33 da b9 61 c5 c5 f0 04 5d b7 66 e2 9f de 51 e2 6a bb 67 d4 3d 8e 0d 68 b8 27 31 e1 bb 9e 83 82 b6 db 14 4c 99 a6 56 e4 e1 ea 16 d1 92 b9 62 6e 2a ab 3b b0 44 45 2d 71 d8 80 aa 8a 0b 3b 31 3a 00 aa 09 27 ca a6 70 5c 55 ab f6 d6 ed 96 cc 8d b7 42 a7 aa ba fd 16 1d 47 a1 12 08 35 91 7e 92 3c d8 a9 64 e1 94 76 88 c7 2e 35 93 bd d8 92 d6 ce 1e dd cc a6 50 de 6c cc bd 4f 62 46 92 66 e6 4e cd c2 e3 7f df c7 7f 25 9a 85 b2 17 59 2d f0 df 6c d9 b1 1d b5 eb 58 8e c8 e5 4b 4a 16 e2 da 55 d0 48 53 19 c9 d5 c9 90 c6 4c 6c 05 40 e2 be d4 9a e5 e7 b8 8c 8a 24 32 5a 0c e4 42 80 56 0d c8 74 61 b9 0a 40 cc 09 81 a8 a8 9c 3f da 75 82 f7 53 f5 54 b6 Data Ascii: {d:8+7vtu,\|?9!3a]fQjg=h'1LVbn*;DE-q;1:'p\UBG5~<dv.5PlObFfN%Y-lXKJUHSLl@$2ZBVta@?uST
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 9e ad a4 85 9f dd 00 fc 4d 63 5c f5 80 7b 96 fb 3b 7a 90 bd ab a8 52 5d bb c1 2d a0 8d 49 cb da 5d 88 d4 0f 4a ab ae a7 85 d0 87 38 61 2e 23 9d ff 00 bb 3f 2b f2 ca ea f3 67 3e 49 1f 7e 1f fe 77 f5 b7 3d ca 5e 3f 85 fe c2 de 3a fd c2 97 99 85 d1 76 de 52 c5 0a 15 4c 3d bd 42 82 2d 81 dd 30 55 c3 e8 c3 34 fa c6 fb 4c b2 14 58 4b 26 dc 15 52 e1 c3 88 4e ec 01 00 a0 31 30 24 0d 3a 6d c7 09 85 17 d6 d2 e2 9e e5 bb 20 2d d4 c8 01 4e d9 d4 c8 04 82 a3 f6 7d ad c6 50 ad df 2c cc 74 2a d4 fe d0 39 00 32 fe b1 86 6b 44 05 19 ed 8b 93 71 98 30 0c c3 74 ce 7b ce c0 3f 4e ad 35 4d 2c f1 c9 23 58 7b ba 7d 37 68 24 66 2f 9d 8f 4d 2f aa b7 6d 0b d8 c2 f2 31 66 72 39 d8 68 6d 97 bd cb 53 c1 e2 d8 05 b8 ba 06 1d e1 20 8f 10 4c 68 64 41 91 4d fc 07 8b db 23 2b 88 66 2a 09 Data Ascii: Mc\{;zR]-I]J8a.#?+g>I~w=^?:vRL=B-0U4LXK&RN10$:m -N}P,t92kDq0t{?N5M,#X{}7h$f/M/m1fr9hmS LhdAM#+f
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: d8 dc 3b 0c cf da a7 55 70 26 3c 88 1b f9 91 4d d6 fc 29 8c 62 64 97 3c c5 bd 73 f5 0b ba 1d ab 51 06 a0 58 ea 06 7f 7f c1 5f 39 a3 11 79 1c 9b 8b 70 f8 92 46 84 7e f1 2d 23 d2 92 78 d7 1f 67 61 ae 8b b7 5f af a9 fb 3e 75 ba 71 ae 68 c0 f1 25 cd 99 2c 5e 23 f6 81 cc 23 1f 16 d0 95 6f e7 8c c0 f5 8d eb 13 e3 bc 11 16 e3 2a 5d b7 70 29 12 6d b6 61 a8 07 43 00 1f 09 12 24 1a af 83 66 18 0e 6c 20 8e 3a 79 e8 ac a6 da 46 61 62 45 b8 05 b4 7e 8e dc db 16 ae d9 67 ec da e3 a1 b5 72 03 00 c9 ba b2 b1 03 2d c5 fd 99 79 05 66 65 62 47 0e 71 f6 85 6c 8b f6 5c 5a bc 2e 3e 6b d8 7c 99 59 dd 55 55 6e 35 d1 91 d6 6d a5 bc af de 75 ca 91 05 4d 65 7c 1f 1c 6d c6 5d 23 6a 81 c6 78 72 e2 2e dd 7e d9 6d b8 50 f6 54 a9 3d b3 b3 77 ad 86 04 64 82 5d cd c3 3b a8 00 ce 9e 55 d0 Data Ascii: ;Up&<M)bd<sQX_9ypF~-#xga_>uqh%,^##o*]p)maC$fl :yFabE~gr-yfebGql\Z.>k\|YUUn5muMe\|m]#jxr.~mPT=wd];U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49967	108.177.122.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1036	OUT	GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16242 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:49:49 GMT Expires: Fri, 19 Apr 2024 15:49:49 GMT Cache-Control: public, max-age=7200 Age: 1012 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1d 1d 1b 1f 1f 1d 1d 1e 1d 1f 1d 27 1f 1f 1f 1e 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 2f 57 3f 37 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 48 10 00 02 01 02 04 02 06 07 06 03 06 04 05 05 00 00 01 02 00 03 11 04 12 21 31 05 41 13 22 51 61 71 92 06 32 52 53 81 91 d2 16 23 42 a1 b1 d1 14 17 Data Ascii: JFIF'.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W//W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"H!1A"Qaq2RS#B
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: ec 4e 2b de 50 f3 3f d3 0f b1 38 af 79 43 cc ff 00 4c 35 61 f2 47 d9 cd c2 74 9f 62 71 5e f2 87 99 fe 98 7d 89 c5 7b ca 1e 67 fa 61 ab 0f 92 3e ce 6e 13 a4 fb 13 8a f7 94 3c cf f4 c3 ec 4e 2b db a3 e6 7f a6 1a 4b d0 7c 91 f6 73 70 9d 1f d8 ac 57 b7 47 cc df 4c 4f b1 98 af 6e 8f 99 be 98 69 2f 42 f9 61 ec e7 61 3a 2f b1 b8 9f 6e 8f 99 be 98 0f 43 31 3e f2 8f 99 fe 98 f4 97 a0 f9 61 ec e7 61 3a 41 e8 4e 24 ff 00 79 43 cc ff 00 4c 70 f4 1b 15 ef 28 79 9f e9 8b 56 3f 92 3e ce 66 13 a7 fb 0b 8b f7 94 3c cf f4 c3 ec 2e 2f de 50 f3 3f d3 0d 58 f7 8f b3 98 84 e9 4f a1 18 a1 fd e5 0f 33 fd 31 bf 62 f1 3e f2 8f 99 fe 98 69 2f 42 f9 23 ec e7 21 3a 3f b1 78 9f 79 47 cc ff 00 4c 3e c5 e2 7d ba 3e 67 fa 63 d2 5e 85 f2 c3 d9 ce 42 74 83 d0 ac 4f bc a1 e6 7f a6 3b ec 36 Data Ascii: N+P?8yCL5aGtbq^}{ga>n<N+K\|spWGLOni/Baa:/nC1>aa:AN$yCLp(yV?>f<./P?XO31b>i/B#!:?xyGL>}>gc^BtO;6
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 88 d5 11 88 6e 58 a1 64 a0 42 16 04 b4 8e 92 49 5e f1 ca d2 1a 2d 48 9e d0 8a 22 da 41 a8 d8 a0 45 85 a2 02 da ed 22 71 1f 41 ae 2d 1c eb 32 e9 9a be 55 95 a3 5c 69 26 2b 19 50 69 34 4c cd a2 b5 a5 9a 66 40 04 b5 45 23 97 44 45 72 4a 82 3e 00 44 73 a4 c0 ea 5c 22 35 3a c7 c8 90 eb 25 12 99 11 16 11 61 24 d4 48 42 2c 04 98 90 81 32 07 a9 1a 56 4c a7 a9 35 e1 2b 86 91 60 f8 92 d5 c9 65 70 1d 4b 21 60 2c c0 78 13 13 a5 d8 a3 3b 2e cc ee 3a 84 e1 cb 0d e9 bd 2a be 57 04 fe 53 4a 50 e2 18 c4 1d 25 26 57 6f ba 2c e5 40 b2 a1 b8 be a4 76 19 32 69 2e 4d 57 65 d0 41 00 8d 88 b8 f0 8b 28 70 4a f9 f0 ca 0f ac 97 a6 de 2b fe 96 97 8c 69 da b1 3e 02 11 21 78 c5 62 c6 98 b7 88 60 0c 48 c3 1e 63 4c 68 c8 8c c4 8e 31 ad 2c 45 6b 45 b4 58 4d 0c c2 d0 b4 58 b6 88 04 b4 20 Data Ascii: nXdBI^-H"AE"qA-2U\i&+Pi4Lf@E#DErJ>Ds\"5:%a$HB,2VL5+`epK!`,x;.:*WSJP%&Wo,@v2i.MWeA(pJ+i>!xb`HcLh1,EkEXMX
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 11 c5 a3 2f 11 e2 18 e2 f1 82 a6 b2 22 d6 8c cd ac b5 12 1c cb 80 c8 da 90 e9 05 4d 73 05 65 df 4b 12 0e df 08 aa d1 2b 36 92 28 bb a5 64 35 6a 5e 47 78 d2 62 4d 92 39 db b3 2b d2 7d 30 e8 d6 b8 4a a8 4f 86 a3 5f 98 f9 c6 f0 ca c9 57 14 a5 09 65 40 e6 e0 10 a0 9d 17 5d b6 cd f2 92 fa 45 7f e1 1e de d5 2f 97 48 b3 3b 05 5d a8 53 2c a4 66 71 87 41 71 9a c5 9a a1 d0 73 36 98 64 49 4a d9 ac 65 f8 33 b4 4d a7 3b e9 42 5b 11 84 a8 55 8a 0e 95 09 00 90 09 02 db 78 13 f0 95 69 d6 c4 d1 19 ff 00 88 19 98 f5 95 d4 ba 16 bf 79 ea ef 6d 23 f8 a7 12 fe 23 09 4d 88 c9 51 31 14 83 28 37 17 b1 d4 1e 60 89 84 33 43 25 ea 56 3c 91 97 45 cf 47 46 6a 95 6a 00 d9 72 22 2b 15 2a 09 cc d9 80 bf fd 33 7a f3 2b 80 35 a8 b2 df 51 55 ef f1 b1 fe b3 4e e2 6b 15 c1 6d f2 29 8d 85 e2 Data Ascii: /"MseK+6(d5j^GxbM9+}0JO_We@]E/H;]S,fqAqs6dIJe3M;B[Uxiym##MQ1(7`3C%V<EGFjjr"+*3z+5QUNkm)
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 5c d9 41 ed 12 5b 4e 77 1d c5 ea 0c 42 3d 10 a2 d4 d8 75 86 62 43 11 c8 1d 36 99 e5 9b 8c 7f 1e fe 8b c7 1d 9f 3d 17 29 63 b1 05 56 ae 54 c8 f6 cb 4c dd 5a de 3c 8e fb fe 53 27 19 56 9b 62 d9 f3 82 ac d4 da e0 82 2c 15 41 d7 6e 46 4a ac e8 b4 a9 f4 8c 10 d3 25 8f 50 b0 23 2f aa 4e de b4 b5 80 c3 53 74 00 d6 64 20 20 08 1f 28 03 22 9b eb de 4f 39 c0 b3 64 8d a9 f2 74 60 c0 db 77 d1 6b 84 e2 11 de a8 a6 ca c3 ee d8 90 6f 66 37 04 7f ed 1f 39 a5 33 78 7d 20 95 ea 28 62 f6 a7 4f ad 7b e6 eb 3e b3 4a 76 e0 95 e3 4c cb 3c 75 9b 40 c0 11 63 a8 8f a6 2e 64 03 3e 73 b6 4b 69 db 79 62 8e f3 6f a3 2a 25 7a 76 8c 93 d5 da 41 21 3b 09 76 24 22 c4 94 48 40 98 46 c0 0a dc 4e 8b d4 a1 51 50 d9 c8 ba eb 6d 41 bd af f0 99 38 3e 23 87 f5 99 c2 31 03 aa fd 52 3c 0f 31 7b c9 Data Ascii: \A[NwB=ubC6=)cVTLZ<S'Vb,AnFJ%P#/NStd ("O9dt`wkof793x} (bO{>JvL<u@c.d>sKiybo*%zvA!;v$"H@FNQPmA8>#1R<1{
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 20 07 36 d2 fb da 72 f8 be 42 b9 39 9b e7 c0 e4 d2 82 e8 38 be 1f a5 ae 89 7c ac 29 3b 23 76 36 75 df b4 4a 98 2c 7b 53 aa 51 97 2d 5d 03 a9 3a 55 e4 18 1d af 6d 8e c7 63 6e 56 28 e2 5a b6 20 b1 0a 85 68 ad b5 dc 33 13 cc 7f 86 33 1e 94 eb 26 ae 81 d6 f9 2a 66 04 0e e3 6e 46 44 fc 96 b3 3a e8 d6 3e 35 e2 49 f6 6d d1 ac ae 2e be 04 1d 08 3d 84 72 32 49 ce f0 ec 79 08 cc c4 67 a3 95 1f ac 0e 74 3e a8 b8 dc 8e 5f ea 66 e1 a8 57 a3 62 ca cb 50 d8 65 dd 0d af 63 da 39 5f b4 8e d9 e8 c7 2a 7d 9e 7c b1 35 d1 34 21 09 b1 90 d2 21 14 c0 46 31 c0 c6 98 c7 26 e2 d7 b5 f5 8f 27 9c 94 f9 02 b5 66 be 23 0e 96 e5 59 af dc 12 d6 ff 00 dc 3e 53 9c e2 0b f7 ab 72 47 dd 28 1a 5f 67 70 66 bd 3c 68 ab 5a 95 44 02 c2 9d 55 ca 5d 55 ae f9 6c 6c 74 e4 79 f3 90 63 f8 3d 6a cc 96 Data Ascii: 6rB98\|);#v6uJ,{SQ-]:UmcnV(Z h33&fnFD:>5Im.=r2Iygt>_fWbPec9_}\|54!!F1&'f#Y>SrG(_gpf<hZDU]Ulltyc=j
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 32 b0 25 18 0d ca 90 3c 6d a4 60 73 58 74 19 69 72 1d 4f e9 3b 0a 14 ad 73 69 cb 53 c3 54 53 49 1e 8b 10 4d 88 cc 87 40 2e 79 f6 4d 8a 9e 90 d2 a5 94 1a 75 45 d6 ea 2c bb 6d ed 4f 99 cf 87 23 74 93 3d b9 e5 8e bc 33 38 63 28 9a 34 91 d1 aa 65 5a 65 82 a9 61 4c e5 b6 a7 6b ea 45 86 ba ca 74 b8 68 ae 59 e9 00 56 ec 73 1a 95 12 cb 9d 82 d8 06 1c 96 2f 0d e2 6c aa a8 d4 ee f9 42 6e 32 90 36 f0 d2 37 04 cf 49 42 9a 6c ac ab 55 b3 2b 80 0a 82 cc 7e 57 9e 94 a5 92 5c 38 9c 3e 3b a9 cb 6e 8b 58 5e 1c 52 bd 31 53 37 e2 60 bd 35 46 53 96 c5 4d 8b 11 37 c1 98 b8 1a cf 52 ba 96 52 2c ae d7 67 0c 4e cb ca 6c 4e af 15 7f a6 67 e5 ff 00 12 89 d0 da 2b 54 90 e6 89 9a 74 51 cd 63 d8 c8 d8 47 13 1a d1 a1 11 98 08 18 4a 01 18 cc 0a e6 d5 1b c6 6f 19 9f 8a c0 67 6b 83 6b ef Data Ascii: 2%<m`sXtirO;siSTSIM@.yMuE,mO#t=38c(4eZeaLkEthYVs/lBn267IBlU+~W\8>;nX^R1S7`5FSM7RR,gNlNg+TtQcGJogkk
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 50 34 17 37 72 c3 4b f6 5c eb 38 5f f1 e5 7e 91 d5 1f e1 2a f6 54 a2 0a ba 90 57 42 0e f3 57 12 9e b0 06 ff 00 75 5f fe cf f5 13 20 e0 ab 73 4a 83 ff 00 4d bf a0 9a 98 5b 87 65 fb c7 73 41 c0 52 85 4d d8 8d af 6e c3 2e 4b 94 c5 17 c3 2c f0 b3 7a 9e 14 85 fe 2d a7 e8 66 ac c9 e0 e8 cb 56 a2 ba b2 9e 8e 9e 8c 08 bd 8b 5e df 39 ad 2b c5 55 89 21 79 4e f2 b0 89 16 21 9d 27 38 a2 0d 1b 16 f0 10 d3 1b 14 c4 80 09 1a 63 ed 28 63 b1 36 ea 8f 89 8c 46 a5 17 b8 11 d5 70 e1 bc 66 76 0a b9 b0 9a 88 d7 13 82 49 c2 56 8e d8 b5 25 4c a2 69 e5 36 31 1d 39 cb f5 69 06 1d f2 95 40 46 86 75 e2 ca a7 fd ce 79 c1 c5 91 09 22 09 18 8e 0d 37 33 2c 2b 47 5e 57 53 ac 7b 1b 19 14 31 ce 26 5e 2d 9b 3d 8e a2 6b 29 bc 90 51 56 dc 5e 17 40 63 e0 55 af dd 2f f4 46 48 69 80 d6 02 3f a2 Data Ascii: P47rK\8_~*TWBWu_ sJM[esARMn.K,z-fV^9+U!yN!'8c(c6FpfvIV%Li619i@Fuy"73,+G^WS{1&^-=k)QV^@cU/FHi?
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: a7 72 44 bc 29 90 35 b4 ac 54 ab 05 ec 3a 4b 26 8b 58 b3 19 94 d5 97 17 42 e5 b8 92 d3 d0 69 23 4d a4 8b 2a 09 24 29 36 d9 5f 17 8a 4a 76 2c 6d 7d 86 e4 f8 09 9f 5a a2 56 c4 d2 e8 d8 30 14 ea 06 b1 da fb 5f b3 63 2d 62 09 18 aa 64 29 7f bb a8 2c 2d 70 6e 35 17 d2 42 30 ce 2b e7 e8 5f 2f 47 6b 96 a7 72 6f 7f 6b b2 70 67 f2 aa 6f 13 e8 bc 51 96 ca 91 3e 0b 15 4c 61 e9 66 60 08 44 52 39 86 02 c7 4f 81 94 78 a6 2d 58 3a 83 72 c1 91 40 d8 9c a7 9e d2 33 46 aa 52 b1 5a c2 a0 73 a2 e6 23 25 89 b7 56 e3 7b 48 ea 50 aa 6a 21 c9 5d 90 3d ce 6a 6e 40 16 22 fb 5f ff 00 ec a7 e5 3d 78 af f2 6e b0 2b e6 cb 55 69 3a 0a 59 a9 b2 85 50 19 8e 5b 5d ac 06 a0 f6 c7 89 a1 c5 31 d4 ea 22 a2 e7 b9 74 3d 6a 4e 83 4d 77 23 ba 51 75 b1 8f c0 c9 2c 98 de ca b9 33 f2 62 94 95 16 29 Data Ascii: rD)5T:K&XBi#M*$)6_Jv,m}ZV0_c-bd),-pn5B0+_/GkrokpgoQ>Laf`DR9Ox-X:r@3FRZs#%V{HPj!]=jn@"_=xn+Ui:YP[]1"t=jNMw#Qu,3b)
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 39 b0 e5 9b 95 36 5e ae d5 0a 66 35 19 b2 32 b0 be 5e db 7b 3d 84 c9 98 5e 4b 8a e1 bd 1d 02 7a 46 3a d3 bd c2 eb d7 03 b2 31 86 b3 3f fc 6b 4e 12 6b d9 a7 99 4e 49 21 69 2c b4 82 42 04 99 4c ef 97 27 25 50 aa 77 8f 0d 1a 60 a3 59 91 46 67 18 e1 b5 6b d4 56 a6 50 00 b6 39 89 06 f7 ee 13 9d c5 53 a9 46 a3 52 70 b9 96 db 5e c4 11 b8 9d d8 b4 c5 f4 82 9d 25 7a 75 5d 41 07 ee ce 97 d7 71 fd 60 b9 74 6d 09 3e 8c 1c 36 03 13 5d 01 a5 48 90 7a b9 f3 28 0a 76 b9 d6 f3 4a a7 a3 d8 ac c4 2a 2b 2d ec 1b 3a 8b 8e db 4b de 8c e3 94 bd 6a 63 41 d5 75 f0 d8 ff 00 49 d0 f4 c2 67 29 34 e9 16 dd 33 1f ec 96 1e d6 cf 5b ce 3f 69 15 7f 44 28 e4 6c 95 2a 86 b1 b5 d8 11 7e 57 d2 6e 7f 10 04 69 c5 89 9d cc 5b 1c 4d 5e 09 89 a6 a5 9c d3 16 dc 02 4f f4 88 bc 3a a1 64 53 51 6e c7 Data Ascii: 96^f52^{=^KzF:1?kNkNI!i,BL'%Pw`YFgkVP9SFRp^%zu]Aq`tm>6]Hz(vJ+-:KjcAuIg)43[?iD(l~Wni[M^O:dSQn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49969	108.177.122.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:40 UTC	1036	OUT	GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 15512 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:02:02 GMT Expires: Fri, 19 Apr 2024 15:02:02 GMT Cache-Control: public, max-age=7200 Age: 3879 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 18 1a 1d 1d 1b 1f 22 25 20 20 20 1f 1f 25 25 25 25 26 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 30 57 42 38 3f 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 42 10 00 02 01 02 04 03 05 06 03 06 03 08 03 01 00 00 01 02 00 03 11 04 12 21 31 05 41 51 06 13 22 61 71 14 32 81 91 a1 b1 42 c1 d1 23 24 52 72 92 e1 Data Ascii: JFIF"% %%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W/0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"B!1AQ"aq2B#$Rr
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 93 b9 3e 50 ee 4f 94 58 23 84 93 b9 3e 51 7b 83 e5 16 08 a1 25 ee 0f 94 4e e4 f9 45 82 38 49 45 03 e5 17 d9 9b a8 8b 40 86 12 7f 65 6e a3 eb 0f 64 6e a3 eb 16 81 04 25 8f 63 6e a3 eb 0f 63 6e a3 eb 16 81 5e 12 73 84 6e a3 eb 1a 70 e7 ca 2d 02 28 49 45 03 e5 14 61 9b a8 8b 04 30 93 fb 2b 75 10 f6 46 ea 3e b1 68 10 42 58 f6 46 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 b1 ec 8d d4 7d 61 ec 8d d4 7d 62 d0 2b c2 58 f6 36 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 98 e1 9b a8 8d ee 4f 94 58 23 84 94 50 27 a4 5f 66 6e a2 2d 02 18 49 bd 99 ba 88 be ca dd 44 5a 04 10 93 fb 2b 75 10 f6 56 ea 22 d0 20 84 9b d9 cf 51 13 Data Ascii: >POX#>Q{%NE8IE@endn%cncn^snp-(IEa0+uF>hBXF>6>h'F>F>hBO}a}b }a}b+X6>6>h'F>F>hBO}a}b OX#P'_fn-IDZ+uV" Q
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 67 38 bf f5 18 9c 67 88 56 a0 10 d1 a5 de 13 7b e8 4d be 53 9b e2 1c 46 be 29 a9 51 af 48 53 bd 45 b6 84 13 cb 9f ac e9 78 8f 14 a7 86 0a 6a 66 f1 5e d9 45 f6 98 78 ae 29 4b 15 8b c2 77 79 bc 2f ae 61 6d c8 fd 26 b8 97 9a be f6 63 95 fc ff 00 43 ac 16 00 01 b0 16 98 9c 4b b4 e9 42 ab 52 14 d9 d9 74 26 e0 0b da 6c 03 3c db b4 05 bd ae b6 fe f9 9c e3 49 dc 8e b3 6f 4a 2c e8 b0 5c 7f bd c7 53 63 4f 2e 65 ee 86 b7 dd af 79 d6 66 9e 61 d9 f2 7d ae 8d ff 00 8d 7e f3 d2 73 4b 3a 71 4e 2a 89 c7 69 b4 dd 94 b8 5f 1b 18 9a 95 10 21 5c 9c c9 06 fa da 45 da 90 87 06 e5 86 aa 41 5f 5b cb 94 30 b4 e9 96 34 d0 29 6d c8 1b ce 7f b6 58 96 b5 2a 43 45 37 72 7a 9d 80 95 24 e6 a8 93 6d 41 d9 d3 e0 0f ec 69 7f 22 fd 84 e7 38 ab 7f fd 4a 3e b4 ff 00 ee 9b b8 06 fd 8d 2f e4 5f Data Ascii: g8gV{MSF)QHSExjf^Ex)Kwy/am&cCKBRt&l<IoJ,\ScO.eyfa}~sK:qNi_!\EA_[04)mXCE7rz$mAi"8J>/_
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 53 d4 1b 18 8f 58 b1 bb 12 4f 52 49 87 e9 de 4a 42 e7 58 b4 77 9c 03 1c 2b 61 d3 5f 12 00 ac 3d 36 33 4c 4f 30 4a a5 76 24 7a 1b 49 7d a9 ff 00 8d ff 00 a8 c3 f4 e5 b5 23 49 cd 2a 71 3d 23 17 8b 5a 34 d9 dc e8 07 cc f4 98 7d 97 ac 5e bd 76 3b b7 88 fc 49 9c a0 c4 75 2c de 44 e9 25 c1 e2 d9 2e 45 46 46 3b 91 7d 7e 52 2f 4d 5c 53 ec 8d cd d4 9a e8 ef f8 b3 5a 97 fa 97 ee 27 9f f0 23 6c 4a 1f 31 f7 12 d9 e2 63 76 a9 52 a3 6b 61 ad af 6f 39 9d 80 75 4a aa 58 90 bb 12 05 ed e7 39 bc 63 24 ae cd ee 69 ba 3d 4e 79 ef 6b 47 ed c7 fa ff 00 ee 97 5b 8a 51 23 c5 8a aa de 41 5b f3 98 fc 53 16 95 99 3b b5 60 a8 b6 f1 5a e4 dc 92 74 92 6a 29 3a 76 6a 32 94 9a b5 46 75 a2 11 24 22 d1 8d 38 24 76 3b de c9 9f dc c0 e8 ed f9 4d 3c 46 1d 2a ae 5a 8a 19 6f 7b 11 7d 67 9e 51 Data Ascii: SXORIJBXw+a_=63LO0Jv$zI}#Iq=#Z4}^v;Iu,D%.EFF;}~R/M\SZ'#lJ1cvRkao9uJX9c$i=NykG[Q#A[S;`Ztj):vj2Fu$"8$v;M<FZo{}gQ
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 3a da c3 e6 67 48 b5 d3 1b 8e a2 ca a7 2a 02 48 60 39 6d f5 22 74 c4 d8 44 a0 a3 da 33 16 e5 74 f4 70 03 b2 d8 b3 ff 00 2c 0f 57 5f d6 62 e2 30 e5 1d 91 b7 52 41 f5 13 d0 aa f6 9f 0a b7 b3 33 7f 2a 99 c4 f1 2a cb 56 bd 4a 8a 08 56 62 45 e4 94 1e 37 54 14 d6 49 27 66 71 5b 46 33 4b 25 64 55 29 ce 4a 47 64 44 a2 3f 2c 60 92 29 95 90 4c b1 8c d2 53 23 29 00 88 c5 02 0f 1a a6 0d 0a 56 02 2b 18 c0 61 90 75 a1 16 06 60 0d 22 34 c7 11 10 ac b4 5a 22 66 91 de 3d d6 44 66 91 00 98 08 de 71 e2 68 01 58 c2 24 80 c7 65 92 e8 0d b4 51 16 d0 98 03 80 8e b4 45 11 d0 51 2d 16 d1 61 04 00 21 68 a0 45 b4 10 14 4b 89 4c bb a8 d8 ed 22 a1 6d 74 d4 6a 25 bc 1a 96 71 51 ad bf 3e 73 71 8e b2 34 bd 8d 1a 38 53 dd b0 f0 a1 60 47 53 69 10 a6 45 2a c9 bb 01 a9 eb 2f d5 aa a4 aa 93 Data Ascii: :gHH`9m"tD3tp,W_b0RA3VJVbE7TI'fq[F3K%dU)JGdD?,`)LS#)V+au`"4Z"f=DfqhX$eQEQ-a!hEKL"mtj%qQ>sq48S`GSiE/
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 8a c6 e5 9a fb a5 e6 28 bf 6f ed 26 26 2f 89 62 71 0b 92 a1 ba de f6 0a 06 a2 3e 8f 18 c5 53 45 44 36 55 16 1e 01 b4 64 75 cc 7d cf fc 50 fb 7d dd b2 1a 95 6b bd 4e f9 98 f7 82 d6 3c f4 93 d5 e2 98 ba ba 1a 8c 07 f9 7c 3f 68 00 63 80 99 7f 56 fd 91 7e d9 7b b2 b5 16 ab 41 83 d3 62 1b 9d b5 f9 f5 97 57 8f 63 3f 8b ff 00 c0 91 da 16 91 7d 5b ff 00 e9 26 5f b7 5e 1d 12 9e 31 8b 6d ea 91 e8 00 90 bd 42 db b1 66 26 e5 98 93 17 2c 6e 59 1f d5 cb c2 48 d2 fa 75 e5 b6 6b 52 e2 f8 9d bb ca 67 d4 ac b0 bc 53 12 7f e6 51 1e ac bf ac c1 c9 0c b0 fe a5 7f b5 13 d0 7f ee 66 c5 6a ee d5 51 fb fa 6d 54 7b b6 22 c0 0f 3d b9 98 b8 8e 23 88 fc 58 9a 69 e4 a5 49 fa 4c 6c 91 ad 4e 3e e9 fb 22 7d bf fc 99 36 22 b2 b1 f1 d5 a9 54 fa 9b 7d 65 66 d4 de d6 f2 88 44 72 cc 72 73 4a Data Ascii: (o&&/bq>SED6Udu}P}kN<\|?hcV~{AbWc?}[&_^1mBf&,nYHukRgSQfjQmT{"=#XiILlN>"}6"T}efDrrsJ
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 30 c5 73 38 f1 b5 8b 79 9b 5a ff 00 20 24 57 d3 31 3e 86 c5 b4 55 d6 3c 2c d9 c4 8b 2c 70 11 58 5a 20 30 41 6d 20 c4 d4 ca 3d 65 a1 32 f1 95 6e f6 1c b4 9b e2 57 2b 24 de 88 71 35 ac 9e bf 69 4e 8b f8 87 ac b0 68 9a b5 32 83 65 51 e2 63 b0 12 45 a8 b4 09 c8 a0 ff 00 98 8f 14 f5 7a 6f 91 98 4d 45 1a 59 0d af 69 13 ca 15 38 83 34 89 6a b9 3c ec 76 9a 5f 46 bd cc fa 86 89 12 4a 75 ec 2c 76 90 50 62 c9 73 d6 d1 e4 cf 27 27 1d 3c 59 da 13 6b 68 65 6e 31 9f c1 49 09 d3 41 e9 22 c0 d1 ad 88 71 59 0a 02 87 67 bd 8c aa c4 51 ab 9d 5a d6 d4 5b 53 34 38 7d 42 94 c0 1a 0d fc fe 53 71 e3 84 76 8b 2e 59 4b 45 ce 2b 8b 7a 6a 9d e2 ae b7 b6 53 7e 93 16 be 34 b8 2a 14 eb a5 ed 2c e3 1c d4 6b b6 c0 58 09 15 3a 59 88 02 4e 48 46 ec b1 e4 92 54 68 70 7a 17 39 8f 29 ab 5a a8 Data Ascii: 0s8yZ $W1>U<,,pXZ 0Am =e2nW+$q5iNh2eQcEzoMEYi84j<v_FJu,vPbs''<Ykhen1IA"qYgQZ[S48}BSqv.YKE+zjS~4*,kX:YNHFThpz9)Z
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: f3 9c 5a aa 8f 51 01 bd 22 6e 3a 4f 27 17 13 bb 3d 2e 93 b2 bb 9b 92 62 89 79 56 8d 4e 76 32 ad 5a 79 58 8b dc 75 9e c4 cf 1c e0 d6 c4 11 e2 30 49 10 6b 29 cc 7a 5b 9e d1 dc 2a aa ab 97 3a f2 b7 94 8b 8a a1 44 05 07 84 d8 1f 59 4a 89 37 d3 e3 3d 70 e1 78 b4 fc 9e a8 41 c7 b3 76 a7 14 a6 1d 7b aa 5a 29 27 cf ce 15 68 52 a8 86 b5 2a 85 5a f7 64 2c 0e 97 da d2 0f 68 45 54 51 4d 4b 01 a9 65 06 47 5c 27 7a 0d 25 ca ac 05 c6 de 21 bc 43 85 a7 a4 d7 fe f2 76 a2 e2 88 f0 24 69 50 19 32 cf 24 b8 e5 1e d1 e3 97 1c a3 da 1c ab 1c 56 00 c5 13 2d 18 32 f1 d4 f2 56 4a a7 dd 3a 1f 2e 52 de 1b 00 ad 54 03 60 0f 39 66 a5 25 75 2a c2 e0 c8 57 0a ca a1 58 e6 03 63 ce dd 0c ea a5 94 6b c9 d7 8d ec d2 a5 c3 e9 2b 5c 72 e6 0c af c5 69 53 76 a2 97 20 66 df 9c 92 8e 20 e4 f1 d9 Data Ascii: ZQ"n:O'=.byVNv2ZyXu0Ik)z[:DYJ7=pxAv{Z)'hRZd,hETQMKeG\'z%!Cv$iP2$V-2VJ:.RT`9f%u*WXck+\riSv f
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 18 ff 00 27 49 f2 28 44 0e fa 5f e3 25 a4 84 e8 04 96 86 1a f6 cc 72 82 6c 3a 99 a8 70 8f 4c 68 ba 79 6b 3c 2f 67 86 af 65 2a 98 16 5a 5d e1 22 c3 de f2 13 26 b7 10 52 e0 72 63 61 79 b9 c5 2b 7e e6 c3 9f 3f 4f fc 33 89 35 07 7a a5 b6 5d 7e 32 c5 2d 96 f1 e8 bb 8f a6 c0 dc 31 b5 f5 d7 49 4d a9 5a 59 a9 8b 24 6c 08 95 da b8 d7 49 25 6c c3 64 03 30 37 1b f9 4d 3c 35 ea 53 62 db a9 17 f4 3b 19 63 86 61 81 0a 58 6a 75 fd 25 ee 3d 6a 38 75 a8 80 66 b8 52 3a 83 c8 cc f9 a6 7a 23 06 96 46 33 f8 41 3d 04 c9 0a 44 d5 0c 95 53 32 e9 7f c2 4c 88 a9 02 d9 7e 93 58 b4 56 d4 b6 41 45 ed 05 4b 9b cb 07 07 50 0c c5 48 1d 62 a5 3b 48 f4 58 a0 c2 a2 87 05 c5 c4 e9 f0 f5 14 a8 b5 ad d2 73 6a b2 e6 14 1b e8 6d 30 f6 77 8e 8d 6c 4f 09 a3 58 1b 8c ad d4 4c 3c 66 0e ae 18 80 fe Data Ascii: 'I(D_%rl:pLhyk</ge*Z]"&Rrcay+~?O35z]~2-1IMZY$lI%ld07M<5Sb;caXju%=j8ufR:z#F3A=DS2L~XVAEKPHb;HXsjm0wlOXL<f
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 03 f0 aa 9b ec 34 de 6f 15 14 72 53 c8 6f 0c a4 6a 9c 83 ce fe 51 ef 85 22 a8 43 cc 81 f3 9b 58 2c 22 d1 4c aa 35 e6 79 98 ca 78 42 6b 1a af 61 6b e5 5e 7d 01 3d 26 54 ad 99 51 72 7a 2d e1 69 dd ae 25 2e d6 d6 d2 95 2e 9e 33 f6 1f 9c d6 a2 ca a2 e7 61 ac e7 38 95 eb 16 7b 1b 9d 87 97 29 95 6d 9e 9e 67 8c 28 a5 c2 eb 8a 6f e3 17 53 a1 1e bc e6 b6 0f 83 a2 55 2f 9c b2 6e 8b ae 93 05 44 d8 e1 7c 43 2f 81 ce 9c 8f 48 9d ad a3 c7 66 f3 80 c0 83 b4 cf c4 60 f2 8b f2 96 c5 48 b5 2a 0c 8d 71 71 6b e9 bc cc 66 9e 99 d3 8e 78 b3 18 ac 7d 27 b1 8d 35 95 b6 3f 3d 21 2b 47 b5 3b 35 f0 f5 c4 d1 a1 88 02 73 94 01 be f3 4a 8e 9b b4 c1 be cb dc 4e 8d 3c 42 65 61 af 23 cc 4e 32 be 16 a6 19 f3 0b 8d 4d a7 59 52 aa 28 25 9a 66 71 26 4a 88 45 ed e6 79 4b 17 46 24 95 19 9c 0a Data Ascii: 4orSojQ"CX,"L5yxBkak^}=&TQrz-i%..3a8{)mg(oSU/nD\|C/Hf`H*qqkfx}'5?=!+G;5sJN<Bea#N2MYR(%fq&JEyKF$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49971	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:41 UTC	1099	OUT	GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 7114 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6512 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	722	IN	Data Raw: 52 49 46 46 c2 1b 00 00 57 45 42 50 56 50 38 4c b6 1b 00 00 2f 3f c0 0f 00 4d 28 6c db b6 cd 41 76 77 ed 88 fe c7 90 c1 db de 85 b5 7d fd 77 d7 e8 bd 01 29 92 00 45 dd f0 a5 8e 06 dc 06 20 59 38 8c 24 59 a9 06 97 fc 03 1c 1c be bb 60 71 b0 8d 64 ab cd 82 6c a4 88 88 02 54 85 fa af c7 7b 33 6c 23 db 56 f2 70 77 0d 29 81 fe bb 20 22 75 77 77 e8 7f e8 d3 af 47 9f 3a 2d 7a 04 fa 84 5e 7e 75 ac 8b 5a a4 44 b4 7e c1 e7 f4 f6 b7 d0 a0 e2 27 68 99 02 b1 8c f7 8e c0 84 09 fb 8d ef 4b 9f 56 19 fb cc dd 9d b5 53 c5 0c 1d ef 7d be fb f9 9f 90 7f ce f8 77 de e8 e7 37 2b 57 27 be ed d5 f6 53 ad 2a ba 1f 2d 0e 5a 32 8d 40 9e 5f 79 60 98 e8 6b 5e 89 c4 93 c0 18 06 d2 b6 69 fc cb fe e7 21 22 26 a0 f4 ba 4f 91 dd d0 a0 81 3c d9 b6 ad 48 b2 6d 5b ad 8f 29 73 8a a8 1a 2c 66 Data Ascii: RIFFWEBPVP8L/?M(lAvw}w)E Y8$Y`qdlT{3l#Vpw) "uwwG:-z^~uZD~'hKVS}w7+W'S*-Z2@_y`k^i!"&O<Hm[)s,f
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 89 21 41 29 af 44 ba 22 d9 15 2a 63 0e c0 2d f6 9d 41 02 bd c0 ea 28 21 44 29 c0 52 67 7b 3b 27 a7 4d 55 91 95 00 52 26 48 4f e3 01 6e e7 ba c8 1e 96 d7 8e 5e 6b b3 c6 ff 3c fe 4b cf 7f 15 48 a9 57 80 80 57 40 00 e9 e3 79 aa fa 41 46 ca 24 ea 6c ee f8 f9 8f dd fa e4 03 7b 2f 5b 53 0f 26 bf 28 2d db a3 be 38 c9 d0 85 01 b3 04 90 01 db cd cb b4 3b bd 99 95 ba d3 d1 ba ca 06 15 19 00 26 15 bb 95 db 48 3b ab f1 ed ec c2 b9 9e fc d1 c3 2d 3f 3d db 69 81 cc 80 e1 28 d0 f0 ff 49 15 df 77 1f cf 7e 98 a1 e6 ca 33 ee fa cd b7 bc f3 a7 de 77 c0 b7 7e 67 b3 1f bc 3a ce 6c c1 4b ff f1 c8 fd c7 ef 7e fa f0 75 7b f2 b4 bb a4 52 41 72 20 43 94 63 d8 4c b7 ab 37 0c 9b f3 ad 09 0d e3 ac cd 6a 37 08 89 c2 82 80 74 14 c8 6b 8c a7 e1 ea e7 27 b3 38 9d de 5b 01 a1 40 02 8b 0a Data Ascii: !A)D"*c-A(!D)Rg{;'MUR&HOn^k<KHWW@yAF$l{/[S&(-8;&H;-?=i(Iw~3w~g:lK~u{RAr CcL7j7tk'8[@
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 6b ce 1b 36 c2 1d 99 c2 10 6d 68 93 1a 95 16 dc 12 18 c8 4a 5d 50 93 cc d6 2b dd 43 f2 bc 95 f2 86 6b 7e b7 ed 53 df 57 a7 bf 77 d9 79 af 81 ae 0f f9 f1 7d f9 0a da a3 fd cc 8f cb 4d af 20 dc e7 3a 12 94 40 12 01 b7 85 c2 90 41 d6 41 27 00 d8 79 f1 cc d1 bf 5e fd 9f ef fc 40 79 c8 0b 0f f8 49 ee 6f 63 8e cf 25 01 b1 13 94 83 b6 dd 68 a5 e7 b6 78 c0 e6 d0 34 16 cc 15 88 00 32 b3 f3 f5 da 55 e5 d0 41 ce 8f a0 79 95 32 bf c6 80 3b ba 7c f3 49 3e 39 d0 5c 3c ce 4d 0f 81 21 6a 82 ad 1b 12 c9 10 e6 16 8a 80 3c 29 15 89 24 19 81 20 f8 78 32 3a fe fb 3b 27 fd ea 2d ee 7f c1 ed 37 2f f7 bb e6 da 75 9f 89 85 36 19 14 c8 6c 1b c5 04 2a 58 b4 54 08 42 94 68 17 22 4c a6 12 09 86 9a 2b 8f 24 06 12 6c 6b e8 68 59 59 4b 9d b8 55 be f3 7a a2 e1 39 48 00 02 89 04 02 32 28 Data Ascii: k6mhJ]P+Ck~SWwy}M :@AA'y^@yIoc%hx42UAy2;\|I>9\<M!j<)$ x2:;'-7/u6l*XTBh"L+$lkhYYKUz9H2(
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 36 47 e5 45 ba fa 7d 5f fb 21 57 be 11 d7 ea fe b3 cf 58 f2 f0 b3 0f 8f 21 04 e6 f4 50 c8 d9 03 b2 09 51 01 39 15 39 34 8f 3c e9 4c 5e d5 6f 22 9f 73 90 6a d8 04 66 8e f9 02 af e5 19 08 00 10 d0 99 b1 d9 ca da d5 67 74 01 07 0b 80 11 10 91 6d 18 00 5b 27 22 02 24 6b 1b 0e eb 6b 6f 5f 9b 4f d5 9e 0c 9a 67 66 26 09 4a 30 80 10 ca aa 13 f5 57 8b 1d d5 11 e7 ff ed fc db 8d 9e 7b f1 3d 8e c1 40 34 d1 ad 2c 42 10 9e 64 c2 5d 4e 55 2a ea d0 34 b5 2f ef 8d 37 bb 01 98 53 6a 82 75 68 4e cc ed f5 fb bc 06 2c 80 00 53 15 6e fc f4 e8 ee e3 fa a7 9d 25 96 8c 87 2e ad 07 d7 7f 58 07 47 57 a1 cf c2 ea c8 e5 f4 48 0b 07 15 28 00 c1 e5 c3 7b ae fb c8 fb dc b8 fb 6b 47 36 c5 85 5c 6a 69 64 0a 72 c6 b8 3c 33 86 44 96 2d 84 cf 05 53 20 50 44 3d 79 e3 bf 59 7a e8 b5 3e 7f 54 Data Ascii: 6GE}_!WX!PQ994<L^o"sjfgtm['"$kko_Ogf&J0W{=@4,Bd]NU*4/7SjuhN,Sn%.XGWH({kG6\jidr<3D-S PD=yYz>T
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 12 d4 1e 14 1a fb 26 c8 58 57 79 11 52 d7 cf ee 3f 72 ee 23 cf 2b 9b 7f 3b 6d f2 57 17 d4 e3 e3 14 05 fd 66 9b a8 b4 10 1e ae bd fc b5 9f 3c 7a 71 dc 55 88 f6 ba af f8 93 ee 6d 3f bd ef 2f 67 3d 83 10 22 15 26 0f dd 18 e6 57 ff de d4 bf 3e 74 55 9a 8b 16 91 6d 29 11 a2 49 10 cd a0 69 00 85 b0 65 0c 6d 1b 4e 65 ca 0e 4c 0e 57 10 1d d4 01 29 a4 f9 db 91 a4 98 ea eb 5f c8 67 e6 13 4c 34 c1 83 00 82 1e 9b cb 9b d5 e1 fc d8 c5 37 3f 5c 8d bb ab 27 3f 53 9d fd bc 85 d1 b8 d4 ad d5 f6 b9 0b c7 a9 25 2c 94 fb cb 6d df 7c 3c 76 15 23 04 7f 77 fd a5 6f 75 75 f9 07 07 80 84 94 37 ba aa fa 85 e7 b4 5e 49 2c a2 65 02 b2 08 58 a8 96 30 59 80 42 14 84 99 d5 84 8f d0 7a d9 4d a0 9a dd 54 49 6f b6 45 34 c6 ee 98 bf 4b 6b 90 62 7c 77 14 7e 81 01 8a 34 28 30 68 7a 72 9a ea Data Ascii: &XWyR?r#+;mWf<zqUm?/g="&W>tUm)IiemNeLW)_gL47?\'?S%,m\|<v#wouu7^I,eX0YBzMTIoE4Kkb\|w~4(0hzr
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 74 13 d9 87 67 d4 c4 c2 28 17 21 47 20 81 40 e0 21 9e fa 24 48 14 49 40 20 02 22 90 cd 4a 49 06 08 04 60 01 05 08 11 72 55 54 e0 41 cd 68 a2 51 90 73 a4 50 02 a6 42 16 48 ed 75 bf d7 d5 a5 4f a3 4e dd 3e 36 ea 52 38 c8 ec bd 62 3a e3 ce 75 5b 73 56 cc 55 e6 51 f5 d0 38 df 14 6b 42 2a 51 50 13 7d 37 8d ca 38 04 33 6a cc 10 00 24 10 19 09 01 83 0e fc d4 a5 4c 40 0b 0a d1 a2 20 c9 54 4a 61 0d 09 20 28 24 59 a0 42 21 22 40 68 68 fc d0 a1 ce fc 68 30 45 82 cc 22 97 31 dd cf a4 d7 1d 36 f6 e9 f2 b8 6f 36 ea 2c 7a 00 c6 1c 53 47 9a 99 cc fb 57 62 32 68 7c 18 dd bd da d9 ed 29 71 70 2d 36 9f 85 8a 24 16 d1 96 b1 57 a5 85 69 4a 32 05 01 22 48 b2 84 24 ce 9d 79 52 35 48 28 48 11 41 22 0a c0 90 9d 82 60 01 10 92 60 49 c8 b2 ac 76 1c 6f 70 5a fd bc 73 01 4c 60 02 0d Data Ascii: tg(!G @!$HI@ "JI`rUTAhQsPBHuON>6R8b:u[sVUQ8kB*QP}783j$L@ TJa ($YB!"@hhh0E"16o6,zSGWb2h\|)qp-6$WiJ2"H$yR5H(HA"``IvopZsL`
2024-04-19 14:06:41 UTC	117	IN	Data Raw: 4a 42 8c 49 b1 09 90 aa 1c 4c 81 14 52 32 60 12 5c 51 06 16 20 03 09 86 8d 14 34 66 dc e1 cc 8e f9 3f 99 cc b2 60 01 91 01 0c 88 aa 24 33 29 92 5d a8 82 89 50 48 c9 48 4e 26 bb 64 24 c7 8c ec 22 30 cb 34 1b 4d b2 23 0d 92 5c e3 1e ab 0d 91 12 24 84 20 29 05 05 c4 98 fd c1 34 42 2d 44 30 0c 1d 99 47 52 31 32 31 31 50 1b 73 a5 43 2c 68 70 0e 9c a0 02 Data Ascii: JBILR2`\Q 4f?`$3)]PHHN&d$"04M#\$ )4B-D0GR1211PsC,hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49972	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:41 UTC	1114	OUT	GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19928 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6512 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	721	IN	Data Raw: 52 49 46 46 d0 4d 00 00 57 45 42 50 56 50 38 20 c4 4d 00 00 50 38 01 9d 01 2a 88 02 6c 01 3e 3d 1e 8c 44 a2 21 a4 92 59 5d 30 48 03 c4 b2 b7 7c 25 5d ba b3 57 be 7c 51 ae 84 70 7e 95 72 03 c8 fb c0 3d 67 ee cf c8 fe 59 f8 41 cc 7e f4 fc c7 e4 1f f7 0f d7 6f 9e fe 43 f1 57 d7 7d f9 fd de ff 25 f9 3f 82 0f 92 66 27 d3 9f e3 7f 30 ff c4 ff ff fa 9f ff 47 d5 b7 e9 6f fb 9e e0 1f a2 bf d8 bf ba ff 74 ff 43 fd cf ff ff ff ff bc 3f fa bf ce fb 8e fe a5 e8 63 f9 0f f6 2f f7 1f df 3f 7c fe 76 ff d2 7e 99 fb e8 ff 79 ea 05 fd 8b fa b7 fd 2f 5b 1f 63 8f 40 4f d9 6f 4c 4f fd 9f e9 7e 1b 7f ab ff 99 ff c9 fe 7b f7 ff e8 4f f9 e7 f5 6f fa 1f 9f 7f 20 1e 80 1e 80 1d 72 7e 93 fc 8b fc f7 e5 e7 a0 3e 72 7d e9 ed b7 c8 36 14 fe 2f fb ff 34 3f 9d 7e 40 fd b7 f8 af dd 6f 8a Data Ascii: RIFFMWEBPVP8 MP8*l>=D!Y]0H\|%]W\|Qp~r=gYA~oCW}%?f'0GotC?c/?\|v~y/[c@OoLO~{Oo r~>r}6/4?~@o
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 70 af 5c 55 e9 90 3f 71 f0 5a da 55 09 39 ee 9b df 4d ab 9c 4a 1e eb 68 c8 06 81 5f 6f 7c 29 94 16 79 ac 48 fb 2a 0d 76 07 fc e7 5e b9 c3 07 fd 13 66 4c f2 74 7e cc ec 4f f0 cb 79 f7 6b f2 54 75 a5 03 92 c5 ef 90 ba 69 dd b7 4b c3 ca 2e d8 e5 0f e3 24 18 8f 1d 4f c3 19 63 dc 52 d0 ec 72 6a 14 68 3c 93 3e 86 69 66 11 2f a5 91 74 a4 22 1f b6 7a cf 0e b1 37 c4 2b 3f f9 51 c8 3e d3 cf c5 d0 02 db 4b 9d a5 e2 27 bc 1a 1d c5 25 b8 65 01 8e 4c b8 c9 32 7f 7d 1c a0 55 7c 2c c6 ec 38 06 10 8f 4b fb fb 02 9c 76 1e d7 de 63 de d6 ec 48 b9 67 a4 e9 da 8a 1e 6e 99 3b c5 ab ef f0 7f ba d3 26 91 0e 12 d9 da 73 f1 e4 98 39 33 3f 96 7b 63 3c 31 3f 6c 0b 3d e2 69 c9 eb 76 77 7c 37 8e e5 33 c7 71 cc cc 16 8d 85 bf d5 7f f7 cf 31 0b c5 98 2e 16 9f 79 31 58 50 ba cc 6f 7a 8d Data Ascii: p\U?qZU9MJh_o\|)yH*v^fLt~OykTuiK.$OcRrjh<>if/t"z7+?Q>K'%eL2}U\|,8KvcHgn;&s93?{c<1?l=ivw\|73q1.y1XPoz
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: ff 73 e8 e2 e6 79 d3 67 72 20 c2 d1 19 e8 99 9c 3d c9 da 84 67 65 4b fd 1b 73 65 a8 e4 d6 98 70 30 9c 11 1b 99 ff bb 12 06 75 39 80 49 e5 0c b8 f3 07 4a bc d4 4e 3d 79 d4 3b 19 39 36 de 71 09 44 05 b7 8e ec d6 6d 66 66 61 e9 f5 4d 96 2d 5f f6 f1 2d 56 4a d5 a2 e4 ee aa 5e 2b c2 4c fc 1d a1 55 b8 64 8a 80 c8 fc a9 6f 7a 3d 4a 38 27 54 88 5f f4 53 d0 81 f0 90 d7 19 e3 6d 5a 61 42 93 8b a5 5d c2 37 11 9d aa 8f 1f 28 79 65 28 07 e6 76 c2 7c 94 df 51 f9 e0 27 1b f3 b2 9a 7f 0d b5 a9 38 84 e1 83 18 89 7c 81 78 83 2e 8c 8b 75 49 18 69 04 67 5a b3 e9 f4 e8 0c 9a b2 a2 7a 06 c1 f4 ba 89 46 1a a4 e4 18 49 4b 5e b7 5a d0 cd 5a 8f e4 4c 5d 66 c7 a3 3b f1 db 1a 97 04 c9 6e 53 ce af 0a 6e 24 11 61 af 30 6a 43 25 3b 4d 76 77 f2 aa e5 b6 f3 80 01 81 04 a7 1b 3c d4 3a 95 Data Ascii: sygr =geKsep0u9IJN=y;96qDmffaM-_-VJ^+LUdoz=J8'T_SmZaB]7(ye(v\|Q'8\|x.uIigZzFIK^ZZL]f;nSn$a0jC%;Mvw<:
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 84 01 52 84 e6 e6 78 7f 57 50 9e 9f 92 20 6d d5 f0 1f 78 d5 f8 bd 9e 48 6b 03 c3 1e 02 2d be 06 17 ee 9a c7 8e 72 ba d4 74 c7 3c 0b 2a fc ba ba 0d 96 93 9c 51 c8 7f 8e 61 65 27 bd 4d 3e 3d dc 95 63 87 fd 93 af 17 31 15 3c fa 39 9f fb 6a 93 e1 a7 b5 3b 3c 10 cf f8 80 00 9b 0c a0 f1 1d 03 c4 65 05 00 04 7c ba 98 ec 37 4e 61 1a 2a 41 00 02 e7 7b 47 35 c9 a2 8e 41 c7 92 3f c2 d3 c4 74 36 c0 7a 90 d1 47 71 74 db 09 c2 31 37 e4 33 e6 98 72 2b 4c 1b c2 75 21 e4 6d b3 28 00 ff ff 72 43 74 be 55 fb fe 74 d6 d6 c8 d6 8a 79 fd 18 96 18 77 e8 3d 57 6c 00 07 6d 84 bb 4a 94 d4 1d 3d 7b 45 da 2c c2 e1 fe 76 fe 2d f7 1a 11 27 0f a3 8e 21 d2 a2 d9 d1 c6 f3 ec 01 b5 48 7b c5 5f 73 76 01 b2 47 41 f2 b9 e0 7e 6e b1 62 b2 95 d3 c1 89 e4 9b 34 37 72 65 0c 0e 64 a8 c0 5f 06 fe Data Ascii: RxWP mxHk-rt<Qae'M>=c1<9j;<e\|7NaA{G5A?t6zGqt173r+Lu!m(rCtUtyw=WlmJ={E,v-'!H{_svGA~nb47red_
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: e8 50 ea 9e 71 c1 4b 12 01 df f1 8d ae af 71 0b ad e6 fe 04 ea 69 25 08 6c 19 f0 c8 33 64 58 6e 1d 2d e2 62 fd d8 41 55 2d 0e b9 22 fe d9 4e 3f 40 4e 50 98 44 cf bf 40 9c f4 99 30 b4 58 d2 0a f4 29 c3 26 e2 5c d9 3f 3c 62 57 67 9f 97 16 9b cb 9f 2c a2 2f f1 12 46 e2 98 24 11 cd 92 63 2e b7 87 d6 7b af e8 4b 86 75 c0 51 eb dc 24 bf 59 2c 53 e0 cd 61 91 ed 17 97 1d ae 2e a0 4e 81 de 14 04 b1 18 6f e5 74 1e 9f bb c1 14 fb a4 f7 f9 6a 29 ae 89 fd 8c 6c cc c2 83 29 84 b6 46 c7 2b 4c dd 7c 78 16 ec 3e f0 a0 0a 23 a2 51 96 dd 39 f1 39 3d 19 78 ae 9e 74 7b 8c 19 ba e9 5b 14 82 98 68 a6 bb f7 c1 be cc f0 e7 c5 0a 4d 8b 60 47 6e 2e 25 73 af 14 6a 5f 6a 68 7e 61 01 dc 47 c2 2e cf 25 99 d8 e2 5b 97 0d 48 7c 56 c6 fd a1 5a 1a 86 a2 27 4f 14 75 a3 ea ca 3f ce d1 b5 04 Data Ascii: PqKqi%l3dXn-bAU-"N?@NPD@0X)&\?<bWg,/F$c.{KuQ$Y,Sa.Notj)l)F+L\|x>#Q99=xt{[hM`Gn.%sj_jh~aG.%[H\|VZ'Ou?
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 30 b9 9e 70 48 dd fd 3b 89 51 a7 64 50 51 f9 78 fb c7 97 58 a7 ee 71 04 0d 76 86 a6 29 e1 45 ce da e7 63 4f fc 79 48 9a e2 5c 5e 81 69 79 05 e2 a7 cf 85 20 4f bb 5e 26 4b 3d 6c f7 ed 59 e0 d4 ff 57 33 8f 1c 8a e6 1d 00 02 08 5d 25 e1 7f bf 03 9c d6 d6 fe f8 8a 7f b9 43 19 c8 53 62 0c ad e2 bc 3f e6 1a c6 9c df cc 43 80 7a 60 d9 93 1d 1c 69 62 08 53 44 79 e3 91 b4 95 66 31 2f ae 72 92 2e c6 89 ce 8e 50 6a 13 0b d6 2f 05 0c 00 4c c3 28 97 a5 64 e0 61 41 cf cf d1 89 3e 08 47 17 9d b3 11 4e 50 84 b7 b1 30 39 ad 35 03 aa 16 15 59 32 b7 cd a3 d6 5f ff 4e c8 87 8a 29 61 82 13 71 dc 73 b1 ea 70 53 cc 3a ba 78 11 ac af fd 7d 7d 2e 93 24 26 18 f6 a9 93 6b 52 aa 7f 9e 2c d9 92 b2 ca 7f f6 5c 65 2c da bc 45 a2 f1 37 c2 2f d0 80 a9 2f 8c 56 48 07 46 6b 4f 30 d6 54 f4 Data Ascii: 0pH;QdPQxXqv)EcOyH\^iy O^&K=lYW3]%CSb?Cz`ibSDyf1/r.Pj/L(daA>GNP095Y2_N)aqspS:x}}.$&kR,\e,E7//VHFkO0T
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 92 13 01 14 34 7c e2 40 59 75 65 50 4b 9d 1b 86 47 44 a2 e4 0f 87 4c 9e 13 e6 98 cb 37 07 fb e3 0a 47 3d e1 34 5e 47 c1 1a 2f 4b c6 b9 2e 73 7c 05 43 2a 8d 41 58 f7 54 77 e5 a2 a2 36 99 71 59 dc ef 6a 24 96 6e bb a5 47 38 34 f9 ad a9 c8 d0 84 51 b0 35 71 45 fc b5 99 d1 48 b1 42 13 ab 48 75 9a da 94 a5 8c 9e 69 6a 14 18 2e 40 30 67 aa 57 87 c3 11 06 61 85 5c 8f 1b 4a 4e ff 57 37 35 9f 3f 8e 71 84 ca 77 94 75 40 d2 5c 25 be 5f d8 79 23 6a 06 dc 7b bc ce 0c eb 56 ed e6 36 e8 3e bd 00 f1 3d 98 5b 9a b5 18 c5 46 aa bc 15 83 6c 76 d2 68 26 b5 26 dc c8 c3 8a cc c9 8e af cf 0d 47 23 f3 b9 02 ca fa 6a 70 42 42 ce 17 46 6a ed df 99 11 c5 3f 6a ee ed b5 62 10 05 f6 eb 3d 77 af b2 af 0d 24 4d 29 d5 0a 9c 6d 46 54 42 b8 3b 79 72 ba fd 7d 33 ea 68 26 ce 3b 70 9c 83 43 Data Ascii: 4\|@YuePKGDL7G=4^G/K.s\|C*AXTw6qYj$nG84Q5qEHBHuij.@0gWa\JNW75?qwu@\%_y#j{V6>=[Flvh&&G#jpBBFj?jb=w$M)mFTB;yr}3h&;pC
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 10 44 02 d3 01 c4 b2 d6 07 77 80 4a 4d b9 65 30 60 7b c6 8c 34 81 d1 42 9b f3 d8 97 5d 38 54 49 a6 5e 34 90 ff 2a 02 79 05 2a 3c f0 b9 68 d4 f0 b3 32 3b 59 52 2a ae 79 ed 3e e9 d1 53 24 11 2f fa d0 a5 86 3a f5 d3 2b 90 91 03 07 e8 d1 90 7b 3f 07 d8 3d 7b 12 b6 70 9a 6c 6f d4 4d bf 2e a6 dc d1 03 c5 1d a0 82 7f a7 61 f4 ba 02 53 dc c4 4a 82 69 2e bd 26 42 6d 45 f8 52 73 45 3a b6 fe ab 63 db 52 70 65 ac 85 74 bb 63 a1 35 b8 f2 59 bc 68 b3 42 a4 51 54 44 97 e7 a9 78 04 e6 dc be 3b 84 00 59 a7 65 5a 0d c0 91 fd de 20 58 b7 16 3c 0b 10 9d dc 7d d9 34 60 e4 c0 bc bc 19 a8 e0 84 17 98 58 5e 4d a1 48 d7 f6 f2 57 ae 05 a8 01 8c 23 9e d5 8b e5 01 4a b6 b5 a4 11 60 99 7b 0c 0c 91 98 71 e6 4c cf 03 d0 1c 94 ae 36 aa cf 45 f1 af 11 42 12 b3 8b 30 01 7b 8a 72 f4 3f de Data Ascii: DwJMe0`{4B]8TI^4y<h2;YR*y>S$/:+{?={ploM.aSJi.&BmERsE:cRpetc5YhBQTDx;YeZ X<}4`X^MHW#J`{qL6EB0{r?
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 0f 17 70 58 f6 ed 23 bb 87 a8 b7 bd 68 ef a4 c4 43 ce d6 24 57 38 b7 0b 54 e8 6f 72 4e 5f d8 40 35 f3 0f b0 f7 1f 80 34 2e ad 1a 3b 3b 91 29 51 93 fd f3 7e 9b f4 77 31 ae 1f 91 9f 00 35 a9 0e 73 f1 a5 cb d9 65 c1 d8 27 04 c4 6f be f1 42 7e f5 31 0e c3 8a c6 17 e0 36 91 eb 5b 42 ef a0 e3 aa a5 4a b1 7d 6e c2 bd 3a 96 74 b0 28 d4 f5 16 f1 4b 8e 1d 32 84 76 62 73 2a 67 72 a8 07 b6 d8 a1 18 4b bd 68 dc e6 7b 46 af 63 25 39 b1 9f 14 7c 49 2e 27 b6 22 17 fe 6b 77 68 0a 4e de d4 32 ce ac 6b 48 0b 81 b8 b8 10 10 18 ea f8 0f 33 dd 28 d7 0e 68 2a e1 d9 40 3d de 1c 6a aa 0a 1a ca 5e ef 2f 3e 12 64 d0 be 88 70 b0 bf 37 d1 b4 d2 ba 00 20 eb ba 4a a0 24 86 e8 ea 32 f3 c9 77 64 10 39 95 52 4f 80 d9 28 8d 8a ab 70 d5 d7 3a f7 0e c3 86 be 6e 8f 85 82 e5 dc 9e b3 4a 33 77 Data Ascii: pX#hC$W8TorN_@54.;;)Q~w15se'oB~16[BJ}n:t(K2vbsgrKh{Fc%9\|I.'"kwhN2kH3(h@=j^/>dp7 J$2wd9RO(p:nJ3w
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 87 ea 57 7d f7 a1 87 1b 5c 32 20 97 38 68 eb e8 67 d7 02 9b ad 2c 8a 46 ab df fd 62 ed c0 ff 53 a1 ba 24 55 23 6d 0c 24 ac f4 d1 51 44 f7 f5 53 e9 ff 73 54 f2 47 58 6f 45 14 4e 8d 3d f9 7f f1 6c 13 db 2c d7 47 92 05 80 45 f4 2b e8 6e 12 b8 68 96 da eb a9 70 02 62 35 70 c8 6c 35 30 8c ab 67 ea f0 6c 66 9b 95 06 d7 bf ed b9 56 6c 18 6a 16 4a 10 9c 4c 58 ab 6b 7c e3 4c 5c fc d0 b7 49 3e 77 b5 b6 a9 0a 09 b6 88 35 f8 e1 68 bb c1 28 fc 2d a3 24 0e ed be 3d 50 3f 0b ff 9f 06 bd 17 95 85 ef 6c 8f 7c 3e bf c0 39 41 6c 77 b1 c4 a9 41 97 57 ff ed ad 10 19 5d 74 18 f8 4f eb 83 c7 e9 c7 41 70 e1 9a 51 a0 b5 40 2e 31 8f 82 d3 ae 42 00 a7 2f 49 14 38 c2 f1 df 6a 1e 21 1f f9 d9 b9 28 13 c5 4d 49 ec 4c fd 4d 0e 1f 60 9f 18 34 49 60 fb 25 93 af c1 f7 d7 dd 5c 88 60 4e e0 Data Ascii: W}\2 8hg,FbS$U#m$QDSsTGXoEN=l,GE+nhpb5pl50glfVljJLXk\|L\I>w5h(-$=P?l\|>9AlwAW]tOApQ@.1B/I8j!(MILM`4I`%\`N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49973	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:41 UTC	1113	OUT	GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 21244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:42:11 GMT Expires: Sat, 20 Apr 2024 13:42:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 1470 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	721	IN	Data Raw: 52 49 46 46 f4 52 00 00 57 45 42 50 56 50 38 20 e8 52 00 00 f0 42 01 9d 01 2a 88 02 6c 01 3e 41 1e 8d 44 a2 a1 a1 12 8a 44 fc 28 04 04 a6 ee 17 48 e1 d1 9a 6c e9 fe 23 f2 93 bd 94 19 f8 ff c7 6f c9 af 99 0b 4b f7 af c0 9f bb 3f e4 ba 59 2d af 36 2f 36 fd 73 fc 7f f7 3f f1 9f ef 3f be ff ff ff e3 f6 cb fe 77 fd af 6a 3f ac 3f f3 7b 82 fe 9c 7f 80 fe d9 fe 23 fe 87 f8 ef ff ff fd fe b2 fd 7b 7e e7 ff aa fd 66 f8 19 fd 67 fb e7 fc 2f f1 5f be 5f 2d ff ef 3f 67 bd e1 ff 74 ff 5d fb 1b fd cb e4 03 f9 a7 f5 9f f8 7f 9d 7d e9 7f bb 1e c0 9f d1 3f c7 ff d1 f6 75 ff 85 ff 83 fd 17 fc 4f ff ff 48 df d3 7f d2 ff e3 ff 55 ff 0b ff ff d0 77 f3 cf ee 3f f5 ff 3f fe 40 3f f4 fa 80 7f ef f5 00 f4 c7 8a 2f 31 3f 61 f9 71 e7 df 9b 4f 81 fd 23 ff 37 fc 5f 32 d8 96 7c d7 f1 Data Ascii: RIFFRWEBPVP8 RB*l>ADD(Hl#oK?Y-6/6s??wj??{#{~fg/__-?gt]}?uOHUw??@?/1?aqO#7_2\|
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 9c 4d de 18 50 94 85 ce 94 01 a8 fb 09 f6 35 13 a7 8e 7b 35 62 fa d5 03 3a 7c aa b1 07 24 fa d8 d4 7d 7c 2c 33 51 b1 8e b6 7b 84 bc 18 f1 b1 6e cb 9b fd 70 8d c7 e9 1d 19 66 45 7a b2 fc bc 31 f5 ea a8 0b 2e 2a 82 68 2b 0a d5 52 a1 99 05 96 e0 6c c3 7b 1e 7a ff 40 f5 6d fb 7a 88 dc 60 4d 08 83 9d 2c e8 a8 da 61 79 e4 f5 ec 6d 3b 4e 5f 8b 14 d8 37 f6 a4 92 3b 80 bf 88 21 26 4d ba 5d b1 a9 00 01 c7 13 71 69 52 97 a3 ac d5 a4 0f bb 62 03 e3 f4 bb 0b 24 4c be 91 c4 17 70 72 f4 0b 81 5e 15 14 73 90 c5 3b 51 01 18 0e f6 f0 6a 14 68 f4 7a ff cf 75 30 17 50 42 81 8c ea 4e a6 e4 3b f8 69 e4 cf ba 5e 39 f9 8a f6 35 52 95 bf ca 6d dd 0b 60 6a da 9f 3c f0 3a 71 16 61 a6 50 64 49 90 b3 8c b4 8e a3 8e 9b ea 96 d4 c3 04 49 11 96 ab 89 b8 b4 aa ab 55 c4 db 7b c2 f5 60 2b Data Ascii: MP5{5b:\|$}\|,3Q{npfEz1.*h+Rl{z@mz`M,aym;N_7;!&M]qiRb$Lpr^s;Qjhzu0PBN;i^95Rm`j<:qaPdIIU{`+
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 44 a4 bd 74 9f 13 b8 af fc c4 47 15 dd ff 6c c4 f8 db 38 16 fb 6a 14 af 86 99 e8 c8 1c 30 ee 1d e2 49 b6 d2 b0 de d2 c0 84 2d 42 da 55 55 aa e2 6e 2d 22 b5 fe 5a 60 ad 31 5a 50 9a bd f4 59 e6 ec fb 07 c9 f6 cc 6c 80 b6 aa b3 c1 8e 70 37 98 f4 7a 9d a3 76 52 ba 7b b3 cb 2a 12 3d b4 26 76 6b f2 d7 06 4a 2b 6b 7e 9d fe c7 cb 99 c4 26 70 80 42 42 fa 5b c3 b3 0b 6f cb 05 48 57 46 83 04 54 46 47 fd c6 73 cf b3 ab 9c 1f ff e4 a3 53 bf e3 f3 7d 97 55 92 a9 e0 9e df ad 8d 48 00 0e 38 9b 89 94 a2 b7 4f ca 1d 29 bf e5 c4 36 66 06 90 56 9e fb b5 4c 9f 1c a6 4e 31 14 4c 13 4a e7 17 7b 50 fd e0 34 12 f3 a8 d9 7d c1 d5 cc 17 9c 6f 4a de e2 1c 8b 9c 45 08 b6 76 23 8b 82 da 2d 5a ff 05 ff 79 f1 5b 98 bc 06 6f 07 a7 8d 1c 90 a0 68 82 51 34 e5 38 e8 59 33 33 aa dc 44 33 73 Data Ascii: DtGl8j0I-BUUn-"Z`1ZPYlp7zvR{*=&vkJ+k~&pBB[oHWFTFGsS}UH8O)6fVLN1LJ{P4}oJEv#-Zy[ohQ48Y33D3s
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: d3 0c cf 5b 93 75 e7 3f c5 22 52 bf a1 bf 36 8f 20 28 31 97 be 85 fd 15 6e ec 40 27 a2 0e ef f1 c5 25 89 81 9d 42 5b 0e cf 79 0e 0b 3e 2a 3c c1 f2 e1 5c 7c 16 58 a2 fb 46 d3 3f 02 d1 b1 3b 5f e9 d0 84 3a 99 a0 13 12 48 f0 9e 39 23 51 a2 a6 06 71 6c af c1 5c d2 6c 78 51 9a 6d f4 d7 e1 76 18 bf 51 ff b0 1b cc 04 df 34 76 d0 d0 5f 02 63 d8 a1 29 5a 8c e7 42 39 d6 6b 76 8a e5 1c d8 8f 4d 36 da 05 fa c6 14 61 39 fa 41 2b 81 88 fb b7 17 ef b5 fc 65 2e d9 af b2 43 65 96 bf a6 9d a6 81 c8 07 3e 82 26 04 e8 fe e6 b5 74 3b 3f 14 e7 ee 59 95 92 df c1 a1 c6 71 e9 a3 b0 af 25 61 16 04 67 01 d5 b4 49 33 59 ad c8 d2 87 a2 e0 f4 36 af dc 83 38 34 35 81 df ec e5 3e a4 bb 81 1f 1c 0b 97 99 f7 12 98 2d c0 bc 99 72 6a b7 86 46 f2 6a b7 86 46 03 80 92 d4 e4 09 21 35 15 af 6b Data Ascii: [u?"R6 (1n@'%B[y>*<\\|XF?;_:H9#Qql\lxQmvQ4v_c)ZB9kvM6a9A+e.Ce>&t;?Yq%agI3Y6845>-rjFjF!5k
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 88 28 51 34 cb 27 90 aa a1 69 9f 0b 3f d8 6c 0c ab 83 e7 02 df fc ec c0 7d 88 45 2f 36 42 60 2f 38 34 f7 9b 04 40 ad 7a d8 91 83 60 c1 41 06 b7 4e 4f f7 77 f3 6d 65 3c dd ce e4 ab aa fc ed 1e 58 0f 45 12 b7 0b 17 5c de 77 cf 14 b1 b8 6e a2 ee 70 05 68 02 10 12 e1 e8 1b 38 7b 37 bf 28 b3 60 de f8 ee 03 12 bb 09 4a bf a3 a0 a4 42 34 28 9c 31 f3 8d 50 35 0a 0a f1 de 86 fc be ae 30 d5 a6 6a a8 44 1d 56 a8 e0 8e 01 dd 42 df f3 3c 8e 9e f6 f5 46 aa d7 4e 4e 6b ff 2d ce 33 fa e8 4a 69 d7 3c b0 91 fd bd 1c 32 ec 01 b4 86 42 d5 94 5e 73 52 88 23 b1 93 aa 20 44 9f d7 6a d0 e7 59 25 5e 11 c0 4e dd a1 e8 02 55 6f aa 0b 6a 40 9f e7 31 e6 90 e9 9c 35 c9 bf a5 4a 15 36 94 fa 1b 56 65 83 cb ad 4f 96 40 11 fe 53 55 df e0 58 ed a7 49 3f fd 66 1d 24 a0 4b 00 a8 10 63 8c 0b Data Ascii: (Q4'i?l}E/6B`/84@z`ANOwme<XE\wnph8{7(`JB4(1P50jDVB<FNNk-3Ji<2B^sR# DjY%^NUoj@15J6VeO@SUXI?f$Kc
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 0f a5 ae 86 68 38 19 a5 1f 0d 80 e9 20 ec bf f5 84 e0 07 a5 76 80 e4 1c 20 d7 43 4f 5b cf 0b ef 0f 50 34 c7 4d 94 93 28 17 13 35 ae 91 fb e3 5e 73 84 7c f7 10 73 d1 3d 90 06 e8 fe 03 15 21 86 3a a0 2c 03 02 41 9f 70 92 fd 83 9d 78 6d 59 e4 3a 3f c8 dd 6a 5c cf cf 15 2c f9 f4 f9 b8 e6 78 a2 b8 09 1b 93 ed 5e 59 19 b6 02 13 bd ae 5d 5a ce 47 87 86 d9 e3 90 0a e7 7f 15 c7 d2 53 09 41 ee c2 ae ea e5 38 8f 00 5e 19 fa e3 fb 36 cc 07 4c 3c 60 d5 44 ad e0 2f 41 e4 9b 01 a5 dc 31 fb 95 a4 56 c3 fb b0 93 60 38 85 19 1b d1 bf 16 17 65 6f 99 7d 2f cb 62 eb a0 a1 98 f5 53 19 13 e8 1f bd 9b f3 38 c6 37 85 d5 1b 58 42 c9 97 db 48 03 4b 30 37 dc fa df 58 9d 00 24 73 0c 50 67 7b 93 c1 d6 8a e0 9f 6b 38 f4 70 36 fa 5e 5a 4e bc a4 42 9d 71 5d 6b c1 9d 80 14 d7 12 a8 80 b6 Data Ascii: h8 v CO[P4M(5^s\|s=!:,ApxmY:?j\,x^Y]ZGSA8^6L<`D/A1V`8eo}/bS87XBHK07X$sPg{k8p6^ZNBq]k
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 1b aa 59 b8 00 07 db de a9 ba ff 03 eb 52 f1 e0 db 1e 6d d9 92 61 9d a3 ca 73 7b bc bb 13 20 02 a5 71 0a 6a 44 af 98 a2 f6 81 51 df 30 0c c1 39 36 1d 2f 9f d1 cd cc 5c 61 b2 08 42 5c 98 7f 2b 99 2f de 35 13 33 72 b0 cb e5 aa dc 86 ff 27 ac ff 86 c8 01 9d 1a 76 05 f4 83 57 f1 b3 2b d2 1c 64 35 81 53 68 ae 31 e0 4b 1b 02 c5 ed 2d d4 fc 46 3b 43 a2 43 e3 70 4c 2d 18 76 37 40 90 dc e8 a5 30 52 b9 7d b3 78 ed 8e f2 d2 fa d9 27 76 26 f3 b5 cc 72 08 23 fa 9b 88 db f1 7c 62 bc 7a 45 ed 4e 25 d0 e4 c8 af 17 e7 df fc eb 91 7c f3 33 41 bd 05 7b 2e 91 f9 3e f7 63 41 38 6a 89 b3 2d 81 1b f7 c0 7b 6c df 78 bf 37 28 7f 44 a4 f6 10 f6 a4 83 3e a2 6a bb e1 eb 99 67 c9 6d ac 35 a5 57 2e ca 89 85 9d 2c be a5 42 78 a8 55 fc 3e 4a 28 96 5b f8 08 4e 26 5e 58 be 05 a4 99 d7 e9 Data Ascii: YRmas{ qjDQ096/\aB\+/53r'vW+d5Sh1K-F;CCpL-v7@0R}x'v&r#\|bzEN%\|3A{.>cA8j-{lx7(D>jgm5W.,BxU>J([N&^X
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 6e 2c fa 4a a8 88 39 f0 99 4f e2 6d 37 9d f6 82 88 03 28 8f 91 92 a4 4d 4f 63 a9 02 48 fa df 6d 46 5d 14 95 d9 f2 59 0e 6b 10 d9 ba 66 63 f5 55 92 17 45 e7 04 01 a9 f8 40 51 66 53 2e 4e 66 bb 6e 43 c2 be b5 e3 38 30 5e 19 21 a5 2f 67 fd c6 ef 6b bc ea ce 39 14 6c 84 ae 62 5f 0c c0 5b 1a c3 5c 8d e7 04 2c e9 a0 0a 31 d0 9e 23 91 bb 33 f1 d7 ef 4e ce 31 44 9d 88 9c 5f d0 98 ad a4 0f 89 48 68 94 c9 77 5d 27 3a 32 08 72 15 c2 b5 de 94 1d 94 a6 8c 4c 19 1b 85 af 7e ea 8a 5f b3 31 0a c8 c6 ab 90 b9 1e 3f a9 b9 5f 37 57 e2 a5 46 b6 19 b0 1d db 7a e4 53 d8 fd ac 33 4c 2f c7 cb 68 11 45 a7 51 b6 69 40 0c 79 7f b9 8b a5 57 58 2b f6 b4 7c b0 f8 d4 e4 24 02 d9 44 4e 0d 4f 10 7f d6 7d f5 2b af 87 99 aa a9 fa 11 52 55 33 e2 82 80 97 69 25 80 6c e2 e1 8f 89 95 75 27 39 Data Ascii: n,J9Om7(MOcHmF]YkfcUE@QfS.NfnC80^!/gk9lb_[\,1#3N1D_Hhw]':2rL~_1?_7WFzS3L/hEQi@yWX+\|$DNO}+RU3i%lu'9
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: f4 6b 99 2d 71 c0 7a a1 03 48 95 76 67 a6 9f 67 3b 83 86 a5 e5 be a5 78 79 73 6e 2c c3 fc d7 8f 39 93 45 88 93 24 01 18 84 1e 5b d6 a8 3d ef f7 43 7b fe 5f a6 56 0f 03 03 35 95 ae 2b 6a d3 ef 9b 05 d1 ca 67 ec 11 fc 03 40 d4 91 76 2f 68 e1 ba 1e 61 99 b2 1a de f3 06 d8 15 de 9c 98 da f3 3e 16 90 75 e6 3e 36 b9 ce fc 56 98 69 b6 49 18 18 8d 58 fb e1 7c ad 2a a7 e0 dc 19 c9 58 e3 d3 a5 d8 98 ff 59 33 72 43 bb 2c 02 17 d1 4a 54 33 61 12 23 e6 9b c5 19 01 09 c7 5a c7 3c 47 10 5b 84 b6 f4 4a b7 34 cd 6c 41 9d 31 e6 02 b1 fb b7 36 07 17 51 86 c9 d9 32 ef 6f 6c e1 69 53 5b 7b 37 4b 82 5c 70 e5 57 57 98 c9 e0 31 53 24 ea b4 bb 31 15 12 95 46 a7 3c 61 04 bd fe 2f 19 3d fc d3 3d 8c 2b 6e 13 2c 5c 25 b7 0b 71 34 de d4 bd f3 d8 05 ac e1 3c f9 59 e0 56 3b 92 d7 a8 8c Data Ascii: k-qzHvgg;xysn,9E$[=C{_V5+jg@v/ha>u>6ViIX\|*XY3rC,JT3a#Z<G[J4lA16Q2oliS[{7K\pWW1S$1F<a/==+n,\%q4<YV;
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 34 15 80 e2 86 99 86 86 53 45 a4 03 40 6c 8f 52 58 93 b0 0d 7c ed ca ff 7b b5 95 4e 62 92 03 e1 0e af d8 af ff 1b 2b 56 b1 35 9a 08 7e ce 00 41 4c d1 9d cf 1d 2a 5f 98 1c f4 fa 32 b4 2b 40 5f a3 15 38 17 26 d9 5e 17 a0 74 1f 2e 45 94 1c 71 66 22 d4 17 d7 f8 14 72 4f 5f 77 71 c0 fe ff ff f3 5e 83 f0 dd 65 1c 4b b3 53 38 bd 16 4b 70 8a c7 c2 b6 3f 39 93 65 88 d6 30 09 fa 7d 43 5a ed 33 8a 62 3c 32 48 b1 11 ec 96 ca 23 66 df 8b 7d 29 22 6c dc 81 18 c5 bb 92 11 41 b1 ce 45 9f 39 85 83 21 6a 32 47 1a 23 00 20 a0 92 d9 64 59 c9 6f 19 1f 9e 43 74 99 e7 97 cc 47 5d f5 dd 4d de 39 4e 26 ae 9a 99 9b 15 ae 25 02 7d 85 ca bf e2 30 0e 7c dc 7a b0 3d 74 31 50 31 f6 a0 31 11 11 7d 31 9c cc 16 aa 96 56 37 e8 d9 b3 58 6e b7 f6 57 ea 04 bc a0 0b ef 82 70 ea 98 83 0f 09 31 Data Ascii: 4SE@lRX\|{Nb+V5~AL*_2+@_8&^t.Eqf"rO_wq^eKS8Kp?9e0}CZ3b<2H#f})"lAE9!j2G# dYoCtG]M9N&%}0\|z=t1P11}1V7XnWp1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49975	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:41 UTC	1099	OUT	GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4790 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6512 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	722	IN	Data Raw: 52 49 46 46 ae 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 65 12 00 00 2f 3f c0 0f 10 4d 30 6a 1b 49 52 d2 f3 1a a5 f9 13 de 03 43 44 ff 27 40 fb 7b ce c3 e0 51 dc 42 b4 d9 84 98 45 95 d9 cf 85 9a 36 92 1c 43 78 fe b8 1e 46 ac 63 b5 20 d8 36 92 a4 a8 0e a3 80 ff fc 03 7b 7b cd 67 11 64 db d4 e1 fe 6e 33 79 ff 27 00 00 74 88 2a 55 ca 82 00 38 d4 31 b8 35 2d 11 b6 96 dc 47 d1 17 00 f8 a9 00 38 01 02 b2 9d 37 0c a4 6d 93 fa b7 bd 5f 43 44 4c 00 64 76 9c 55 68 3f 28 5f db d3 fe 1f 92 25 65 56 f3 78 6c db 5a db b6 6d db 57 b6 6d db b6 75 67 db de e3 33 9e c6 9c ae ca 8b 3e fa 13 de 8d 1c 4f af d5 f1 b9 f8 c5 d8 ac 88 5f 6c 7c c6 76 6d e4 da 56 4e d4 5a c3 13 21 c5 b6 b6 65 cb f6 85 bb 0f c0 32 dd 1a 8b 69 30 03 22 0d Data Ascii: RIFFWEBPVP8X??VP8Le/?M0jIRCD'@{QBE6CxFc 6{{gdn3y't*U815-G87m_CDLdvUh?(_%eVxlZmWmug3>O_l\|vmVNZ!e2i0"
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: 63 0c 96 a1 8a 6e 60 cb 0e 32 23 c3 64 0c f0 cb 76 70 1b 00 e4 05 ce 91 40 42 42 80 98 aa 83 6c c0 18 63 cb 60 30 dc 00 2a 71 0d 4a 02 00 b0 20 f2 70 8e 19 6f 05 c0 80 e9 1f 6c 63 eb 6f 43 13 62 b2 65 01 43 2c 04 0d 09 ae 6d 09 a4 90 d3 eb e0 33 8e 1a c0 00 06 6c 63 fa 1f 07 c0 dd d7 b9 4c d5 4c 18 ab fa fe fb bf 71 c7 af 9c 63 ca c6 d3 27 1b c0 60 c0 d8 c0 71 00 b7 5a 46 93 37 e8 08 d5 4a b0 18 4c 87 41 00 c9 41 8e 47 c1 c1 cc d8 90 83 c1 15 60 c0 06 e1 a1 a8 1b 78 fc c8 ed 2f 9a d6 e7 bc 02 37 1c 92 06 1b c4 ea 6e 19 77 08 cc 41 22 ce 99 e1 3d d8 97 80 ed 01 81 c1 b2 3d 10 02 1c 72 52 51 db 55 db 1d cf ca 4f 2e d8 ec c9 2a b6 8d b4 56 17 6d ad 8a 9f ec 9c 78 d6 9f 35 67 3b c5 b2 30 44 0d d8 60 00 41 30 03 36 02 34 c1 1a 63 76 44 55 6a 83 33 fc ae d7 f8 Data Ascii: cn`2#dvp@BBlc`0qJ polcoCbeC,m3lcLLqc'`qZF7JLAAG`x/7nwA"==rRQUO.Vmx5g;0D`A064cvDUj3
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: e4 8d 49 80 69 bc b5 45 45 98 f7 07 8f bb 16 bf c3 ef 8b 5d 95 67 5c 2f 3f e8 7b 77 d6 7b 93 86 b2 79 34 1b 46 b3 f1 85 80 95 e4 80 10 4c 32 29 7a fd f7 4b be fc ef 8c aa 41 f2 b4 67 7b c5 de 19 89 c1 cd 24 45 e2 6c 24 5b b2 36 89 24 25 a4 4c b6 d6 f2 fc 53 86 a7 13 67 11 bd 74 8f ed 9b 3a 8f 0a 4f 40 bb 7a cf e7 2d e7 fa f6 ee 98 0f 1f af c8 97 db a2 8b be 8f 5a 23 5a 0b 07 6c 9e f6 c5 94 c8 62 b1 68 60 82 f1 93 29 ce e2 b7 7d b8 ca 51 ab d7 3a 65 89 d6 8b af 3a 1b b6 ee ea a1 2b af 39 f8 ba 85 e3 4f 5f 6a 4e 25 d5 4b ca d5 c9 73 ba d8 34 ff 4f d4 5a 9c b5 a3 13 5d 4c 3f 36 ac 5a 7c 48 55 a7 20 b3 62 23 5a 41 46 c9 05 9e 30 27 4d 89 52 fe 1c e9 56 ba 27 5f 34 67 87 bf e6 cd 0d dc 8a 4e f5 d9 ef 6b de 72 be ea e1 eb 4b 44 c0 01 dc 18 fd 60 eb b4 8f 3b 97 Data Ascii: IiEE]g\/?{w{y4FL2)zKAg{$El$[6$%LSgt:O@z-Z#Zlbh`)}Q:e:+9O_jN%Ks4OZ]L?6Z\|HU b#ZAF0'MRV'_4gNkrKD`;
2024-04-19 14:06:41 UTC	1255	IN	Data Raw: a8 b6 aa 89 1e 90 0c b3 ee fd aa 09 13 eb c2 2a df 11 e7 a4 90 c0 05 71 16 03 d9 3a a0 51 d1 0c a4 d8 74 d8 45 d3 a1 0d ab 16 15 27 2e e9 f3 fa 96 3a bf 6e 08 ef 1b c2 62 81 b6 6b 93 79 73 32 6f 02 6d c2 b2 86 9a 6a c4 28 49 18 fc f2 d2 3d 2e 58 77 c4 49 0b e5 d5 de 24 af f4 ce 33 e1 b5 bf e2 36 a5 1e 98 4a 41 54 df 56 52 1e 14 a2 48 08 fd 3e 73 1d bf 19 1e f4 fc a4 f8 f6 5e 65 91 c8 0a f1 08 c0 3a a8 24 2a 28 49 4a ba f4 67 f4 c5 3e ef ba 4a cf 24 c1 0b 24 fa 89 89 04 f4 31 9e 20 4c a5 0e a8 0b a8 27 0f e5 c8 d6 36 56 e7 d7 15 a1 83 c3 b0 29 1d 03 55 95 6a 50 12 fa 00 42 0a 4d 12 06 be 30 bb d1 f7 5b 2f 3a fb 87 bc 43 d3 c5 e0 19 5e 08 ee 49 5d 6f a0 58 55 76 f4 3d 9a fd d2 bb ce b3 43 ab 3c 33 29 ee 87 26 5b 15 12 41 c6 fc 10 fc a6 5e 43 86 06 c9 7f 7a Data Ascii: q:QtE'.:nbkys2omj(I=.XwI$36JATVRH>s^e:$(IJg>J$$1 L'6V)UjPBM0[/:C^I]oXUv=C<3)&[A^Cz
2024-04-19 14:06:41 UTC	303	IN	Data Raw: 9a c6 04 90 83 48 c3 88 52 6f fc f8 c7 8d c6 a2 65 5d 7c 67 48 98 07 27 44 97 83 33 cb 68 bb 16 0a a5 ff c9 06 50 6c 36 8b 66 33 54 21 f2 62 d0 6d ad b2 91 85 21 ad ae 46 61 2c 1b b0 ac a4 1c 38 33 78 69 7c 14 cd 62 fb 75 82 72 e4 b2 0c 79 10 59 19 88 15 95 84 2c 43 da 2a fa 13 55 d0 50 70 6e 0e 6e 13 75 00 0b 03 c8 51 1d 98 19 9b 8d 18 72 c5 50 da 76 08 98 1f a8 55 25 42 07 48 52 a1 18 0b 2b 06 e7 18 08 18 cb 08 84 84 28 82 73 db 79 88 0e 36 01 83 33 4e 8b 41 3a 70 c7 28 21 c5 58 10 8b 88 1c ca dc c1 c8 12 51 08 11 1c 20 04 85 e0 60 6c cb b6 bf 9c e8 6e d1 97 10 76 ac 88 03 a3 a4 88 88 8a 45 34 a6 bf fb 03 12 21 28 58 86 3c b7 8d 91 8d fd ef a4 95 31 5b cc 2b 31 3a 49 ec 79 a0 14 11 91 28 22 31 4a 42 42 80 32 60 db 10 ac e0 10 82 03 36 18 d7 e4 a6 9a 1a Data Ascii: HRoe]\|gH'D3hPl6f3T!bm!Fa,83xi\|buryY,C*UPpnnuQrPvU%BHR+(sy63NA:p(!XQ `lnvE4!(X<1[+1:Iy("1JBB2`6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49974	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:41 UTC	1113	OUT	GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:41 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 194 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:04 GMT Expires: Sat, 20 Apr 2024 11:17:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 10177 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:41 UTC	194	IN	Data Raw: 52 49 46 46 ba 00 00 00 57 45 42 50 56 50 38 4c ae 00 00 00 2f 0f c0 03 10 05 dc 6c db 8e 3d f7 10 d9 24 43 24 2d 57 60 97 de b6 ed d4 9e c0 b6 6d db f6 55 3c cf b7 43 c4 91 ff 27 00 f4 6f f7 8f bd 93 24 68 b7 b7 0f a9 aa cd 69 3f 4e ce aa 81 e6 a8 06 87 ed f8 9d 24 bd e4 23 df 93 7f 4d 5d 87 5c 5d 53 07 9b 8d 4e 44 55 d5 a4 86 8e ff d9 e4 0f ca 3d f5 b7 59 ef 64 dd 4f 72 f5 49 b2 7f f8 d2 e3 47 6e 4f 5c f6 ff f8 b4 aa e5 c9 c1 c5 33 9f d4 d0 2f d5 27 99 77 e2 4c 55 66 3c 1d d9 9c 26 53 2e 7f ac 19 4f 6b 69 d5 a6 eb 49 72 e9 cb 8e f3 27 6a cc de 17 69 41 b2 6f f2 f1 1f e9 03 Data Ascii: RIFFWEBPVP8L/l=$C$-W`mU<C'o$hi?N$#M]\]SNDU=YdOrIGnO\3/'wLUf<&S.OkiIr'jiAo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49955	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3920 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.0.1713535576.0.0.0; OTZ=7520526_48_52_123900_48_436380
2024-04-19 14:06:43 UTC	3920	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 30 32 36 31 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535602615",null,null,null,null,
2024-04-19 14:06:43 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:43 GMT Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:43 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 30 33 36 36 31 22 5d 0d 0a Data Ascii: 1a["900000","1713535603661"]
2024-04-19 14:06:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49982	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1491	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 15295 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.0.1713535576.0.0.0; OTZ=7520526_48_52_123900_48_436380
2024-04-19 14:06:43 UTC	15295	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 30 32 39 32 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535602926",null,null,null,null,
2024-04-19 14:06:43 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:43 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:43 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 30 33 38 38 34 22 5d 0d 0a Data Ascii: 1a["900000","1713535603884"]
2024-04-19 14:06:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49981	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.0.1713535576.0.0.0; OTZ=7520526_48_52_123900_48_436380
2024-04-19 14:06:43 UTC	5336	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 30 32 39 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535602945",null,null,null,null,
2024-04-19 14:06:43 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:43 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:43 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 30 33 38 38 35 22 5d 0d 0a Data Ascii: 1a["900000","1713535603885"]
2024-04-19 14:06:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49986	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1166	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:44 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:43 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-vTUDvJyo70h05qyly5eXTA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49988	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	1578	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=vvy75smw70si HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajOHZZBN-hHGcVN016Y57cTwWF_qpyxc1mk6RBbKmxlLUWNI0wCWDpKHz9Rv1Nwz1OE7yQdwZAeixXMhts; NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:44 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:44 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-HQIlP2_vJCKPACpJDzGdTg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:44 UTC	364	IN	Data Raw: 32 62 30 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b0d<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 48 51 49 6c 50 32 5f 76 4a 43 4b 50 41 43 70 4a 44 7a 47 64 54 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="HQIlP2_vJCKPACpJDzGdTg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 2d 75 79 72 48 79 2d 56 61 43 6c 2d 31 6a 36 62 38 78 66 6c 48 36 58 51 4f 78 56 64 4c 61 63 72 55 77 54 68 72 5a 6c 77 43 75 75 70 57 55 46 4c 34 54 43 46 6b 77 77 54 65 33 42 35 4a 49 59 41 48 44 69 50 58 68 64 43 5a 39 73 79 56 72 4e 43 73 35 6e 59 39 6c 58 2d 59 4b 49 79 5a 76 37 52 6f 51 66 4a 67 39 32 70 5f 52 6e 4c 50 58 61 31 6e 56 39 53 4f 42 62 4b 42 6c 33 74 6f 52 35 49 32 52 4c 63 47 44 4e 4e 46 59 31 6c 6e 42 59 43 5f 61 49 66 5a 69 6c 53 78 6f 58 6b 7a 41 50 47 74 47 48 74 6d 2d 68 2d 43 51 37 32 6d 4e 72 62 39 66 6d 4f 62 47 70 43 52 4d 56 67 76 55 47 70 75 51 5f 67 59 74 65 4e 67 55 30 42 41 64 32 45 77 68 66 4b 69 73 4d 42 66 59 69 78 47 63 77 45 6c 54 74 71 6e 73 59 55 48 62 66 38 33 49 51 61 6b 53 31 79 57 41 64 55 69 4c 30 6a 78 53 44 Data Ascii: -uyrHy-VaCl-1j6b8xflH6XQOxVdLacrUwThrZlwCuupWUFL4TCFkwwTe3B5JIYAHDiPXhdCZ9syVrNCs5nY9lX-YKIyZv7RoQfJg92p_RnLPXa1nV9SOBbKBl3toR5I2RLcGDNNFY1lnBYC_aIfZilSxoXkzAPGtGHtm-h-CQ72mNrb9fmObGpCRMVgvUGpuQ_gYteNgU0BAd2EwhfKisMBfYixGcwElTtqnsYUHbf83IQakS1yWAdUiL0jxSD
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 69 72 61 36 57 61 42 71 49 79 74 73 74 41 44 74 56 79 76 61 61 78 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 48 51 49 6c 50 32 5f 76 4a 43 4b 50 41 43 70 4a 44 7a 47 64 54 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: ira6WaBqIytstADtVyvaaxA"><script type="text/javascript" nonce="HQIlP2_vJCKPACpJDzGdTg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:06:44 UTC	625	IN	Data Raw: 46 30 4d 58 55 32 51 6e 52 57 52 58 5a 79 57 46 46 51 4e 44 68 4c 65 48 49 32 61 58 5a 71 65 48 64 75 5a 46 55 32 4b 32 5a 44 4e 31 4a 4b 63 6d 52 57 65 47 74 6b 59 56 59 78 4f 46 42 31 65 46 63 76 51 31 4e 6b 4e 56 64 56 56 6d 70 79 63 56 70 52 53 6b 30 76 4d 58 64 75 4d 6a 64 4c 51 33 41 7a 54 57 34 77 51 58 68 6a 64 54 46 59 4f 48 46 6e 56 6c 70 69 65 6b 6b 34 56 57 70 72 54 6e 64 33 51 6d 31 33 4e 6b 59 76 51 56 45 32 64 32 52 52 55 6e 68 74 61 47 6c 54 63 30 56 52 51 6a 46 78 4e 55 5a 6f 52 6b 68 4c 4f 57 67 35 52 6e 41 35 5a 55 46 56 52 6d 4e 6b 62 6b 56 6b 64 31 70 6c 54 44 46 51 53 55 5a 4a 57 6d 4a 49 56 45 52 6a 5a 32 78 55 4d 47 70 6f 54 54 4a 6f 4e 57 39 35 51 6b 68 6a 51 6e 68 6c 52 6e 70 72 59 6e 5a 36 5a 32 4e 61 5a 6a 52 47 56 6d 4a 52 59 Data Ascii: F0MXU2QnRWRXZyWFFQNDhLeHI2aXZqeHduZFU2K2ZDN1JKcmRWeGtkYVYxOFB1eFcvQ1NkNVdVVmpycVpRSk0vMXduMjdLQ3AzTW4wQXhjdTFYOHFnVlpiekk4VWprTnd3Qm13NkYvQVE2d2RRUnhtaGlTc0VRQjFxNUZoRkhLOWg5RnA5ZUFVRmNkbkVkd1plTDFQSUZJWmJIVERjZ2xUMGpoTTJoNW95QkhjQnhlRnprYnZ6Z2NaZjRGVmJRY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49992	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	525	OUT	GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6438 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:56 GMT Expires: Sat, 20 Apr 2024 10:12:56 GMT Cache-Control: public, max-age=86400, no-transform Age: 14028 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	721	IN	Data Raw: 52 49 46 46 1e 19 00 00 57 45 42 50 56 50 38 4c 12 19 00 00 2f 3f c0 0f 00 4d 30 70 db 36 6e 34 92 bb 23 f0 16 d1 ff 00 66 f6 98 a4 dd 98 16 e6 63 bb 3c 8a 42 2b 47 bd aa a5 b9 9e ba 3f 1b 60 c1 28 92 24 45 15 f7 42 2d e7 5f ce c6 29 a0 85 c1 d5 c1 36 92 24 27 8d 96 01 90 7f 6c 14 d6 9b 02 75 06 db 48 92 9c 0c 1a 13 f2 4f ee e5 1e 85 ad 75 ff 03 00 7a 83 11 56 1f 57 ec 10 26 08 fa a4 f5 59 ea 53 3c 78 24 66 31 1b a8 79 a9 f9 0b 07 08 e2 d4 19 73 8d 4d e2 93 fc 5b fa 00 80 45 d8 ac b7 04 56 6b e9 7f 00 b1 0b 47 ad 3d 15 01 f1 82 6b d4 7d 39 31 89 3b 9e a2 2b a4 5e 0b e0 9e e4 ba ba b7 5e e2 97 3a 44 1e 39 5c c9 ce e0 7f db 3e 43 92 fc ff bb 23 22 59 6c 4f 77 d7 68 bb 07 cf ed f5 70 ad a7 6d db 36 7e b2 6d db b6 39 66 8f 8d b6 ab 59 66 66 46 3c 9e a8 ac aa Data Ascii: RIFFWEBPVP8L/?M0p6n4#fc<B+G?`($EB-_)6$'luHOuzVW&YS<x$f1ysM[EVkG=k}91;+^^:D9\>C#"YlOwhpm6~m9fYffF<
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: e9 63 c4 27 c4 24 e2 fa 9c 6e ab 72 57 d1 5d 9b f6 8f 11 b7 ae e9 0a c7 d3 de e9 1d e9 d8 18 b2 5b c8 bb 11 1e 97 35 c3 62 67 a1 b5 25 cc b4 cb 2b 61 10 41 ba 09 87 1d a2 8d 91 35 d3 87 74 a8 ad 8d 38 b6 e1 d4 c8 2e bf 4f e8 3a 43 13 04 2d 40 00 02 92 ab a8 e3 2a 6d 84 27 10 10 9f 12 0f 25 d3 63 88 29 c4 24 e2 65 62 62 3a 5e 47 bc 4e 3c 44 3c 42 7c 60 d5 8a b4 da dc b9 97 1b 7d 94 7a 0d 70 d4 32 58 83 e0 4e ad ae 94 35 9f 2d 6f f4 b3 9d be 72 19 af ab 37 7c fc 69 ee b7 b3 56 58 0e 30 69 7f 1f d5 91 36 3b 02 6d d4 cf 8c cc b9 ba db 45 46 b1 21 a7 09 28 40 00 28 b5 c2 60 fc 16 2e 25 10 04 84 27 ee ac ea c6 a2 9b 42 b4 11 4b 88 47 5d 5e 28 58 3b f1 09 f1 05 f1 a4 ab b7 87 93 55 53 eb c3 c4 91 b4 87 28 0b 55 08 41 9e 8a 0a 54 05 f2 ed a2 9e d7 b8 11 db 59 2f Data Ascii: c'$nrW][5bg%+aA5t8.O:C-@*m'%c)$ebb:^GN<D<B\|`}zp2XN5-or7\|iVX0i6;mEF!(@(`.%'BKG]^(X;US(UATY/
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 65 7b f4 73 3f 40 b0 51 2f 49 ad f4 53 5a b1 c9 ee 04 f0 4b 83 21 d7 f3 f3 fe 82 36 d8 f9 e4 19 58 4a 85 12 19 de 73 65 36 1b 57 6a 34 cd 2f e2 cf 7f 0f db 2a 83 25 73 b2 8d e8 44 41 d5 d6 a0 17 ef 4f 3b 4f d8 20 a1 04 82 a0 e1 67 f6 34 6f 1b 0c 03 58 a3 8d 49 73 81 fa 00 3a 2c ea 66 bc df e9 89 c2 ea 99 ca 62 75 f1 e6 18 6b 51 95 4b 92 03 d1 81 7d 07 8a 7e 14 5a 35 d5 98 92 f8 90 d7 c1 2d c9 9e 47 a2 b6 fd c5 e9 d0 ee c5 8b df 39 71 a5 af 87 40 d0 8c 20 08 6e 62 b2 cb 9f fe 04 a4 e2 2a ae f0 27 00 a5 eb e7 fe b2 f2 7e 60 40 0d c0 c9 dd fe 3a 3a b5 89 b5 90 2e 91 f2 e4 a5 a8 44 55 40 17 e7 6a 15 79 bf 88 4c 8e 29 fa 51 73 09 81 a6 ad e2 4a a5 a2 9f 52 5f 07 9b f9 10 2b c0 d7 56 1e 83 21 43 96 fb 6d 23 19 cc f9 b2 63 07 dd 41 33 97 4b 39 c2 45 08 c0 44 44 Data Ascii: e{s?@Q/ISZK!6XJse6Wj4/%sDAO;O g4oXIs:,fbukQK}~Z5-G9q@ nb'~`@::.DU@jyL)QsJR_+V!Cm#cA3K9EDD
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 9e 10 22 39 e1 25 38 42 26 88 60 41 a5 58 35 86 76 a3 74 a6 9c 8a 97 da 78 d5 47 31 91 c8 c7 6d af dd 95 a4 6f a7 70 a8 46 d2 60 63 b6 1a 14 e2 2f 05 c4 21 52 f2 00 c0 de d0 c0 27 27 8f 8c 3f b7 aa ff c5 88 86 03 63 52 7b 27 25 19 44 a5 ae a3 99 b2 32 6f 88 e4 01 91 99 e5 81 14 81 52 09 2a 83 0b 6c d9 6a 44 ec 6c 14 23 e3 11 a7 33 6c 89 26 e6 b4 2c 41 95 83 3d 05 52 d2 c4 6c 0f 57 fa 4f 05 a8 ce c8 15 7a 00 82 f7 5f b4 f6 11 5f f9 6e 1a 4f ae d6 73 e8 36 91 da e8 fa ce b5 c9 49 a3 75 b3 ab 1d 9a 29 34 81 9c b0 48 04 50 14 69 60 50 44 40 66 ea 9f b1 ea 97 fe d3 64 3c 91 b6 2a 36 44 26 d1 f5 18 33 58 85 fd fd 44 03 dd df d7 84 2e d6 97 2c f1 27 e0 6a 4d 69 09 40 f0 ae bb 87 7f 79 5b b2 e6 60 9a 3b a9 05 69 ed 81 84 b2 65 d8 aa 5b 3e b6 b2 66 b7 a4 d5 ac e6 Data Ascii: "9%8B&`AX5vtxG1mopF`c/!R''?cR{'%D2oRljDl#3l&,A=RlWOz__nOs6Iu)4HPi`PD@fd<6D&3XD.,'jMi@y[`;ie[>f
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: cb 1b d1 0a 47 11 c1 24 2c 02 d0 10 34 c1 90 6a 2e 30 13 df 3b fb 44 1d 13 e3 7f 9f 69 9d 6c bb 1d ff 5f 81 d0 5a a0 0a 96 4e 93 cf 26 19 3b 36 77 16 2d c5 d0 79 29 39 27 5c 5c db b2 b8 f3 f5 43 c3 7a 97 53 7f 4d 07 b8 4b e5 95 74 c5 ec 12 b1 6d 66 3a c6 d9 4a 32 fe d7 ea 72 05 19 61 7e 30 9e 30 5b 09 22 4d 1c c7 16 59 66 2a 20 33 61 81 28 c9 22 b9 a8 01 4d ca 31 ce c0 e2 b5 33 6f 89 78 1b b7 db 6b 3f d1 a7 f7 fd 78 72 fc 7e 4b 3b d5 54 07 09 93 f9 3f b0 4c f1 f1 59 dc 50 14 58 5d ba f4 a5 d0 7f 83 b6 7a 64 73 ed 53 45 fb f9 7f 0d fb f2 8f 97 b9 45 ed f7 17 c3 3e 97 54 cd 73 c7 8a f9 c5 e0 a8 c7 b5 9c 61 bd c4 ce 26 92 4f 82 f6 c4 c7 05 85 ea 01 71 2c 1c 74 c8 8c 1c 2a 48 11 ca c4 88 9e 99 30 2f 06 5e 77 b9 3d bb fd 75 df cf 46 5f 38 ec 93 cd 2f d7 5d f7 Data Ascii: G$,4j.0;Dil_ZN&;6w-y)9'\\CzSMKtmf:J2ra~00["MYf* 3a("M13oxk?xr~K;T?LYPX]zdsSEE>Tsa&Oq,t*H0/^w=uF_8/]
2024-04-19 14:06:44 UTC	697	IN	Data Raw: 27 bf 81 dc c8 91 3d 66 9e 33 22 cd 92 22 81 5d f3 dd a3 be 73 3c d6 6a 0d 5b 0f 6b bf a5 ef b5 4e b6 2a e0 80 d3 70 02 86 48 59 b8 a4 b5 5c d1 78 20 02 0a 20 24 0a 96 43 a8 72 50 09 16 40 32 04 02 99 08 22 19 4a 46 2e 38 66 08 ef 18 bd 82 6e 8b 93 1b 51 f5 de ac b0 e2 04 10 06 66 54 46 44 35 1c ab e2 e0 52 ad 3d 16 28 a0 44 92 4a 6f 08 96 ba 3c 05 46 d7 82 e9 d0 df 7b 8c e5 0e 46 00 77 c6 ae c2 ac aa d5 1b bb c3 e6 63 37 3e d5 e1 6b 52 20 0c 35 54 a0 1a e0 a8 00 0a a7 a1 ad e4 08 15 52 01 84 93 c5 e0 58 03 6e 9b 6e 1b 0c f1 12 d1 4a 90 03 02 49 20 04 10 86 4a a4 13 98 6b eb fc 36 dd fd 4f c1 3a 7d e0 b8 ff 9f ef cb 58 26 2c 12 22 0c 32 8a 95 71 7e 4d 44 29 3c 11 12 c8 41 89 d4 81 17 c1 26 6c 69 3a d6 cd 64 cd 5b e3 ec aa 55 19 86 1b 98 f3 a1 6a 60 77 fb Data Ascii: '=f3""]s<j[kN*pHY\x $CrP@2"JF.8fnQfTFD5R=(DJo<F{Fwc7>kR 5TRXnnJI Jk6O:}X&,"2q~MD)<A&li:d[Uj`w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49991	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	523	OUT	GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8594 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:27:51 GMT Expires: Sat, 20 Apr 2024 11:27:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 9533 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	722	IN	Data Raw: 52 49 46 46 8a 21 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 41 21 00 00 2f 3f c0 0f 00 4d 28 8c 24 19 32 63 fd e4 1f b0 24 22 fa 1f 54 35 4c 96 0e 27 4c 33 54 66 a3 8e de 8f 1a c6 30 a6 fe 53 a0 90 77 38 07 ee c2 41 24 49 8a 54 c7 e8 5f 1d 33 33 df 4f bc 0e b6 91 6d 2b 39 1f 88 a8 80 fe eb 71 22 42 22 77 f7 3b 8c db 48 52 54 bb 77 f9 c7 58 af 63 66 be fe 87 8e 34 43 71 1c c9 30 45 47 99 38 c3 e0 0d b6 cf c1 bb c4 7b f3 2d 8d 32 b6 61 70 0d b6 e1 28 06 9a 9f aa b0 69 7d 4a a8 22 ea 48 cd f3 4d 4d 76 4e e9 01 0d b4 20 54 38 eb c2 ab e7 87 0c 7e 12 64 51 86 66 23 59 78 11 c0 41 f9 e7 91 21 97 e1 9f 70 41 8a 84 03 00 e0 81 05 2e e4 82 21 65 02 02 fa 39 e0 01 00 44 98 a6 ff 5f e4 48 ce ff 9f 50 59 a0 02 15 89 19 5b 6a Data Ascii: RIFF!WEBPVP8X??VP8LA!/?M($2c$"T5L'L3Tf0Sw8A$IT_33Om+9q"B"w;HRTwXcf4Cq0EG8{-2ap(i}J"HMMvN T8~dQf#YxA!pA.!e9D_HPY[j
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 4e 9b 5f 9b 65 a3 62 19 46 56 4d d6 87 b1 f9 0d ab d9 ed 7c 0e 54 9c 92 29 71 c2 e5 75 fd dd d5 90 9a 7f c8 b3 2c b1 ce 30 2a 39 58 e3 6c 1e 9b 15 0d 09 36 56 66 f1 a7 b4 be 41 48 08 91 a1 cd e6 7f 05 eb c3 21 8a b8 40 07 75 77 66 81 7b 40 30 25 77 10 1b 04 75 cb b0 b2 61 e6 65 74 55 e6 27 87 4e ad 14 14 b1 fd 6a 20 d9 34 fb 74 4e 5f 92 36 b9 7e 9e fb ba 7c df 34 ff f5 2b 43 df 7f 57 c4 87 6e 00 50 1d d7 58 41 89 93 1a fa ff bb a7 bd ba 78 87 47 4e 33 b5 44 4a 40 4a 19 9c 86 27 2c d7 5a 39 11 4a 96 86 19 95 0a 4f 1b e4 ba 30 5d b4 3d 1f 0c e6 6b dc d1 ad 97 b8 77 69 5c ee 89 12 05 9c ab 9b c2 95 26 7f 11 a1 c2 92 46 6c b1 69 cc 2b 92 0d 31 a8 fc ce a0 5b 96 9b 89 65 7a 30 0e 79 b3 56 3e 8d 1c fd f4 49 e2 34 f3 6c 2d bd 7f 63 e2 fa 44 c6 e4 0d 91 ea 80 aa Data Ascii: N_ebFVM\|T)qu,0*9Xl6VfAH!@uwf{@0%wuaetU'Nj 4tN_6~\|4+CWnPXAxGN3DJ@J',Z9JO0]=kwi\&Fli+1[ez0yV>I4l-cD
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 65 87 f9 d5 7e f7 4c 53 ff 1d 1d 97 85 0a 50 79 4b 5f cc e7 cd e7 02 a3 57 a5 59 53 d8 54 56 c2 64 14 0b 1a 15 8f f9 cb 3f 5c c3 28 94 bc 73 75 8f 80 d6 e4 f2 af be b4 5f 9d 46 bb ca 1b 46 d5 5f 70 4d ff e9 73 c7 1f 38 60 50 fe ac b4 f8 3c 98 52 5b 43 5d c2 a7 21 b8 1a e0 4b 33 fe f8 cd ca d1 83 72 5c a4 08 0d 41 22 a1 a6 99 60 76 bc 4f 3b c6 c8 ec 5c 7b 39 1a 41 92 08 14 61 0a 66 e8 10 a2 99 47 95 a1 32 85 b5 23 eb 3a 77 c8 3f 32 7b 7b 62 d2 76 39 a1 f7 25 9b c3 a6 75 d0 ce e7 aa dd d0 30 9b 69 da 48 34 d3 c4 8c 80 df 4f 13 bb ba 70 c7 7f a8 55 3e df a8 dd 12 b7 37 d3 7f 4c 25 91 8a 6b 42 f7 8e da d9 77 47 a6 2f 58 f9 d8 a4 e6 69 2d a8 5e fd 94 ff fc b1 ea f5 96 bf d9 50 b8 5c 99 54 ed 83 ba 10 12 a9 c6 cb 32 75 af 4b 7a 7a ac 8e 46 31 89 68 88 c0 44 87 Data Ascii: e~LSPyK_WYSTVd?\(su_FF_pMs8`P<R[C]!K3r\A"`vO;\{9AafG2#:w?2{{bv9%u0iH4OpU>7L%kBwG/Xi-^P\T2uKzzF1hD
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 5a fe 0c 0b f6 ea ce 3e b3 38 13 18 da 4a f0 7b c8 22 99 b3 3b 59 75 e7 8d 86 d9 be 85 31 7c fa 42 83 3d ea 77 1d 4f 1a 14 f1 9f 43 f8 75 c6 6a 8a 24 44 b1 b7 cd 0e c9 e1 20 ed 0f 86 13 9f fc 73 d3 ec cd 85 73 2c 98 f7 d3 f9 92 29 6e 79 e3 45 7f 3a 0f 1c ee 8a 8d a3 24 d5 05 a1 58 7e f7 f0 06 9d 21 64 4e b7 c1 e6 52 c3 c8 aa fc a8 0a dd 13 2a 91 52 90 82 dd 0b c6 cd b4 fe ba 20 de 15 4e c1 0e ff d5 54 07 8f 1a 55 42 cb 07 dc b1 e0 5d d7 0b b7 59 24 b3 bc 6c f2 ab ae 8f 99 6b c5 6c c4 ac e0 d5 22 0c 8a 0c 8a 18 9b ae cf 98 02 66 19 a6 59 f3 c3 d8 26 81 68 8e 07 03 bc 94 a9 5d 27 14 06 de 7f 24 06 eb a5 74 e6 8c 8f ef a9 ef 5f b5 60 b2 6c 6d 86 fb c6 af cc ff 08 14 ce 97 3a 71 ed ba 28 56 c5 25 2b 52 c3 65 f5 c4 6f ad d4 6a d2 d1 b3 67 e7 95 c2 2a 35 e3 3b Data Ascii: Z>8J{";Yu1\|B=wOCuj$D ss,)nyE:$X~!dNRR NTUB]Y$lkl"fY&h]'$t_`lm:q(V%+Reojg5;
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: f3 85 d9 ce da a6 e6 31 5c df 3c bb ca d2 cd d4 ca e1 6c 58 08 a1 86 a8 9d ec 06 f9 f4 ec d3 65 ef 80 50 13 6e 7c fc bd 3a c4 aa 08 15 dc a1 f5 3a 79 b1 28 50 8c 8f 6e 3f 6f 6d ba ef 39 75 ce 42 a7 c0 8e 89 9e ae 3c a9 6b 94 08 c9 43 60 0c 73 8a 27 52 84 12 09 04 49 04 90 24 90 81 80 f1 3e 4c ef 69 08 fb 55 cf 72 f2 07 fe 64 29 e7 3a 67 0f 94 84 7f 6d 79 d0 de f7 f1 8f 14 07 13 c7 c5 23 77 7a f3 0f 9f 59 58 d9 32 c6 71 b0 66 b0 04 30 80 32 06 44 08 43 14 cd 83 7c 07 67 a9 8f 3f 75 fa 05 cf 9e 7c c7 cc 83 96 47 5c 74 50 14 74 58 df 3a 7f 59 b8 ba ee 51 19 e6 b7 ad cd 3a 65 5d 9c 96 b3 eb 03 7e 4f 96 30 66 5c 73 6c 23 d4 9f 29 08 3e 93 10 92 84 e1 52 3f f4 13 18 40 97 8c 29 8a 6c 8c e3 f6 84 11 71 9e 75 58 56 3e 62 1e d7 f2 66 0f 9e bc 7a 73 41 78 42 1b e6 Data Ascii: 1\<lXePn\|::y(Pn?om9uB<kC`s'RI$>LiUrd):gmy#wzYX2qf02DC\|g?u\|G\tPtX:YQ:e]~O0f\sl#)>R?@)lquXV>bfzsAxB
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 21 90 e1 7d ed a1 a1 b0 6a 7d 43 95 64 75 f7 70 dd 5f fa 92 79 fc 30 1d a8 42 89 71 38 aa 4b a2 23 40 3c 8a 4d d0 15 aa 33 3e 18 05 bd b2 37 8e 49 ca a5 3d 5d d8 10 a6 14 62 5e d0 a2 4a 9c a0 70 96 5d 7d 3d d2 ac 0b 09 00 10 28 cb ef 2f d2 f0 c8 82 b6 7b d9 79 e3 f4 41 70 8a 02 80 04 92 04 b2 1c 80 b5 21 a8 0d 24 e4 4d 43 f0 bf b1 ff bc 2f dd 55 69 b7 ea e4 d5 0f 79 e5 df 3e f5 f8 58 c2 d4 4c 27 d6 3f 20 21 b2 1f a2 04 d0 a0 f3 21 3c 53 7c 78 0f 12 21 cb 94 9a f5 62 97 14 44 c8 9b dd c0 d4 50 36 b5 3e 72 ec 56 43 08 c4 06 00 39 2a 12 14 38 48 f5 18 35 19 20 a7 16 c7 50 65 bd 84 06 32 c8 00 2f 56 43 2e 86 10 b2 5f d9 de e3 b9 2f d6 9d a6 83 67 7c e1 9c fe 70 df f0 8e b0 fd a9 3c 4b eb d1 9f 46 ec 6c 00 e2 bd 14 ed c5 00 0c 53 88 29 0e bb 31 0c 49 c3 96 2c Data Ascii: !}j}Cdup_y0Bq8K#@<M3>7I=]b^Jp]}=(/{yAp!$MC/Uiy>XL'? !!<S\|x!bDP6>rVC9*8H5 Pe2/VC._/g\|p<KFlS)1I,
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 05 e1 c5 0c 90 0c 56 2a 92 bd d4 8e a2 49 30 84 01 6c a0 01 1e a1 74 9a 95 cc b3 f9 1e f3 44 08 38 01 78 36 00 a6 52 d0 c3 20 a1 48 cb 11 12 88 10 25 42 2a c0 06 92 f1 d1 7f 40 1b 08 0d 99 26 dd 73 20 c0 5a 72 1f df 20 dc 96 2c 0e b1 4b 80 5b 6f 82 25 42 a1 1e 71 fc 04 c5 a0 f4 97 87 99 7f df 9b f5 1b a7 b3 ff f6 6a e3 8d c5 0a 3d 68 07 79 98 20 66 af 12 82 c5 e3 14 19 a6 99 89 b0 a1 66 4b 00 5d 87 0b 32 b3 22 05 1a 14 7b 07 00 27 50 01 80 25 97 1d 7e 6a ba df ed dc 1b 43 d2 79 af ed 68 34 7b 08 0c b1 2a a3 d4 b9 83 ae f7 f8 d3 cf 5c 39 fa dc dc 80 08 5c 60 04 84 1e c2 2a 74 97 41 73 41 80 f4 80 a6 c4 12 87 b6 06 45 1d f9 c6 c3 66 d3 5f ab a5 ff 38 3f e2 ff 6e ae 17 f8 29 25 93 48 50 90 ca 68 84 da ac 56 12 4d d9 76 00 39 80 12 70 ad d8 06 d4 8f 80 5a 20 Data Ascii: VI0ltD8x6R H%B@&s Zr ,K[o%Bqj=hy ffK]2"{'P%~jCyh4{\9\`tAsAEf_8?n)%HPhVMv9pZ
2024-04-19 14:06:44 UTC	342	IN	Data Raw: de c1 9d 2c 29 e0 ad 4a 68 64 c4 5b 45 30 c1 20 0c e0 07 fc 26 47 6a 54 0a 50 01 30 d0 5b 29 20 4a 41 bc 80 f3 34 8d 7a 9e c9 1b b0 d0 59 83 3a 45 78 41 36 40 11 14 11 68 1a 78 33 75 99 da 58 fa a4 89 24 d7 94 a8 ed 03 4e 51 53 57 54 c8 d2 91 6f ef 8a 53 3f c6 d0 0c a8 02 0a f8 29 cb 72 c6 28 02 67 9d 7d ec 49 46 53 0f 31 88 c0 ee c4 83 58 ff fc d8 fe 4f 3b 0f f5 bd f2 88 16 a2 20 ba 42 c3 6e 5b 46 52 41 86 71 c5 40 45 84 de a3 24 c3 37 a2 7d e0 cf 32 c4 2b 31 85 40 44 fc f7 f7 68 55 66 30 28 3a a3 70 6a 05 37 ed d5 a1 22 b6 21 12 e8 5b 76 07 91 61 76 70 9a 72 83 59 02 03 e2 ae ba ac da 6b 39 f7 42 50 42 eb 7c 5d bd 1e aa fb 02 09 b1 08 0b be ec cb de c8 83 ad ae 97 ba 3d 14 0d 5d 44 51 3e f4 bd b9 18 50 3c 6f e9 d6 bb c5 33 ee 35 55 11 aa cc 8d 81 6a 65 Data Ascii: ,)Jhd[E0 &GjTP0[) JA4zY:ExA6@hx3uX$NQSWToS?)r(g}IFS1XO; Bn[FRAq@E$7}2+1@DhUf0(:pj7"![vavprYk9BPB\|]=]DQ>P<o35Uje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49996	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	529	OUT	GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19102 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:02:21 GMT Expires: Sat, 20 Apr 2024 12:02:21 GMT Cache-Control: public, max-age=86400, no-transform Age: 7463 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	721	IN	Data Raw: 52 49 46 46 96 4a 00 00 57 45 42 50 56 50 38 20 8a 4a 00 00 10 f1 00 9d 01 2a a0 01 ea 00 3e 55 24 8e 45 a3 a2 21 24 28 78 ab 70 80 0a 89 63 6d a5 44 f8 49 72 74 30 38 58 94 79 37 e3 d9 e3 f5 8b b2 64 a5 ca 9e 7d 2f 9f ff 6b d7 3f f6 af 50 df eb 3e 98 7d 3d 79 8f fd c4 f5 83 f4 8f fe 07 d4 1f fb bf 53 57 a1 17 ed 8f a7 77 b3 8f f7 ff fc 3e 98 1e a0 1f ff f7 be 66 2d cd 9f c7 7e 47 fe eb fb 0b e4 db d2 fe d1 7f 7a ff bb fe d7 e4 cf 43 7e a9 fd d7 fd ff 44 bf 96 fd d7 fc 77 f7 af da 5f f0 9f b8 ff 74 ff aa ff 93 e3 4f cc df f4 fd 42 3f 29 fe 75 fe 07 f2 b3 fc 87 ee 9f 2b 95 bb f4 08 f6 c3 e9 ff ea 7f c0 7e ea ff 8a f8 07 fa 2f f7 9f e3 ff 6c 7d da fb 11 fe db fc 67 ee d7 f7 2f b0 0f e5 3f d1 ff ce 7f 7c fd bf ff 03 ff ff fe ef de df ee 3f ee 78 ec 7d f7 fe Data Ascii: RIFFJWEBPVP8 J*>U$E!$(xpcmDIrt08Xy7d}/k?P>}=ySWw>f-~GzC~Dw_tOB?)u+~/l}g/?\|?x}
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: cd d4 60 06 81 e3 ea 6e 4e 1f d0 ca 64 79 a9 f8 4b b7 98 e8 e1 10 30 e1 42 98 be fe d7 1b 7a 62 4a a1 56 81 85 0b 90 f3 1f ed a8 23 cd e4 66 f3 a2 9d 59 3c 51 69 21 af c1 13 09 6c f0 2b 1c 76 c4 82 d8 fb cc dc ed e2 a5 ce 29 1a d9 24 d0 76 22 9c 76 c7 86 e5 14 12 66 62 7f 15 e9 ec 65 24 7d ca c2 a2 64 50 ce 4e 0b 88 28 4f d0 14 29 0c 43 cb 97 81 02 ee 89 91 4d e8 59 5d cf 05 65 c0 07 d5 fb 9d 93 3b 4f 9d 64 17 d1 ea 38 dc 84 59 44 45 d4 db fd a3 57 16 dc 26 5d 06 9c 27 ca da fc 97 e2 1e 8e 72 b0 9b 06 48 7d f5 c7 88 9f db 60 30 8d a6 b7 e8 10 47 28 4a b8 89 64 d7 8d 45 55 c5 01 4f 93 f2 5b 06 3a 26 38 e1 a8 29 38 09 ed 1e 7a 98 0e ba 5b d4 3b 10 bc 2f 42 1c de 14 d6 44 fe 72 54 54 11 d8 34 e7 0a e4 d4 6c 8b d5 27 f1 7f a7 df ca 2d 7e 10 8b 6b c5 78 04 7c Data Ascii: `nNdyK0BzbJV#fY<Qi!l+v)$v"vfbe$}dPN(O)CMY]e;Od8YDEW&]'rH}`0G(JdEUO[:&8)8z[;/BDrTT4l'-~kx\|
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 4c e6 d9 c7 d0 dc 30 0d 3b f8 4e 78 5c df f6 a8 7c 13 3b 46 30 26 ca 73 55 45 f9 1b ca c3 ce 57 69 b7 38 63 2a 55 43 b2 f8 82 80 62 ac 7a ae 41 51 d5 ac ef cb 9f 17 89 9d 62 f2 1f 91 7e 77 fe 0d e4 15 41 03 51 98 b0 e2 eb 56 cf 40 3b 8b 2a 3b e8 21 1b 04 e6 de 2b 06 37 49 fe 36 f4 bf 23 32 ec fd 07 a2 5a 53 bc 1c 95 b3 7f 04 4d 72 30 0b b1 4e 35 6a c8 b2 58 c9 05 7a d4 d2 11 b7 73 db ad 07 3a d5 8f 7e 97 6d b3 5c 2d c6 c4 3f b6 25 8f 56 8b 29 be 88 c6 ff b8 17 2d a4 8f 5c de e4 b7 83 75 e4 2c 68 74 34 0e dd 69 e9 c8 61 1b b1 d3 27 4d 19 16 2d 9f b4 83 a0 b8 30 90 3a 95 4f 5a 05 d2 be d9 c6 d0 16 d5 2b 0d c9 f5 a8 d1 dc a7 d5 0b af d9 da 69 87 86 83 ea 26 94 d5 4d 81 f3 a4 b0 f5 d9 14 87 43 6a 4f a2 47 6c bd 52 03 fe 6c e0 a0 74 76 c9 1f 29 09 31 49 f4 b0 Data Ascii: L0;Nx\\|;F0&sUEWi8cUCbzAQb~wAQV@;;!+7I6#2ZSMr0N5jXzs:~m\-?%V)-\u,ht4ia'M-0:OZ+i&MCjOGlRltv)1I
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 3f df af f8 fa 92 5e 3b 6e 93 5b 43 2f bf 98 ff b6 80 2a a2 6b dc be 06 42 03 9f 6b 4b 9e 5c 6e 13 f1 2e 48 e0 75 d1 06 0b af fa 72 b1 19 e6 0f aa 06 a2 63 f4 45 01 3a 2c 0e 1a 7c 21 f4 67 5f f6 c8 1d c3 db 0b 60 5b 0b a4 c6 b8 5d f4 67 a9 71 e8 51 a7 df 5c 0a 42 2f 69 c1 4f ad a4 09 b4 a0 61 cd 96 53 18 23 15 c8 d8 bd 6e 23 5f cf 95 de 61 04 a7 65 f8 84 77 9d ed c3 ad 70 fb f1 3b 92 e4 99 df 45 cd 21 5a 67 64 54 5a d7 73 ab 1e 33 09 ee 0a d5 a5 72 74 76 64 a1 40 a7 0c 17 e1 42 5e 01 4e 97 bc 94 36 ed b5 6b 5f 38 23 03 ff b5 3c a1 0a 76 28 ba 57 08 b0 d1 55 14 37 33 d4 56 70 68 a1 ea 22 84 f0 8e 77 58 c2 04 9b f6 68 62 f8 18 21 24 f9 01 a2 38 9c 04 cc 7b ce c7 f3 58 24 25 ab 05 81 f8 24 e0 45 06 29 4d d3 79 9f 71 40 e7 42 37 39 9e 0d f9 77 b7 90 37 50 2c Data Ascii: ?^;n[C/*kBkK\n.HurcE:,\|!g_`[]gqQ\B/iOaS#n#_aewp;E!ZgdTZs3rtvd@B^N6k_8#<v(WU73Vph"wXhb!$8{X$%$E)Myq@B79w7P,
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 19 a6 fc 1a 3e 0a 5b 23 4d 5e a8 dd 4b ba a5 78 67 25 43 da e3 d8 5a d5 e5 48 1d 35 75 8f b5 9b 3f aa 7a ec 50 7f 91 b8 44 34 17 18 f2 12 35 08 68 89 9d 7c 31 3d 36 90 7c a8 d3 89 19 1c 7e 6a ff 98 39 d7 fa 65 db e9 59 da 02 e5 af 9b 86 2c b9 3f af 4f 61 22 d5 35 fd d0 20 c8 aa 45 3b ea a4 80 ea 97 83 d5 78 01 a7 82 6b d2 49 09 62 1d f6 16 fd 3b 40 e6 b2 39 5c c6 b3 62 e3 b0 c1 46 02 5c 62 ed c3 04 14 5c 21 fe 4e 51 f7 79 82 da b6 23 51 62 19 88 54 c5 61 1c 77 0e 8b 47 f3 7f 0d 97 aa 1e e3 2a fa bf e9 f1 d2 e2 dd fb 40 8f 1d b1 45 ed 98 16 54 bf 99 50 5b d5 b1 96 fd df 81 19 b5 e9 5c 97 50 24 ae eb c1 42 15 95 88 23 78 b7 e4 3e c2 cf 03 d7 8d 12 e2 74 57 b4 1d 35 22 00 71 f8 db 94 42 de 19 d7 14 4b d3 6f 71 3d 46 8c 7c 4a 36 c3 b6 e2 0e 2e b8 5c b4 50 d9 Data Ascii: >[#M^Kxg%CZH5u?zPD45h\|1=6\|~j9eY,?Oa"5 E;xkIb;@9\bF\b\!NQy#QbTawG*@ETP[\P$B#x>tW5"qBKoq=F\|J6.\P
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 6d 0e bd 40 a4 95 39 5f 1c ab 63 71 d4 46 28 41 91 19 e2 96 d4 9c a7 41 68 9d 6d 87 5a 13 04 c1 bd a3 b2 71 44 70 ec 8a bd 7f 9c b1 07 62 fb 00 33 b1 70 f1 1a 5a a4 d9 e0 2e 72 2c 41 f7 a1 b1 99 cc d4 d7 34 8c ff 08 3d 87 b9 ad e4 90 ff 86 91 f4 62 20 24 77 0b 66 01 28 8e a0 76 1e 46 d9 dd a7 95 16 16 36 9d 2b 0a 40 15 81 97 ca f1 c0 1d 18 c0 94 7a c3 9e 09 5a d1 a7 bf 3e 9b 8a 76 cd 20 d5 dd 5f f2 18 90 76 de aa 56 0d 24 ee 12 1e 9b 0c 69 0a 41 53 aa aa 4e 19 75 c2 fd 43 37 8b 5f 45 7f a6 cd df e1 36 ca 6f ff 9e e2 a4 79 9d e7 b3 bd c7 b2 7e e5 b7 db 06 f1 14 6e cb 48 30 c2 17 f9 b9 b1 bc 34 18 2a bd c8 2b 60 ce b0 35 a0 0c d2 3a df 38 76 66 c1 03 fc cf 4c 4f 56 8c 15 dd f6 b3 c9 1b 12 49 25 9e 28 81 bf d4 86 30 7c 2d c9 0b 7d 19 b8 91 44 c8 58 6e aa 7b Data Ascii: m@9_cqF(AAhmZqDpb3pZ.r,A4=b $wf(vF6+@zZ>v _vV$iASNuC7_E6oy~nH04*+`5:8vfLOVI%(0\|-}DXn{
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: e1 f1 30 4f f5 b6 05 78 4a 73 87 dc e8 86 fe 1c e2 38 fe 5b a9 7d 36 28 19 e1 86 19 7b a2 a1 04 f9 93 3a 93 d3 a9 c0 30 74 cd 10 19 d8 e3 ca 56 b0 47 e1 a7 6b de 8a 74 e3 ce 16 05 dd 82 42 42 eb f0 73 4e 0e 7e 30 0c 62 70 77 75 4d da b4 f7 fc e5 b9 2d b5 4a f7 85 e6 66 aa e0 ff 64 e3 bb b5 7d 96 d8 04 2f b7 64 c7 63 38 e2 28 15 e1 e4 12 7c cd 10 ba db 4a 00 05 4c f1 7a ff e2 9c f8 c2 91 1d 94 c0 15 bd c9 50 68 1e 52 96 63 3d 74 17 d7 a2 9b e4 ab 4a 13 bf bb 7b 3a 1a de fb 9d 0f ce 4e 5a 86 0d 5a 4c 06 04 aa ea 01 33 42 73 71 1a b5 72 8a df 7a 70 31 4f f8 b1 f5 f7 b7 08 ed cb 7b e6 98 74 1c f6 02 cc 2d 9e 95 8f 9f 56 08 04 46 8d be 8d 3e 20 bd 13 e9 59 87 34 dd c5 c3 e3 70 3a 24 4c 6f 6e 08 60 a8 f0 d9 c3 f2 5a 42 c4 d3 79 88 e5 74 65 21 85 07 b6 b0 99 10 Data Ascii: 0OxJs8[}6({:0tVGktBBsN~0bpwuM-Jfd}/dc8(\|JLzPhRc=tJ{:NZZL3Bsqrzp1O{t-VF> Y4p:$Lon`ZByte!
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: e0 f9 3a 87 02 5a 92 7f 96 a4 19 b6 30 29 5a f2 c3 81 61 25 84 81 57 a2 47 54 15 c4 76 9d 50 b4 fc c4 37 ca 06 d7 66 61 28 57 8a 95 21 a8 c9 4b b7 29 06 31 69 02 45 b0 0b d1 80 aa 52 ea 73 fb cb 78 be 54 4e be 0a ff da f0 2c 93 b4 8f 89 e1 c8 08 c8 e0 f5 c6 87 c2 c6 32 2a 52 fa 9b f6 53 aa 1d 36 53 9e 26 02 0b 18 66 cb 2e 7d 22 3a db e3 81 32 15 f4 81 ad 9f 52 af b1 37 6a 63 4f 86 ba 92 d7 49 2a 7d 14 a3 a7 0c 83 a3 da 12 08 90 6e 13 b2 91 56 4a 9e 7b 9b be 75 fb fe 89 34 bf c8 5d 1e 6e e5 7b 26 fa ae 4a d7 57 d3 af cd 04 1f e0 c7 22 cb 80 50 3f 19 73 d4 3a 95 f5 95 97 76 62 b5 10 56 e8 a3 68 ff 31 75 21 e6 95 af f1 e1 aa d2 94 50 d5 0f 7a f6 22 e1 6e c9 ae 82 ca 1e c1 a7 13 cf 25 1d 33 f3 5d 9d 73 1f 3c 38 66 07 d2 73 7b 2f dc 73 95 b9 16 ed 2d f8 01 56 Data Ascii: :Z0)Za%WGTvP7fa(W!K)1iERsxTN,2RS6S&f.}":2R7jcOI}nVJ{u4]n{&JW"P?s:vbVh1u!Pz"n%3]s<8fs{/s-V
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 85 ec 4a c5 51 be 67 7f 42 f7 d1 85 0f d3 ea dc 4b 9d 6f d3 11 0f 75 7b 53 6c 31 60 c7 3e 2c b6 bb 34 36 6f ad b6 d3 98 2a f4 78 0a 5c 0b dc 56 4e 64 13 b9 8a 31 a0 ea 04 60 ef 75 f5 bf 2a 82 46 51 35 4b d9 33 21 43 8f 37 59 92 25 fb 71 26 5d ad 28 50 6c 48 cf 6f ae 36 1c 29 33 9a af 82 b3 24 90 50 0c 33 8b 66 09 f4 96 54 84 3d 92 1a 58 5c 2d d2 93 8c d1 c2 07 28 43 05 55 b1 54 d9 47 0f f1 2f c6 cb b5 bc c8 69 49 9f b6 2a 9e b5 e6 de cc e7 e0 ec 2c f3 89 2d 60 ee 53 71 79 86 88 93 ff 1a ff cd 95 88 d2 0a b8 91 e5 c9 01 09 b7 e1 5e ab bc a7 09 7a 33 39 1c b6 28 2a 86 0f 60 f0 eb e0 f2 a7 b5 3a 18 b6 f8 0d 35 83 e2 30 ff e9 e9 cb 98 39 b7 bf 26 45 f7 c3 ad 25 2b 98 31 a7 1d aa 85 a7 f0 c3 db 9b b9 96 73 81 f4 c9 92 93 e4 8f f8 83 42 a3 c2 63 81 fd 78 0d 4e Data Ascii: JQgBKou{Sl1`>,46ox\VNd1`uFQ5K3!C7Y%q&](PlHo6)3$P3fT=X\-(CUTG/iI,-`Sqy^z39(`:509&E%+1sBcxN
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 68 07 77 55 9c d8 cd d0 e3 2a a2 81 fb e1 ae 6a 30 cf f0 c5 23 50 a9 54 74 21 87 9e f1 35 5f fa 99 65 b9 c2 22 d0 93 a4 46 0b d6 f6 86 ce 79 94 b5 af 74 2f 2a cd 9f 4b 76 5a 2a 21 0b 72 8f 71 27 5a ed de 1b 2f 32 33 7e 9e da 80 58 41 ca 63 5e 58 e0 f5 27 aa d8 a7 b6 6d f8 46 9f cf 10 4a 24 3d a5 fd 5d 65 ff 87 86 1d a1 a2 a0 d8 63 9f 35 c8 75 b8 6d e1 6d 73 46 c4 6a c0 2a 99 24 9c cc 4c 30 f5 57 72 c0 97 aa ff a7 cd 3c 4b 4d ae 6f db 7a 8a fc e1 88 21 12 4e ff d2 32 5d 16 5e 04 02 77 df ea 9c f6 e1 c5 6e db 55 a0 a1 f5 a7 c2 8b 34 bf c9 dc ff 6c 08 f2 52 14 38 1e 52 e3 ff 85 b4 9f cb a6 51 e3 df dc 39 87 de e8 68 8c 4a 20 57 7e ae db d0 8b b5 a2 86 9c 73 9c 17 a2 bb 32 3c 08 08 88 e5 cb 5d 24 cb ed 74 11 80 4e 32 78 95 fc b7 b4 16 5a aa ec a4 3b b3 d9 0f Data Ascii: hwUj0#PTt!5_e"Fyt/KvZ!rq'Z/23~XAc^X'mFJ$=]ec5ummsFj$L0Wr<KMoz!N2]^wnU4lR8RQ9hJ W~s2<]$tN2xZ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49993	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	524	OUT	GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8990 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6515 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	722	IN	Data Raw: 52 49 46 46 16 23 00 00 57 45 42 50 56 50 38 4c 09 23 00 00 2f 3f c0 0f 00 4d 30 68 db 48 d2 26 ed bd c3 1f f1 90 88 e8 7f 9c 9c 00 24 81 29 aa 97 76 1d 5f ed 30 4a db 6b 69 87 bd 5b 74 e1 b8 91 24 45 8a 65 86 e7 fa 6f e2 31 94 c6 0e d6 91 24 2b 19 9c 2f 0d 80 fc 83 f3 e7 ef b1 45 b1 8d 24 c9 c9 3c 1a f2 0f 70 2c b4 a5 35 f4 3f 5e 12 42 26 22 22 19 49 bf 8a d2 93 9a 22 3c 28 92 64 dc 53 c2 1f 15 ae 24 2a c8 11 1f f2 e7 be e8 4e d8 c2 19 a0 74 c7 8f d3 1f 8c 11 16 ac 9e c0 c1 38 f7 f6 1c 9f f1 30 1e a0 f0 ff dc 2b d9 1f 93 67 ac cd 5e 9b b7 40 9f 9e 1e 5f 46 e9 3e b7 fa da 87 1a b8 aa 0d df 3a 79 33 c2 e3 ff ff ab d3 f6 ff 3f b4 c7 f3 58 72 4e 4e 3c 01 42 80 14 77 6a ac 1d 1d f5 f6 b5 32 eb 5e 97 cb 2a 73 77 7d b9 ce dd f5 35 77 77 77 a9 bb 60 a5 c5 9d 20 Data Ascii: RIFF#WEBPVP8L#/?M0hH&$)v_0Jki[t$Eeo1$+/E$<p,5?^B&""I"<(dS$Nt80+g^@_F>:y3?XrNN<Bwj2^sw}5www`
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: dc 6f 8d 53 d9 78 b5 63 22 b8 21 03 78 78 73 d8 60 7a 06 7f e1 f6 16 5e 2e cc 78 d7 ca d0 4c 6c a4 06 60 a0 18 8a bc f9 8f ec 8f cd 7b 9f 10 31 50 d7 b3 9b 0f 7e 9b 92 23 4a bd e3 02 52 88 0f bb ec 95 d5 5b ff b3 b9 f4 7d 0f 1a e0 b4 42 64 fc 80 7b 22 4d 1f cb 67 28 0f 82 47 98 1e 61 0a 63 09 fc 6b 7a 3f 79 8e 6c 02 44 10 00 c0 93 30 41 c0 10 af fe fd fb a5 6c d9 d7 fa ca 0f 1e 8f 71 cf b1 40 a1 be 48 c6 69 28 52 bc 96 6f 36 8b c5 21 d5 58 16 79 1b 1b b5 69 27 eb 06 5a 86 14 8d 84 25 1f bf 7e e7 dd a3 3f 2c be 2a 00 2f 63 6b 82 29 fb 86 bf 63 9e c1 f7 7f ac aa 8f 45 ac f3 f2 a9 6f 9e eb 1d 1e 7e 24 e4 bd 9d fc e9 1e 9d f9 81 fb 43 7a db f9 c5 54 02 c8 11 9a 86 8b f9 c7 18 86 06 1f b5 33 df 43 3c 4e bc 49 0e e3 00 ec 80 06 69 34 4d a5 02 00 dd f0 db 0f f5 Data Ascii: oSxc"!xxs`z^.xLl`{1P~#JR[}Bd{"Mg(Gackz?ylD0Alq@Hi(Ro6!Xyi'Z%~?,*/ck)cEo~$CzT3C<NIi4M
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: f3 97 9f f8 69 d3 c5 da f6 f8 a8 c7 55 41 11 71 30 4a 98 5d d0 63 74 aa 4a cb f9 de 6e 17 58 0c 6b b6 76 fa 75 6c 98 cd 02 1b 0c 1e 66 a5 06 7d 58 4d f7 d3 c0 35 ba 2d a9 5d 9e 48 de d0 e7 fc 69 fc 23 b6 90 c2 50 96 68 8a 53 26 5f 9f 78 94 31 02 43 00 0b 40 31 29 48 32 e1 18 23 8b 95 33 06 10 50 8f e2 a3 5a ac 40 43 98 e0 19 67 98 2e 65 cb 8d 12 14 0b 93 17 94 bf d0 1c 79 7a 24 30 4b 6a 97 7e e2 61 f1 cd 17 3f e0 67 86 b3 9b 3e e6 53 a4 fa b2 52 92 f9 58 2b 00 11 61 7f f0 53 7d f3 55 34 94 20 bf 33 22 86 58 a9 ba d5 78 3a cd bb 9a 43 3b 4d c7 ad 6b a5 70 e7 7d bb 35 97 4a f5 95 b4 ed c3 37 b1 66 65 13 f1 1a 1a e4 c1 e0 89 8d b4 51 db 8f 94 cd 8c 12 42 04 80 30 2c a5 a8 a4 0c a9 9f c1 20 4c c2 89 6c 68 56 27 04 05 4c c7 00 2c a5 6e 66 11 67 62 91 84 d7 53 Data Ascii: iUAq0J]ctJnXkvulf}XM5-]Hi#PhS&_x1C@1)H2#3PZ@Cg.eyz$0Kj~a?g>SRX+aS}U4 3"Xx:C;Mkp}5J7feQB0, LlhV'L,nfgbS
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 96 0a 99 e9 0d 46 19 64 24 10 e9 06 ec a4 00 7b 6c 9a 90 23 56 9e 24 77 85 e2 be ff d2 0f ef 35 66 56 68 1a 09 d4 15 61 75 3f a9 01 b4 50 51 48 1d 9b 2b 52 1e 20 f5 27 cc 35 9d ff 58 22 1b 16 2f 44 28 1b 32 25 43 24 9d 84 31 c4 09 ad 89 a2 5b f4 1e e3 ee ae 92 78 14 f4 42 3b 22 00 0d 00 10 18 80 8d fa 54 86 8d dc 3d cf e1 5b c8 49 4e d0 03 48 32 d8 fb bd ad 6d de d3 cf 84 b4 d3 0e 53 60 d4 88 35 b1 10 1c 74 23 83 6b ce 9c 31 13 22 fb c0 c6 66 32 f7 11 5e 27 ea 87 6b c2 ea 31 52 09 0d d5 06 e4 8c 98 c1 08 91 29 18 4a 52 b9 2f aa a6 ee 6b df fb 73 f2 61 f1 05 20 61 fd 1e 93 82 02 55 d7 a2 1e e9 90 cd 83 ed 89 89 cc be 24 6d c1 a2 c1 49 1f 8a 30 66 70 3b 42 90 80 85 38 80 34 15 28 0c 88 88 2a 86 11 ba 07 b9 b5 22 13 e8 9f 2b 52 a7 94 2c 23 4f 0d 4e 4b f2 d4 Data Ascii: Fd${l#V$w5fVhau?PQH+R '5X"/D(2%C$1[xB;"T=[INH2mS`5t#k1"f2^'k1R)JR/ksa aU$mI0fp;B84(*"+R,#ONK
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 06 37 9d 48 80 e6 f3 6c da e9 46 ae a9 eb b6 b7 0a bf fa 4b ba b8 26 63 01 a4 24 10 44 92 90 23 86 80 93 18 4f d2 08 12 56 d0 d1 b9 dd 7d b5 e5 23 59 b0 78 b1 41 99 25 a7 91 9b 58 3a 9a db 5b 88 de 47 6b ee be 75 e7 c5 8d 13 ef 78 01 c5 b0 ee 23 d7 27 7f 86 e7 75 c7 bf de b9 6d 46 63 5d ae 32 4b 86 90 44 ce 61 48 85 ee 7b db b1 a6 34 09 61 11 67 cc 9e 7c f6 ab 37 af eb ad f0 f8 8e 38 f7 b6 4f eb 6e fd 88 dd d6 8f ba ff f3 93 cf 58 07 19 d1 16 86 53 66 96 70 4a 59 98 37 a6 ab 1e d1 e7 7d 89 93 00 29 59 31 10 4b c0 0a 39 b1 b9 ae 18 91 10 03 02 f1 c8 81 49 b4 5c 46 00 31 32 0a a8 2e 19 ed 0e 64 56 f6 be 7f 5e 35 b1 62 2e e5 94 74 07 25 b3 8b 0f ff e7 68 ef 06 77 5e e0 cb 07 8f 81 fe c1 bf e3 15 a7 fa 86 0e 54 23 01 90 e3 80 44 99 f8 6b 82 0b 05 6a 20 89 58 Data Ascii: 7HlFK&c$D#OV}#YxA%X:[Gkux#'umFc]2KDaH{4ag\|78OnXSfpJY7})Y1K9I\F12.dV^5b.t%hw^T#Dkj X
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: cd 14 94 01 c1 7f 01 20 00 00 58 f8 ef fd bf 0a 00 00 a4 40 97 33 00 a4 e3 d0 24 bb 8f 4d 5e 57 55 8c 0f 09 5d da 6d 3b 53 d7 9e 76 91 b4 8e c9 06 0d 59 c9 12 c1 61 77 71 af 90 09 03 44 0a f8 57 4b b9 fe 86 07 24 38 91 e5 1d bd b2 b7 4d cf fc f0 23 d7 95 d5 03 df be f7 d0 57 ee a4 3e 7d 9f be 76 d1 dd 7e 46 af 61 8d 9d 5e 1a 13 65 64 b5 b0 91 39 06 43 d9 71 6d bc dd bb 4e a4 6d 30 1b 11 20 80 ff 31 00 80 20 40 00 01 2c 00 40 c1 ed 39 5b 4f 46 92 e9 c4 38 5a 45 fb d3 b0 b9 9a c2 28 4b ce b4 4d 1f 38 f4 f7 c5 12 0a 27 34 d9 64 ea a1 b5 b1 21 c9 24 26 a2 16 7f 2d ba f4 e6 72 7a b9 43 28 b5 e6 26 da 0b 9e 5e 8b 60 2a 1f 8b 3d a0 b3 c8 15 fe d9 f8 78 51 de 8c e9 d6 d5 6e cf 39 65 42 08 51 c4 17 ba f4 e4 bc 78 73 f7 aa 28 a6 5f df 6d 00 d6 56 40 00 40 02 46 88 Data Ascii: X@3$M^WU]m;SvYawqDWK$8M#W>}v~Fa^ed9CqmNm0 1 @,@9[OF8ZE(KM8'4d!$&-rzC(&^`*=xQn9eBQxs(_mV@@F
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 91 a6 bd f6 e4 07 df 6e ef 7e b5 7e b4 f0 b9 db c6 57 dd f9 f6 7a 5b 69 5e aa 0c 8f 22 bc 79 90 ef 1b 7b cb 77 f9 9b 0f dc 79 45 87 30 5c b2 24 6f 1d 7b 7a c9 73 2b 31 5d c0 9e 9b 02 c4 d0 1d 3d eb 8d a8 22 b1 25 75 df 2c fb 13 9e 39 ca 13 12 37 08 11 a6 5b 57 03 91 22 35 43 de 87 e6 89 3d fa 23 55 87 d6 9b 04 32 b7 58 32 d4 dd 8a 9c 45 d1 a4 46 c5 b9 ab 9c b9 52 f2 82 f9 45 89 74 f2 a8 77 06 f1 2f cc 4a df b5 57 1b e6 61 19 aa 99 95 87 7b a3 86 a9 a6 72 46 61 25 26 c4 8d 4c dd 15 e6 3f a7 83 32 48 38 80 32 9e 3b 39 f1 fd f0 70 f6 17 fc 93 7b b1 13 29 6f 0b 96 b7 7e be b7 2b 5d 4b 93 68 3d ae 01 44 44 ce a5 c4 33 1b 2c 29 7f 20 57 1c a6 c0 74 09 70 0c b1 23 82 00 72 21 72 c1 35 94 ad 10 db 20 6e 69 11 72 8e 4e a5 21 15 15 92 2e 52 8c e4 e1 0c ea 5e 9e af Data Ascii: n~~Wz[i^"y{wyE0\$o{zs+1]="%u,97[W"5C=#U2X2EFREtw/JWa{rFa%&L?2H82;9p{)o~+]Kh=DD3,) Wtp#r!r5 nirN!.R^
2024-04-19 14:06:44 UTC	738	IN	Data Raw: 08 8d db 75 d5 d6 1d cd e0 98 ca 31 a2 19 45 eb 74 11 b4 8c 88 29 25 21 25 73 a8 c2 11 3e de 5d 85 eb 04 40 09 05 43 15 9d 82 2f e3 2a 43 ab 31 0b fe d9 e7 d9 ac d4 9d dc cd 1b 37 6e 67 c8 e2 47 37 80 f0 ac 6b 0f 36 bd f7 63 de e8 9d 0e 9c 85 c5 68 0a b0 08 11 00 69 41 dc 25 2c 3e 98 98 db ab d0 91 13 80 b8 29 20 14 46 cc 86 67 2c 78 b7 8e 57 3e d0 04 5d cb 20 1c 18 df 2f 19 cb 8e 7a d6 ec ec d3 0a bb 77 2b a5 b1 a0 69 ae 86 d4 a4 63 b3 08 d5 a9 23 9e 00 dc 71 f5 9b c6 64 b2 77 a0 07 95 33 c4 a4 5a 7d eb 4a a5 20 7c 0f 69 0b 6d 92 45 14 20 26 9e ca f7 4f 30 cc 95 c6 01 90 16 b3 e6 59 27 21 9f ca da c3 f1 78 67 e9 c5 eb 93 64 5d e7 4b 08 50 e6 86 08 08 80 08 da 40 91 8f 02 a1 33 81 0f 7a 21 e1 18 8e 60 8a 46 af 6b d7 9c d5 27 5f 51 94 19 78 46 69 9e 88 96 Data Ascii: u1Et)%!%s>]@C/*C17ngG7k6chiA%,>) Fg,xW>] /zw+ic#qdw3Z}J \|imE &O0Y'!xgd]KP@3z!`Fk'_QxFi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49994	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	525	OUT	GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8086 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:04:21 GMT Expires: Sat, 20 Apr 2024 11:04:21 GMT Cache-Control: public, max-age=86400, no-transform Age: 10943 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	721	IN	Data Raw: 52 49 46 46 8e 1f 00 00 57 45 42 50 56 50 38 4c 82 1f 00 00 2f 3f c0 0f 00 4d 30 68 db 48 92 94 dd 7b 93 e1 0f 78 49 44 f4 3f a0 e0 1a 2c 8c 30 90 12 94 3c 4c 2e e0 08 9b c6 8f 36 b3 60 14 49 b6 93 29 14 70 c2 bf 28 04 0c f1 94 73 7a f5 75 b0 8d 24 c9 49 ff 23 2c f2 8f 8f c2 c4 d2 fa ea ca 75 24 db a6 b5 af ad 7f e6 9f 06 d3 98 8b 67 db af fa 1f 42 4b 75 aa 44 80 1e a0 e1 80 0b 69 a6 26 e5 c8 86 80 a4 08 92 bd b6 03 19 fa 61 19 6e 40 f3 e4 77 55 f3 c0 23 79 22 42 44 45 2a 41 84 bd e5 f2 ca 74 e3 02 20 95 e7 cb e6 6f f8 12 b6 00 7f 20 97 ed 1b df ab d7 07 9b e3 95 00 88 92 49 72 d2 cb 23 35 f2 97 01 67 83 f7 6d bb 55 bb 6d fe ef 1e 63 2e dc 6b ef 2d 69 8b 2c cb 1c 4e 0c 65 66 66 66 66 e6 f6 1d 3c cc cc cc cc 0c 65 6e c3 1c b3 1d a3 2c c9 e2 0d 0b e7 1c e3 Data Ascii: RIFFWEBPVP8L/?M0hH{xID?,0<L.6`I)p(szu$I#,u$gBKuDi&an@wU#y"BDE*At o Ir#5gmUmc.k-i,Neffff<en,
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: f3 f8 fe 17 9e 0a fb 91 79 ae 61 28 a4 84 41 eb 3a 5b c5 42 9b c3 33 9c 39 c3 b2 ca a1 f2 fc 2e 5e f5 02 e1 59 f2 43 7b c2 6f 67 fa 77 39 ff a4 22 88 48 51 04 50 00 78 05 56 79 28 00 0f c1 fd 92 64 47 e8 f0 ff 9e 8b df 74 f2 e9 9f be b2 f3 db fe 79 d3 27 de 71 f1 6f 05 39 0c 64 40 41 04 1e 04 00 5c 50 a4 b7 cd 53 f7 c9 26 25 70 51 5a cd e1 95 4f 71 dd 35 4f 44 5f 43 cf 72 6d df a8 65 0c 01 36 64 cc b9 2b 38 e2 50 29 00 d1 40 17 e9 8d 04 7a 18 d5 9f dd 75 f2 fe ac fc aa 4a 30 62 08 24 02 90 8a 15 15 18 54 81 00 d8 86 82 43 cc ff f7 86 be eb 87 56 37 fd 4a ee ee 12 cf a4 d5 7b 92 f6 bb 2e f7 fe 2f b7 21 85 05 08 db 88 90 03 86 36 28 fc 0d d3 3e ad e1 98 b4 54 03 24 3a 6f fd f2 bc 4e ed cd bf 74 57 e7 01 78 af e3 8c 56 a7 0d 88 2c 97 86 82 f9 16 ce ad 31 3b Data Ascii: ya(A:[B39.^YC{ogw9"HQPxVy(dGty'qo9d@A\PS&%pQZOq5OD_Crme6d+8P)@zuJ0b$TCV7J{./!6(>T$:oNtWxV,1;
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: a4 88 06 64 41 5a a6 40 90 61 12 58 25 66 84 a6 d2 3a b6 75 90 07 0e f2 0c d8 fe 79 98 41 8c 01 0a 6a 20 a1 fc 02 88 3d 62 9b 59 c0 45 57 7f df e5 ff bf ef f0 9f 4f e4 af 7e a0 61 3e b6 f9 13 a2 f5 5d c6 4e e3 cf af 0d d6 39 18 ee f1 b9 ee 5e ff 60 7b 65 1d 37 41 1e b4 8b 5a 33 da d6 fd 17 31 71 3b db 78 9f 1b 14 00 d3 a0 cc e8 2c b6 e7 f8 ec f0 0b e2 8e fe e1 6b ef f9 07 67 5e fc 95 5f bf 25 18 d8 33 83 67 c3 c1 07 92 de 7b 5f 52 7a 65 77 3a ed 28 4d 59 58 80 d8 61 bc 20 42 81 18 2c 8e bd 67 18 6f 94 d3 4b 64 c4 75 02 00 02 ea 80 e1 59 a8 96 86 6e fa f2 60 ea 43 8e be f9 ff 1f e8 f9 dd e5 97 bd 7f fe db b3 74 3f f8 26 cc 8d 98 0b 97 96 eb 89 97 d1 6a 08 6b 98 10 02 78 cf 88 4c e4 45 ea 28 ef e8 0f 40 e7 85 84 74 63 e9 dc fe cd d9 ad 5f df f5 39 81 9b 0e Data Ascii: dAZ@aX%f:uyAj =bYEWO~a>]N9^`{e7AZ31q;x,kg^_%3g{_Rzew:(MYXa B,goKduYn`Ct?&jkxLE(@tc_9
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 7e 6f 57 c4 68 21 fe eb e3 a0 cf 41 80 12 14 20 17 a1 08 c0 38 be df ff 57 ff b4 eb fb 7f eb 61 bf b7 b8 74 e1 7b c9 c5 33 f7 fd f5 e7 1c 3b 35 3c fe 3e 89 2b b5 fd 8e 25 f6 25 d2 9c ba 41 04 b6 ae 5e c6 ae 94 da e5 fa 6d 19 db ea 28 75 5c 75 ec c6 0e 1d 55 00 68 40 5b a9 a7 86 d1 a3 6e 4b 2d 72 7e e8 82 c4 a3 65 2a 6a 1d 2c 04 c4 51 76 94 29 92 3c fc 64 36 b2 cb d5 46 22 eb 35 f3 ab 1b f1 be 75 a1 ac 7c 70 fd d8 a7 ee 44 ae 7d e5 b6 0b 33 8b eb 8c e5 d5 5c 2b 50 4d 1c 52 80 a2 06 1b df af fd ce 53 4e 7c e4 af 1f fa b6 c5 da 2f 8c 8d 2f 8f df 7c b7 da b4 73 d7 cd 27 3b eb 6e 3a 60 af 32 0a 50 5b ac 10 e0 41 16 aa f4 b8 a2 c0 32 b3 d1 bb 2e 4d 58 6f a1 aa b5 b0 35 fe ec 02 78 7a 00 48 19 ec 1b ea 1d 47 75 2f 4d b9 4c 57 a1 54 97 7b 27 93 60 82 fa 45 c6 fb Data Ascii: ~oWh!A 8Wat{3;5<>+%%A^m(u\uUh@[nK-r~e*j,Qv)<d6F"5u\|pD}3\+PMRSN\|//\|s';n:`2P[A2.MXo5xzHGu/MLWT{'`E
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: b9 85 25 33 61 99 63 47 bb 19 f0 40 e9 9a 5d c4 64 0c 8e 51 d7 63 96 c7 f6 08 ba 2f 5b 9f 6c 28 00 a0 05 8e 6b b7 3f 30 79 2f 9b 68 60 68 6e c6 f8 f4 e5 3b aa 8d a3 c3 56 0b 5b 3a 19 37 dd 8e e1 55 8b ed c8 93 6f ae 71 f0 f2 cb 8e 0f 0d 4d c3 19 af 2e 2d f1 84 e8 cd 45 0f 25 56 20 26 4d 02 8d 10 81 0a ce 10 00 90 22 01 76 e8 04 37 fe 92 d3 db 6f 1c 23 cc bc 5a 8c bb fd 44 90 cf c8 35 e6 e2 8c ef 7b ef 63 f1 b5 83 cd 88 30 20 77 6e cc f5 7c aa 65 6c 4e 34 38 af 7f 76 b3 94 76 80 c7 d9 f4 be 74 fd d0 5f fa f0 94 1c 94 51 97 9b ed 55 28 76 88 93 f3 12 c7 b9 34 27 0e 1c 14 56 f1 c6 cd 63 ae bc f5 d6 2f 5e bb 61 d3 ee f8 5a f6 5c e7 6c c6 e9 95 2e 76 c6 9d a6 11 48 68 90 43 80 06 58 25 0e 52 00 aa 90 a0 53 74 de 74 ed d8 e6 ff bf 7d a8 37 cc b2 52 f9 f1 2c 1d Data Ascii: %3acG@]dQc/[l(k?0y/h`hn;V[:7UoqM.-E%V &M"v7o#ZD5{c0 wn\|elN48vvt_QU(v4'Vc/^aZ\l.vHhCX%RStt}7R,
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: a0 b0 21 c0 82 f5 4c 4e dc 37 bb f2 10 e5 8b f9 cf f5 e7 af 8c 2f 7d f6 b9 cf 3e f7 72 9b 9d 29 f1 9e 8d c7 99 57 92 38 f6 8a 1d 91 73 e8 88 9c a2 12 c5 64 7f f0 ad 3d f2 8e fd d6 38 5b a6 37 80 e5 e7 b1 ba 7c b7 bf 9f ad 71 4a a8 5d 95 b6 50 d3 e7 ff 3e 6a 3b 12 03 23 85 23 8e 76 c9 83 c4 4b 5d 66 25 76 88 42 59 78 9a d5 a3 3e be 6f 6f f9 e6 95 79 48 6f f8 9c 48 2c a2 58 63 51 a4 a8 c4 46 d4 50 85 14 89 18 c5 29 ea e0 33 47 5b 97 9e 1c f9 bb 3f 75 db d9 85 ae 5a 2d c5 f9 c5 f8 0a 28 a3 62 6f a3 0e 49 40 42 c7 a8 c4 d7 1f da a3 a4 47 59 cb 0e ee 4d bd 51 00 9c e1 02 9b 3a 9b 6d 99 9a b2 49 90 15 9c 57 e6 79 e4 13 3b c3 1c 0d c0 1c 89 32 e5 b0 90 78 e5 52 8b 30 42 a5 44 4c f1 82 5f c0 ce 27 3a c7 a7 3d 78 fe d4 2d 6f 78 32 5f 9c 8b 1a 95 48 14 59 91 6a 49 Data Ascii: !LN7/}>r)W8sd=8[7\|qJ]P>j;##vK]f%vBYx>ooyHoH,XcQFP)3G[?uZ-(boI@BGYMQ:mIWy;2xR0BDL_':=x-ox2_HYjI
2024-04-19 14:06:44 UTC	1090	IN	Data Raw: f8 a3 c1 3c 03 5a d8 6c 5c c8 b4 14 46 22 ad 99 b1 36 fb 40 e9 69 1a d7 37 db 43 50 ae 23 1d 9a 54 7a 25 26 4d 7b 67 eb 94 07 3c 49 40 88 80 b0 07 62 4a 08 23 0d 40 0c 93 10 16 2c 93 02 04 22 2a 10 28 a3 56 ee 9a c2 b5 47 7d 12 4d 20 a1 84 08 fa a6 0b 2b da ca db b8 5b dc dd 3d 8e 8e 9b 4b 9b d5 5e 1e dc f5 b4 b3 a6 1b 18 00 4c 12 5f 19 1a e0 89 8f 79 7a 62 fc 0c 07 99 a2 99 dc 26 40 56 bb 36 39 7b b4 37 3b 57 a9 ab cc e7 52 3e 5e 0f 1b 4a 2f 55 75 68 1a 2c 36 70 7d 84 6b 54 e2 0a 7c 01 8c 11 20 5b 34 36 b5 18 29 25 cc 06 2e a4 66 91 8a 8c a0 02 8b a3 d0 0c 65 d3 96 40 ec 20 28 d5 27 43 5b 6b 55 65 df e5 de fa ed 8d 7c 27 f9 aa 72 b7 ca ab a8 67 ac ff b2 bf 7f 47 60 60 1e 80 9b d7 95 a3 60 88 3d 5e dd 4f 9d 79 f8 1c 1b 16 8a 16 26 a4 d5 38 0e 6c d9 c3 12 Data Ascii: <Zl\F"6@i7CP#Tz%&M{g<I@bJ#@,"*(VG}M +[=K^L_yzb&@V69{7;WR>^J/Uuh,6p}kT\| [46)%.fe@ ('C[kUe\|'rgG```=^Oy&8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49995	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	525	OUT	GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:16 GMT Expires: Sat, 20 Apr 2024 11:17:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 10168 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	721	IN	Data Raw: 52 49 46 46 3a 1f 00 00 57 45 42 50 56 50 38 4c 2d 1f 00 00 2f 3f c0 0f 10 4d 28 6c db b6 8d 21 ab 4b 6a 44 ff a3 0a b5 fb d6 f5 8d 79 b9 a4 66 66 b2 16 29 37 82 44 89 48 60 f2 7f ba 89 50 74 c1 a0 91 24 45 7d 77 ff ef 5f d8 8b 60 66 e6 d1 c1 b6 91 24 45 6d 9d 2e 80 7b b4 18 f2 b7 3f 98 d3 5b cc 8c 62 d8 36 92 a2 f9 fe 7b 7c 1d 33 d3 f3 ab ff 01 c0 83 cd de e8 7c 23 7e 60 24 c0 03 1e f0 cc c4 5d 15 23 cc 89 f7 12 4e 42 04 3c 90 5d 01 43 e3 b9 21 35 13 34 01 e0 09 bc 83 73 0d 10 48 43 4d c4 88 b8 11 1f cc ac 3c 3e b6 6f 35 13 24 7a f9 c2 cf 5a 23 fd 65 cc 0f 88 3d e3 5b 54 5e 6c 53 e1 a6 79 42 05 0a e4 f8 f9 24 e9 e1 de 11 e5 19 2b 3d 2e fe 8b d2 b0 8e 7b 69 56 e6 50 d0 b6 0d 13 f3 a7 bd 43 21 22 a2 a0 26 79 f2 69 36 82 6a b6 ff aa 2d e7 b7 86 99 19 dc c4 Data Ascii: RIFF:WEBPVP8L-/?M(l!KjDyff)7DH`Pt$E}w_`f$Em.{?[b6{\|3\|#~`$]#NB<]C!54sHCM<>o5$zZ#e=[T^lSyB$+=.{iVPC!"&yi6j-
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 7f 77 60 a0 bf db 1d 70 60 10 82 98 13 72 62 c3 20 1c 1e b4 df 6a 78 2c 7e 18 e1 b2 d1 bd 6c 34 36 59 95 dc b5 d2 d9 29 1d 65 49 cb c1 c9 c3 e1 aa 4e 2c 9d fa a4 75 49 d4 45 4f dd e9 1c b5 eb cf 6f 5e f4 4b af bd f4 b7 5e 00 0a b8 29 e4 fe 88 22 59 5c 04 91 39 5a 8e ec e3 c1 c1 c1 1f 20 06 32 07 04 58 dd 6e bf 90 4a d2 44 1c c0 ac ac 73 8d 8a 41 db 1e 1e 8c 95 84 bf 3e fd 89 e7 1b 36 e9 c7 c3 fc 25 cf cc 5e 9d b0 1b 8c 51 b8 e7 12 73 d1 d5 26 4c 3e 2d f3 c3 a8 44 38 d3 1b 77 fb f0 d7 6c f6 a0 fb 4e 3a f3 b0 3d 3e fd 9c fb 79 c1 29 6c 20 70 53 71 85 41 2f f7 7a bf 3b 42 09 9a a4 2a 24 01 9c a4 90 46 51 48 aa 54 46 47 73 73 db 7e f5 b7 8a a6 0c b6 0f 3b ae 7d d3 89 f6 e6 67 00 c1 a7 0a d0 91 a1 12 44 34 66 d3 67 73 82 03 a6 82 21 e9 a1 d6 53 15 57 04 3b 0b Data Ascii: w`p`rb jx,~l46Y)eIN,uIEOo^K^)"Y\9Z 2XnJDsA>6%^Qs&L>-D8wlN:=>y)l pSqA/z;B*$FQHTFGss~;}gD4fgs!SW;
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 07 58 43 23 ab d5 02 f7 73 d5 77 54 b4 09 04 d5 d3 c3 76 0d 42 65 5a fd 54 ad 20 75 bb cc 64 e3 d4 b3 19 25 76 3a 81 39 10 9c 40 4d 8c dd a9 8e d3 ba 9a 5c ab 0b 68 83 89 7c 0d 11 13 63 e4 4c 8d e3 56 67 9e f2 97 95 c4 88 18 88 54 27 b7 8b 5c fe 50 ce 3e b0 26 0c 48 07 a4 f1 af fb 69 84 8c 50 28 a7 83 7b 2f 07 38 02 13 90 58 02 e5 e6 48 0e a7 87 a3 06 d5 4a 21 38 1d 15 b6 bd de 8e 74 90 9f fa a1 b2 c7 00 dd e5 10 df d8 86 42 5b 34 db 0f 8f d6 a7 87 4b ea 18 85 44 52 35 50 89 e4 8d a7 0c 8f f7 17 ab a7 5c 74 e8 b2 c9 36 09 46 01 c6 11 67 2d e0 18 09 7d 40 53 c5 88 60 96 21 a6 7a 2d 80 8c 50 38 03 04 60 9c 7b 1c 61 c8 ad b8 8e 43 d4 74 7a 5d 1a a9 08 a4 61 bb bc 90 c2 ab db af fe ea b6 1d 95 e6 a5 be f0 1f 07 23 51 3b c5 b6 36 c6 8d 31 eb 44 17 3b 8a d9 f0 Data Ascii: XC#swTvBeZT ud%v:9@M\h\|cLVgT'\P>&HiP({/8XHJ!8tB[4KDR5P\t6Fg-}@S`!z-P8`{aCtz]a#Q;61D;
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 9a 80 9f 32 1a 35 97 d3 d1 e5 9e b1 d6 f3 0e 76 e4 ae ad e7 7b 37 d0 ac bb db 28 81 84 19 a1 5c e2 35 b2 c7 dd e7 1e ee 1e 9f 4a 7c f3 2f bb 3d e3 5b 7b fc 68 fe f1 b9 2b b8 41 a7 52 bd fa f8 c2 eb 5d fe 24 4b 47 dc 85 fe f6 1e eb 85 1e 01 64 26 95 41 62 10 bc 60 20 e8 bd 34 77 7f 79 af 16 03 2d f4 97 1f eb 5f 84 6b 71 c4 63 20 68 12 c9 9d f9 ed 54 89 48 84 ac 0e 1e 87 75 2f 5a c2 d1 be a2 eb ec 55 ba 5d 87 46 81 1d 8e ad 5d d6 b9 ec 4e 97 ef 6c ae 66 6a a7 b7 b5 ed c8 68 d3 ca d4 87 4e 05 2a 44 24 97 8d 3c 64 2a d3 89 ff da 78 c8 c1 1f a7 be eb 53 b7 1e 6e df e2 21 5f 2b 5d f6 60 33 e3 bc c9 62 b0 f0 8d 56 d7 a3 4d db 9d 46 ed 51 6f ca 43 d0 03 b3 6c 26 d9 11 34 6b 32 b8 c9 37 ef 94 51 34 f6 ef e6 af 2f 9b 95 7a 61 a4 a5 29 91 56 63 68 cf 04 dd c0 07 d4 Data Ascii: 25v{7(\5J\|/=[{h+AR]$KGd&Ab` 4wy-_kqc hTHu/ZU]F]NlfjhND$<dxSn!_+]`3bVMFQoCl&4k27Q4/za)Vch
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 94 60 4d b1 11 83 5d 8f 83 3f 08 c8 08 32 03 74 62 7b 02 97 ab e4 27 26 ca 3b 4a d3 0b 2f fc d4 6e c7 5c 2c 2a 49 ae 60 77 2d 7c a9 e9 6b 46 08 b4 0e 66 ee ea 37 e7 ce 5a 3b f9 b0 ea 7b 66 ae ab 73 b8 4c dc 4c 3d 19 16 e2 bb c7 3b 56 d7 28 a4 c6 0a af ae 3b 90 c5 67 99 d7 b0 65 d9 5d f6 bf 8f 38 8b 0b 9c a9 da 54 30 8b 5e a7 36 dd 59 08 8f 93 4d 62 f3 6f e2 6e 85 20 31 a0 7a c0 a5 45 7e 17 8d cc 54 0e 88 dd e1 aa ae 0a 9d 98 0e c4 c2 4f fa 10 5e b1 1b eb c0 8b 62 a8 c3 18 ce 09 17 af 18 0e ba d2 b0 d7 e2 8a c7 29 f7 f8 e3 e5 fb 24 dc d7 2d 9e cc b6 0a c8 83 bc a5 73 9e 2a fd c0 37 cf 8a e5 c0 a5 a4 d3 12 c3 a8 79 74 ac bc 68 88 6a 3a 0b ea a5 c8 e0 cc 52 2f 63 f9 33 bb f0 89 f3 fc fc 6e 28 4f 77 54 71 e3 e0 32 bd 01 98 93 52 89 fa 61 55 bc f0 54 27 f4 cd Data Ascii: `M]?2tb{'&;J/n\,I`w-\|kFf7Z;{fsLL=;V(;ge]8T0^6YMbon 1zE~TO^b)$-s7ythj:R/c3n(OwTq2RaUT'
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 02 e3 cc b9 c8 ea 77 b5 7c 0b c8 4c a0 a0 c8 53 5e d8 bc 8b 5b ec b0 40 10 3b f2 ae 2b cc 9a b0 0a 4f eb de 29 38 27 05 5c 2f 59 de 36 dd 01 9a 52 c9 54 5f ca 1a b2 38 91 4c 27 19 85 89 27 d1 89 82 11 0e 1b 35 55 68 e3 5c 11 a7 5c 24 74 f7 e5 4e 0f f4 17 cc 54 4e 14 e7 ac eb f2 ac d4 93 09 4b 8f 3a f1 06 0f 82 e6 5b 5c 74 c0 6b 86 4d c1 31 31 d3 43 24 ce 46 4f 1c dc f5 9a db f4 45 5d d8 cb 65 66 32 0b 2f 34 da 9a af 6c 5c ea 7b 81 1d 72 14 23 00 2c ef 94 a5 3b 73 a6 f6 cc b0 87 3a 45 63 77 3d 0d b4 64 44 bc 83 7e 35 c9 5c 31 24 9f 3d cd 48 0e e7 14 a4 27 39 69 5d 11 49 cc ae 07 cc 34 6f ac 3e df bc 68 fc 88 48 62 7f 54 dc 8a a3 c5 de d2 c8 bf ee e4 d6 c7 9f b4 db f4 39 ed a9 e7 b2 50 34 0b 05 ad 38 03 45 a5 bf cd bb 6f fb fb dc a1 4b 22 02 e1 a1 ba a9 bf Data Ascii: w\|LS^[@;+O)8'\/Y6RT_8L''5Uh\\$tNTNK:[\tkM11C$FOE]ef2/4l\{r#,;s:Ecw=dD~5\1$=H'9i]I4o>hHbT9P48EoK"
2024-04-19 14:06:44 UTC	1006	IN	Data Raw: 8e 5f e0 08 08 72 e7 4b 53 f2 af 06 be 0e e8 2b 87 07 3d f6 41 23 9c 5b 81 0f 1a 86 9e 23 21 6e 0c f8 3a 22 4e a8 00 41 cf 05 e6 c3 ad dd b0 d2 ee b9 09 56 c1 a7 b4 8b 2b 4a d2 2e 7e 4f d8 fe ec 46 40 0a 92 23 4c 22 ec e9 9b 1b 2c 1e 4a 3b a2 a8 6b 17 c3 53 9b 4d fb fd ef f1 6d c3 b6 54 0c fc 95 3a e8 c7 1e b9 0b 05 cd 02 58 93 2c d3 1b 50 e1 fa b3 6f 3e 40 88 31 a4 22 39 b4 1a 28 9a 6b 1f 23 ff ad cb ac 7d 78 c0 63 cb d3 f0 1c dd 6f 58 39 7f 69 64 08 81 75 92 00 04 72 c1 00 7a 66 0d b3 1e a3 9b 61 e3 d2 b8 b1 d6 eb a8 6d 82 a3 60 e1 45 bb 45 ff b8 03 6c dc b6 a6 03 42 e7 79 a6 21 8a c2 87 25 4f 6d f2 b8 50 77 73 ac cc 50 77 81 1b 6a 27 22 ec f4 58 bb 36 2c 50 fc 94 33 f2 85 19 41 0d ab 19 7c 94 05 66 d3 63 4c 5c 70 02 60 31 00 20 4e ee fe a6 d1 4a af 6e Data Ascii: _rKS+=A#[#!n:"NAV+J.~OF@#L",J;kSMmT:X,Po>@1"9(k#}xcoX9idurzfam`EElBy!%OmPwsPwj'"X6,P3A\|fcL\p`1 NJn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	50001	64.233.177.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	460	OUT	GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	647	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 11258 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:05:22 GMT Expires: Fri, 19 Apr 2024 16:05:22 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 82 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	608	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 18 17 1a 1d 1d 1b 1f 1f 1d 20 1f 1f 1f 1d 25 1d 1d 1f 21 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2b 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2d 1b 1b 2d 57 3d 35 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 45 10 00 02 01 02 03 04 06 07 05 07 02 06 02 03 00 00 00 01 02 03 11 04 12 21 05 31 41 51 06 13 22 61 71 91 32 52 81 92 a1 d1 d2 14 16 53 b1 c1 15 23 Data Ascii: JFIF %!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W--W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"E!1AQ"aq2RS#
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 3e 30 03 2f d9 df 70 ea 1f 70 dc 67 a5 9f c6 20 65 ea 1f 71 1d 43 ee 1b 87 4f 2f 8c 60 c9 d4 be e1 d4 be e1 b8 9d 3c be 31 83 b5 80 e8 c6 23 11 42 78 88 4a 9a 84 73 7a 4e 49 ca ca ee da 1c a7 41 f7 0d c3 a7 97 c6 20 64 ea 5f 71 b2 b6 64 f2 67 bc 6d e2 ee fe 03 70 e9 e5 f1 a4 0d 97 82 92 e3 1f 88 a7 81 9c 9d 93 8f c7 e4 37 0e 4c be 35 81 bf fb 22 a7 38 79 bf 91 67 b1 6a de d7 87 9b f9 0d c4 e4 bf 1c e0 74 aa ec 4a b0 69 37 0b bd 77 bf 91 92 7d 1e ac 96 6b c1 ae e7 2f 90 dc 39 32 f8 e4 83 7d ec 8a 8b 8c 3c df c8 d8 8f 47 6b 38 e6 cf 4a df dd 2b fe 43 70 e4 cb e3 90 0e a3 d8 35 56 99 a9 f9 cb e4 45 5d 87 56 1b e5 0f 63 7f 21 b8 bc 99 7c 73 01 d7 a5 d1 da d3 57 52 a7 ed 72 f9 15 7d 1f ac 9d 9b 87 9c be 43 70 e4 cb e3 94 0e 9d 3d 87 56 52 ca a5 0b f8 bf 91 49 Data Ascii: >0/ppg eqCO/`<1#BxJszNIA d_qdgmp7L5"8ygjtJi7w}k/92}<Gk8J+Cp5VE]Vc!\|sWRr}Cp=VRI
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 64 92 ff 00 d0 4b 1e 82 a6 cf 8d 08 b9 65 bc a8 55 93 ab 17 69 c5 d3 93 96 4b a7 a5 bb 1b ff 00 af c0 c6 b2 c2 96 16 6e 14 a4 e6 a4 e7 4f 23 cf 51 67 b2 f8 27 6d c7 1e 78 da b3 cf 9a 4d f5 8a 2a 7f d4 a3 6b 5f c3 2a f2 36 69 6d 3a b1 54 d2 50 6e 9a b4 24 e0 9c a2 ae de 8d f7 b6 47 4c 65 74 e9 d0 51 a6 a4 f2 4e 2f 0d d6 b8 38 2e b1 37 78 de 2d 25 a2 92 4e f7 d1 1d 1d a1 46 52 d9 d8 65 1b 5d 27 2b bb d9 76 1c bf 24 cf 33 47 19 59 4a 9c 93 6e 50 4a 30 e3 a6 bd 9f 0d 5f 99 e8 b6 fd 49 47 03 43 2c 5d 3d cb 2d ef 6b c1 a7 1f 27 63 96 7e 63 a7 79 67 fb ea b5 f0 51 ea f6 66 2a ba 77 9c aa 46 8b 92 e1 0d 2f 6f 1b 96 86 03 11 85 c6 d2 96 1a 19 e4 e8 d3 94 a0 a7 18 b9 5e 36 9a b3 7a ab a6 fc 8e 3e ce c6 52 86 78 57 a4 aa 53 a8 ac da 4b ad a6 f8 4a 0d fe 5c 4e 96 c6 Data Ascii: dKeUiKnO#Qg'mxMk_6im:TPn$GLetQN/8.7x-%NFRe]'+v$3GYJnPJ0_IGC,]=-k'c~cygQf*wF/o^6z>RxWSKJ\N
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 64 ca ac d8 69 5a 4f be 13 5f 06 68 d5 d6 9c 8d 9b db 71 af 35 d8 97 81 1a 99 39 64 95 04 74 da 41 00 68 da 41 00 68 da 41 00 69 36 90 40 06 d2 08 2f 4e 0e 4d 25 c4 8d 4e ea 9b 14 30 d2 9b dd a7 33 72 96 12 9c 57 69 a6 cc 95 31 b4 e3 a2 d7 c0 e3 73 b7 b6 31 ea c3 83 24 de 75 6a 18 38 c7 7e af bf 81 b0 ce 64 f6 94 9f a2 92 35 a5 89 9b e2 63 a5 9e 5d ed 75 eb f0 f1 ed 8c 6b a1 62 41 ea 7c dd 22 c0 92 00 12 00 04 5d 14 2c 88 de 2c 91 3d 3f 4a df ee 30 9f da ff 00 24 79 78 f0 3d 37 4a e5 fb 9c 22 fe 86 ff 00 23 8e 5f b4 75 be bf df 4f 32 ca b2 cc a3 3a c6 72 a8 65 49 21 9a 71 a0 00 a8 83 3e 13 f8 91 f1 29 4e 94 a5 ba 2d f8 23 6f 0d 80 9e 65 27 d9 5f 13 37 29 3c b7 86 19 5b da 3d 46 c9 af 9a 9e 56 f5 8b f8 3d c6 8e d9 52 a9 46 74 de f8 d4 cd 0f ed bb 56 f8 9b Data Ascii: diZO_hq59dtAhAhAi6@/NM%N03rWi1s1$uj8~d5c]ukbA\|"],,=?J0$yx=7J"#_uO2:reI!q>)N-#oe'_7)<[=FV=RFtV
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: f9 34 97 8b 76 35 38 78 cf 4e 77 8f c4 bf e4 f6 1b 2b 09 95 d2 8c df 6a 4a 2d e6 e0 db f9 18 7a 4b 36 f1 ad 70 8c 52 ee 66 e6 3a 49 56 b7 f4 a6 8e 2e 36 a3 95 69 5d b7 a4 55 df b7 e6 74 c5 78 9f ae f6 c3 17 66 63 a9 a4 89 ab b8 ad 47 c4 57 91 d1 e8 ed 6c 98 ea 4f 84 f3 41 fb 62 ed f1 48 fa 02 8a 69 a6 93 5c 53 57 47 ce e9 61 1f d9 a3 8b a7 6c d4 6a ac ea fa d9 59 c5 f9 9d 6c 5f 48 65 d7 2a b8 59 4b 23 8c 73 42 6a f1 cd c6 dc b8 6e 31 66 cd 3b 18 ee 8e 61 ea ab c2 3d 54 b8 38 7a 3e d8 ee 3c ae 17 15 5b 03 89 9a 8c 52 97 a1 28 b5 75 2d 74 b7 13 ae ba 64 e2 bf 79 41 f8 c2 57 f8 33 4b 6b ed 1c 3e 3a 0a a5 17 d5 e2 21 b9 4a d1 94 97 2e f6 b8 09 2c 24 ae e6 03 a4 d4 aa 69 55 75 52 e7 7b c3 cf 81 bf b4 30 34 f1 54 72 b6 b5 d6 13 8d 9d 9f 34 72 30 90 a1 b4 70 ea Data Ascii: 4v58xNw+jJ-zK6pRf:IV.6i]UtxfcGWlOAbHi\SWGaljYl_He*YK#sBjn1f;a=T8z><[R(u-tdyAW3Kk>:!J.,$iUuR{04Tr4r0p
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 70 52 9c 55 b8 36 b4 35 31 55 65 56 6e a4 ed 99 da f6 49 2d 15 b7 2f 02 db a7 a6 70 72 f0 c9 1a 16 d5 ab be 67 a0 c3 74 79 d4 a7 19 c6 a4 1c 65 14 d6 fe 27 32 58 8c d0 85 e9 e4 59 52 5f d5 6e 27 b2 e8 9d 04 f0 30 cc bf 9a a2 5e 19 9d 8d 47 2e 36 1c 98 f3 3c f4 29 e3 70 0f b1 3c d4 fd 59 37 28 78 73 46 f6 d0 c4 d5 c5 e1 5b 9c 63 4e 8a cd 3a 8d 4b 34 ad 1d d1 dd a3 6f f2 3a 9b 7a 93 50 8d 28 3b ce a4 ad 15 c6 cb 56 fc 0e 3f 48 70 51 c3 60 24 a3 7c f3 70 8c a5 77 cd 5d 19 ca 77 72 96 65 37 5e 5e 82 cd 63 7b 19 0c b8 5a 4b d7 9c e4 bc 15 a3 fa 33 57 09 1b 44 e8 ed 34 94 30 b0 e3 1a 4e 4f 4f 5a 6e 48 d3 36 f7 68 42 16 48 8a cb b2 fc 19 37 d4 55 f4 5f 83 35 a4 71 48 24 82 36 90 41 20 00 01 40 02 06 c2 48 04 54 92 00 69 22 c4 02 2a ca 37 19 48 26 e5 11 61 60 08 Data Ascii: pRU651UeVnI-/prgtye'2XYR_n'0^G.6<)p<Y7(xsF[cN:K4o:zP(;V?HpQ`$\|pw]wre7^^c{ZK3WD40NOOZnH6hBH7U_5qH$6A @HTi"*7H&a`
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 12 41 21 52 00 23 4b a4 49 22 c6 5e 8d 20 12 40 4a 86 41 6b 11 60 96 20 13 62 0a ca 19 7a ce f3 97 8b 2a 18 4d 20 00 11 0c ad 8b 10 ca cd 88 00 15 84 05 16 dd 96 f6 49 b5 b3 e9 de 4e 4f 87 e6 12 ba 29 12 45 c8 6c ae 6a d5 7a 58 c0 b7 a2 f5 27 a9 45 bc 2a f8 ad c6 24 65 c5 fa 3e c3 12 29 1b 18 4c 54 e8 54 8d 5a 6e d2 8f 93 5c 53 3e 85 b2 76 94 31 34 55 48 ef dd 28 f1 8c b8 a3 e6 e6 e6 c9 da 32 c2 d6 55 23 ac 5d 94 e3 eb 47 e7 c8 c6 58 ec d6 df 4a 06 1c 26 2a 15 a9 c6 a5 37 78 cb 77 c8 cc 73 60 06 3a 93 6b 72 35 a5 8e b7 f2 86 a6 36 f8 6e 83 45 6d 15 cb e0 cc f1 ae f4 bc 5a f6 05 b8 65 3c b3 82 13 d0 90 c0 01 cc db 3b 66 18 58 db 49 54 6b b3 0f d5 f7 02 4d af b6 76 bc 30 94 f3 3e d4 df a1 05 bd be 6f 92 3e 7b 88 af 2a b3 94 e4 db 94 9b 6d b2 d8 bc 64 eb 4d Data Ascii: A!R#KI"^ @JAk` bzM INO)EljzX'E$e>)LTTZn\S>v14UH(2U#]GXJ&7xws`:kr56nEmZe<;fXITkMv0>o>{mdM
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 95 4f e6 dd 15 ce 4f 71 e1 e9 53 72 6e 52 7c 5b 6c dd da fb 4e a5 59 65 ac a2 9c 24 fb 30 dc 9f 7b bb b9 cc ab 89 94 95 b7 2e e3 a6 31 ac f2 df 84 62 6b 66 76 5e 8f 03 1d 8a d8 b1 b6 12 a4 f9 99 23 5e 4b 73 31 00 ae ae cb 84 aa d4 ed eb 4e 29 ca 7c 3b 3f fb b1 85 61 21 2c 3d 7a cd 7a 33 4a 0e fb ee de 9f 91 bf 82 8f 57 80 af 55 e8 e7 96 11 ef b3 ff 00 26 0c 4f 67 67 50 4d 6b 2a b2 7f 0b 11 9f 6e 2b 20 f5 18 2e 8c 53 ad 42 15 5d 49 c6 53 8d ed 64 d2 35 b1 9d 14 ad 0d 69 b5 55 72 5d 99 79 3f 99 36 eb cb 5c 00 66 c4 61 a7 4e 59 67 17 19 2e 0d 58 c2 56 7c 04 90 00 90 88 24 09 20 02 34 90 00 02 48 24 2a 50 20 90 d4 7d b4 30 0f 9a f0 0e 2b 91 cf c4 ec 2c 2d 5f 4a 8c 53 e7 15 91 fc 0e 80 12 b5 8e 79 63 df 1b a7 96 c4 74 32 2d b7 4a b3 8a e1 19 43 37 c6 e7 9e da Data Ascii: OOqSrnR\|[lNYe$0{.1bkfv^#^Ks1N)\|;?a!,=zz3JWU&OggPMkn+ .SB]ISd5iUr]y?6\faNYg.XV\|$ 4H$P }0+,-_JSyct2-JC7
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 2b 9c 8f 2b 88 a4 fa ac 2c 25 2d 6b d4 75 6a 3e 0d b6 92 f2 bb 35 8c f6 e7 9e 5e 98 f6 9c e4 a8 c1 4f f8 95 a5 d6 d4 f0 dd 08 f8 23 96 74 36 f5 4b e2 aa 2b 59 42 d1 8a ee 49 58 e7 9d 58 9e 00 00 10 7b 8e 8e e1 55 3c 2c 1e b7 9a cc fd bb be 07 87 3e 8b b3 e1 96 85 28 f2 a7 05 ff 00 6a 31 9b 78 46 c5 89 24 58 e4 ea 80 4d 80 10 2e 48 02 01 26 86 d8 da 51 c3 d2 6d be db d2 31 e2 fb fc 0a 8e 67 49 f6 ae 44 f0 f4 df 6a 4b b6 f9 45 f0 ff 00 ce 67 91 66 5a d5 65 39 39 c9 de 4d dd b6 62 3a e3 34 e5 95 da 6e 08 06 9c d2 08 2f 4e 0e 52 49 2b b7 b9 05 44 62 db 49 26 db dc 96 f6 7a 1c 5b 58 5c 14 30 e9 fe f2 6f 35 4e 7a f0 fd 0a d3 a5 0c 04 14 e7 da c4 c9 3c b1 de a9 df 8b e6 46 1a 86 48 bc 66 31 b9 49 fa 10 96 f9 3e 1a 7e 85 62 f7 5d 45 e1 70 0e 4f 4a 95 9d ad c7 29 Data Ascii: ++,%-kuj>5^O#t6K+YBIXX{U<,>(j1xF$XM.H&Qm1gIDjKEgfZe99Mb:4n/NRI+DbI&z[X\0o5Nz<FHf1I>~b]EpOJ)
2024-04-19 14:06:44 UTC	610	IN	Data Raw: 35 fa 45 5e 54 fa b8 a8 52 86 ec b4 d3 8d fc 6e d9 83 07 b5 a7 46 4e 71 85 39 4b 5b 4a 69 c9 af 0d 46 aa 75 23 bd 43 0a a9 ff 00 fb 78 e7 79 3d 63 4d fa 52 7c 1b 47 3b 1d 8c a9 88 a9 9a 57 7c 21 15 ba 2b 92 47 37 13 b4 6a 55 9b 9d 47 9a 4f 8b 10 c7 ce 32 52 56 4d 34 d3 d7 7a 77 46 b4 4e 26 2f 7d d1 fe 8e 3a 31 eb 6a af de b5 a4 7d 45 f3 3a ee 9b 5b d1 e2 e5 d3 fc 5b 49 75 78 7d 3f a2 7f 51 57 d3 dc 5b ff 00 4f 0f ee cf ea 39 5c 2b 78 f1 e4 7b 42 ca 93 6a e8 f0 d2 e9 c6 25 ef a5 87 f7 67 f5 16 87 4e f1 6b fd 3a 1e ec fe a2 74 eb 57 8f 8b df e1 68 eb 99 9b 47 ce 17 4f f1 7f 87 87 f7 27 f5 13 f7 ff 00 17 f8 78 7f 72 7f 50 e9 e4 e3 97 13 75 f4 60 7c e7 ef fe 2f f0 f0 fe e4 fe a1 f7 ff 00 17 f8 78 7f 72 7f 50 e4 a9 cf 1f 46 68 8c 8b 92 f2 3e 75 f7 ff 00 17 f8 Data Ascii: 5E^TRnFNq9K[JiFu#Cxy=cMR\|G;W\|!+G7jUGO2RVM4zwFN&/}:1j}E:[[Iux}?QW[O9\+x{Bj%gNk:tWhGO'xrPu`\|/xrPFh>u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	50004	64.233.177.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	460	OUT	GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16242 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:00:43 GMT Expires: Fri, 19 Apr 2024 15:00:43 GMT Cache-Control: public, max-age=7200 Age: 3961 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1d 1d 1b 1f 1f 1d 1d 1e 1d 1f 1d 27 1f 1f 1f 1e 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 2f 57 3f 37 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 48 10 00 02 01 02 04 02 06 07 06 03 06 04 05 05 00 00 01 02 00 03 11 04 12 21 31 05 41 13 22 51 61 71 92 06 32 52 53 81 91 d2 16 23 42 a1 b1 d1 14 17 Data Ascii: JFIF'.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W//W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"H!1A"Qaq2RS#B
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: ec 4e 2b de 50 f3 3f d3 0f b1 38 af 79 43 cc ff 00 4c 35 61 f2 47 d9 cd c2 74 9f 62 71 5e f2 87 99 fe 98 7d 89 c5 7b ca 1e 67 fa 61 ab 0f 92 3e ce 6e 13 a4 fb 13 8a f7 94 3c cf f4 c3 ec 4e 2b db a3 e6 7f a6 1a 4b d0 7c 91 f6 73 70 9d 1f d8 ac 57 b7 47 cc df 4c 4f b1 98 af 6e 8f 99 be 98 69 2f 42 f9 61 ec e7 61 3a 2f b1 b8 9f 6e 8f 99 be 98 0f 43 31 3e f2 8f 99 fe 98 f4 97 a0 f9 61 ec e7 61 3a 41 e8 4e 24 ff 00 79 43 cc ff 00 4c 70 f4 1b 15 ef 28 79 9f e9 8b 56 3f 92 3e ce 66 13 a7 fb 0b 8b f7 94 3c cf f4 c3 ec 2e 2f de 50 f3 3f d3 0d 58 f7 8f b3 98 84 e9 4f a1 18 a1 fd e5 0f 33 fd 31 bf 62 f1 3e f2 8f 99 fe 98 69 2f 42 f9 23 ec e7 21 3a 3f b1 78 9f 79 47 cc ff 00 4c 3e c5 e2 7d ba 3e 67 fa 63 d2 5e 85 f2 c3 d9 ce 42 74 83 d0 ac 4f bc a1 e6 7f a6 3b ec 36 Data Ascii: N+P?8yCL5aGtbq^}{ga>n<N+K\|spWGLOni/Baa:/nC1>aa:AN$yCLp(yV?>f<./P?XO31b>i/B#!:?xyGL>}>gc^BtO;6
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 88 d5 11 88 6e 58 a1 64 a0 42 16 04 b4 8e 92 49 5e f1 ca d2 1a 2d 48 9e d0 8a 22 da 41 a8 d8 a0 45 85 a2 02 da ed 22 71 1f 41 ae 2d 1c eb 32 e9 9a be 55 95 a3 5c 69 26 2b 19 50 69 34 4c cd a2 b5 a5 9a 66 40 04 b5 45 23 97 44 45 72 4a 82 3e 00 44 73 a4 c0 ea 5c 22 35 3a c7 c8 90 eb 25 12 99 11 16 11 61 24 d4 48 42 2c 04 98 90 81 32 07 a9 1a 56 4c a7 a9 35 e1 2b 86 91 60 f8 92 d5 c9 65 70 1d 4b 21 60 2c c0 78 13 13 a5 d8 a3 3b 2e cc ee 3a 84 e1 cb 0d e9 bd 2a be 57 04 fe 53 4a 50 e2 18 c4 1d 25 26 57 6f ba 2c e5 40 b2 a1 b8 be a4 76 19 32 69 2e 4d 57 65 d0 41 00 8d 88 b8 f0 8b 28 70 4a f9 f0 ca 0f ac 97 a6 de 2b fe 96 97 8c 69 da b1 3e 02 11 21 78 c5 62 c6 98 b7 88 60 0c 48 c3 1e 63 4c 68 c8 8c c4 8e 31 ad 2c 45 6b 45 b4 58 4d 0c c2 d0 b4 58 b6 88 04 b4 20 Data Ascii: nXdBI^-H"AE"qA-2U\i&+Pi4Lf@E#DErJ>Ds\"5:%a$HB,2VL5+`epK!`,x;.:*WSJP%&Wo,@v2i.MWeA(pJ+i>!xb`HcLh1,EkEXMX
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 11 c5 a3 2f 11 e2 18 e2 f1 82 a6 b2 22 d6 8c cd ac b5 12 1c cb 80 c8 da 90 e9 05 4d 73 05 65 df 4b 12 0e df 08 aa d1 2b 36 92 28 bb a5 64 35 6a 5e 47 78 d2 62 4d 92 39 db b3 2b d2 7d 30 e8 d6 b8 4a a8 4f 86 a3 5f 98 f9 c6 f0 ca c9 57 14 a5 09 65 40 e6 e0 10 a0 9d 17 5d b6 cd f2 92 fa 45 7f e1 1e de d5 2f 97 48 b3 3b 05 5d a8 53 2c a4 66 71 87 41 71 9a c5 9a a1 d0 73 36 98 64 49 4a d9 ac 65 f8 33 b4 4d a7 3b e9 42 5b 11 84 a8 55 8a 0e 95 09 00 90 09 02 db 78 13 f0 95 69 d6 c4 d1 19 ff 00 88 19 98 f5 95 d4 ba 16 bf 79 ea ef 6d 23 f8 a7 12 fe 23 09 4d 88 c9 51 31 14 83 28 37 17 b1 d4 1e 60 89 84 33 43 25 ea 56 3c 91 97 45 cf 47 46 6a 95 6a 00 d9 72 22 2b 15 2a 09 cc d9 80 bf fd 33 7a f3 2b 80 35 a8 b2 df 51 55 ef f1 b1 fe b3 4e e2 6b 15 c1 6d f2 29 8d 85 e2 Data Ascii: /"MseK+6(d5j^GxbM9+}0JO_We@]E/H;]S,fqAqs6dIJe3M;B[Uxiym##MQ1(7`3C%V<EGFjjr"+*3z+5QUNkm)
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 5c d9 41 ed 12 5b 4e 77 1d c5 ea 0c 42 3d 10 a2 d4 d8 75 86 62 43 11 c8 1d 36 99 e5 9b 8c 7f 1e fe 8b c7 1d 9f 3d 17 29 63 b1 05 56 ae 54 c8 f6 cb 4c dd 5a de 3c 8e fb fe 53 27 19 56 9b 62 d9 f3 82 ac d4 da e0 82 2c 15 41 d7 6e 46 4a ac e8 b4 a9 f4 8c 10 d3 25 8f 50 b0 23 2f aa 4e de b4 b5 80 c3 53 74 00 d6 64 20 20 08 1f 28 03 22 9b eb de 4f 39 c0 b3 64 8d a9 f2 74 60 c0 db 77 d1 6b 84 e2 11 de a8 a6 ca c3 ee d8 90 6f 66 37 04 7f ed 1f 39 a5 33 78 7d 20 95 ea 28 62 f6 a7 4f ad 7b e6 eb 3e b3 4a 76 e0 95 e3 4c cb 3c 75 9b 40 c0 11 63 a8 8f a6 2e 64 03 3e 73 b6 4b 69 db 79 62 8e f3 6f a3 2a 25 7a 76 8c 93 d5 da 41 21 3b 09 76 24 22 c4 94 48 40 98 46 c0 0a dc 4e 8b d4 a1 51 50 d9 c8 ba eb 6d 41 bd af f0 99 38 3e 23 87 f5 99 c2 31 03 aa fd 52 3c 0f 31 7b c9 Data Ascii: \A[NwB=ubC6=)cVTLZ<S'Vb,AnFJ%P#/NStd ("O9dt`wkof793x} (bO{>JvL<u@c.d>sKiybo*%zvA!;v$"H@FNQPmA8>#1R<1{
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 20 07 36 d2 fb da 72 f8 be 42 b9 39 9b e7 c0 e4 d2 82 e8 38 be 1f a5 ae 89 7c ac 29 3b 23 76 36 75 df b4 4a 98 2c 7b 53 aa 51 97 2d 5d 03 a9 3a 55 e4 18 1d af 6d 8e c7 63 6e 56 28 e2 5a b6 20 b1 0a 85 68 ad b5 dc 33 13 cc 7f 86 33 1e 94 eb 26 ae 81 d6 f9 2a 66 04 0e e3 6e 46 44 fc 96 b3 3a e8 d6 3e 35 e2 49 f6 6d d1 ac ae 2e be 04 1d 08 3d 84 72 32 49 ce f0 ec 79 08 cc c4 67 a3 95 1f ac 0e 74 3e a8 b8 dc 8e 5f ea 66 e1 a8 57 a3 62 ca cb 50 d8 65 dd 0d af 63 da 39 5f b4 8e d9 e8 c7 2a 7d 9e 7c b1 35 d1 34 21 09 b1 90 d2 21 14 c0 46 31 c0 c6 98 c7 26 e2 d7 b5 f5 8f 27 9c 94 f9 02 b5 66 be 23 0e 96 e5 59 af dc 12 d6 ff 00 dc 3e 53 9c e2 0b f7 ab 72 47 dd 28 1a 5f 67 70 66 bd 3c 68 ab 5a 95 44 02 c2 9d 55 ca 5d 55 ae f9 6c 6c 74 e4 79 f3 90 63 f8 3d 6a cc 96 Data Ascii: 6rB98\|);#v6uJ,{SQ-]:UmcnV(Z h33&fnFD:>5Im.=r2Iygt>_fWbPec9_}\|54!!F1&'f#Y>SrG(_gpf<hZDU]Ulltyc=j
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 32 b0 25 18 0d ca 90 3c 6d a4 60 73 58 74 19 69 72 1d 4f e9 3b 0a 14 ad 73 69 cb 53 c3 54 53 49 1e 8b 10 4d 88 cc 87 40 2e 79 f6 4d 8a 9e 90 d2 a5 94 1a 75 45 d6 ea 2c bb 6d ed 4f 99 cf 87 23 74 93 3d b9 e5 8e bc 33 38 63 28 9a 34 91 d1 aa 65 5a 65 82 a9 61 4c e5 b6 a7 6b ea 45 86 ba ca 74 b8 68 ae 59 e9 00 56 ec 73 1a 95 12 cb 9d 82 d8 06 1c 96 2f 0d e2 6c aa a8 d4 ee f9 42 6e 32 90 36 f0 d2 37 04 cf 49 42 9a 6c ac ab 55 b3 2b 80 0a 82 cc 7e 57 9e 94 a5 92 5c 38 9c 3e 3b a9 cb 6e 8b 58 5e 1c 52 bd 31 53 37 e2 60 bd 35 46 53 96 c5 4d 8b 11 37 c1 98 b8 1a cf 52 ba 96 52 2c ae d7 67 0c 4e cb ca 6c 4e af 15 7f a6 67 e5 ff 00 12 89 d0 da 2b 54 90 e6 89 9a 74 51 cd 63 d8 c8 d8 47 13 1a d1 a1 11 98 08 18 4a 01 18 cc 0a e6 d5 1b c6 6f 19 9f 8a c0 67 6b 83 6b ef Data Ascii: 2%<m`sXtirO;siSTSIM@.yMuE,mO#t=38c(4eZeaLkEthYVs/lBn267IBlU+~W\8>;nX^R1S7`5FSM7RR,gNlNg+TtQcGJogkk
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 50 34 17 37 72 c3 4b f6 5c eb 38 5f f1 e5 7e 91 d5 1f e1 2a f6 54 a2 0a ba 90 57 42 0e f3 57 12 9e b0 06 ff 00 75 5f fe cf f5 13 20 e0 ab 73 4a 83 ff 00 4d bf a0 9a 98 5b 87 65 fb c7 73 41 c0 52 85 4d d8 8d af 6e c3 2e 4b 94 c5 17 c3 2c f0 b3 7a 9e 14 85 fe 2d a7 e8 66 ac c9 e0 e8 cb 56 a2 ba b2 9e 8e 9e 8c 08 bd 8b 5e df 39 ad 2b c5 55 89 21 79 4e f2 b0 89 16 21 9d 27 38 a2 0d 1b 16 f0 10 d3 1b 14 c4 80 09 1a 63 ed 28 63 b1 36 ea 8f 89 8c 46 a5 17 b8 11 d5 70 e1 bc 66 76 0a b9 b0 9a 88 d7 13 82 49 c2 56 8e d8 b5 25 4c a2 69 e5 36 31 1d 39 cb f5 69 06 1d f2 95 40 46 86 75 e2 ca a7 fd ce 79 c1 c5 91 09 22 09 18 8e 0d 37 33 2c 2b 47 5e 57 53 ac 7b 1b 19 14 31 ce 26 5e 2d 9b 3d 8e a2 6b 29 bc 90 51 56 dc 5e 17 40 63 e0 55 af dd 2f f4 46 48 69 80 d6 02 3f a2 Data Ascii: P47rK\8_~*TWBWu_ sJM[esARMn.K,z-fV^9+U!yN!'8c(c6FpfvIV%Li619i@Fuy"73,+G^WS{1&^-=k)QV^@cU/FHi?
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: a7 72 44 bc 29 90 35 b4 ac 54 ab 05 ec 3a 4b 26 8b 58 b3 19 94 d5 97 17 42 e5 b8 92 d3 d0 69 23 4d a4 8b 2a 09 24 29 36 d9 5f 17 8a 4a 76 2c 6d 7d 86 e4 f8 09 9f 5a a2 56 c4 d2 e8 d8 30 14 ea 06 b1 da fb 5f b3 63 2d 62 09 18 aa 64 29 7f bb a8 2c 2d 70 6e 35 17 d2 42 30 ce 2b e7 e8 5f 2f 47 6b 96 a7 72 6f 7f 6b b2 70 67 f2 aa 6f 13 e8 bc 51 96 ca 91 3e 0b 15 4c 61 e9 66 60 08 44 52 39 86 02 c7 4f 81 94 78 a6 2d 58 3a 83 72 c1 91 40 d8 9c a7 9e d2 33 46 aa 52 b1 5a c2 a0 73 a2 e6 23 25 89 b7 56 e3 7b 48 ea 50 aa 6a 21 c9 5d 90 3d ce 6a 6e 40 16 22 fb 5f ff 00 ec a7 e5 3d 78 af f2 6e b0 2b e6 cb 55 69 3a 0a 59 a9 b2 85 50 19 8e 5b 5d ac 06 a0 f6 c7 89 a1 c5 31 d4 ea 22 a2 e7 b9 74 3d 6a 4e 83 4d 77 23 ba 51 75 b1 8f c0 c9 2c 98 de ca b9 33 f2 62 94 95 16 29 Data Ascii: rD)5T:K&XBi#M*$)6_Jv,m}ZV0_c-bd),-pn5B0+_/GkrokpgoQ>Laf`DR9Ox-X:r@3FRZs#%V{HPj!]=jn@"_=xn+Ui:YP[]1"t=jNMw#Qu,3b)
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 39 b0 e5 9b 95 36 5e ae d5 0a 66 35 19 b2 32 b0 be 5e db 7b 3d 84 c9 98 5e 4b 8a e1 bd 1d 02 7a 46 3a d3 bd c2 eb d7 03 b2 31 86 b3 3f fc 6b 4e 12 6b d9 a7 99 4e 49 21 69 2c b4 82 42 04 99 4c ef 97 27 25 50 aa 77 8f 0d 1a 60 a3 59 91 46 67 18 e1 b5 6b d4 56 a6 50 00 b6 39 89 06 f7 ee 13 9d c5 53 a9 46 a3 52 70 b9 96 db 5e c4 11 b8 9d d8 b4 c5 f4 82 9d 25 7a 75 5d 41 07 ee ce 97 d7 71 fd 60 b9 74 6d 09 3e 8c 1c 36 03 13 5d 01 a5 48 90 7a b9 f3 28 0a 76 b9 d6 f3 4a a7 a3 d8 ac c4 2a 2b 2d ec 1b 3a 8b 8e db 4b de 8c e3 94 bd 6a 63 41 d5 75 f0 d8 ff 00 49 d0 f4 c2 67 29 34 e9 16 dd 33 1f ec 96 1e d6 cf 5b ce 3f 69 15 7f 44 28 e4 6c 95 2a 86 b1 b5 d8 11 7e 57 d2 6e 7f 10 04 69 c5 89 9d cc 5b 1c 4d 5e 09 89 a6 a5 9c d3 16 dc 02 4f f4 88 bc 3a a1 64 53 51 6e c7 Data Ascii: 96^f52^{=^KzF:1?kNkNI!i,BL'%Pw`YFgkVP9SFRp^%zu]Aq`tm>6]Hz(vJ+-:KjcAuIg)43[?iD(l~Wni[M^O:dSQn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	50002	64.233.177.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	460	OUT	GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 15512 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:06:56 GMT Expires: Fri, 19 Apr 2024 14:06:56 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 7188 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 18 1a 1d 1d 1b 1f 22 25 20 20 20 1f 1f 25 25 25 25 26 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 30 57 42 38 3f 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 42 10 00 02 01 02 04 03 05 06 03 06 03 08 03 01 00 00 01 02 00 03 11 04 12 21 31 05 41 51 06 13 22 61 71 14 32 81 91 a1 b1 42 c1 d1 23 24 52 72 92 e1 Data Ascii: JFIF"% %%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W/0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"B!1AQ"aq2B#$Rr
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 93 b9 3e 50 ee 4f 94 58 23 84 93 b9 3e 51 7b 83 e5 16 08 a1 25 ee 0f 94 4e e4 f9 45 82 38 49 45 03 e5 17 d9 9b a8 8b 40 86 12 7f 65 6e a3 eb 0f 64 6e a3 eb 16 81 04 25 8f 63 6e a3 eb 0f 63 6e a3 eb 16 81 5e 12 73 84 6e a3 eb 1a 70 e7 ca 2d 02 28 49 45 03 e5 14 61 9b a8 8b 04 30 93 fb 2b 75 10 f6 46 ea 3e b1 68 10 42 58 f6 46 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 b1 ec 8d d4 7d 61 ec 8d d4 7d 62 d0 2b c2 58 f6 36 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 98 e1 9b a8 8d ee 4f 94 58 23 84 94 50 27 a4 5f 66 6e a2 2d 02 18 49 bd 99 ba 88 be ca dd 44 5a 04 10 93 fb 2b 75 10 f6 56 ea 22 d0 20 84 9b d9 cf 51 13 Data Ascii: >POX#>Q{%NE8IE@endn%cncn^snp-(IEa0+uF>hBXF>6>h'F>F>hBO}a}b }a}b+X6>6>h'F>F>hBO}a}b OX#P'_fn-IDZ+uV" Q
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 67 38 bf f5 18 9c 67 88 56 a0 10 d1 a5 de 13 7b e8 4d be 53 9b e2 1c 46 be 29 a9 51 af 48 53 bd 45 b6 84 13 cb 9f ac e9 78 8f 14 a7 86 0a 6a 66 f1 5e d9 45 f6 98 78 ae 29 4b 15 8b c2 77 79 bc 2f ae 61 6d c8 fd 26 b8 97 9a be f6 63 95 fc ff 00 43 ac 16 00 01 b0 16 98 9c 4b b4 e9 42 ab 52 14 d9 d9 74 26 e0 0b da 6c 03 3c db b4 05 bd ae b6 fe f9 9c e3 49 dc 8e b3 6f 4a 2c e8 b0 5c 7f bd c7 53 63 4f 2e 65 ee 86 b7 dd af 79 d6 66 9e 61 d9 f2 7d ae 8d ff 00 8d 7e f3 d2 73 4b 3a 71 4e 2a 89 c7 69 b4 dd 94 b8 5f 1b 18 9a 95 10 21 5c 9c c9 06 fa da 45 da 90 87 06 e5 86 aa 41 5f 5b cb 94 30 b4 e9 96 34 d0 29 6d c8 1b ce 7f b6 58 96 b5 2a 43 45 37 72 7a 9d 80 95 24 e6 a8 93 6d 41 d9 d3 e0 0f ec 69 7f 22 fd 84 e7 38 ab 7f fd 4a 3e b4 ff 00 ee 9b b8 06 fd 8d 2f e4 5f Data Ascii: g8gV{MSF)QHSExjf^Ex)Kwy/am&cCKBRt&l<IoJ,\ScO.eyfa}~sK:qNi_!\EA_[04)mXCE7rz$mAi"8J>/_
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 53 d4 1b 18 8f 58 b1 bb 12 4f 52 49 87 e9 de 4a 42 e7 58 b4 77 9c 03 1c 2b 61 d3 5f 12 00 ac 3d 36 33 4c 4f 30 4a a5 76 24 7a 1b 49 7d a9 ff 00 8d ff 00 a8 c3 f4 e5 b5 23 49 cd 2a 71 3d 23 17 8b 5a 34 d9 dc e8 07 cc f4 98 7d 97 ac 5e bd 76 3b b7 88 fc 49 9c a0 c4 75 2c de 44 e9 25 c1 e2 d9 2e 45 46 46 3b 91 7d 7e 52 2f 4d 5c 53 ec 8d cd d4 9a e8 ef f8 b3 5a 97 fa 97 ee 27 9f f0 23 6c 4a 1f 31 f7 12 d9 e2 63 76 a9 52 a3 6b 61 ad af 6f 39 9d 80 75 4a aa 58 90 bb 12 05 ed e7 39 bc 63 24 ae cd ee 69 ba 3d 4e 79 ef 6b 47 ed c7 fa ff 00 ee 97 5b 8a 51 23 c5 8a aa de 41 5b f3 98 fc 53 16 95 99 3b b5 60 a8 b6 f1 5a e4 dc 92 74 92 6a 29 3a 76 6a 32 94 9a b5 46 75 a2 11 24 22 d1 8d 38 24 76 3b de c9 9f dc c0 e8 ed f9 4d 3c 46 1d 2a ae 5a 8a 19 6f 7b 11 7d 67 9e 51 Data Ascii: SXORIJBXw+a_=63LO0Jv$zI}#Iq=#Z4}^v;Iu,D%.EFF;}~R/M\SZ'#lJ1cvRkao9uJX9c$i=NykG[Q#A[S;`Ztj):vj2Fu$"8$v;M<FZo{}gQ
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 3a da c3 e6 67 48 b5 d3 1b 8e a2 ca a7 2a 02 48 60 39 6d f5 22 74 c4 d8 44 a0 a3 da 33 16 e5 74 f4 70 03 b2 d8 b3 ff 00 2c 0f 57 5f d6 62 e2 30 e5 1d 91 b7 52 41 f5 13 d0 aa f6 9f 0a b7 b3 33 7f 2a 99 c4 f1 2a cb 56 bd 4a 8a 08 56 62 45 e4 94 1e 37 54 14 d6 49 27 66 71 5b 46 33 4b 25 64 55 29 ce 4a 47 64 44 a2 3f 2c 60 92 29 95 90 4c b1 8c d2 53 23 29 00 88 c5 02 0f 1a a6 0d 0a 56 02 2b 18 c0 61 90 75 a1 16 06 60 0d 22 34 c7 11 10 ac b4 5a 22 66 91 de 3d d6 44 66 91 00 98 08 de 71 e2 68 01 58 c2 24 80 c7 65 92 e8 0d b4 51 16 d0 98 03 80 8e b4 45 11 d0 51 2d 16 d1 61 04 00 21 68 a0 45 b4 10 14 4b 89 4c bb a8 d8 ed 22 a1 6d 74 d4 6a 25 bc 1a 96 71 51 ad bf 3e 73 71 8e b2 34 bd 8d 1a 38 53 dd b0 f0 a1 60 47 53 69 10 a6 45 2a c9 bb 01 a9 eb 2f d5 aa a4 aa 93 Data Ascii: :gHH`9m"tD3tp,W_b0RA3VJVbE7TI'fq[F3K%dU)JGdD?,`)LS#)V+au`"4Z"f=DfqhX$eQEQ-a!hEKL"mtj%qQ>sq48S`GSiE/
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 8a c6 e5 9a fb a5 e6 28 bf 6f ed 26 26 2f 89 62 71 0b 92 a1 ba de f6 0a 06 a2 3e 8f 18 c5 53 45 44 36 55 16 1e 01 b4 64 75 cc 7d cf fc 50 fb 7d dd b2 1a 95 6b bd 4e f9 98 f7 82 d6 3c f4 93 d5 e2 98 ba ba 1a 8c 07 f9 7c 3f 68 00 63 80 99 7f 56 fd 91 7e d9 7b b2 b5 16 ab 41 83 d3 62 1b 9d b5 f9 f5 97 57 8f 63 3f 8b ff 00 c0 91 da 16 91 7d 5b ff 00 e9 26 5f b7 5e 1d 12 9e 31 8b 6d ea 91 e8 00 90 bd 42 db b1 66 26 e5 98 93 17 2c 6e 59 1f d5 cb c2 48 d2 fa 75 e5 b6 6b 52 e2 f8 9d bb ca 67 d4 ac b0 bc 53 12 7f e6 51 1e ac bf ac c1 c9 0c b0 fe a5 7f b5 13 d0 7f ee 66 c5 6a ee d5 51 fb fa 6d 54 7b b6 22 c0 0f 3d b9 98 b8 8e 23 88 fc 58 9a 69 e4 a5 49 fa 4c 6c 91 ad 4e 3e e9 fb 22 7d bf fc 99 36 22 b2 b1 f1 d5 a9 54 fa 9b 7d 65 66 d4 de d6 f2 88 44 72 cc 72 73 4a Data Ascii: (o&&/bq>SED6Udu}P}kN<\|?hcV~{AbWc?}[&_^1mBf&,nYHukRgSQfjQmT{"=#XiILlN>"}6"T}efDrrsJ
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 30 c5 73 38 f1 b5 8b 79 9b 5a ff 00 20 24 57 d3 31 3e 86 c5 b4 55 d6 3c 2c d9 c4 8b 2c 70 11 58 5a 20 30 41 6d 20 c4 d4 ca 3d 65 a1 32 f1 95 6e f6 1c b4 9b e2 57 2b 24 de 88 71 35 ac 9e bf 69 4e 8b f8 87 ac b0 68 9a b5 32 83 65 51 e2 63 b0 12 45 a8 b4 09 c8 a0 ff 00 98 8f 14 f5 7a 6f 91 98 4d 45 1a 59 0d af 69 13 ca 15 38 83 34 89 6a b9 3c ec 76 9a 5f 46 bd cc fa 86 89 12 4a 75 ec 2c 76 90 50 62 c9 73 d6 d1 e4 cf 27 27 1d 3c 59 da 13 6b 68 65 6e 31 9f c1 49 09 d3 41 e9 22 c0 d1 ad 88 71 59 0a 02 87 67 bd 8c aa c4 51 ab 9d 5a d6 d4 5b 53 34 38 7d 42 94 c0 1a 0d fc fe 53 71 e3 84 76 8b 2e 59 4b 45 ce 2b 8b 7a 6a 9d e2 ae b7 b6 53 7e 93 16 be 34 b8 2a 14 eb a5 ed 2c e3 1c d4 6b b6 c0 58 09 15 3a 59 88 02 4e 48 46 ec b1 e4 92 54 68 70 7a 17 39 8f 29 ab 5a a8 Data Ascii: 0s8yZ $W1>U<,,pXZ 0Am =e2nW+$q5iNh2eQcEzoMEYi84j<v_FJu,vPbs''<Ykhen1IA"qYgQZ[S48}BSqv.YKE+zjS~4*,kX:YNHFThpz9)Z
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: f3 9c 5a aa 8f 51 01 bd 22 6e 3a 4f 27 17 13 bb 3d 2e 93 b2 bb 9b 92 62 89 79 56 8d 4e 76 32 ad 5a 79 58 8b dc 75 9e c4 cf 1c e0 d6 c4 11 e2 30 49 10 6b 29 cc 7a 5b 9e d1 dc 2a aa ab 97 3a f2 b7 94 8b 8a a1 44 05 07 84 d8 1f 59 4a 89 37 d3 e3 3d 70 e1 78 b4 fc 9e a8 41 c7 b3 76 a7 14 a6 1d 7b aa 5a 29 27 cf ce 15 68 52 a8 86 b5 2a 85 5a f7 64 2c 0e 97 da d2 0f 68 45 54 51 4d 4b 01 a9 65 06 47 5c 27 7a 0d 25 ca ac 05 c6 de 21 bc 43 85 a7 a4 d7 fe f2 76 a2 e2 88 f0 24 69 50 19 32 cf 24 b8 e5 1e d1 e3 97 1c a3 da 1c ab 1c 56 00 c5 13 2d 18 32 f1 d4 f2 56 4a a7 dd 3a 1f 2e 52 de 1b 00 ad 54 03 60 0f 39 66 a5 25 75 2a c2 e0 c8 57 0a ca a1 58 e6 03 63 ce dd 0c ea a5 94 6b c9 d7 8d ec d2 a5 c3 e9 2b 5c 72 e6 0c af c5 69 53 76 a2 97 20 66 df 9c 92 8e 20 e4 f1 d9 Data Ascii: ZQ"n:O'=.byVNv2ZyXu0Ik)z[:DYJ7=pxAv{Z)'hRZd,hETQMKeG\'z%!Cv$iP2$V-2VJ:.RT`9f%u*WXck+\riSv f
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 18 ff 00 27 49 f2 28 44 0e fa 5f e3 25 a4 84 e8 04 96 86 1a f6 cc 72 82 6c 3a 99 a8 70 8f 4c 68 ba 79 6b 3c 2f 67 86 af 65 2a 98 16 5a 5d e1 22 c3 de f2 13 26 b7 10 52 e0 72 63 61 79 b9 c5 2b 7e e6 c3 9f 3f 4f fc 33 89 35 07 7a a5 b6 5d 7e 32 c5 2d 96 f1 e8 bb 8f a6 c0 dc 31 b5 f5 d7 49 4d a9 5a 59 a9 8b 24 6c 08 95 da b8 d7 49 25 6c c3 64 03 30 37 1b f9 4d 3c 35 ea 53 62 db a9 17 f4 3b 19 63 86 61 81 0a 58 6a 75 fd 25 ee 3d 6a 38 75 a8 80 66 b8 52 3a 83 c8 cc f9 a6 7a 23 06 96 46 33 f8 41 3d 04 c9 0a 44 d5 0c 95 53 32 e9 7f c2 4c 88 a9 02 d9 7e 93 58 b4 56 d4 b6 41 45 ed 05 4b 9b cb 07 07 50 0c c5 48 1d 62 a5 3b 48 f4 58 a0 c2 a2 87 05 c5 c4 e9 f0 f5 14 a8 b5 ad d2 73 6a b2 e6 14 1b e8 6d 30 f6 77 8e 8d 6c 4f 09 a3 58 1b 8c ad d4 4c 3c 66 0e ae 18 80 fe Data Ascii: 'I(D_%rl:pLhyk</ge*Z]"&Rrcay+~?O35z]~2-1IMZY$lI%ld07M<5Sb;caXju%=j8ufR:z#F3A=DS2L~XVAEKPHb;HXsjm0wlOXL<f
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 03 f0 aa 9b ec 34 de 6f 15 14 72 53 c8 6f 0c a4 6a 9c 83 ce fe 51 ef 85 22 a8 43 cc 81 f3 9b 58 2c 22 d1 4c aa 35 e6 79 98 ca 78 42 6b 1a af 61 6b e5 5e 7d 01 3d 26 54 ad 99 51 72 7a 2d e1 69 dd ae 25 2e d6 d6 d2 95 2e 9e 33 f6 1f 9c d6 a2 ca a2 e7 61 ac e7 38 95 eb 16 7b 1b 9d 87 97 29 95 6d 9e 9e 67 8c 28 a5 c2 eb 8a 6f e3 17 53 a1 1e bc e6 b6 0f 83 a2 55 2f 9c b2 6e 8b ae 93 05 44 d8 e1 7c 43 2f 81 ce 9c 8f 48 9d ad a3 c7 66 f3 80 c0 83 b4 cf c4 60 f2 8b f2 96 c5 48 b5 2a 0c 8d 71 71 6b e9 bc cc 66 9e 99 d3 8e 78 b3 18 ac 7d 27 b1 8d 35 95 b6 3f 3d 21 2b 47 b5 3b 35 f0 f5 c4 d1 a1 88 02 73 94 01 be f3 4a 8e 9b b4 c1 be cb dc 4e 8d 3c 42 65 61 af 23 cc 4e 32 be 16 a6 19 f3 0b 8d 4d a7 59 52 aa 28 25 9a 66 71 26 4a 88 45 ed e6 79 4b 17 46 24 95 19 9c 0a Data Ascii: 4orSojQ"CX,"L5yxBkak^}=&TQrz-i%..3a8{)mg(oSU/nD\|C/Hf`H*qqkfx}'5?=!+G;5sJN<Bea#N2MYR(%fq&JEyKF$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	50000	64.233.177.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	460	OUT	GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39997 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:41:26 GMT Expires: Fri, 19 Apr 2024 15:41:26 GMT Cache-Control: public, max-age=7200 ETag: "1689932701" Content-Type: image/jpeg Vary: Origin Age: 1518 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0f 10 0e 0f 0f 10 10 10 0f 0e 0e 0e 10 0d 0f 0d 10 0e 0d 0e 0f 10 0d 0d 0d 0f 0d 0e 10 0d 0d 0f 10 10 0e 0f 0d 0f 0d 0d 0f 10 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 16 15 12 15 15 17 15 16 15 15 15 17 17 15 15 15 15 15 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 ff c4 00 55 10 00 02 01 02 03 04 07 03 09 05 04 07 06 05 03 05 01 02 11 00 03 04 12 21 05 06 31 41 07 13 22 51 61 71 91 32 81 a1 08 14 23 42 52 b1 c1 d1 Data Ascii: JFIFh"U!1A"Qaq2#BR
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 2a 4b fd 0e dd eb ea 7f 2a f4 36 23 f7 af a9 fc aa 1d 63 79 ab 3a 97 f2 51 74 54 c2 6e f5 c3 cd 7d 5b fa 6b 6a c6 e8 5d 3c 0a 7a b7 f4 d7 0c ac 1c 54 85 3c 87 82 5d a2 9c 2c f4 79 7c fd 6b 5f cc ff 00 d1 5b 2b d1 86 24 fd 6b 5f cd 73 fe 9d 40 d5 44 3f d8 29 8a 39 8f fa 94 8d 45 59 1b 33 a1 9c 65 c7 44 46 b2 ce ec 11 57 3d c0 4b 31 80 35 b6 00 f7 9a b2 ed 7c 8c b6 b1 00 f5 d8 00 63 d9 37 b1 32 3c 0c 61 88 9f 22 47 8d 0d a9 89 db 39 42 4a 79 23 fd 42 cb 9b 28 ab 87 6a fc 9d 36 8d a7 36 dd ac 07 5e 2b 9e f1 d3 91 04 59 82 a7 93 0d 2a 3e f7 41 d8 c1 c5 ec 7f 35 ef fa 35 59 af 80 63 50 56 8a 19 c8 b8 69 55 Data Ascii: ("((B(("((B(("((B(K6#cy:QtTn}[kj]<zT<],y\|k_[+$k_s@D?)9EY3eDFW=K15\|c72<a"G9BJy#B(j66^+Y*>A55YcPViU
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 96 60 12 5d e1 44 e6 2d 97 c3 d9 9e fd 38 eb a7 89 12 bd 2b 6c 4d 2d ba 67 cc d7 32 10 19 a2 5a 48 23 5e c9 9e 4b 13 af 75 46 63 36 0a 3a e5 17 5b ad 0b da 65 b8 c5 d5 88 fb 40 c7 74 80 66 20 1d 0c d7 92 aa 0e 13 38 38 7c fd 16 fd 2b 9a 21 6d 8f cb d5 45 e3 36 8a 96 50 33 7b 26 61 e5 a0 02 4b 48 2d 00 00 78 f3 cb ce 33 40 de da b6 43 43 b2 06 04 e8 f7 c1 24 0e 0a 99 bb 19 8f da 7c ab 1d f5 8f 68 6c 35 b4 ac 2e 5f 24 99 92 dd 6b 13 97 b8 c3 49 04 b7 09 8e 1a 6a 2a a6 db 38 69 3c 3c 75 1d fc 35 3f 78 f1 aa c6 53 d1 b6 fb 29 1d a7 8e 0d 70 b0 5c b2 64 ae 60 c2 58 99 82 24 15 83 c8 91 a0 8d 0d 60 bb 83 ca 73 28 ec 9f 81 d3 4f 2e ea 8e bb 33 03 90 d7 f0 f7 f3 f2 a6 ac 0e 1f b0 b3 dc 27 de 28 91 fa 2c 53 4c 6e a1 62 a3 6d da 9a 8b db 18 58 24 c6 9c fc 3f c0 91 Data Ascii: `]D-8+lM-g2ZH#^KuFc6:[e@tf 88\|+!mE6P3{&aKH-x3@CC$\|hl5._$kIj*8i<<u5?xS)p\d`X$`s(O.3'(,SLnbmX$?
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: a6 ea ad 85 03 22 95 80 33 01 a4 c6 a0 f3 e3 30 79 8f 78 09 3b 7b 75 6c bc 9c a1 4f 90 83 e6 3f 2a a2 69 a2 8d da 5f 0f ff 00 a3 7f 55 7c 1d 6c 8d b8 98 fa 0b 7a 29 dc 77 42 57 7e ae 22 db fe fd b7 b7 f1 0d 72 ab dd 8b b1 ec 3d c5 b2 d8 a1 6e e3 de ea 53 fd 9e e5 cb 4e c5 f2 5b 2b 74 32 e9 70 c4 16 55 89 13 14 f9 b9 3b cb 88 b1 86 c7 5b 76 7b 82 ce 1c dc c3 31 2c ec ae 66 de 4c c7 b4 57 3b db 2a a7 d9 86 03 48 01 2b a3 2d 95 76 e6 37 08 a6 cb 2d b5 bc b7 0b 38 c9 1d 40 37 84 03 04 eb 6c 08 00 f1 ab 1c d8 09 8f aa 66 1d b8 24 e3 36 e7 e2 a4 c9 27 0d 93 ad 7f e9 d8 80 33 8b f2 f0 4d 1b 47 e4 ff 00 79 c1 1f 3a b6 24 cf f6 4f 23 48 fb 74 bb b4 3e 4b 77 1f 4f 9f da 0d dd f3 66 27 d3 af 06 ba 75 5b 5a e0 ae 91 15 2f 63 f1 58 91 a5 c7 c4 dc 64 ba ba 38 0b 71 ba Data Ascii: "30yx;{ulO?i_U\|lz)wBW~"r=nSN[+t2pU;[v{1,fLW;H+-v7-8@7lf$6'3MGy:$O#Ht>KwOf'u[Z/cXd8q
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 65 6b dc ed 24 83 6f 7d ea ec 1f 24 4c 47 fd be cf fe 5a e7 dd d6 d7 a1 f2 43 ba 64 0d a5 68 b0 e2 3e 68 da 79 ff 00 b4 4f c2 ba cc b6 b5 f9 c3 d3 4e 10 d8 db 3b 40 db 66 b7 71 71 d7 ae ad c4 62 97 14 df 73 7a 56 e2 10 cb a5 d8 04 19 8d 2a f2 23 02 f6 48 45 34 d2 9b 6a f9 05 67 6f 07 c9 2f 68 20 9b 37 f0 b7 e0 4e 56 eb 6c 31 f0 59 5b 88 49 fd a7 51 54 3e f6 6c 0c 46 16 f3 58 c4 5a 7b 37 93 53 6d f4 30 66 19 58 12 ae 86 0c 5c 42 ca 60 c1 31 5d b5 f2 47 e9 46 e6 d0 c2 dd b3 88 6c f8 ac 19 40 d7 4c 03 76 c5 d0 dd 53 b4 00 3a c5 28 e8 c4 71 ca 8c 75 73 5b 3f 2b dd cc b7 8a d9 57 ef 10 3e 71 81 43 89 b5 76 3b 41 12 0d fb 64 f1 28 f6 81 39 78 67 5b 67 ea d0 58 d3 b2 1b 52 f0 ed 2f 5c c1 d1 7f 44 58 5d a4 fd 4e 1f 6a 28 c4 0b 7d 6b 58 bb 80 bd 6c e5 10 1f 23 f5 Data Ascii: ek$o}$LGZCdh>hyON;@fqqbszV*#HE4jgo/h 7NVl1Y[IQT>lFXZ{7Sm0fX\B`1]GFl@LvS:(qus[?+W>qCv;Ad(9xg[gXR/\DX]Nj(}kXl#
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 2a 6b 15 7c 03 94 70 5e c8 f2 02 05 79 d8 e4 b3 cb ce fc 3e fe fb d6 a4 ad 21 81 a3 8a d7 df 5d a0 53 0e f0 61 ae 45 a5 3d d9 fd a2 0f 78 b6 1c 83 de 05 2a ee 46 10 1b d6 c4 68 a7 37 96 41 23 e3 15 b9 d2 36 26 6d d9 ee eb 58 fb c2 40 f8 31 ac bd 17 db 96 76 fb 2a 07 bd 8c fd cb 5d d4 65 a8 63 4f 0f ed 59 13 7a ba 67 3b 9d ff 00 09 ab 78 9b b1 1a 76 88 10 75 d3 89 d3 c2 96 6e 58 03 8c 03 dd 95 41 ef 8e 72 74 f0 e0 69 9b 79 30 c4 db 62 32 68 a4 fd 22 e6 5e 1a 4e a2 35 a8 5c 26 1e d1 b5 6c bd 9b 41 9e da b3 00 ba 49 12 60 1d 72 93 a8 04 9e 22 66 99 af 65 df 72 78 61 2d 4d 26 96 f9 a5 fc 6e 25 09 d6 54 01 a8 2c 46 ba 44 e5 3a c1 83 1a f0 9e e3 5e ba 3c 6b 2f 89 66 41 da b7 68 c9 0a c0 4b 90 a0 c9 3c 48 cd c0 0e 1c f8 d7 dd fb c5 5a c3 d9 53 6f 0f 64 bd c6 20 Data Ascii: k\|p^y>!]SaE=xFh7A#6&mX@1v*]ecOYzg;xvunXArtiy0b2h"^N5\&lAI`r"ferxa-M&n%T,FD:^<k/fAhK<HZSod
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 0f 2d 76 17 19 70 fd 4e 1f c2 e0 3e a4 77 57 d0 b5 27 bc db 1a ee 1a f5 cc 3d f4 36 ef 5a 6c ae 87 d4 32 9e 0c 8c a4 32 b8 d1 94 83 51 2e f5 60 ba d0 c7 05 f6 6a 43 75 b1 59 31 38 67 ff 00 87 89 b1 73 f9 2f 23 71 f7 54 40 b9 58 31 af d9 6f dd 3f 75 49 ad 37 51 71 c2 fd 55 bd 73 53 e7 5c 03 f2 b1 b1 93 6e 63 b9 07 36 2e 2f 0d 43 61 2c 02 7f 9c 30 d7 ba bb a1 f1 d3 0d f6 94 30 fe 20 0e 9e b5 4c f4 f5 bf bb 17 0f 8a b7 6b 68 60 0e 2a fb 61 d2 ea de 5c 2e 16 ec 59 6b 97 6d aa 9b 97 2f 5b bb d9 6b 4e 72 00 40 9d 35 26 97 86 62 e7 96 ac e8 bf c6 41 55 cf c8 1e cb 1c 66 39 c7 f6 6b 85 b6 8e 79 75 97 2f 66 b7 ef cb 6e ef c6 ac ef 96 3f 48 d6 f0 bb 3e e6 0c 30 38 ac 72 75 62 df 12 98 62 d1 7a eb 8e 41 94 35 a4 9f 69 98 90 08 b6 f1 63 ee 4d 9c 1d bb 08 d8 2b 76 2d Data Ascii: -vpN>wW'=6Zl22Q.`jCuY18gs/#qT@X1o?uI7QqUsS\nc6./Ca,00 Lkh`*a\.Ykm/[kNr@5&bAUf9kyu/fn?H>08rubbzA5icM+v-
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 13 5e 1e f0 61 23 d2 b4 b6 dd cd 00 f1 9f 4d 7e f1 f1 a8 cc 13 b0 62 4b 69 a0 1c b5 13 3e a4 8f ba be 6d cc 49 ed 1e 61 42 8f 36 fd 2d 4a 5a 90 62 3c d5 11 d3 da 40 92 f7 cb 14 7a b6 20 c3 31 90 7c f8 7b b2 8a 9a bb b5 43 85 ba be cd c5 0e 3c 27 88 3e 2a d2 a7 b8 a9 ee a5 6d f3 bb ec af 74 9f c0 7e 34 b9 b3 f6 eb 58 2c 32 f5 96 58 c9 b6 0c 32 b7 36 b4 4e 92 79 db 68 0c 40 32 a6 49 c6 63 f2 42 da 7d 3e a6 02 38 27 8d ea 26 e6 1d a3 56 b4 c2 e8 03 89 50 0a b8 1e 4a d9 bf 82 99 7a 21 4f f6 72 ff 00 6e e1 f4 50 17 ef 06 90 36 5e f1 d9 62 3a bb ca ad f6 2e 1e a6 e4 f7 43 91 98 8e 32 85 87 8d 39 ee fe d8 36 d4 28 b6 55 64 9e c0 95 ed 31 62 40 e0 24 92 74 31 ae 90 29 ca 59 5b 1c ba de 92 a8 89 e6 22 c6 f3 ba 72 db 9f d9 38 cb 9a 54 8c ba 6b 3a 73 d2 93 b6 9e 34 Data Ascii: ^a#M~bKi>mIaB6-JZb<@z 1\|{C<'>*mt~4X,2X26Nyh@2IcB}>8'&VPJz!OrnP6^b:.C296(Ud1b@$t1)Y["r8Tk:s4
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: fb c3 63 30 8c 4e 18 90 78 0c 4d 8f eb aa 2b 1f 77 e3 92 ad 8c 0e 17 2b 8f b1 9b 66 f6 1b 68 dd c4 59 7c 97 ac 63 2f ba 3f 1d 7a eb 8a 43 0e 68 ea 4a b2 1d 19 59 87 3a ec be 8c ba 43 b5 b4 30 a3 11 6c 64 b8 a7 ab c4 58 99 36 af 44 90 0f d6 b4 e3 b5 6e e7 35 90 61 91 95 79 7f a5 1e 8d ef 2e 23 15 7e d5 dc 2d ec 3b dd bd 89 0f 6f 19 85 cc b6 ee 3b 5e ca d6 9e ea dc 67 40 d9 72 da 57 2c 47 64 19 02 96 fa 3d de 5b f8 0c 40 bf 64 83 a6 5b b6 5a 7a bb d6 a6 4a 5c ee ef 57 1a a3 41 13 aa b3 d3 31 b3 33 07 3e f0 aa dc dd 75 47 4e 1d 1d db da 76 41 05 6d e3 6c a9 16 2f 1d 15 d7 56 ea 2f 9d 4f 54 c4 92 af a9 b6 c4 91 21 9d 5f 8b 36 ce 0a ed 9b af 66 ea 35 bb b6 98 a5 cb 6e 21 95 87 23 c8 82 20 86 12 18 10 41 20 82 7b 0f 77 ba 56 d9 f7 d4 30 c4 a6 1d fe b5 9c 4b ad Data Ascii: c0NxM+w+fhY\|c/?zChJY:C0ldX6Dn5ay.#~-;o;^g@rW,Gd=[@d[ZzJ\WA13>uGNvAml/V/OT!_6f5n!# A {wV0K
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 69 d1 18 0c d2 67 3a 5c 07 53 cc 69 4e 41 53 25 38 ea e5 18 bd c1 48 f4 af fc 52 37 3c d5 d1 da f6 b1 68 d8 e7 87 7f 72 4e dc fd 9e 6f e2 2d 58 04 2b 5f bb 6e c8 62 09 0a 6e 30 40 48 1a 90 26 69 87 77 af 94 74 cc 21 ad dc ca e3 b8 a3 e5 71 ee 82 2a e0 dc ed c7 d9 f8 6b 89 7a d4 bd d4 d5 2e 5e c5 5b 6c 84 8e 39 10 5b 4c c0 1d 0b 29 89 91 04 48 a9 77 b1 93 e7 b8 dc 84 32 1c 55 d7 05 48 65 fa 47 2e 72 91 a4 06 66 1a 77 55 a6 46 cb 70 17 93 8e e1 d6 2a f1 dd 4c 44 31 f1 86 1e ee c9 f8 15 ab 06 74 9e 40 4f ba a9 bd cb c7 cf 54 d3 ed 0c a7 cc af f5 01 56 8d ed a1 d8 58 90 60 6b cb 4d 3d e3 bc 69 56 50 54 88 5a fd 4b 23 a6 e9 f5 69 77 92 93 c3 3c fa fc 3f 5f 78 ad 8e ae a2 b6 56 26 3b 4c 75 9d 7c 40 d7 4d 64 71 8d 47 0d 6a 56 ee 31 55 03 dc 21 41 d4 71 e1 c8 01 Data Ascii: ig:\SiNAS%8HR7<hrNo-X+_nbn0@H&iwt!qkz.^[l9[L)Hw2UHeG.rfwUFpLD1t@OTVX`kM=iVPTZK#iw<?_xV&;Lu\|@MdqGjV1U!Aq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	50003	64.233.177.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	460	OUT	GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:44 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39909 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:32:41 GMT Expires: Fri, 19 Apr 2024 14:32:41 GMT Cache-Control: public, max-age=7200 ETag: "1706713936" Content-Type: image/jpeg Vary: Origin Age: 5643 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:44 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0f 10 10 10 10 0f 10 10 10 10 10 10 0d 10 10 10 10 10 0e 10 10 10 0d 0d 0d 0d 10 0e 0d 0e 0d 10 10 0f 10 10 0d 10 0d 0d 15 0d 0f 11 11 13 13 13 0d 0e 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 18 15 12 15 17 18 18 17 18 18 18 17 15 17 18 18 18 15 15 15 17 17 17 17 15 15 17 15 17 15 17 15 17 15 15 15 17 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 03 02 01 08 09 ff c4 00 4e 10 00 02 01 02 04 03 05 04 06 05 09 07 04 02 02 03 01 02 11 00 03 04 12 21 31 05 06 41 13 22 51 61 71 07 32 81 91 42 a1 b1 c1 d1 f0 08 14 23 Data Ascii: JFIFh"N!1A"Qaq2B#
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 6e eb fa 2d 71 0f e5 b0 5f de 5f ff 00 0b 5e 8f e8 af c4 66 3b 6c 10 ff 00 fe 97 ff 00 c2 d7 38 82 f6 c5 60 d4 57 e8 3c 3f e8 93 c4 9b 6b f8 0f ef 2f ff 00 84 ae ff 00 f0 7d c4 ff 00 97 c0 7f 7b 88 ff 00 07 51 9a 88 c6 44 af 70 15 f9 d6 8a fd 0c ff 00 a2 27 12 1f f5 b0 1f de 5f ff 00 09 51 f1 1f a2 7f 12 1f f5 70 47 d2 e5 ff 00 f0 b5 d3 66 63 b2 05 72 ee e8 b9 58 0d 15 b8 bf e8 c3 c4 06 f7 70 7f de 5e ff 00 0b 5e 57 f4 64 c7 ff 00 2d 83 fe f2 f7 f8 5a 9b 01 50 f6 f1 f1 58 85 15 bb d8 fd 16 b1 e7 fe be 04 7a dc bf fe 12 a6 db fd 11 f8 91 da fe 03 fb db ff 00 e1 2a 27 c8 d6 fd 45 4a d2 1d a2 fc f7 Data Ascii: BEPQE!QEEQBEPQE!QEEQBEPQE!QEEQBEn-q__^f;l8`W<?k/}{QDp'_QpGfcrXp^^Wd-ZPXz*'EJ
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: bd f7 e1 85 72 1f a3 76 3b f9 5c 27 f6 ef 7f 86 af 00 b8 b8 5c 19 1a 0d 8a c5 e8 ad b4 fe 8d 18 ef e5 b0 7f de 5e ff 00 0b 55 e7 f4 7e c6 4c 76 b8 5f ed dd ff 00 0f 5d 32 37 3f e9 0b 97 cf 1b 3e a2 bf 6b e1 ee 86 00 f4 3f 57 8f c8 d4 a4 3e 72 3a 7f a7 4f ce f4 b9 cb b8 bd 4a 9e a4 c7 af 5f 98 d7 e1 57 b5 e5 6c 06 29 0b 37 6e e8 bc a4 9b b4 65 cf 8f 55 67 83 c4 c5 5a e1 71 fe 34 bb 87 b9 f9 eb f1 f1 f8 eb 53 ad 3d 55 4d 08 29 d0 eb 68 af 2e df 59 0b 23 33 02 54 13 05 a3 7c a0 fb d1 a1 20 4c 0d 6a ab 8d e3 5a d3 2b 64 6b 96 9a 11 d5 04 dd b6 d3 dd 74 1f 4d 5a 72 b2 1f 04 2a 41 24 1e a7 2b 80 19 43 00 64 48 d8 8d 8a 9d d5 87 46 10 47 42 2b 81 bb 7c 5d 50 32 bd 93 d5 bd f5 11 f4 98 75 06 40 39 4c 88 cc 49 04 95 a3 8b bd 6c b2 07 5d fd 39 ae 9c e0 02 ef 72 c2 Data Ascii: rv;\'\^U~Lv_]27?>k?W>r:OJ_Wl)7neUgZq4S=UM)h.Y#3T\| LjZ+dktMZr*A$+CdHFGB+\|]P2u@9LIl]9r
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 62 48 c6 da 23 f7 88 3e 87 71 f2 af b8 fb a3 13 61 b1 0a 00 bd 6e 3f 5c b6 04 02 18 85 5c 4a 01 b2 b3 10 b7 14 7b ae c1 a3 2b e9 3f d8 97 0f cf 8a 07 a2 89 a4 4b 5c cc 8a 5a 52 30 b8 1c b8 ad 7b 88 62 b5 61 11 04 8f 3d 0c 54 32 d5 1e d5 e2 cc cd d1 99 88 f8 b1 35 e3 13 89 03 d6 bd 6d 3e 13 81 aa 8c d4 5d b8 8a f1 8f c7 46 82 3c ea a4 3e bf 1a eb 6e d1 62 00 dc 98 1e a7 4a 70 e1 1c ac a3 29 7d 4e e4 74 3f e9 4e 4b 3c 54 6d ef 6a 52 2c 8e 5a b7 65 b9 2d 25 c8 69 f3 fa e6 9c b0 98 d5 65 1d d8 27 66 5f 1e aa c9 d0 8f 15 df c2 60 32 9e 27 06 46 c4 11 f5 fc 7f d2 a7 f2 de 26 0e 53 b1 d4 7a f5 1f 1f c2 98 da 50 89 a2 c6 cd 5b f6 df fb 4c 50 c8 62 93 0b b4 3e c2 bf 56 ae c9 7a a1 63 4b 01 99 75 23 a1 d9 87 81 eb b6 c7 71 e9 20 f8 e1 d8 d0 e2 40 20 f5 07 a7 c7 af Data Ascii: bH#>qan?\\J{+?K\ZR0{ba=T25m>]F<>nbJp)}Nt?NK<TmjR,Ze-%ie'f_`2'F&SzP[LPb>VzcKu#q @
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: f2 a2 16 57 52 96 0d 08 b6 7b 8a 61 67 7b 6c 41 06 46 e0 d4 fc 2e 34 37 91 ac 9f 9c f8 83 df 2b 74 b3 0b 83 46 20 90 7d 56 35 13 d6 2a a6 d7 30 e2 13 6b ad fd 68 7f ad c3 1f ae be dd b2 df f3 94 cd 7b ed 8a d9 db 4b af 8d ed 0d 9f 2d 14 e6 3b e5 c0 fe d6 f1 35 f1 ee 85 04 93 00 02 49 f0 03 53 f5 56 15 7f da 36 2d 36 36 d8 0e a6 db 1f 9e 57 02 a8 b9 83 da 1e 32 ea 94 6b b9 51 81 56 54 b6 16 41 10 41 68 2f 04 48 8c d0 41 a9 cd 23 81 b5 d7 91 b1 ce d5 2f f1 be 22 59 8b 6b 2c 49 d7 52 01 d7 5f 3f f5 aa 46 ae ce 6b 91 14 d0 16 c9 3d 23 cb 8a 60 e4 de 06 2e 4b b0 95 53 00 74 2d 12 67 c8 08 31 d6 47 98 2c 78 97 23 41 a0 1a 08 1f 67 87 c0 55 8f b2 ab 6a f8 67 51 ef 2b b0 61 d7 bc 03 2b 7a 6e 27 f9 a7 c2 ab b8 c7 10 4b 4d ab 02 c0 fb a2 18 cf 98 98 1f d6 22 a0 37 Data Ascii: WR{ag{lAF.47+tF }V5*0kh{K-;5ISV6-66W2kQVTAAh/HA#/"Yk,IR_?Fk=#`.KSt-g1G,x#AgUjgQ+a+zn'KM"7
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: ec 0b 89 8b 8b 76 cb 66 c8 c9 9c 06 8f de 5b 6c 44 13 13 99 7e 2a 3c aa 95 f5 0f fe f3 96 fb 8b 7b e6 ad c5 23 5a 03 9b a8 cf 24 a1 c7 71 b8 cb d8 70 2e 0e c5 98 09 60 63 ba 65 22 e2 90 cf 68 b3 02 48 59 21 72 10 c4 36 b3 f9 4f 04 6d 1e cf 0e 62 e3 25 b7 00 14 6c ae bd 8a 5d 01 95 15 7b 22 5a e3 41 06 51 04 cc 95 15 bc f5 83 b8 1c fe d3 35 97 2c 6d 33 76 8a af 94 85 87 40 ac a7 29 d4 a1 49 d4 19 19 a0 57 f2 37 19 b9 87 72 6c ad bb 8c d3 6c b3 cf 73 67 63 95 18 0e f6 9a e6 20 64 23 ac d2 cd 8d ae 65 ae 03 6f 73 6d d6 3c 7c 15 99 24 77 80 24 e1 b0 be 86 fc 47 8e 7f b5 fa 23 25 22 71 2e 68 5b 0f 78 65 17 1a 66 55 c0 95 05 dc 08 0a da a8 7c a4 1c b0 41 dc 11 55 6b c4 f1 78 c3 96 d0 84 06 1a e7 bb 64 78 eb bb 91 fb ab 24 69 b6 f4 dd c1 39 26 ca 20 17 15 6e dc Data Ascii: vf[lD~*<{#Z$qp.`ce"hHY!r6Omb%l]{"ZAQ5,m3v@)IW7rllsgc d#eosm<\|$w$G#%"q.h[xefU\|AUkxdx$i9& n
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 49 68 24 66 30 59 a3 4d 72 80 00 99 85 50 14 0e 93 24 a5 d9 3b e6 03 f7 04 a6 d7 aa 8d b1 3a 0f ee 36 f2 d5 57 8b 75 2b 01 6a 59 44 4c 90 23 e3 5d 5f 0f f0 ae 9c 3a d1 cc 0f 81 9a 7d ef ee 12 38 2c a3 1b df 03 9a 79 c2 db 00 0a 83 8f c7 41 81 5e ec 62 34 26 a9 ee 9e f7 c6 b1 d1 43 89 e7 16 e5 b3 c7 dd 16 54 38 5e 12 6f 31 bb 88 1a 19 16 ad 6b 08 a7 ab 6d df 23 59 fc 00 11 b8 ee 06 dd 84 90 3b ad a6 59 92 5a 3a 4e a4 46 fe 10 3c 6a b7 07 c7 1e c8 2b 00 f7 a7 bd 33 fd 10 27 49 f2 ae b8 3b 8b 75 9b 11 7c 8c b6 fd db 73 f1 02 3a eb fd a6 df 41 15 ae 63 67 a6 97 11 fa 46 40 0d fc 00 1f 94 9b 99 1d 44 79 e8 a2 60 ec 1c 8a 72 90 66 57 e7 bf c7 4d 0c 53 06 9a 4c 4f e6 75 af 9c 1e cd c3 6c 3b 8d 18 96 0a 06 a8 84 ca ff 00 48 47 86 a0 46 fa c4 9b b8 32 cb 23 50 35 Data Ascii: Ih$f0YMrP$;:6Wu+jYDL#]_:}8,yA^b4&CT8^o1km#Y;YZ:NF<j+3'I;u\|s:AcgF@Dy`rfWMSLOul;HGF2#P5
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 7b 10 64 15 3a 88 ac 93 9b 38 03 2b 87 37 94 76 92 cc 81 74 06 75 86 2c 0f 94 95 e9 e5 ac 7c 3f 39 9c 21 b1 bb a8 c4 1c eb 9a 33 da b9 61 c5 c5 f0 04 5d b7 66 e2 9f de 51 e2 6a bb 67 d4 3d 8e 0d 68 b8 27 31 e1 bb 9e 83 82 b6 db 14 4c 99 a6 56 e4 e1 ea 16 d1 92 b9 62 6e 2a ab 3b b0 44 45 2d 71 d8 80 aa 8a 0b 3b 31 3a 00 aa 09 27 ca a6 70 5c 55 ab f6 d6 ed 96 cc 8d b7 42 a7 aa ba fd 16 1d 47 a1 12 08 35 91 7e 92 3c d8 a9 64 e1 94 76 88 c7 2e 35 93 bd d8 92 d6 ce 1e dd cc a6 50 de 6c cc bd 4f 62 46 92 66 e6 4e cd c2 e3 7f df c7 7f 25 9a 85 b2 17 59 2d f0 df 6c d9 b1 1d b5 eb 58 8e c8 e5 4b 4a 16 e2 da 55 d0 48 53 19 c9 d5 c9 90 c6 4c 6c 05 40 e2 be d4 9a e5 e7 b8 8c 8a 24 32 5a 0c e4 42 80 56 0d c8 74 61 b9 0a 40 cc 09 81 a8 a8 9c 3f da 75 82 f7 53 f5 54 b6 Data Ascii: {d:8+7vtu,\|?9!3a]fQjg=h'1LVbn*;DE-q;1:'p\UBG5~<dv.5PlObFfN%Y-lXKJUHSLl@$2ZBVta@?uST
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 9e ad a4 85 9f dd 00 fc 4d 63 5c f5 80 7b 96 fb 3b 7a 90 bd ab a8 52 5d bb c1 2d a0 8d 49 cb da 5d 88 d4 0f 4a ab ae a7 85 d0 87 38 61 2e 23 9d ff 00 bb 3f 2b f2 ca ea f3 67 3e 49 1f 7e 1f fe 77 f5 b7 3d ca 5e 3f 85 fe c2 de 3a fd c2 97 99 85 d1 76 de 52 c5 0a 15 4c 3d bd 42 82 2d 81 dd 30 55 c3 e8 c3 34 fa c6 fb 4c b2 14 58 4b 26 dc 15 52 e1 c3 88 4e ec 01 00 a0 31 30 24 0d 3a 6d c7 09 85 17 d6 d2 e2 9e e5 bb 20 2d d4 c8 01 4e d9 d4 c8 04 82 a3 f6 7d ad c6 50 ad df 2c cc 74 2a d4 fe d0 39 00 32 fe b1 86 6b 44 05 19 ed 8b 93 71 98 30 0c c3 74 ce 7b ce c0 3f 4e ad 35 4d 2c f1 c9 23 58 7b ba 7d 37 68 24 66 2f 9d 8f 4d 2f aa b7 6d 0b d8 c2 f2 31 66 72 39 d8 68 6d 97 bd cb 53 c1 e2 d8 05 b8 ba 06 1d e1 20 8f 10 4c 68 64 41 91 4d fc 07 8b db 23 2b 88 66 2a 09 Data Ascii: Mc\{;zR]-I]J8a.#?+g>I~w=^?:vRL=B-0U4LXK&RN10$:m -N}P,t92kDq0t{?N5M,#X{}7h$f/M/m1fr9hmS LhdAM#+f
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: d8 dc 3b 0c cf da a7 55 70 26 3c 88 1b f9 91 4d d6 fc 29 8c 62 64 97 3c c5 bd 73 f5 0b ba 1d ab 51 06 a0 58 ea 06 7f 7f c1 5f 39 a3 11 79 1c 9b 8b 70 f8 92 46 84 7e f1 2d 23 d2 92 78 d7 1f 67 61 ae 8b b7 5f af a9 fb 3e 75 ba 71 ae 68 c0 f1 25 cd 99 2c 5e 23 f6 81 cc 23 1f 16 d0 95 6f e7 8c c0 f5 8d eb 13 e3 bc 11 16 e3 2a 5d b7 70 29 12 6d b6 61 a8 07 43 00 1f 09 12 24 1a af 83 66 18 0e 6c 20 8e 3a 79 e8 ac a6 da 46 61 62 45 b8 05 b4 7e 8e dc db 16 ae d9 67 ec da e3 a1 b5 72 03 00 c9 ba b2 b1 03 2d c5 fd 99 79 05 66 65 62 47 0e 71 f6 85 6c 8b f6 5c 5a bc 2e 3e 6b d8 7c 99 59 dd 55 55 6e 35 d1 91 d6 6d a5 bc af de 75 ca 91 05 4d 65 7c 1f 1c 6d c6 5d 23 6a 81 c6 78 72 e2 2e dd 7e d9 6d b8 50 f6 54 a9 3d b3 b3 77 ad 86 04 64 82 5d cd c3 3b a8 00 ce 9e 55 d0 Data Ascii: ;Up&<M)bd<sQX_9ypF~-#xga_>uqh%,^##o*]p)maC$fl :yFabE~gr-yfebGql\Z.>k\|YUUn5muMe\|m]#jxr.~mPT=wd];U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	50007	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	523	OUT	GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 7114 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6516 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	722	IN	Data Raw: 52 49 46 46 c2 1b 00 00 57 45 42 50 56 50 38 4c b6 1b 00 00 2f 3f c0 0f 00 4d 28 6c db b6 cd 41 76 77 ed 88 fe c7 90 c1 db de 85 b5 7d fd 77 d7 e8 bd 01 29 92 00 45 dd f0 a5 8e 06 dc 06 20 59 38 8c 24 59 a9 06 97 fc 03 1c 1c be bb 60 71 b0 8d 64 ab cd 82 6c a4 88 88 02 54 85 fa af c7 7b 33 6c 23 db 56 f2 70 77 0d 29 81 fe bb 20 22 75 77 77 e8 7f e8 d3 af 47 9f 3a 2d 7a 04 fa 84 5e 7e 75 ac 8b 5a a4 44 b4 7e c1 e7 f4 f6 b7 d0 a0 e2 27 68 99 02 b1 8c f7 8e c0 84 09 fb 8d ef 4b 9f 56 19 fb cc dd 9d b5 53 c5 0c 1d ef 7d be fb f9 9f 90 7f ce f8 77 de e8 e7 37 2b 57 27 be ed d5 f6 53 ad 2a ba 1f 2d 0e 5a 32 8d 40 9e 5f 79 60 98 e8 6b 5e 89 c4 93 c0 18 06 d2 b6 69 fc cb fe e7 21 22 26 a0 f4 ba 4f 91 dd d0 a0 81 3c d9 b6 ad 48 b2 6d 5b ad 8f 29 73 8a a8 1a 2c 66 Data Ascii: RIFFWEBPVP8L/?M(lAvw}w)E Y8$Y`qdlT{3l#Vpw) "uwwG:-z^~uZD~'hKVS}w7+W'S*-Z2@_y`k^i!"&O<Hm[)s,f
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 89 21 41 29 af 44 ba 22 d9 15 2a 63 0e c0 2d f6 9d 41 02 bd c0 ea 28 21 44 29 c0 52 67 7b 3b 27 a7 4d 55 91 95 00 52 26 48 4f e3 01 6e e7 ba c8 1e 96 d7 8e 5e 6b b3 c6 ff 3c fe 4b cf 7f 15 48 a9 57 80 80 57 40 00 e9 e3 79 aa fa 41 46 ca 24 ea 6c ee f8 f9 8f dd fa e4 03 7b 2f 5b 53 0f 26 bf 28 2d db a3 be 38 c9 d0 85 01 b3 04 90 01 db cd cb b4 3b bd 99 95 ba d3 d1 ba ca 06 15 19 00 26 15 bb 95 db 48 3b ab f1 ed ec c2 b9 9e fc d1 c3 2d 3f 3d db 69 81 cc 80 e1 28 d0 f0 ff 49 15 df 77 1f cf 7e 98 a1 e6 ca 33 ee fa cd b7 bc f3 a7 de 77 c0 b7 7e 67 b3 1f bc 3a ce 6c c1 4b ff f1 c8 fd c7 ef 7e fa f0 75 7b f2 b4 bb a4 52 41 72 20 43 94 63 d8 4c b7 ab 37 0c 9b f3 ad 09 0d e3 ac cd 6a 37 08 89 c2 82 80 74 14 c8 6b 8c a7 e1 ea e7 27 b3 38 9d de 5b 01 a1 40 02 8b 0a Data Ascii: !A)D"*c-A(!D)Rg{;'MUR&HOn^k<KHWW@yAF$l{/[S&(-8;&H;-?=i(Iw~3w~g:lK~u{RAr CcL7j7tk'8[@
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 6b ce 1b 36 c2 1d 99 c2 10 6d 68 93 1a 95 16 dc 12 18 c8 4a 5d 50 93 cc d6 2b dd 43 f2 bc 95 f2 86 6b 7e b7 ed 53 df 57 a7 bf 77 d9 79 af 81 ae 0f f9 f1 7d f9 0a da a3 fd cc 8f cb 4d af 20 dc e7 3a 12 94 40 12 01 b7 85 c2 90 41 d6 41 27 00 d8 79 f1 cc d1 bf 5e fd 9f ef fc 40 79 c8 0b 0f f8 49 ee 6f 63 8e cf 25 01 b1 13 94 83 b6 dd 68 a5 e7 b6 78 c0 e6 d0 34 16 cc 15 88 00 32 b3 f3 f5 da 55 e5 d0 41 ce 8f a0 79 95 32 bf c6 80 3b ba 7c f3 49 3e 39 d0 5c 3c ce 4d 0f 81 21 6a 82 ad 1b 12 c9 10 e6 16 8a 80 3c 29 15 89 24 19 81 20 f8 78 32 3a fe fb 3b 27 fd ea 2d ee 7f c1 ed 37 2f f7 bb e6 da 75 9f 89 85 36 19 14 c8 6c 1b c5 04 2a 58 b4 54 08 42 94 68 17 22 4c a6 12 09 86 9a 2b 8f 24 06 12 6c 6b e8 68 59 59 4b 9d b8 55 be f3 7a a2 e1 39 48 00 02 89 04 02 32 28 Data Ascii: k6mhJ]P+Ck~SWwy}M :@AA'y^@yIoc%hx42UAy2;\|I>9\<M!j<)$ x2:;'-7/u6l*XTBh"L+$lkhYYKUz9H2(
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 36 47 e5 45 ba fa 7d 5f fb 21 57 be 11 d7 ea fe b3 cf 58 f2 f0 b3 0f 8f 21 04 e6 f4 50 c8 d9 03 b2 09 51 01 39 15 39 34 8f 3c e9 4c 5e d5 6f 22 9f 73 90 6a d8 04 66 8e f9 02 af e5 19 08 00 10 d0 99 b1 d9 ca da d5 67 74 01 07 0b 80 11 10 91 6d 18 00 5b 27 22 02 24 6b 1b 0e eb 6b 6f 5f 9b 4f d5 9e 0c 9a 67 66 26 09 4a 30 80 10 ca aa 13 f5 57 8b 1d d5 11 e7 ff ed fc db 8d 9e 7b f1 3d 8e c1 40 34 d1 ad 2c 42 10 9e 64 c2 5d 4e 55 2a ea d0 34 b5 2f ef 8d 37 bb 01 98 53 6a 82 75 68 4e cc ed f5 fb bc 06 2c 80 00 53 15 6e fc f4 e8 ee e3 fa a7 9d 25 96 8c 87 2e ad 07 d7 7f 58 07 47 57 a1 cf c2 ea c8 e5 f4 48 0b 07 15 28 00 c1 e5 c3 7b ae fb c8 fb dc b8 fb 6b 47 36 c5 85 5c 6a 69 64 0a 72 c6 b8 3c 33 86 44 96 2d 84 cf 05 53 20 50 44 3d 79 e3 bf 59 7a e8 b5 3e 7f 54 Data Ascii: 6GE}_!WX!PQ994<L^o"sjfgtm['"$kko_Ogf&J0W{=@4,Bd]NU*4/7SjuhN,Sn%.XGWH({kG6\jidr<3D-S PD=yYz>T
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 12 d4 1e 14 1a fb 26 c8 58 57 79 11 52 d7 cf ee 3f 72 ee 23 cf 2b 9b 7f 3b 6d f2 57 17 d4 e3 e3 14 05 fd 66 9b a8 b4 10 1e ae bd fc b5 9f 3c 7a 71 dc 55 88 f6 ba af f8 93 ee 6d 3f bd ef 2f 67 3d 83 10 22 15 26 0f dd 18 e6 57 ff de d4 bf 3e 74 55 9a 8b 16 91 6d 29 11 a2 49 10 cd a0 69 00 85 b0 65 0c 6d 1b 4e 65 ca 0e 4c 0e 57 10 1d d4 01 29 a4 f9 db 91 a4 98 ea eb 5f c8 67 e6 13 4c 34 c1 83 00 82 1e 9b cb 9b d5 e1 fc d8 c5 37 3f 5c 8d bb ab 27 3f 53 9d fd bc 85 d1 b8 d4 ad d5 f6 b9 0b c7 a9 25 2c 94 fb cb 6d df 7c 3c 76 15 23 04 7f 77 fd a5 6f 75 75 f9 07 07 80 84 94 37 ba aa fa 85 e7 b4 5e 49 2c a2 65 02 b2 08 58 a8 96 30 59 80 42 14 84 99 d5 84 8f d0 7a d9 4d a0 9a dd 54 49 6f b6 45 34 c6 ee 98 bf 4b 6b 90 62 7c 77 14 7e 81 01 8a 34 28 30 68 7a 72 9a ea Data Ascii: &XWyR?r#+;mWf<zqUm?/g="&W>tUm)IiemNeLW)_gL47?\'?S%,m\|<v#wouu7^I,eX0YBzMTIoE4Kkb\|w~4(0hzr
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 74 13 d9 87 67 d4 c4 c2 28 17 21 47 20 81 40 e0 21 9e fa 24 48 14 49 40 20 02 22 90 cd 4a 49 06 08 04 60 01 05 08 11 72 55 54 e0 41 cd 68 a2 51 90 73 a4 50 02 a6 42 16 48 ed 75 bf d7 d5 a5 4f a3 4e dd 3e 36 ea 52 38 c8 ec bd 62 3a e3 ce 75 5b 73 56 cc 55 e6 51 f5 d0 38 df 14 6b 42 2a 51 50 13 7d 37 8d ca 38 04 33 6a cc 10 00 24 10 19 09 01 83 0e fc d4 a5 4c 40 0b 0a d1 a2 20 c9 54 4a 61 0d 09 20 28 24 59 a0 42 21 22 40 68 68 fc d0 a1 ce fc 68 30 45 82 cc 22 97 31 dd cf a4 d7 1d 36 f6 e9 f2 b8 6f 36 ea 2c 7a 00 c6 1c 53 47 9a 99 cc fb 57 62 32 68 7c 18 dd bd da d9 ed 29 71 70 2d 36 9f 85 8a 24 16 d1 96 b1 57 a5 85 69 4a 32 05 01 22 48 b2 84 24 ce 9d 79 52 35 48 28 48 11 41 22 0a c0 90 9d 82 60 01 10 92 60 49 c8 b2 ac 76 1c 6f 70 5a fd bc 73 01 4c 60 02 0d Data Ascii: tg(!G @!$HI@ "JI`rUTAhQsPBHuON>6R8b:u[sVUQ8kB*QP}783j$L@ TJa ($YB!"@hhh0E"16o6,zSGWb2h\|)qp-6$WiJ2"H$yR5H(HA"``IvopZsL`
2024-04-19 14:06:45 UTC	117	IN	Data Raw: 4a 42 8c 49 b1 09 90 aa 1c 4c 81 14 52 32 60 12 5c 51 06 16 20 03 09 86 8d 14 34 66 dc e1 cc 8e f9 3f 99 cc b2 60 01 91 01 0c 88 aa 24 33 29 92 5d a8 82 89 50 48 c9 48 4e 26 bb 64 24 c7 8c ec 22 30 cb 34 1b 4d b2 23 0d 92 5c e3 1e ab 0d 91 12 24 84 20 29 05 05 c4 98 fd c1 34 42 2d 44 30 0c 1d 99 47 52 31 32 31 31 50 1b 73 a5 43 2c 68 70 0e 9c a0 02 Data Ascii: JBILR2`\Q 4f?`$3)]PHHN&d$"04M#\$ )4B-D0GR1211PsC,hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	50009	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	537	OUT	GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 21244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:42:11 GMT Expires: Sat, 20 Apr 2024 13:42:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 1474 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 f4 52 00 00 57 45 42 50 56 50 38 20 e8 52 00 00 f0 42 01 9d 01 2a 88 02 6c 01 3e 41 1e 8d 44 a2 a1 a1 12 8a 44 fc 28 04 04 a6 ee 17 48 e1 d1 9a 6c e9 fe 23 f2 93 bd 94 19 f8 ff c7 6f c9 af 99 0b 4b f7 af c0 9f bb 3f e4 ba 59 2d af 36 2f 36 fd 73 fc 7f f7 3f f1 9f ef 3f be ff ff ff e3 f6 cb fe 77 fd af 6a 3f ac 3f f3 7b 82 fe 9c 7f 80 fe d9 fe 23 fe 87 f8 ef ff ff fd fe b2 fd 7b 7e e7 ff aa fd 66 f8 19 fd 67 fb e7 fc 2f f1 5f be 5f 2d ff ef 3f 67 bd e1 ff 74 ff 5d fb 1b fd cb e4 03 f9 a7 f5 9f f8 7f 9d 7d e9 7f bb 1e c0 9f d1 3f c7 ff d1 f6 75 ff 85 ff 83 fd 17 fc 4f ff ff 48 df d3 7f d2 ff e3 ff 55 ff 0b ff ff d0 77 f3 cf ee 3f f5 ff 3f fe 40 3f f4 fa 80 7f ef f5 00 f4 c7 8a 2f 31 3f 61 f9 71 e7 df 9b 4f 81 fd 23 ff 37 fc 5f 32 d8 96 7c d7 f1 Data Ascii: RIFFRWEBPVP8 RB*l>ADD(Hl#oK?Y-6/6s??wj??{#{~fg/__-?gt]}?uOHUw??@?/1?aqO#7_2\|
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 9c 4d de 18 50 94 85 ce 94 01 a8 fb 09 f6 35 13 a7 8e 7b 35 62 fa d5 03 3a 7c aa b1 07 24 fa d8 d4 7d 7c 2c 33 51 b1 8e b6 7b 84 bc 18 f1 b1 6e cb 9b fd 70 8d c7 e9 1d 19 66 45 7a b2 fc bc 31 f5 ea a8 0b 2e 2a 82 68 2b 0a d5 52 a1 99 05 96 e0 6c c3 7b 1e 7a ff 40 f5 6d fb 7a 88 dc 60 4d 08 83 9d 2c e8 a8 da 61 79 e4 f5 ec 6d 3b 4e 5f 8b 14 d8 37 f6 a4 92 3b 80 bf 88 21 26 4d ba 5d b1 a9 00 01 c7 13 71 69 52 97 a3 ac d5 a4 0f bb 62 03 e3 f4 bb 0b 24 4c be 91 c4 17 70 72 f4 0b 81 5e 15 14 73 90 c5 3b 51 01 18 0e f6 f0 6a 14 68 f4 7a ff cf 75 30 17 50 42 81 8c ea 4e a6 e4 3b f8 69 e4 cf ba 5e 39 f9 8a f6 35 52 95 bf ca 6d dd 0b 60 6a da 9f 3c f0 3a 71 16 61 a6 50 64 49 90 b3 8c b4 8e a3 8e 9b ea 96 d4 c3 04 49 11 96 ab 89 b8 b4 aa ab 55 c4 db 7b c2 f5 60 2b Data Ascii: MP5{5b:\|$}\|,3Q{npfEz1.*h+Rl{z@mz`M,aym;N_7;!&M]qiRb$Lpr^s;Qjhzu0PBN;i^95Rm`j<:qaPdIIU{`+
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 44 a4 bd 74 9f 13 b8 af fc c4 47 15 dd ff 6c c4 f8 db 38 16 fb 6a 14 af 86 99 e8 c8 1c 30 ee 1d e2 49 b6 d2 b0 de d2 c0 84 2d 42 da 55 55 aa e2 6e 2d 22 b5 fe 5a 60 ad 31 5a 50 9a bd f4 59 e6 ec fb 07 c9 f6 cc 6c 80 b6 aa b3 c1 8e 70 37 98 f4 7a 9d a3 76 52 ba 7b b3 cb 2a 12 3d b4 26 76 6b f2 d7 06 4a 2b 6b 7e 9d fe c7 cb 99 c4 26 70 80 42 42 fa 5b c3 b3 0b 6f cb 05 48 57 46 83 04 54 46 47 fd c6 73 cf b3 ab 9c 1f ff e4 a3 53 bf e3 f3 7d 97 55 92 a9 e0 9e df ad 8d 48 00 0e 38 9b 89 94 a2 b7 4f ca 1d 29 bf e5 c4 36 66 06 90 56 9e fb b5 4c 9f 1c a6 4e 31 14 4c 13 4a e7 17 7b 50 fd e0 34 12 f3 a8 d9 7d c1 d5 cc 17 9c 6f 4a de e2 1c 8b 9c 45 08 b6 76 23 8b 82 da 2d 5a ff 05 ff 79 f1 5b 98 bc 06 6f 07 a7 8d 1c 90 a0 68 82 51 34 e5 38 e8 59 33 33 aa dc 44 33 73 Data Ascii: DtGl8j0I-BUUn-"Z`1ZPYlp7zvR{*=&vkJ+k~&pBB[oHWFTFGsS}UH8O)6fVLN1LJ{P4}oJEv#-Zy[ohQ48Y33D3s
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: d3 0c cf 5b 93 75 e7 3f c5 22 52 bf a1 bf 36 8f 20 28 31 97 be 85 fd 15 6e ec 40 27 a2 0e ef f1 c5 25 89 81 9d 42 5b 0e cf 79 0e 0b 3e 2a 3c c1 f2 e1 5c 7c 16 58 a2 fb 46 d3 3f 02 d1 b1 3b 5f e9 d0 84 3a 99 a0 13 12 48 f0 9e 39 23 51 a2 a6 06 71 6c af c1 5c d2 6c 78 51 9a 6d f4 d7 e1 76 18 bf 51 ff b0 1b cc 04 df 34 76 d0 d0 5f 02 63 d8 a1 29 5a 8c e7 42 39 d6 6b 76 8a e5 1c d8 8f 4d 36 da 05 fa c6 14 61 39 fa 41 2b 81 88 fb b7 17 ef b5 fc 65 2e d9 af b2 43 65 96 bf a6 9d a6 81 c8 07 3e 82 26 04 e8 fe e6 b5 74 3b 3f 14 e7 ee 59 95 92 df c1 a1 c6 71 e9 a3 b0 af 25 61 16 04 67 01 d5 b4 49 33 59 ad c8 d2 87 a2 e0 f4 36 af dc 83 38 34 35 81 df ec e5 3e a4 bb 81 1f 1c 0b 97 99 f7 12 98 2d c0 bc 99 72 6a b7 86 46 f2 6a b7 86 46 03 80 92 d4 e4 09 21 35 15 af 6b Data Ascii: [u?"R6 (1n@'%B[y>*<\\|XF?;_:H9#Qql\lxQmvQ4v_c)ZB9kvM6a9A+e.Ce>&t;?Yq%agI3Y6845>-rjFjF!5k
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 88 28 51 34 cb 27 90 aa a1 69 9f 0b 3f d8 6c 0c ab 83 e7 02 df fc ec c0 7d 88 45 2f 36 42 60 2f 38 34 f7 9b 04 40 ad 7a d8 91 83 60 c1 41 06 b7 4e 4f f7 77 f3 6d 65 3c dd ce e4 ab aa fc ed 1e 58 0f 45 12 b7 0b 17 5c de 77 cf 14 b1 b8 6e a2 ee 70 05 68 02 10 12 e1 e8 1b 38 7b 37 bf 28 b3 60 de f8 ee 03 12 bb 09 4a bf a3 a0 a4 42 34 28 9c 31 f3 8d 50 35 0a 0a f1 de 86 fc be ae 30 d5 a6 6a a8 44 1d 56 a8 e0 8e 01 dd 42 df f3 3c 8e 9e f6 f5 46 aa d7 4e 4e 6b ff 2d ce 33 fa e8 4a 69 d7 3c b0 91 fd bd 1c 32 ec 01 b4 86 42 d5 94 5e 73 52 88 23 b1 93 aa 20 44 9f d7 6a d0 e7 59 25 5e 11 c0 4e dd a1 e8 02 55 6f aa 0b 6a 40 9f e7 31 e6 90 e9 9c 35 c9 bf a5 4a 15 36 94 fa 1b 56 65 83 cb ad 4f 96 40 11 fe 53 55 df e0 58 ed a7 49 3f fd 66 1d 24 a0 4b 00 a8 10 63 8c 0b Data Ascii: (Q4'i?l}E/6B`/84@z`ANOwme<XE\wnph8{7(`JB4(1P50jDVB<FNNk-3Ji<2B^sR# DjY%^NUoj@15J6VeO@SUXI?f$Kc
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 0f a5 ae 86 68 38 19 a5 1f 0d 80 e9 20 ec bf f5 84 e0 07 a5 76 80 e4 1c 20 d7 43 4f 5b cf 0b ef 0f 50 34 c7 4d 94 93 28 17 13 35 ae 91 fb e3 5e 73 84 7c f7 10 73 d1 3d 90 06 e8 fe 03 15 21 86 3a a0 2c 03 02 41 9f 70 92 fd 83 9d 78 6d 59 e4 3a 3f c8 dd 6a 5c cf cf 15 2c f9 f4 f9 b8 e6 78 a2 b8 09 1b 93 ed 5e 59 19 b6 02 13 bd ae 5d 5a ce 47 87 86 d9 e3 90 0a e7 7f 15 c7 d2 53 09 41 ee c2 ae ea e5 38 8f 00 5e 19 fa e3 fb 36 cc 07 4c 3c 60 d5 44 ad e0 2f 41 e4 9b 01 a5 dc 31 fb 95 a4 56 c3 fb b0 93 60 38 85 19 1b d1 bf 16 17 65 6f 99 7d 2f cb 62 eb a0 a1 98 f5 53 19 13 e8 1f bd 9b f3 38 c6 37 85 d5 1b 58 42 c9 97 db 48 03 4b 30 37 dc fa df 58 9d 00 24 73 0c 50 67 7b 93 c1 d6 8a e0 9f 6b 38 f4 70 36 fa 5e 5a 4e bc a4 42 9d 71 5d 6b c1 9d 80 14 d7 12 a8 80 b6 Data Ascii: h8 v CO[P4M(5^s\|s=!:,ApxmY:?j\,x^Y]ZGSA8^6L<`D/A1V`8eo}/bS87XBHK07X$sPg{k8p6^ZNBq]k
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 1b aa 59 b8 00 07 db de a9 ba ff 03 eb 52 f1 e0 db 1e 6d d9 92 61 9d a3 ca 73 7b bc bb 13 20 02 a5 71 0a 6a 44 af 98 a2 f6 81 51 df 30 0c c1 39 36 1d 2f 9f d1 cd cc 5c 61 b2 08 42 5c 98 7f 2b 99 2f de 35 13 33 72 b0 cb e5 aa dc 86 ff 27 ac ff 86 c8 01 9d 1a 76 05 f4 83 57 f1 b3 2b d2 1c 64 35 81 53 68 ae 31 e0 4b 1b 02 c5 ed 2d d4 fc 46 3b 43 a2 43 e3 70 4c 2d 18 76 37 40 90 dc e8 a5 30 52 b9 7d b3 78 ed 8e f2 d2 fa d9 27 76 26 f3 b5 cc 72 08 23 fa 9b 88 db f1 7c 62 bc 7a 45 ed 4e 25 d0 e4 c8 af 17 e7 df fc eb 91 7c f3 33 41 bd 05 7b 2e 91 f9 3e f7 63 41 38 6a 89 b3 2d 81 1b f7 c0 7b 6c df 78 bf 37 28 7f 44 a4 f6 10 f6 a4 83 3e a2 6a bb e1 eb 99 67 c9 6d ac 35 a5 57 2e ca 89 85 9d 2c be a5 42 78 a8 55 fc 3e 4a 28 96 5b f8 08 4e 26 5e 58 be 05 a4 99 d7 e9 Data Ascii: YRmas{ qjDQ096/\aB\+/53r'vW+d5Sh1K-F;CCpL-v7@0R}x'v&r#\|bzEN%\|3A{.>cA8j-{lx7(D>jgm5W.,BxU>J([N&^X
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 6e 2c fa 4a a8 88 39 f0 99 4f e2 6d 37 9d f6 82 88 03 28 8f 91 92 a4 4d 4f 63 a9 02 48 fa df 6d 46 5d 14 95 d9 f2 59 0e 6b 10 d9 ba 66 63 f5 55 92 17 45 e7 04 01 a9 f8 40 51 66 53 2e 4e 66 bb 6e 43 c2 be b5 e3 38 30 5e 19 21 a5 2f 67 fd c6 ef 6b bc ea ce 39 14 6c 84 ae 62 5f 0c c0 5b 1a c3 5c 8d e7 04 2c e9 a0 0a 31 d0 9e 23 91 bb 33 f1 d7 ef 4e ce 31 44 9d 88 9c 5f d0 98 ad a4 0f 89 48 68 94 c9 77 5d 27 3a 32 08 72 15 c2 b5 de 94 1d 94 a6 8c 4c 19 1b 85 af 7e ea 8a 5f b3 31 0a c8 c6 ab 90 b9 1e 3f a9 b9 5f 37 57 e2 a5 46 b6 19 b0 1d db 7a e4 53 d8 fd ac 33 4c 2f c7 cb 68 11 45 a7 51 b6 69 40 0c 79 7f b9 8b a5 57 58 2b f6 b4 7c b0 f8 d4 e4 24 02 d9 44 4e 0d 4f 10 7f d6 7d f5 2b af 87 99 aa a9 fa 11 52 55 33 e2 82 80 97 69 25 80 6c e2 e1 8f 89 95 75 27 39 Data Ascii: n,J9Om7(MOcHmF]YkfcUE@QfS.NfnC80^!/gk9lb_[\,1#3N1D_Hhw]':2rL~_1?_7WFzS3L/hEQi@yWX+\|$DNO}+RU3i%lu'9
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: f4 6b 99 2d 71 c0 7a a1 03 48 95 76 67 a6 9f 67 3b 83 86 a5 e5 be a5 78 79 73 6e 2c c3 fc d7 8f 39 93 45 88 93 24 01 18 84 1e 5b d6 a8 3d ef f7 43 7b fe 5f a6 56 0f 03 03 35 95 ae 2b 6a d3 ef 9b 05 d1 ca 67 ec 11 fc 03 40 d4 91 76 2f 68 e1 ba 1e 61 99 b2 1a de f3 06 d8 15 de 9c 98 da f3 3e 16 90 75 e6 3e 36 b9 ce fc 56 98 69 b6 49 18 18 8d 58 fb e1 7c ad 2a a7 e0 dc 19 c9 58 e3 d3 a5 d8 98 ff 59 33 72 43 bb 2c 02 17 d1 4a 54 33 61 12 23 e6 9b c5 19 01 09 c7 5a c7 3c 47 10 5b 84 b6 f4 4a b7 34 cd 6c 41 9d 31 e6 02 b1 fb b7 36 07 17 51 86 c9 d9 32 ef 6f 6c e1 69 53 5b 7b 37 4b 82 5c 70 e5 57 57 98 c9 e0 31 53 24 ea b4 bb 31 15 12 95 46 a7 3c 61 04 bd fe 2f 19 3d fc d3 3d 8c 2b 6e 13 2c 5c 25 b7 0b 71 34 de d4 bd f3 d8 05 ac e1 3c f9 59 e0 56 3b 92 d7 a8 8c Data Ascii: k-qzHvgg;xysn,9E$[=C{_V5+jg@v/ha>u>6ViIX\|*XY3rC,JT3a#Z<G[J4lA16Q2oliS[{7K\pWW1S$1F<a/==+n,\%q4<YV;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 34 15 80 e2 86 99 86 86 53 45 a4 03 40 6c 8f 52 58 93 b0 0d 7c ed ca ff 7b b5 95 4e 62 92 03 e1 0e af d8 af ff 1b 2b 56 b1 35 9a 08 7e ce 00 41 4c d1 9d cf 1d 2a 5f 98 1c f4 fa 32 b4 2b 40 5f a3 15 38 17 26 d9 5e 17 a0 74 1f 2e 45 94 1c 71 66 22 d4 17 d7 f8 14 72 4f 5f 77 71 c0 fe ff ff f3 5e 83 f0 dd 65 1c 4b b3 53 38 bd 16 4b 70 8a c7 c2 b6 3f 39 93 65 88 d6 30 09 fa 7d 43 5a ed 33 8a 62 3c 32 48 b1 11 ec 96 ca 23 66 df 8b 7d 29 22 6c dc 81 18 c5 bb 92 11 41 b1 ce 45 9f 39 85 83 21 6a 32 47 1a 23 00 20 a0 92 d9 64 59 c9 6f 19 1f 9e 43 74 99 e7 97 cc 47 5d f5 dd 4d de 39 4e 26 ae 9a 99 9b 15 ae 25 02 7d 85 ca bf e2 30 0e 7c dc 7a b0 3d 74 31 50 31 f6 a0 31 11 11 7d 31 9c cc 16 aa 96 56 37 e8 d9 b3 58 6e b7 f6 57 ea 04 bc a0 0b ef 82 70 ea 98 83 0f 09 31 Data Ascii: 4SE@lRX\|{Nb+V5~AL*_2+@_8&^t.Eqf"rO_wq^eKS8Kp?9e0}CZ3b<2H#f})"lAE9!j2G# dYoCtG]M9N&%}0\|z=t1P11}1V7XnWp1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	50011	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	523	OUT	GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4790 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6516 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	722	IN	Data Raw: 52 49 46 46 ae 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 65 12 00 00 2f 3f c0 0f 10 4d 30 6a 1b 49 52 d2 f3 1a a5 f9 13 de 03 43 44 ff 27 40 fb 7b ce c3 e0 51 dc 42 b4 d9 84 98 45 95 d9 cf 85 9a 36 92 1c 43 78 fe b8 1e 46 ac 63 b5 20 d8 36 92 a4 a8 0e a3 80 ff fc 03 7b 7b cd 67 11 64 db d4 e1 fe 6e 33 79 ff 27 00 00 74 88 2a 55 ca 82 00 38 d4 31 b8 35 2d 11 b6 96 dc 47 d1 17 00 f8 a9 00 38 01 02 b2 9d 37 0c a4 6d 93 fa b7 bd 5f 43 44 4c 00 64 76 9c 55 68 3f 28 5f db d3 fe 1f 92 25 65 56 f3 78 6c db 5a db b6 6d db 57 b6 6d db b6 75 67 db de e3 33 9e c6 9c ae ca 8b 3e fa 13 de 8d 1c 4f af d5 f1 b9 f8 c5 d8 ac 88 5f 6c 7c c6 76 6d e4 da 56 4e d4 5a c3 13 21 c5 b6 b6 65 cb f6 85 bb 0f c0 32 dd 1a 8b 69 30 03 22 0d Data Ascii: RIFFWEBPVP8X??VP8Le/?M0jIRCD'@{QBE6CxFc 6{{gdn3y't*U815-G87m_CDLdvUh?(_%eVxlZmWmug3>O_l\|vmVNZ!e2i0"
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 63 0c 96 a1 8a 6e 60 cb 0e 32 23 c3 64 0c f0 cb 76 70 1b 00 e4 05 ce 91 40 42 42 80 98 aa 83 6c c0 18 63 cb 60 30 dc 00 2a 71 0d 4a 02 00 b0 20 f2 70 8e 19 6f 05 c0 80 e9 1f 6c 63 eb 6f 43 13 62 b2 65 01 43 2c 04 0d 09 ae 6d 09 a4 90 d3 eb e0 33 8e 1a c0 00 06 6c 63 fa 1f 07 c0 dd d7 b9 4c d5 4c 18 ab fa fe fb bf 71 c7 af 9c 63 ca c6 d3 27 1b c0 60 c0 d8 c0 71 00 b7 5a 46 93 37 e8 08 d5 4a b0 18 4c 87 41 00 c9 41 8e 47 c1 c1 cc d8 90 83 c1 15 60 c0 06 e1 a1 a8 1b 78 fc c8 ed 2f 9a d6 e7 bc 02 37 1c 92 06 1b c4 ea 6e 19 77 08 cc 41 22 ce 99 e1 3d d8 97 80 ed 01 81 c1 b2 3d 10 02 1c 72 52 51 db 55 db 1d cf ca 4f 2e d8 ec c9 2a b6 8d b4 56 17 6d ad 8a 9f ec 9c 78 d6 9f 35 67 3b c5 b2 30 44 0d d8 60 00 41 30 03 36 02 34 c1 1a 63 76 44 55 6a 83 33 fc ae d7 f8 Data Ascii: cn`2#dvp@BBlc`0qJ polcoCbeC,m3lcLLqc'`qZF7JLAAG`x/7nwA"==rRQUO.Vmx5g;0D`A064cvDUj3
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e4 8d 49 80 69 bc b5 45 45 98 f7 07 8f bb 16 bf c3 ef 8b 5d 95 67 5c 2f 3f e8 7b 77 d6 7b 93 86 b2 79 34 1b 46 b3 f1 85 80 95 e4 80 10 4c 32 29 7a fd f7 4b be fc ef 8c aa 41 f2 b4 67 7b c5 de 19 89 c1 cd 24 45 e2 6c 24 5b b2 36 89 24 25 a4 4c b6 d6 f2 fc 53 86 a7 13 67 11 bd 74 8f ed 9b 3a 8f 0a 4f 40 bb 7a cf e7 2d e7 fa f6 ee 98 0f 1f af c8 97 db a2 8b be 8f 5a 23 5a 0b 07 6c 9e f6 c5 94 c8 62 b1 68 60 82 f1 93 29 ce e2 b7 7d b8 ca 51 ab d7 3a 65 89 d6 8b af 3a 1b b6 ee ea a1 2b af 39 f8 ba 85 e3 4f 5f 6a 4e 25 d5 4b ca d5 c9 73 ba d8 34 ff 4f d4 5a 9c b5 a3 13 5d 4c 3f 36 ac 5a 7c 48 55 a7 20 b3 62 23 5a 41 46 c9 05 9e 30 27 4d 89 52 fe 1c e9 56 ba 27 5f 34 67 87 bf e6 cd 0d dc 8a 4e f5 d9 ef 6b de 72 be ea e1 eb 4b 44 c0 01 dc 18 fd 60 eb b4 8f 3b 97 Data Ascii: IiEE]g\/?{w{y4FL2)zKAg{$El$[6$%LSgt:O@z-Z#Zlbh`)}Q:e:+9O_jN%Ks4OZ]L?6Z\|HU b#ZAF0'MRV'_4gNkrKD`;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: a8 b6 aa 89 1e 90 0c b3 ee fd aa 09 13 eb c2 2a df 11 e7 a4 90 c0 05 71 16 03 d9 3a a0 51 d1 0c a4 d8 74 d8 45 d3 a1 0d ab 16 15 27 2e e9 f3 fa 96 3a bf 6e 08 ef 1b c2 62 81 b6 6b 93 79 73 32 6f 02 6d c2 b2 86 9a 6a c4 28 49 18 fc f2 d2 3d 2e 58 77 c4 49 0b e5 d5 de 24 af f4 ce 33 e1 b5 bf e2 36 a5 1e 98 4a 41 54 df 56 52 1e 14 a2 48 08 fd 3e 73 1d bf 19 1e f4 fc a4 f8 f6 5e 65 91 c8 0a f1 08 c0 3a a8 24 2a 28 49 4a ba f4 67 f4 c5 3e ef ba 4a cf 24 c1 0b 24 fa 89 89 04 f4 31 9e 20 4c a5 0e a8 0b a8 27 0f e5 c8 d6 36 56 e7 d7 15 a1 83 c3 b0 29 1d 03 55 95 6a 50 12 fa 00 42 0a 4d 12 06 be 30 bb d1 f7 5b 2f 3a fb 87 bc 43 d3 c5 e0 19 5e 08 ee 49 5d 6f a0 58 55 76 f4 3d 9a fd d2 bb ce b3 43 ab 3c 33 29 ee 87 26 5b 15 12 41 c6 fc 10 fc a6 5e 43 86 06 c9 7f 7a Data Ascii: q:QtE'.:nbkys2omj(I=.XwI$36JATVRH>s^e:$(IJg>J$$1 L'6V)UjPBM0[/:C^I]oXUv=C<3)&[A^Cz
2024-04-19 14:06:45 UTC	303	IN	Data Raw: 9a c6 04 90 83 48 c3 88 52 6f fc f8 c7 8d c6 a2 65 5d 7c 67 48 98 07 27 44 97 83 33 cb 68 bb 16 0a a5 ff c9 06 50 6c 36 8b 66 33 54 21 f2 62 d0 6d ad b2 91 85 21 ad ae 46 61 2c 1b b0 ac a4 1c 38 33 78 69 7c 14 cd 62 fb 75 82 72 e4 b2 0c 79 10 59 19 88 15 95 84 2c 43 da 2a fa 13 55 d0 50 70 6e 0e 6e 13 75 00 0b 03 c8 51 1d 98 19 9b 8d 18 72 c5 50 da 76 08 98 1f a8 55 25 42 07 48 52 a1 18 0b 2b 06 e7 18 08 18 cb 08 84 84 28 82 73 db 79 88 0e 36 01 83 33 4e 8b 41 3a 70 c7 28 21 c5 58 10 8b 88 1c ca dc c1 c8 12 51 08 11 1c 20 04 85 e0 60 6c cb b6 bf 9c e8 6e d1 97 10 76 ac 88 03 a3 a4 88 88 8a 45 34 a6 bf fb 03 12 21 28 58 86 3c b7 8d 91 8d fd ef a4 95 31 5b cc 2b 31 3a 49 ec 79 a0 14 11 91 28 22 31 4a 42 42 80 32 60 db 10 ac e0 10 82 03 36 18 d7 e4 a6 9a 1a Data Ascii: HRoe]\|gH'D3hPl6f3T!bm!Fa,83xi\|buryY,C*UPpnnuQrPvU%BHR+(sy63NA:p(!XQ `lnvE4!(X<1[+1:Iy("1JBB2`6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	50010	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	538	OUT	GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19928 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6516 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 d0 4d 00 00 57 45 42 50 56 50 38 20 c4 4d 00 00 50 38 01 9d 01 2a 88 02 6c 01 3e 3d 1e 8c 44 a2 21 a4 92 59 5d 30 48 03 c4 b2 b7 7c 25 5d ba b3 57 be 7c 51 ae 84 70 7e 95 72 03 c8 fb c0 3d 67 ee cf c8 fe 59 f8 41 cc 7e f4 fc c7 e4 1f f7 0f d7 6f 9e fe 43 f1 57 d7 7d f9 fd de ff 25 f9 3f 82 0f 92 66 27 d3 9f e3 7f 30 ff c4 ff ff fa 9f ff 47 d5 b7 e9 6f fb 9e e0 1f a2 bf d8 bf ba ff 74 ff 43 fd cf ff ff ff ff bc 3f fa bf ce fb 8e fe a5 e8 63 f9 0f f6 2f f7 1f df 3f 7c fe 76 ff d2 7e 99 fb e8 ff 79 ea 05 fd 8b fa b7 fd 2f 5b 1f 63 8f 40 4f d9 6f 4c 4f fd 9f e9 7e 1b 7f ab ff 99 ff c9 fe 7b f7 ff e8 4f f9 e7 f5 6f fa 1f 9f 7f 20 1e 80 1e 80 1d 72 7e 93 fc 8b fc f7 e5 e7 a0 3e 72 7d e9 ed b7 c8 36 14 fe 2f fb ff 34 3f 9d 7e 40 fd b7 f8 af dd 6f 8a Data Ascii: RIFFMWEBPVP8 MP8*l>=D!Y]0H\|%]W\|Qp~r=gYA~oCW}%?f'0GotC?c/?\|v~y/[c@OoLO~{Oo r~>r}6/4?~@o
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 70 af 5c 55 e9 90 3f 71 f0 5a da 55 09 39 ee 9b df 4d ab 9c 4a 1e eb 68 c8 06 81 5f 6f 7c 29 94 16 79 ac 48 fb 2a 0d 76 07 fc e7 5e b9 c3 07 fd 13 66 4c f2 74 7e cc ec 4f f0 cb 79 f7 6b f2 54 75 a5 03 92 c5 ef 90 ba 69 dd b7 4b c3 ca 2e d8 e5 0f e3 24 18 8f 1d 4f c3 19 63 dc 52 d0 ec 72 6a 14 68 3c 93 3e 86 69 66 11 2f a5 91 74 a4 22 1f b6 7a cf 0e b1 37 c4 2b 3f f9 51 c8 3e d3 cf c5 d0 02 db 4b 9d a5 e2 27 bc 1a 1d c5 25 b8 65 01 8e 4c b8 c9 32 7f 7d 1c a0 55 7c 2c c6 ec 38 06 10 8f 4b fb fb 02 9c 76 1e d7 de 63 de d6 ec 48 b9 67 a4 e9 da 8a 1e 6e 99 3b c5 ab ef f0 7f ba d3 26 91 0e 12 d9 da 73 f1 e4 98 39 33 3f 96 7b 63 3c 31 3f 6c 0b 3d e2 69 c9 eb 76 77 7c 37 8e e5 33 c7 71 cc cc 16 8d 85 bf d5 7f f7 cf 31 0b c5 98 2e 16 9f 79 31 58 50 ba cc 6f 7a 8d Data Ascii: p\U?qZU9MJh_o\|)yH*v^fLt~OykTuiK.$OcRrjh<>if/t"z7+?Q>K'%eL2}U\|,8KvcHgn;&s93?{c<1?l=ivw\|73q1.y1XPoz
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: ff 73 e8 e2 e6 79 d3 67 72 20 c2 d1 19 e8 99 9c 3d c9 da 84 67 65 4b fd 1b 73 65 a8 e4 d6 98 70 30 9c 11 1b 99 ff bb 12 06 75 39 80 49 e5 0c b8 f3 07 4a bc d4 4e 3d 79 d4 3b 19 39 36 de 71 09 44 05 b7 8e ec d6 6d 66 66 61 e9 f5 4d 96 2d 5f f6 f1 2d 56 4a d5 a2 e4 ee aa 5e 2b c2 4c fc 1d a1 55 b8 64 8a 80 c8 fc a9 6f 7a 3d 4a 38 27 54 88 5f f4 53 d0 81 f0 90 d7 19 e3 6d 5a 61 42 93 8b a5 5d c2 37 11 9d aa 8f 1f 28 79 65 28 07 e6 76 c2 7c 94 df 51 f9 e0 27 1b f3 b2 9a 7f 0d b5 a9 38 84 e1 83 18 89 7c 81 78 83 2e 8c 8b 75 49 18 69 04 67 5a b3 e9 f4 e8 0c 9a b2 a2 7a 06 c1 f4 ba 89 46 1a a4 e4 18 49 4b 5e b7 5a d0 cd 5a 8f e4 4c 5d 66 c7 a3 3b f1 db 1a 97 04 c9 6e 53 ce af 0a 6e 24 11 61 af 30 6a 43 25 3b 4d 76 77 f2 aa e5 b6 f3 80 01 81 04 a7 1b 3c d4 3a 95 Data Ascii: sygr =geKsep0u9IJN=y;96qDmffaM-_-VJ^+LUdoz=J8'T_SmZaB]7(ye(v\|Q'8\|x.uIigZzFIK^ZZL]f;nSn$a0jC%;Mvw<:
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 84 01 52 84 e6 e6 78 7f 57 50 9e 9f 92 20 6d d5 f0 1f 78 d5 f8 bd 9e 48 6b 03 c3 1e 02 2d be 06 17 ee 9a c7 8e 72 ba d4 74 c7 3c 0b 2a fc ba ba 0d 96 93 9c 51 c8 7f 8e 61 65 27 bd 4d 3e 3d dc 95 63 87 fd 93 af 17 31 15 3c fa 39 9f fb 6a 93 e1 a7 b5 3b 3c 10 cf f8 80 00 9b 0c a0 f1 1d 03 c4 65 05 00 04 7c ba 98 ec 37 4e 61 1a 2a 41 00 02 e7 7b 47 35 c9 a2 8e 41 c7 92 3f c2 d3 c4 74 36 c0 7a 90 d1 47 71 74 db 09 c2 31 37 e4 33 e6 98 72 2b 4c 1b c2 75 21 e4 6d b3 28 00 ff ff 72 43 74 be 55 fb fe 74 d6 d6 c8 d6 8a 79 fd 18 96 18 77 e8 3d 57 6c 00 07 6d 84 bb 4a 94 d4 1d 3d 7b 45 da 2c c2 e1 fe 76 fe 2d f7 1a 11 27 0f a3 8e 21 d2 a2 d9 d1 c6 f3 ec 01 b5 48 7b c5 5f 73 76 01 b2 47 41 f2 b9 e0 7e 6e b1 62 b2 95 d3 c1 89 e4 9b 34 37 72 65 0c 0e 64 a8 c0 5f 06 fe Data Ascii: RxWP mxHk-rt<Qae'M>=c1<9j;<e\|7NaA{G5A?t6zGqt173r+Lu!m(rCtUtyw=WlmJ={E,v-'!H{_svGA~nb47red_
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e8 50 ea 9e 71 c1 4b 12 01 df f1 8d ae af 71 0b ad e6 fe 04 ea 69 25 08 6c 19 f0 c8 33 64 58 6e 1d 2d e2 62 fd d8 41 55 2d 0e b9 22 fe d9 4e 3f 40 4e 50 98 44 cf bf 40 9c f4 99 30 b4 58 d2 0a f4 29 c3 26 e2 5c d9 3f 3c 62 57 67 9f 97 16 9b cb 9f 2c a2 2f f1 12 46 e2 98 24 11 cd 92 63 2e b7 87 d6 7b af e8 4b 86 75 c0 51 eb dc 24 bf 59 2c 53 e0 cd 61 91 ed 17 97 1d ae 2e a0 4e 81 de 14 04 b1 18 6f e5 74 1e 9f bb c1 14 fb a4 f7 f9 6a 29 ae 89 fd 8c 6c cc c2 83 29 84 b6 46 c7 2b 4c dd 7c 78 16 ec 3e f0 a0 0a 23 a2 51 96 dd 39 f1 39 3d 19 78 ae 9e 74 7b 8c 19 ba e9 5b 14 82 98 68 a6 bb f7 c1 be cc f0 e7 c5 0a 4d 8b 60 47 6e 2e 25 73 af 14 6a 5f 6a 68 7e 61 01 dc 47 c2 2e cf 25 99 d8 e2 5b 97 0d 48 7c 56 c6 fd a1 5a 1a 86 a2 27 4f 14 75 a3 ea ca 3f ce d1 b5 04 Data Ascii: PqKqi%l3dXn-bAU-"N?@NPD@0X)&\?<bWg,/F$c.{KuQ$Y,Sa.Notj)l)F+L\|x>#Q99=xt{[hM`Gn.%sj_jh~aG.%[H\|VZ'Ou?
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 30 b9 9e 70 48 dd fd 3b 89 51 a7 64 50 51 f9 78 fb c7 97 58 a7 ee 71 04 0d 76 86 a6 29 e1 45 ce da e7 63 4f fc 79 48 9a e2 5c 5e 81 69 79 05 e2 a7 cf 85 20 4f bb 5e 26 4b 3d 6c f7 ed 59 e0 d4 ff 57 33 8f 1c 8a e6 1d 00 02 08 5d 25 e1 7f bf 03 9c d6 d6 fe f8 8a 7f b9 43 19 c8 53 62 0c ad e2 bc 3f e6 1a c6 9c df cc 43 80 7a 60 d9 93 1d 1c 69 62 08 53 44 79 e3 91 b4 95 66 31 2f ae 72 92 2e c6 89 ce 8e 50 6a 13 0b d6 2f 05 0c 00 4c c3 28 97 a5 64 e0 61 41 cf cf d1 89 3e 08 47 17 9d b3 11 4e 50 84 b7 b1 30 39 ad 35 03 aa 16 15 59 32 b7 cd a3 d6 5f ff 4e c8 87 8a 29 61 82 13 71 dc 73 b1 ea 70 53 cc 3a ba 78 11 ac af fd 7d 7d 2e 93 24 26 18 f6 a9 93 6b 52 aa 7f 9e 2c d9 92 b2 ca 7f f6 5c 65 2c da bc 45 a2 f1 37 c2 2f d0 80 a9 2f 8c 56 48 07 46 6b 4f 30 d6 54 f4 Data Ascii: 0pH;QdPQxXqv)EcOyH\^iy O^&K=lYW3]%CSb?Cz`ibSDyf1/r.Pj/L(daA>GNP095Y2_N)aqspS:x}}.$&kR,\e,E7//VHFkO0T
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 92 13 01 14 34 7c e2 40 59 75 65 50 4b 9d 1b 86 47 44 a2 e4 0f 87 4c 9e 13 e6 98 cb 37 07 fb e3 0a 47 3d e1 34 5e 47 c1 1a 2f 4b c6 b9 2e 73 7c 05 43 2a 8d 41 58 f7 54 77 e5 a2 a2 36 99 71 59 dc ef 6a 24 96 6e bb a5 47 38 34 f9 ad a9 c8 d0 84 51 b0 35 71 45 fc b5 99 d1 48 b1 42 13 ab 48 75 9a da 94 a5 8c 9e 69 6a 14 18 2e 40 30 67 aa 57 87 c3 11 06 61 85 5c 8f 1b 4a 4e ff 57 37 35 9f 3f 8e 71 84 ca 77 94 75 40 d2 5c 25 be 5f d8 79 23 6a 06 dc 7b bc ce 0c eb 56 ed e6 36 e8 3e bd 00 f1 3d 98 5b 9a b5 18 c5 46 aa bc 15 83 6c 76 d2 68 26 b5 26 dc c8 c3 8a cc c9 8e af cf 0d 47 23 f3 b9 02 ca fa 6a 70 42 42 ce 17 46 6a ed df 99 11 c5 3f 6a ee ed b5 62 10 05 f6 eb 3d 77 af b2 af 0d 24 4d 29 d5 0a 9c 6d 46 54 42 b8 3b 79 72 ba fd 7d 33 ea 68 26 ce 3b 70 9c 83 43 Data Ascii: 4\|@YuePKGDL7G=4^G/K.s\|C*AXTw6qYj$nG84Q5qEHBHuij.@0gWa\JNW75?qwu@\%_y#j{V6>=[Flvh&&G#jpBBFj?jb=w$M)mFTB;yr}3h&;pC
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 10 44 02 d3 01 c4 b2 d6 07 77 80 4a 4d b9 65 30 60 7b c6 8c 34 81 d1 42 9b f3 d8 97 5d 38 54 49 a6 5e 34 90 ff 2a 02 79 05 2a 3c f0 b9 68 d4 f0 b3 32 3b 59 52 2a ae 79 ed 3e e9 d1 53 24 11 2f fa d0 a5 86 3a f5 d3 2b 90 91 03 07 e8 d1 90 7b 3f 07 d8 3d 7b 12 b6 70 9a 6c 6f d4 4d bf 2e a6 dc d1 03 c5 1d a0 82 7f a7 61 f4 ba 02 53 dc c4 4a 82 69 2e bd 26 42 6d 45 f8 52 73 45 3a b6 fe ab 63 db 52 70 65 ac 85 74 bb 63 a1 35 b8 f2 59 bc 68 b3 42 a4 51 54 44 97 e7 a9 78 04 e6 dc be 3b 84 00 59 a7 65 5a 0d c0 91 fd de 20 58 b7 16 3c 0b 10 9d dc 7d d9 34 60 e4 c0 bc bc 19 a8 e0 84 17 98 58 5e 4d a1 48 d7 f6 f2 57 ae 05 a8 01 8c 23 9e d5 8b e5 01 4a b6 b5 a4 11 60 99 7b 0c 0c 91 98 71 e6 4c cf 03 d0 1c 94 ae 36 aa cf 45 f1 af 11 42 12 b3 8b 30 01 7b 8a 72 f4 3f de Data Ascii: DwJMe0`{4B]8TI^4y<h2;YR*y>S$/:+{?={ploM.aSJi.&BmERsE:cRpetc5YhBQTDx;YeZ X<}4`X^MHW#J`{qL6EB0{r?
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 0f 17 70 58 f6 ed 23 bb 87 a8 b7 bd 68 ef a4 c4 43 ce d6 24 57 38 b7 0b 54 e8 6f 72 4e 5f d8 40 35 f3 0f b0 f7 1f 80 34 2e ad 1a 3b 3b 91 29 51 93 fd f3 7e 9b f4 77 31 ae 1f 91 9f 00 35 a9 0e 73 f1 a5 cb d9 65 c1 d8 27 04 c4 6f be f1 42 7e f5 31 0e c3 8a c6 17 e0 36 91 eb 5b 42 ef a0 e3 aa a5 4a b1 7d 6e c2 bd 3a 96 74 b0 28 d4 f5 16 f1 4b 8e 1d 32 84 76 62 73 2a 67 72 a8 07 b6 d8 a1 18 4b bd 68 dc e6 7b 46 af 63 25 39 b1 9f 14 7c 49 2e 27 b6 22 17 fe 6b 77 68 0a 4e de d4 32 ce ac 6b 48 0b 81 b8 b8 10 10 18 ea f8 0f 33 dd 28 d7 0e 68 2a e1 d9 40 3d de 1c 6a aa 0a 1a ca 5e ef 2f 3e 12 64 d0 be 88 70 b0 bf 37 d1 b4 d2 ba 00 20 eb ba 4a a0 24 86 e8 ea 32 f3 c9 77 64 10 39 95 52 4f 80 d9 28 8d 8a ab 70 d5 d7 3a f7 0e c3 86 be 6e 8f 85 82 e5 dc 9e b3 4a 33 77 Data Ascii: pX#hC$W8TorN_@54.;;)Q~w15se'oB~16[BJ}n:t(K2vbsgrKh{Fc%9\|I.'"kwhN2kH3(h@=j^/>dp7 J$2wd9RO(p:nJ3w
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 87 ea 57 7d f7 a1 87 1b 5c 32 20 97 38 68 eb e8 67 d7 02 9b ad 2c 8a 46 ab df fd 62 ed c0 ff 53 a1 ba 24 55 23 6d 0c 24 ac f4 d1 51 44 f7 f5 53 e9 ff 73 54 f2 47 58 6f 45 14 4e 8d 3d f9 7f f1 6c 13 db 2c d7 47 92 05 80 45 f4 2b e8 6e 12 b8 68 96 da eb a9 70 02 62 35 70 c8 6c 35 30 8c ab 67 ea f0 6c 66 9b 95 06 d7 bf ed b9 56 6c 18 6a 16 4a 10 9c 4c 58 ab 6b 7c e3 4c 5c fc d0 b7 49 3e 77 b5 b6 a9 0a 09 b6 88 35 f8 e1 68 bb c1 28 fc 2d a3 24 0e ed be 3d 50 3f 0b ff 9f 06 bd 17 95 85 ef 6c 8f 7c 3e bf c0 39 41 6c 77 b1 c4 a9 41 97 57 ff ed ad 10 19 5d 74 18 f8 4f eb 83 c7 e9 c7 41 70 e1 9a 51 a0 b5 40 2e 31 8f 82 d3 ae 42 00 a7 2f 49 14 38 c2 f1 df 6a 1e 21 1f f9 d9 b9 28 13 c5 4d 49 ec 4c fd 4d 0e 1f 60 9f 18 34 49 60 fb 25 93 af c1 f7 d7 dd 5c 88 60 4e e0 Data Ascii: W}\2 8hg,FbS$U#m$QDSsTGXoEN=l,GE+nhpb5pl50glfVljJLXk\|L\I>w5h(-$=P?l\|>9AlwAW]tOApQ@.1B/I8j!(MILM`4I`%\`N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	50008	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	537	OUT	GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 194 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:04 GMT Expires: Sat, 20 Apr 2024 11:17:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 10181 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	194	IN	Data Raw: 52 49 46 46 ba 00 00 00 57 45 42 50 56 50 38 4c ae 00 00 00 2f 0f c0 03 10 05 dc 6c db 8e 3d f7 10 d9 24 43 24 2d 57 60 97 de b6 ed d4 9e c0 b6 6d db f6 55 3c cf b7 43 c4 91 ff 27 00 f4 6f f7 8f bd 93 24 68 b7 b7 0f a9 aa cd 69 3f 4e ce aa 81 e6 a8 06 87 ed f8 9d 24 bd e4 23 df 93 7f 4d 5d 87 5c 5d 53 07 9b 8d 4e 44 55 d5 a4 86 8e ff d9 e4 0f ca 3d f5 b7 59 ef 64 dd 4f 72 f5 49 b2 7f f8 d2 e3 47 6e 4f 5c f6 ff f8 b4 aa e5 c9 c1 c5 33 9f d4 d0 2f d5 27 99 77 e2 4c 55 66 3c 1d d9 9c 26 53 2e 7f ac 19 4f 6b 69 d5 a6 eb 49 72 e9 cb 8e f3 27 6a cc de 17 69 41 b2 6f f2 f1 1f e9 03 Data Ascii: RIFFWEBPVP8L/l=$C$-W`mU<C'o$hi?N$#M]\]SNDU=YdOrIGnO\3/'wLUf<&S.OkiIr'jiAo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	50014	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	1572	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7879 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=vvy75smw70si Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajOHZZBN-hHGcVN016Y57cTwWF_qpyxc1mk6RBbKmxlLUWNI0wCWDpKHz9Rv1Nwz1OE7yQdwZAeixXMhts; NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:45 UTC	7879	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 36 47 55 4b 58 49 6f 69 2d 64 6b 32 59 61 42 7a 63 71 6d 68 58 72 77 41 2d 54 61 66 42 46 6c 42 50 6f 4a 4d 70 68 2d 6c 51 70 42 78 47 74 72 4c 7a 73 44 31 46 54 31 32 69 41 67 55 4e 75 38 30 4b 38 6c 5f 56 51 55 67 6b 77 38 76 79 6d 5f 55 30 50 65 59 41 77 7a 5a 71 54 76 75 54 37 44 50 66 75 35 78 53 4e 58 43 49 43 4e 76 33 32 30 37 66 61 2d 6d 6d 48 6a 58 4a 56 66 76 6d 36 69 6e 4f 4e 79 77 35 6f 37 76 63 6c 30 59 69 4a 54 59 69 55 64 4c 68 4e 56 65 46 32 45 65 6f 55 5f 59 48 4e 4f 6d 6f 4f 5f 48 2d 79 38 55 55 78 2d 50 70 46 68 70 30 57 54 46 70 53 79 4f 4f 70 69 41 31 4e 6b 45 55 53 6e 33 6b 4d 43 78 76 53 71 6f 4d 6d 69 45 79 33 45 48 38 6f Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA6GUKXIoi-dk2YaBzcqmhXrwA-TafBFlBPoJMph-lQpBxGtrLzsD1FT12iAgUNu80K8l_VQUgkw8vym_U0PeYAwzZqTvuT7DPfu5xSNXCICNv3207fa-mmHjXJVfvm6inONyw5o7vcl0YiJTYiUdLhNVeF2EeoU_YHNOmoO_H-y8UUx-PpFhp0WTFpSyOOpiA1NkEUSn3kMCxvSqoMmiEy3EH8o
2024-04-19 14:06:45 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:06:45 GMT Expires: Fri, 19 Apr 2024 14:06:45 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOajABR0g7qZbFFvXxLIiuS-icYJuX6T4xVv4ULlkW1w9yiOimHyDQuaZ9wp8isGwIugD4sElugfyCfJpI2Q;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:06:45 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:45 UTC	559	IN	Data Raw: 61 36 35 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 37 64 70 54 51 38 43 71 32 49 2d 66 4d 75 59 48 74 2d 70 65 34 67 48 61 53 73 38 6e 5a 41 49 57 4a 4b 6c 35 6f 6d 51 59 59 50 69 44 4f 30 58 66 35 50 65 7a 74 46 34 6c 2d 54 47 36 4d 43 42 52 59 41 59 70 6b 32 53 42 43 64 43 33 71 6a 4d 63 73 5f 68 68 78 79 30 66 36 6c 6a 48 39 57 77 70 6d 30 5f 6c 37 2d 63 78 64 47 6a 4e 74 7a 56 74 4a 4d 62 77 35 4e 4a 74 4b 4f 67 55 47 48 6c 4c 4e 6e 76 49 49 54 76 56 56 32 78 48 70 2d 67 59 4e 4e 46 5a 61 70 73 71 50 49 74 5f 30 6b 6d 59 4c 76 56 38 4b 4e 57 6c 79 67 64 33 75 31 49 46 55 61 31 78 41 33 59 46 72 63 57 63 52 4e 6e 70 54 7a 42 69 5f 55 67 33 53 2d 4e 66 4d 54 5f 44 76 57 77 64 52 4a 4d 34 6e 36 4c 73 6c 74 37 35 5a 49 Data Ascii: a65)]}'["rresp","03AFcWeA77dpTQ8Cq2I-fMuYHt-pe4gHaSs8nZAIWJKl5omQYYPiDO0Xf5PeztF4l-TG6MCBRYAYpk2SBCdC3qjMcs_hhxy0f6ljH9Wwpm0_l7-cxdGjNtzVtJMbw5NJtKOgUGHlLNnvIITvVV2xHp-gYNNFZapsqPIt_0kmYLvV8KNWlygd3u1IFUa1xA3YFrcWcRNnpTzBi_Ug3S-NfMT_DvWwdRJM4n6Lslt75ZI
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 70 4f 35 71 37 6e 48 66 5a 7a 4c 46 61 47 32 79 44 2d 48 39 77 6f 6c 69 70 4e 63 65 56 69 42 58 59 76 66 31 4d 6a 64 6d 4e 6a 50 73 79 33 34 45 79 32 4a 56 79 61 49 72 71 4f 6c 52 72 5a 32 77 49 70 32 30 50 77 34 64 79 67 72 32 4f 5f 63 63 68 2d 79 65 67 30 77 35 77 53 62 5f 39 36 58 56 38 4c 49 6b 32 69 6a 6e 39 79 51 70 5a 6b 63 43 59 44 38 61 6a 34 69 59 38 35 54 54 33 72 73 5f 41 62 6e 5a 41 6f 4e 41 75 78 4b 4d 6c 47 76 6b 70 78 4b 78 57 7a 76 36 34 54 74 6a 4a 47 33 4b 57 7a 65 78 38 64 37 36 64 53 38 52 49 54 6a 5f 4e 30 42 61 59 6e 34 6a 32 4c 32 64 44 68 6d 53 75 66 79 5a 75 5f 6e 53 77 67 35 51 31 63 6a 6a 4c 6e 4c 73 4c 77 48 61 2d 73 48 44 7a 51 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: pO5q7nHfZzLFaG2yD-H9wolipNceViBXYvf1MjdmNjPsy34Ey2JVyaIrqOlRrZ2wIp20Pw4dygr2O_cch-yeg0w5wSb_96XV8LIk2ijn9yQpZkcCYD8aj4iY85TT3rs_AbnZAoNAuxKMlGvkpxKxWzv64TtjJG3KWzex8d76dS8RITj_N0BaYn4j2L2dDhmSufyZu_nSwg5Q1cjjLnLsLwHa-sHDzQ",null,120,null,null,null,["bgdat
2024-04-19 14:06:45 UTC	854	IN	Data Raw: 73 76 64 6b 74 34 51 56 46 59 61 32 64 6e 4c 32 51 76 56 54 4e 4d 65 6c 4a 75 62 30 4a 72 62 46 56 7a 62 45 70 57 62 55 46 32 62 6a 5a 42 55 57 35 32 55 32 4e 42 52 7a 52 45 59 32 4a 59 59 6a 41 34 51 54 64 49 61 33 41 7a 54 55 68 47 63 55 30 32 65 6b 4a 55 4d 45 31 55 59 6b 49 33 63 57 64 58 5a 31 52 6b 57 54 5a 54 64 57 73 32 54 7a 4e 48 4e 6e 4a 34 64 45 68 75 52 31 52 43 4d 56 70 43 4e 69 74 69 63 32 78 42 63 57 39 4a 61 55 5a 73 61 44 46 6e 63 48 5a 52 62 46 42 52 64 47 4e 7a 62 32 52 6a 52 56 64 79 4e 6d 56 30 64 58 5a 5a 64 58 6c 43 4b 32 73 78 4f 46 4a 46 4f 44 5a 42 5a 46 70 35 52 58 68 72 59 32 68 79 52 6d 56 4a 53 7a 4a 59 52 32 73 79 64 6d 56 45 5a 58 4a 48 65 6c 56 4c 4e 58 45 34 4e 45 31 32 51 6c 5a 6e 53 33 70 5a 65 44 4e 4c 54 47 70 30 5a Data Ascii: svdkt4QVFYa2dnL2QvVTNMelJub0JrbFVzbEpWbUF2bjZBUW52U2NBRzREY2JYYjA4QTdIa3AzTUhGcU02ekJUME1UYkI3cWdXZ1RkWTZTdWs2TzNHNnJ4dEhuR1RCMVpCNitic2xBcW9JaUZsaDFncHZRbFBRdGNzb2RjRVdyNmV0dXZZdXlCK2sxOFJFODZBZFp5RXhrY2hyRmVJSzJYR2sydmVEZXJHelVLNXE4NE12QlZnS3pZeDNLTGp0Z
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 31 36 36 66 0d 0a 59 31 4d 6e 49 32 54 33 68 50 57 58 4e 31 51 7a 52 78 5a 6a 4e 6a 64 7a 4d 32 52 46 4a 75 52 79 39 46 56 48 64 43 64 6d 78 59 57 6c 56 5a 64 44 68 4a 4f 56 46 51 64 45 64 43 52 7a 5a 68 55 6b 4e 4c 55 33 6f 34 56 55 70 76 53 31 70 53 51 54 52 34 5a 45 5a 58 61 55 56 76 56 47 38 34 63 30 5a 4a 65 45 78 70 56 6a 56 35 64 56 5a 44 57 56 68 54 65 48 70 49 64 46 6f 35 51 30 74 34 63 45 46 6b 64 6e 64 53 4d 6d 68 76 62 7a 4a 52 56 58 5a 32 64 32 35 51 65 6e 6c 52 54 47 6c 44 4d 30 5a 58 4c 7a 49 7a 61 46 42 74 4d 46 56 4c 4d 57 35 72 52 30 70 52 65 46 68 74 4c 7a 64 44 63 58 5a 4c 53 58 46 68 57 6b 31 77 62 31 64 77 5a 32 56 50 61 6b 31 4d 54 47 74 61 63 6d 35 77 57 46 46 47 65 48 56 73 62 54 6b 30 65 6e 70 4e 52 32 55 76 59 58 68 70 61 6a 46 Data Ascii: 166fY1MnI2T3hPWXN1QzRxZjNjdzM2RFJuRy9FVHdCdmxYWlVZdDhJOVFQdEdCRzZhUkNLU3o4VUpvS1pSQTR4ZEZXaUVvVG84c0ZJeExpVjV5dVZDWVhTeHpIdFo5Q0t4cEFkdndSMmhvbzJRVXZ2d25QenlRTGlDM0ZXLzIzaFBtMFVLMW5rR0pReFhtLzdDcXZLSXFhWk1wb1dwZ2VPak1MTGtacm5wWFFGeHVsbTk0enpNR2UvYXhpajF
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 4c 54 46 42 76 4d 6e 64 44 54 32 78 4a 51 6c 68 79 63 32 74 77 55 56 52 51 62 48 5a 45 52 48 63 7a 4d 46 56 59 53 6a 5a 72 53 56 68 31 53 47 4e 70 64 45 64 6a 52 7a 4a 51 53 56 4d 76 55 56 64 48 51 6c 42 79 64 48 46 46 53 56 45 7a 62 6d 46 30 52 6a 52 43 55 6b 56 5a 4d 55 6c 4b 63 6e 46 4b 4d 48 68 71 53 44 55 78 4e 57 4e 6a 61 48 70 79 61 54 5a 69 57 47 31 59 5a 31 70 49 57 6a 5a 53 55 30 49 34 62 47 67 7a 4e 6c 6f 72 52 30 78 4f 5a 6c 4e 5a 53 48 4a 36 53 32 5a 6f 61 31 52 4c 62 7a 52 47 51 56 68 7a 4d 6b 52 36 4e 32 46 45 61 6e 6c 33 52 43 39 4c 55 55 68 72 59 79 39 58 54 44 6c 45 62 6b 64 77 59 6e 64 6b 52 6b 52 43 55 6b 63 30 65 47 31 43 54 6b 39 52 5a 32 74 4a 54 6d 31 32 4c 7a 4a 45 54 6d 34 32 61 57 4a 6d 61 55 5a 48 51 54 5a 5a 52 6a 52 6f 5a 46 Data Ascii: LTFBvMndDT2xJQlhyc2twUVRQbHZERHczMFVYSjZrSVh1SGNpdEdjRzJQSVMvUVdHQlBydHFFSVEzbmF0RjRCUkVZMUlKcnFKMHhqSDUxNWNjaHpyaTZiWG1YZ1pIWjZSU0I4bGgzNlorR0xOZlNZSHJ6S2Zoa1RLbzRGQVhzMkR6N2FEanl3RC9LUUhrYy9XTDlEbkdwYndkRkRCUkc0eG1CTk9RZ2tJTm12LzJETm42aWJmaUZHQTZZRjRoZF
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 38 33 62 47 52 30 64 46 6c 34 4d 44 46 77 55 47 4a 75 51 55 46 45 55 47 6b 30 56 47 38 34 62 6b 73 32 64 30 46 6f 64 48 45 32 63 6d 74 42 53 6a 5a 71 56 79 39 6a 61 48 42 6b 52 7a 5a 59 4d 6b 68 70 5a 6e 56 6f 53 47 6b 35 59 31 6f 35 4d 47 52 32 54 6d 52 7a 64 47 6c 7a 5a 55 70 34 52 32 46 5a 52 6a 55 78 62 31 46 55 53 46 42 79 61 6e 6f 7a 51 33 41 35 51 79 39 52 4d 6e 56 55 55 54 67 30 4f 56 46 53 52 79 39 46 57 6d 59 72 4e 54 68 52 64 6c 46 72 64 6c 4e 33 62 6a 56 52 61 45 35 6c 54 6e 52 77 63 54 4e 43 61 48 4e 6d 61 58 56 57 54 48 70 58 61 33 4e 36 4c 33 55 76 63 55 31 6c 62 48 63 76 52 46 67 76 64 47 63 30 63 57 4d 35 53 6a 4e 54 61 46 68 4e 53 30 63 76 5a 45 67 34 4e 6a 4e 50 4e 45 5a 61 61 69 74 79 62 44 6b 31 65 47 45 72 5a 6b 56 54 4d 31 4a 6b 55 Data Ascii: 83bGR0dFl4MDFwUGJuQUFEUGk0VG84bks2d0FodHE2cmtBSjZqVy9jaHBkRzZYMkhpZnVoSGk5Y1o5MGR2TmRzdGlzZUp4R2FZRjUxb1FUSFByanozQ3A5Qy9RMnVUUTg0OVFSRy9FWmYrNThRdlFrdlN3bjVRaE5lTnRwcTNCaHNmaXVWTHpXa3N6L3UvcU1lbHcvRFgvdGc0cWM5SjNTaFhNS0cvZEg4NjNPNEZaaitybDk1eGErZkVTM1JkU
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 56 6c 53 4d 6e 6c 48 54 32 35 6c 51 6c 70 53 52 69 73 7a 63 47 78 75 56 54 68 53 51 30 52 6d 62 6e 64 48 53 44 4a 33 52 53 74 47 5a 46 56 76 64 55 4a 6c 64 6d 74 4b 4c 32 74 6f 65 6d 70 31 61 31 56 6d 4b 7a 4e 53 4f 45 70 34 63 48 56 45 52 55 5a 5a 4e 6c 70 4e 4c 31 70 79 61 6b 31 58 53 58 5a 51 51 30 68 6c 64 58 5a 51 5a 45 46 79 64 54 55 79 52 48 63 33 59 57 70 6b 56 6a 4e 45 53 44 64 35 52 33 59 78 4e 44 5a 77 4d 45 64 32 62 6c 70 4c 57 6a 64 44 53 46 5a 49 4e 56 5a 73 55 31 6f 31 56 7a 6c 78 57 6a 45 72 52 6e 5a 51 54 57 6f 32 5a 6d 73 76 5a 47 35 6c 4e 6a 6b 32 65 55 6c 54 63 30 68 47 4e 6c 4e 73 64 57 6c 76 64 54 4e 31 57 57 70 53 62 7a 56 4e 51 6e 4e 4c 4f 57 6c 33 5a 6a 6b 7a 56 44 5a 6e 4f 56 70 51 52 53 38 7a 62 45 4a 68 4e 54 42 49 4c 7a 6c 33 Data Ascii: VlSMnlHT25lQlpSRiszcGxuVThSQ0RmbndHSDJ3RStGZFVvdUJldmtKL2toemp1a1VmKzNSOEp4cHVERUZZNlpNL1pyak1XSXZQQ0hldXZQZEFydTUyRHc3YWpkVjNESDd5R3YxNDZwMEd2blpLWjdDSFZINVZsU1o1VzlxWjErRnZQTWo2ZmsvZG5lNjk2eUlTc0hGNlNsdWlvdTN1WWpSbzVNQnNLOWl3ZjkzVDZnOVpQRS8zbEJhNTBILzl3
2024-04-19 14:06:45 UTC	731	IN	Data Raw: 52 6a 67 79 54 45 35 52 62 47 4d 72 4e 7a 4a 4d 59 58 5a 69 53 56 46 45 53 6d 4a 31 54 57 68 47 5a 30 4a 72 4d 6e 4a 6a 57 46 42 52 4d 47 30 78 5a 57 59 77 55 47 6c 72 65 6d 78 42 4b 32 4e 4a 54 45 4d 31 4e 45 59 77 55 6a 6c 4c 62 57 31 31 63 46 68 56 62 57 52 52 53 47 52 34 53 7a 4e 6d 59 55 46 73 4e 7a 59 30 65 6b 74 42 55 55 77 35 59 57 78 68 56 31 46 4b 51 6d 68 6f 65 47 73 76 54 6d 4a 4a 54 58 5a 44 53 48 4d 77 52 30 68 45 63 30 59 7a 51 32 78 79 4f 47 56 49 51 6c 68 50 5a 56 52 42 59 56 49 30 63 46 52 70 61 31 42 56 52 58 4a 49 64 54 4d 31 52 54 64 55 5a 47 35 77 4e 55 6b 30 54 43 74 30 4d 58 42 70 61 45 38 34 56 6c 42 31 64 54 5a 68 4f 47 39 71 62 33 46 32 53 55 55 77 56 6b 5a 5a 53 6b 68 6a 65 44 4d 32 56 47 4e 54 62 33 52 4c 52 48 45 31 52 7a 41 Data Ascii: RjgyTE5RbGMrNzJMYXZiSVFESmJ1TWhGZ0JrMnJjWFBRMG0xZWYwUGlremxBK2NJTEM1NEYwUjlLbW11cFhVbWRRSGR4SzNmYUFsNzY0ektBUUw5YWxhV1FKQmhoeGsvTmJJTXZDSHMwR0hEc0YzQ2xyOGVIQlhPZVRBYVI0cFRpa1BVRXJIdTM1RTdUZG5wNUk0TCt0MXBpaE84VlB1dTZhOG9qb3F2SUUwVkZZSkhjeDM2VGNTb3RLRHE1RzA
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 66 32 66 0d 0a 31 52 5a 53 30 74 6e 4e 6d 70 59 63 44 56 47 4d 30 63 35 4e 32 4e 6f 56 30 70 4b 65 54 64 56 61 33 55 77 63 6d 31 34 52 7a 64 57 64 32 4e 5a 59 79 74 70 55 57 46 30 59 58 51 33 4c 30 46 6d 52 33 70 79 53 57 68 54 4c 33 56 70 52 57 5a 68 55 6d 6b 72 5a 79 39 4c 4f 44 4e 50 55 7a 64 61 53 44 67 79 52 6c 52 52 65 6d 6c 45 64 47 31 48 51 7a 42 79 5a 6b 5a 56 4f 56 56 49 4e 48 5a 32 55 55 55 77 63 30 35 70 65 58 45 33 64 32 70 30 64 47 52 52 57 6b 35 4b 64 57 56 45 61 47 56 56 57 45 73 76 62 54 4d 35 4c 32 52 76 64 44 42 71 55 6d 68 59 63 6c 4e 78 61 6d 35 42 4e 6d 68 68 52 7a 4e 52 53 53 74 47 65 45 46 6a 4f 56 6c 33 51 57 5a 70 61 6d 68 70 51 56 49 34 5a 33 52 32 4e 32 78 4f 4e 57 68 4c 63 30 4a 42 4d 6b 4e 59 56 54 6c 30 52 56 4a 48 4d 55 39 Data Ascii: f2f1RZS0tnNmpYcDVGM0c5N2NoV0pKeTdVa3Uwcm14RzdWd2NZYytpUWF0YXQ3L0FmR3pySWhTL3VpRWZhUmkrZy9LODNPUzdaSDgyRlRRemlEdG1HQzByZkZVOVVINHZ2UUUwc05peXE3d2p0dGRRWk5KdWVEaGVVWEsvbTM5L2RvdDBqUmhYclNxam5BNmhhRzNRSStGeEFjOVl3QWZpamhpQVI4Z3R2N2xONWhLc0JBMkNYVTl0RVJHMU9

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	50013	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 34 7a 7a 4a 50 70 65 59 4e 45 71 6d 59 77 45 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 64 31 39 36 66 37 64 35 35 61 37 62 61 65 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 4zzJPpeYNEqmYwEL.1Context: 9d196f7d55a7baec
2024-04-19 14:06:45 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:45 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 34 7a 7a 4a 50 70 65 59 4e 45 71 6d 59 77 45 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 64 31 39 36 66 37 64 35 35 61 37 62 61 65 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 4zzJPpeYNEqmYwEL.2Context: 9d196f7d55a7baec<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:06:45 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 34 7a 7a 4a 50 70 65 59 4e 45 71 6d 59 77 45 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 64 31 39 36 66 37 64 35 35 61 37 62 61 65 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 4zzJPpeYNEqmYwEL.3Context: 9d196f7d55a7baec<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:06:45 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:45 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 43 4e 61 4a 50 4c 34 4b 30 57 47 54 72 76 6e 33 73 31 38 47 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: VCNaJPL4K0WGTrvn3s18GQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	50015	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:46 UTC	1512	OUT	GET /store/apps/dev?id=6720847872553662727 HTTP/1.1 Host: play.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535604.0.0.0
2024-04-19 14:06:46 UTC	2283	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:46 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-UhLc3wvig3ML1OcYK9lLzg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups reporting-endpoints: default="/_/PlayStoreUi/web-reports?context=eJzjitDikmII1JBikPj6kkkLiF-sZWV-B8T6x1mZjYE4-hQrcxwQr33OyrwZiL--YGX-CcRO6TNYQ4DYp34GaxwQt948xzodiJP-nWctAWIhHo5vXzo3sgksmNOzgAkAe-4oJw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 37 32 61 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 66 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 Data Ascii: 72a6<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://play.google.com/"><link ref="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><meta
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 69 70 32 5c 22 2c 5c 22 61 69 72 2e 45 70 69 63 42 61 74 74 6c 65 46 61 6e 74 61 73 79 35 5c 22 2c 5c 22 61 69 72 2e 62 67 2e 6c 61 6e 2e 4d 6f 6e 6f 70 6f 6c 69 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 62 75 72 61 63 6f 70 72 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 61 63 68 65 74 61 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 68 69 6e 63 68 6f 6e 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 64 6f 6d 69 6e 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 6d 65 67 61 6a 6f 67 6f 73 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 70 61 72 63 68 69 73 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 73 Data Ascii: ip2\",\"air.EpicBattleFantasy5\",\"air.bg.lan.Monopoli\",\"air.br.com.buracopro.mobile\",\"air.br.com.cacheta.mobile\",\"air.br.com.chinchon.mobile\",\"air.br.com.domino.mobile\",\"air.br.com.megajogos.mobile\",\"air.br.com.parchis.mobile\",\"air.br.com.s
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 63 6b 33 64 5c 22 2c 5c 22 61 70 70 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 5f 61 70 70 5c 22 2c 5c 22 61 70 70 2e 66 78 72 6f 79 61 6c 65 70 72 6f 2e 63 6f 6d 5c 22 2c 5c 22 61 70 70 2e 73 75 70 65 72 6b 69 63 6b 6f 66 66 5c 22 2c 5c 22 61 70 70 73 2e 72 2e 74 77 6f 74 68 6f 75 73 61 6e 64 66 6f 72 74 79 65 69 67 68 74 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 6a 69 67 73 61 77 2e 70 75 7a 7a 6c 65 2e 6f 6e 6c 69 6e 65 2e 66 72 65 65 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 70 61 69 6e 74 2e 62 79 2e 6e 75 6d 62 65 72 2e 67 61 6d 65 2e 70 75 7a 7a 6c 65 2e 66 72 65 65 5c 22 2c 5c 22 61 74 61 2e 6b 72 61 6b 65 6e 2e 73 69 6e 67 6c 65 63 69 74 79 5c 22 2c 5c 22 61 Data Ascii: ck3d\",\"app.fourequalsten.fourequalsten_app\",\"app.fxroyalepro.com\",\"app.superkickoff\",\"apps.r.twothousandfortyeight\",\"art.color.planet.jigsaw.puzzle.online.free\",\"art.color.planet.paint.by.number.game.puzzle.free\",\"ata.kraken.singlecity\",\"a
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 72 65 64 74 6f 77 65 72 2e 41 34 61 71 75 61 50 72 69 6e 74 5c 22 2c 5c 22 62 79 2e 76 6f 73 74 72 61 77 2e 67 61 6d 65 2e 72 75 2e 6b 65 79 62 6f 61 72 64 5c 22 2c 5c 22 63 61 2e 68 79 70 65 72 68 69 70 70 6f 2e 61 64 76 65 6e 74 75 72 65 61 67 65 73 5c 22 2c 5c 22 63 61 2e 6c 62 63 73 74 75 64 69 6f 73 2e 68 65 6d 70 69 72 65 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 66 69 73 68 69 6e 67 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 70 6d 33 5c 22 2c 5c 22 63 61 66 65 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c 5c 22 63 61 72 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c 5c 22 63 61 72 2e 70 61 72 6b 69 6e 67 2e 67 61 6d 65 73 2e 6d 61 73 74 65 72 2e 6a 61 6d 2e 70 75 7a 7a Data Ascii: redtower.A4aquaPrint\",\"by.vostraw.game.ru.keyboard\",\"ca.hyperhippo.adventureages\",\"ca.lbcstudios.hempire\",\"ca.roofdog.fishing\",\"ca.roofdog.pm3\",\"cafe.games.toddlers.and.kids\",\"car.games.toddlers.and.kids\",\"car.parking.games.master.jam.puzz
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 73 73 4d 61 73 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 45 76 6f 54 41 70 70 73 2e 47 61 6d 65 4f 66 45 76 6f 6c 75 74 69 6f 6e 5c 22 2c 5c 22 63 6f 6d 2e 46 34 6e 74 6f 6d 47 61 6d 65 73 2e 47 65 6f 6d 65 74 72 79 4a 75 6d 70 33 44 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 42 61 6e 61 6e 61 4b 6f 6e 67 42 6c 61 73 74 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 31 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 32 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 6c 61 6e 6e 65 2e 4d 69 6e 75 74 65 73 54 69 6c 6c 44 61 77 6e 2e 72 6f 67 75 65 6c 69 6b 65 2e 73 68 6f 6f 74 69 6e 67 2e 66 72 Data Ascii: ssMaster\",\"com.EvoTApps.GameOfEvolution\",\"com.F4ntomGames.GeometryJump3D\",\"com.FDGEntertainment.BananaKongBlast.gp\",\"com.FDGEntertainment.CoverOrange1.gp\",\"com.FDGEntertainment.CoverOrange2.gp\",\"com.Flanne.MinutesTillDawn.roguelike.shooting.fr
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 6f 6d 2e 4f 4f 5a 4f 4f 47 4f 52 41 45 2e 43 68 61 72 61 63 74 65 72 4d 61 6b 65 72 5c 22 2c 5c 22 63 6f 6d 2e 4f 72 79 75 67 65 6e 2e 57 6f 72 6c 64 4f 66 50 72 61 6e 64 69 73 42 65 74 61 5c 22 2c 5c 22 63 6f 6d 2e 4f 73 4f 73 2e 54 69 6e 79 41 72 63 68 65 72 73 5c 22 2c 5c 22 63 6f 6d 2e 4f 77 69 6e 67 73 2e 41 72 72 6f 77 57 61 72 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 43 6f 6f 6b 69 6e 67 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 49 6e 54 68 65 53 75 70 65 72 6d 61 72 6b 65 74 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 69 72 74 68 64 61 79 50 61 72 74 79 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 48 69 70 70 6f 52 61 69 6c 77 61 Data Ascii: om.OOZOOGORAE.CharacterMaker\",\"com.Oryugen.WorldOfPrandisBeta\",\"com.OsOs.TinyArchers\",\"com.Owings.ArrowWar\",\"com.PSVStudio.BarboskinsCooking\",\"com.PSVStudio.BarboskinsInTheSupermarket\",\"com.PSVStudio.BirthdayParty\",\"com.PSVStudio.HippoRailwa
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 63 61 72 77 61 73 68 34 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 65 6e 74 69 73 74 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 6f 63 74 6f 72 56 65 74 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 72 65 73 73 55 70 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 66 61 72 6d 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 68 61 69 72 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 64 73 42 75 73 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 6e 64 65 72 67 61 72 74 65 6e 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6d 65 6e 74 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 70 61 69 6e 74 Data Ascii: om.YovoGames.carwash4\",\"com.YovoGames.dentist3\",\"com.YovoGames.doctorVet\",\"com.YovoGames.dressUp\",\"com.YovoGames.farm5\",\"com.YovoGames.hair5\",\"com.YovoGames.kidsBus\",\"com.YovoGames.kindergarten3\",\"com.YovoGames.ment\",\"com.YovoGames.paint
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 68 61 71 75 65 73 74 2e 70 65 74 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 65 6e 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 72 75 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 72 61 63 69 6e 67 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 64 69 6e 6f 73 61 75 72 2e 67 61 6d 65 73 2e 6c 69 74 74 6c 65 2e 6b 69 64 73 2e 74 6f 64 64 6c 65 72 73 5c 22 2c 5c 22 63 6f Data Ascii: \",\"com.alphaquest.pet\",\"com.amayasoft.bookstorem4.en\",\"com.amayasoft.bookstorem4.ru\",\"com.amayasoft.cars.kids.racing.toddlers.garage.game\",\"com.amayasoft.cars.kids.toddlers.garage.game\",\"com.amayasoft.dinosaur.games.little.kids.toddlers\",\"co
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 2e 63 68 65 73 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d 2e 61 75 65 72 2e 64 61 77 6e 62 72 65 61 6b 2e 74 72 69 61 6c 2e 73 69 6e 67 6c 65 2e 70 6c 61 79 65 72 2e 66 72 65 65 5c 22 2c 5c 22 63 6f 6d 2e 61 75 74 75 6d 6e 69 6e 74 65 72 61 63 74 69 76 65 2e 6d 79 72 75 6d 6d 79 5c 22 2c 5c 22 63 6f 6d 2e 61 76 65 63 74 6f 72 2e 69 74 77 2e 69 74 77 6d 6a 31 36 68 64 5c 22 2c 5c 22 63 6f 6d 2e 61 76 6f 6b 69 64 64 6f 2e 67 61 6d 65 73 2e 74 68 69 6e 6b 72 6f 6c 6c 73 5f 6b 69 6e 67 73 5f 61 6e 64 5f 71 75 65 65 6e 73 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 69 61 6e 61 6e 6f 76 65 6c 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 69 61 6e 61 73 63 69 74 79 5c 22 2c 5c 22 63 6f Data Ascii: .chessnew\",\"com.auer.dawnbreak.trial.single.player.free\",\"com.autumninteractive.myrummy\",\"com.avector.itw.itwmj16hd\",\"com.avokiddo.games.thinkrolls_kings_and_queens\",\"com.awardsmediagroup.diananovelsnew\",\"com.awardsmediagroup.dianascity\",\"co
2024-04-19 14:06:46 UTC	2283	IN	Data Raw: 2e 68 6f 6d 65 73 63 61 70 65 73 2e 6c 69 66 65 2e 6f 63 64 5c 22 2c 5c 22 63 6f 6d 2e 62 66 61 2e 62 61 74 74 6c 65 6c 69 6e 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 67 66 2e 6d 65 72 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 67 61 6d 65 73 2e 62 61 74 61 6b 6f 6e 6c 69 6e 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 6f 6f 73 2e 6d 61 72 72 69 61 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 69 62 6f 6f 6d 2e 69 64 6c 65 73 68 65 6c 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 76 65 72 73 65 2e 77 6f 72 64 2e 73 65 61 72 63 68 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 77 6f 72 64 73 65 61 72 63 68 2e 63 72 6f 73 73 77 6f 72 64 2e 70 75 7a 7a 6c 65 2e 67 61 6d 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6f 67 61 6d 65 73 2e 74 69 6c 65 63 6f 6e 6e 65 Data Ascii: .homescapes.life.ocd\",\"com.bfa.battlelines\",\"com.bgf.merge\",\"com.bhgames.batakonline\",\"com.bhoos.marriage\",\"com.bibiboom.idleshelter\",\"com.bible.verse.word.search.game\",\"com.bible.wordsearch.crossword.puzzle.games\",\"com.bibogames.tileconne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	50016	74.125.136.104	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:46 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajABR0g7qZbFFvXxLIiuS-icYJuX6T4xVv4ULlkW1w9yiOimHyDQuaZ9wp8isGwIugD4sElugfyCfJpI2Q; NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU
2024-04-19 14:06:46 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:06:46 GMT Expires: Fri, 19 Apr 2024 14:06:46 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:46 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:06:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	50017	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:46 UTC	1647	OUT	POST /_/PlayStoreUi/browserinfo?f.sid=-1424341500177132412&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58006&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535604.0.0.0
2024-04-19 14:06:46 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 30 25 32 43 30 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C0%2C0%5D%5D&
2024-04-19 14:06:46 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:46 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:46 UTC	15	IN	Data Raw: 35 64 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 Data Ascii: 5d)]}'[[["f
2024-04-19 14:06:46 UTC	84	IN	Data Raw: 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 33 31 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 33 30 2c 22 2d 33 33 37 38 37 36 37 30 33 38 38 31 38 39 37 30 34 31 38 22 2c 31 30 34 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 33 5d 5d 5d 0d 0a Data Ascii: .mt"],["di",31],["af.httprm",30,"-3378767038818970418",104],["e",4,null,null,93]]]
2024-04-19 14:06:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	50019	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 33 37 47 6f 78 49 68 45 45 2b 6d 71 62 54 33 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 37 37 39 31 31 38 39 34 31 61 66 36 34 38 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: t37GoxIhEE+mqbT3.1Context: 1779118941af648f
2024-04-19 14:06:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:47 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 74 33 37 47 6f 78 49 68 45 45 2b 6d 71 62 54 33 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 37 37 39 31 31 38 39 34 31 61 66 36 34 38 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: t37GoxIhEE+mqbT3.2Context: 1779118941af648f<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:06:47 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 74 33 37 47 6f 78 49 68 45 45 2b 6d 71 62 54 33 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 37 37 39 31 31 38 39 34 31 61 66 36 34 38 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: t37GoxIhEE+mqbT3.3Context: 1779118941af648f
2024-04-19 14:06:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 35 2f 49 52 59 37 4d 69 4f 55 32 50 63 32 4b 7a 50 31 4d 56 59 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 5/IRY7MiOU2Pc2KzP1MVYA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	50023	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	1108	OUT	GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 503752 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4097 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	720	IN	Data Raw: 52 49 46 46 c0 af 07 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 ff 0e 00 6f 08 00 56 50 38 20 cc ad 07 00 b0 92 22 9d 01 2a 00 0f 70 08 3e 3d 1e 8d 44 a2 21 a3 26 22 b3 69 30 c0 07 89 67 6e d4 b0 5f 9b eb 8b f8 82 5f d4 73 0f 91 46 8a b0 e3 ce cb b2 97 0d 1b 66 ff fd ff e7 d0 d1 37 fb bf fc ff f1 f3 67 c4 ea d9 fd df 97 1e ef ff 49 a3 fb 1f d9 3b f2 b2 6e 5f b0 4f f5 6f f2 7e 9e 3f dd f1 c1 ea 3f ff b7 cd 57 fe df 53 5f fb fd 13 7d bd 8e 67 b1 ff ce e6 79 8f 9e 9f ce 5f 73 0e 69 f4 83 ec 7e 5f ff 39 f3 77 ff 1f 1e be 07 ff 37 99 5f aa 7f 57 ff af fd 6f e5 d7 cc 9f fd 1f fd 7f e3 7c 03 fe a9 ff 03 ff 87 fb 2f df 4f a2 5f e8 df e2 ff ea 7f 9b ff 43 fb 77 f4 c7 ff b7 ee 37 c3 3f f1 df fb fd 60 7f 63 ff 9d fb 8f ff 3f e1 23 ff 7f ee 8f fd af 94 9f d5 Data Ascii: RIFFWEBPVP8XoVP8 "*p>=D!&"i0gn__sFf7gI;n_Oo~??WS_}gy_si~_9w7_Wo\|/O_Cw7?`c?#
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 60 21 87 e6 38 f2 f6 f9 af 98 4c 0b 93 fa f6 10 05 2d 0c 31 69 93 31 3b 59 a1 7c 97 50 90 54 cf 56 23 01 da b2 36 e1 6f 43 18 54 ae b5 9a cb cf 92 e1 75 d6 2d b3 f7 a8 b7 fc 9b c7 d1 f6 48 12 95 ec 16 78 5f 36 01 a9 c3 32 07 de 17 23 df 84 49 6b 4d 49 25 6e 91 19 38 1a 5f ac c1 fb 26 de b5 10 15 96 7c 86 5e 7d c9 6f 71 35 e7 de 15 0b d7 70 5a b7 e5 6f 43 20 6a a2 21 bf 62 4b 25 4c b4 33 bd 57 9f 25 75 cc c7 f7 0c c8 1a b8 bc da cb a8 24 74 d1 0a e4 64 5c 85 41 81 a7 66 42 fb 87 86 9a 50 91 ab 09 a4 d7 0b a3 8a 09 9f 49 5c 7e c2 d5 75 c2 7a 11 02 56 b7 84 cb 70 dc f9 0c bc fb 92 d9 76 74 8e 5a de cb c2 1d fa a2 0a 7c 37 1b 72 1b 40 ca 60 0b 91 ff de 17 26 b1 4c f7 45 ed b4 03 74 42 0f d0 0f 6b c8 80 15 e3 b6 8b fc ed 97 9f 77 ec 83 9a eb e1 5d 08 1a be 5c Data Ascii: `!8L-1i1;Y\|PTV#6oCTu-Hx_62#IkMI%n8_&\|^}oq5pZoC j!bK%L3W%u$td\AfBPI\~uzVpvtZ\|7r@`&LEtBkw]\
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: e4 b6 5d 86 a9 62 20 79 6d ff dc 7e f3 98 b2 0d 1a dc d3 7a 7f ff ea 57 2f 1f c7 66 e3 70 37 f6 eb 18 50 49 78 ed a0 15 9f 3b 1e 5e be 1a 85 9d 32 93 31 9f 69 fa b5 85 e2 ad d4 81 4c e5 8f 38 c0 44 3b ae 49 ec 78 9a ed 54 42 d5 5d ea 06 9d 07 60 ce 79 3c 0b 9d 76 5e 01 c8 f4 e5 3a 3c 4a d7 3a 20 42 b8 54 63 c9 6f 11 75 74 00 a3 29 54 94 75 51 45 57 30 c5 40 56 bd e4 c3 74 02 ee 96 31 7e 3b 06 19 a9 7f 95 fe a9 da 16 5d 3a 57 71 3c 10 69 83 14 ad 07 83 6a 67 18 5e c5 ec cd df 47 b9 35 15 ed 6c 57 e9 67 01 2e 04 7a 9f 53 49 c7 60 c7 51 30 45 e6 f2 79 be 82 65 a5 6d f9 49 f9 6f 63 74 f0 4f 93 ff 13 07 5b fe 0a a2 6f 71 96 fc ff 2b 00 cd 5b 93 e7 c4 0e a9 97 54 d7 2d 76 b2 1c fa cd 5c 11 8c eb 68 b9 d3 31 74 d6 28 cd 11 af ec ca 05 0f 6e fc 0e c3 56 25 e2 cf Data Ascii: ]b ym~zW/fp7PIx;^21iL8D;IxTB]`y<v^:<J: BTcout)TuQEW0@Vt1~;]:Wq<ijg^G5lWg.zSI`Q0EyemIoctO[oq+[T-v\h1t(nV%
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 2b f9 47 f5 aa 3b b6 f0 ab 42 c9 d6 53 15 d2 00 a3 4e 1f 30 d2 3f d5 e9 b4 75 7a 46 05 ec cc 10 2a 42 ab 57 93 f6 29 62 58 84 11 89 1b 4b 19 15 90 34 5d 9e 41 56 11 c0 75 26 17 1e 3d a7 40 0a ea d6 5e 77 a2 92 1e 0a d8 e1 eb 07 59 e6 9c 1b 0d 52 c3 ba c7 9b 29 1d 17 01 b4 ff 65 91 62 84 c0 96 8e 52 a8 5e e2 10 3a bc a7 75 9a 1c 25 45 46 12 4e a8 56 c5 c1 04 78 f4 60 17 35 4a 20 49 50 6b 3b 85 0a 35 44 ce 67 e4 1d de e8 b0 a5 05 da ec a1 77 e6 9f 5d 9e 72 8f 0d 1f 58 0a 94 97 10 6c bb 7b 48 e2 4b 0a cf d4 b0 fa 7f 71 6e e2 c0 a2 0e 86 80 1b b1 7b a6 f1 1f f5 e0 39 ef ba 1a 32 42 bc 34 e6 80 43 08 cb 78 69 49 27 86 8d ec ca 86 c0 54 04 60 5e 20 11 c5 3b 06 1a c0 08 c9 dc e3 cf ff dd e2 c8 69 91 59 b0 3e e8 5e 85 1a 8b e2 7a ff 7e 9a bd d4 75 af bf 92 2f 13 Data Ascii: +G;BSN0?uzF*BW)bXK4]AVu&=@^wYR)ebR^:u%EFNVx`5J IPk;5Dgw]rXl{HKqn{92B4CxiI'T`^ ;iY>^z~u/
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: a9 8b 2b 82 1f f5 a4 20 a3 6b e8 a7 38 33 21 76 e9 d7 95 df 46 24 bb f3 62 9a 8a 6b 6f 16 78 53 8c dc 30 58 45 f7 f0 cf 68 cc 19 e7 f7 f4 aa 94 11 f3 62 8f b3 b3 dc 5a eb ac 92 94 79 92 73 2b aa f7 cb cc 05 d1 c1 52 1d 92 d7 42 68 1c 82 fe e4 1e f1 07 34 c5 67 5c 5b a8 72 c8 b0 c6 ee b6 49 59 bb 1c 71 f8 ad c6 42 15 13 89 39 c3 a3 ac 48 5f 93 10 ac 28 b8 f9 a3 71 40 a8 8e cd cd 86 f6 ca 55 4f e5 f7 89 9c 76 88 0e c2 84 9a 9e 7d 8b 19 93 46 d5 f0 c1 62 4c 97 ec 58 aa 45 0e b1 96 cc de 8c 12 b7 6d 76 9d 1f 11 e0 5e 66 80 3e fb aa 91 a9 f8 76 28 73 4e 69 d7 c7 c5 db b5 13 ec 6d 60 62 53 d9 d5 4e 08 60 e4 0a c8 6d ff b7 0f 5d 74 d2 35 dd 0d 35 da 99 f5 fb 14 d6 c5 77 dc 31 f8 ac 68 9f 4f 2d 28 53 fa 49 65 79 22 7b ff 53 54 22 ce fa 0a f3 53 cf b6 76 58 b3 31 Data Ascii: + k83!vF$bkoxS0XEhbZys+RBh4g\[rIYqB9H_(q@UOv}FbLXEmv^f>v(sNim`bSN`m]t55w1hO-(SIey"{ST"SvX1
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 22 6e 53 55 ef 07 bc e5 5e 72 2f ed 64 19 78 5c 24 af 0e 5d f5 85 58 fb 3e b3 e3 a6 21 98 5e 4a c9 c5 99 df e8 c0 87 62 46 f6 a4 75 f9 e4 7c 41 c2 68 52 d4 8b 64 52 e9 ab 31 0a b5 f8 dd 53 71 22 c5 a3 31 3c 95 6d 28 1e e3 86 09 49 09 c6 20 4b 87 13 e1 94 84 43 be a3 eb 8c f0 5b f2 73 7e 67 09 5f 1f 9a c7 bf ca 87 ce 4e 78 47 6d c9 e0 c8 c2 b5 d5 ea 3a 09 4d fb 3c 64 cc 0d 94 68 9e a1 47 8c 39 af 27 c6 dd 52 61 28 e1 07 b0 e4 3f 1d 43 63 e0 76 97 9f ed ea 78 35 f8 ab 3c 00 5e ee 93 8e 4c 34 37 f0 2b 82 06 57 c6 ba 41 1e 32 6a 2b a7 5c 1b 8c ef 81 20 3e 26 93 5e 9b fb 02 0b 14 fb f5 e0 95 bc 5d ec 88 46 b7 c2 68 f5 fc 53 d9 c4 e8 5c 0d 6f 34 7d 22 b3 f1 18 73 4f d7 bb 18 03 99 8b a0 1a db 4f 8c 3d d2 d8 cb 82 22 48 93 87 2e 19 1c d4 dc 6d 5e 1b c6 2c 6a 41 Data Ascii: "nSU^r/dx\$]X>!^JbFu\|AhRdR1Sq"1<m(I KC[s~g_NxGm:M<dhG9'Ra(?Ccvx5<^L47+WA2j+\ >&^]FhS\o4}"sOO="H.m^,jA
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 3f 96 9e e6 ce ba 7a 2b 3b 27 b6 91 c5 35 0b 69 85 19 10 51 bc 5f 34 8c d3 84 ac f0 d7 36 6d 82 bc e2 f2 62 6b 0d b2 aa 1a e3 43 03 20 46 01 86 ab d3 97 59 60 a8 f0 8e 6b 48 66 49 7c e2 f1 cf 1a 0c 85 76 04 e6 22 4f 37 ca d8 eb 62 53 dd c0 35 b0 79 40 70 09 ae bf ed 01 6d 56 ec 17 8f 91 db 5b 9e b4 61 06 d7 38 2e 62 73 0a 12 e0 5e 6f 9f a9 d6 c3 b4 a8 c4 6e ca ec ad 8d b0 1c 1f 3d 59 45 b9 9f d6 02 20 97 b7 fd 62 0b 2d 4b e5 79 88 a7 9a 80 52 b7 4d 81 c0 87 4a 42 aa 7f 00 27 9b 17 9d 1f f9 43 36 1e 0f 1c 72 da 5e c8 fc 4d a1 b3 2d f2 14 3e 0f 25 c7 3d 47 9a 6e 9d 12 55 f1 dc c5 6f 8f 0d c7 61 0f 3e f2 51 a7 23 52 43 37 15 85 3e 71 8b a8 e6 ac b0 8b 13 88 e0 ab 11 8d 2c 76 eb 20 cb 1a 9f 95 e6 5a 0a ac e0 df 27 20 bb 66 eb 64 16 55 90 77 45 fe 15 ab 33 84 Data Ascii: ?z+;'5iQ_46mbkC FY`kHfI\|v"O7bS5y@pmV[a8.bs^on=YE b-KyRMJB'C6r^M->%=GnUoa>Q#RC7>q,v Z' fdUwE3
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: fa 0e 2a 53 e0 13 4f 46 3c ff aa a5 04 bc 69 33 db 83 cd f2 57 d8 a6 f3 a6 73 7b 6e 92 47 a2 5e 0b 9f ca f8 72 9f ca fe d5 33 87 f9 30 fc 90 6c bc 17 04 ad f7 b3 50 08 c4 77 af 58 2e 01 06 84 78 56 64 ed 92 ef 26 c8 07 05 be e2 f1 e2 25 47 10 8e aa 91 18 85 16 b9 12 d1 61 a8 a4 ce a8 cc 15 7e 58 9d 77 88 19 dd 87 c1 39 00 7c 84 f7 d5 a7 25 11 50 93 55 a7 57 49 1b 75 65 de 96 75 2f 38 a3 7b 10 1b dd 58 a1 a0 23 aa ac bd f3 07 db f6 29 fa 52 28 12 20 c5 9b 23 e9 f5 6e 23 68 d4 8c 84 72 46 09 6e ed 17 e7 6b 8b 8d 46 87 f0 ed 6e 3b bd 83 5e 1e 2a b8 b4 73 4f 47 6d 64 21 b6 d7 64 48 b3 d0 88 ac 92 a8 b7 ee a5 01 ca 73 9b 39 cc 9a 74 42 8a eb 8a 16 25 1d 58 ef 22 d9 29 75 f7 2b d4 9a 89 7a 22 ba 90 86 ef 67 00 54 66 6e 18 ab 18 0f 3a a8 56 5d 5d 88 d3 af fc 16 Data Ascii: SOF<i3Ws{nG^r30lPwX.xVd&%Ga~Xw9\|%PUWIueu/8{X#)R( #n#hrFnkFn;^sOGmd!dHs9tB%X")u+z"gTfn:V]]
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d0 9d 26 5f f3 e0 45 ac 2e 0c ce 31 a6 8a a6 1e 05 30 47 81 34 e9 fb da 99 dc 05 51 e2 42 c4 a1 1d 0c a1 57 b0 04 ed 86 a4 8d 49 ce e0 26 a7 b9 87 5f 4f 7b fa 19 f7 be 1a cb ce 58 b6 7b 34 53 42 46 77 f0 a2 8f 9b 2e 5e 83 1b 6e 18 a3 f3 cc ae 71 3a 7c 4b d3 cc bd e5 57 88 88 bb 3e fd d0 e2 27 c7 f4 bc 79 5b ff de 9a d6 c1 c9 83 01 42 ee c2 22 44 f5 6d 28 6b 75 0f 9b 66 48 e7 65 ab 16 4d cb b0 bf ba ba 1f 2c b7 db f9 24 4c b9 ee d7 35 d6 c1 c0 c7 32 e4 d3 fd 5e 68 3a 49 b6 f0 7f e9 af d3 42 26 cf 26 71 e9 ba 9f bf 14 68 d4 18 f4 96 91 3e 51 fd c4 0f db ce d1 05 aa 64 00 14 f0 84 8c 71 de 1a 1a 48 4d a9 0a 78 87 5f e2 6e 74 8b 0c 62 92 c0 33 fc 2d 83 a2 9d 6e 16 54 58 27 12 59 01 ee e1 94 03 78 8f da c6 73 60 b1 dd dc 14 c9 1b 52 e2 21 02 f0 d5 f5 7b 8f cc Data Ascii: &_E.10G4QBWI&_O{X{4SBFw.^nq:\|KW>'y[B"Dm(kufHeM,$L52^h:IB&&qh>QdqHMx_ntb3-nTX'Yxs`R!{
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 88 0d a1 f4 49 31 a5 0f 0f 48 fe 24 e0 0f 58 b5 19 75 c5 3d d9 18 3c 40 3b c5 2d 4f 92 9f b4 81 d0 8c 8d 45 58 6d c1 39 65 54 6b 1d 5b d8 dc 3c 90 fb 0a 39 7f 32 cf d1 d0 de b9 9e 72 5d 72 43 8c c3 96 d1 3c c1 5c ed 87 0c dc 57 fb 3a 61 c1 fd d6 c8 79 e4 4b 47 1b ab 72 dc a9 45 05 71 ee 17 62 23 d9 98 1e 17 19 11 d5 fb 50 c7 87 58 70 58 22 5d f0 19 66 d5 c0 a3 e3 5b 55 9d a9 ec 75 d1 4c 67 b7 9d 47 91 05 eb a5 49 6c 34 5d 5b 9b 02 75 f0 76 c4 e7 bf 32 07 91 7d 1c d0 59 f6 06 c3 08 e2 4e 12 29 6c 34 e7 74 14 47 2d 08 dc 11 e1 a5 6a 5c a8 c2 7f 0d bf 6c 0e 0e b7 8c 63 07 2a 21 db 9b bd 26 df 04 84 cd db 7f f7 a5 10 b3 3b 9e 86 a5 1c 7a f5 4b db 74 48 4a 8b a1 33 40 b7 72 4e 4f 88 e5 d5 0a 10 2a 51 5f 11 99 28 b2 6d 28 20 db 53 ff 42 c8 97 c9 12 ca f4 7b 3e Data Ascii: I1H$Xu=<@;-OEXm9eTk[<92r]rC<\W:ayKGrEqb#PXpX"]f[UuLgGIl4][uv2}YN)l4tG-j\lc!&;zKtHJ3@rNOQ_(m( SB{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	50021	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	1099	OUT	GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 370 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4097 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	370	IN	Data Raw: 52 49 46 46 6a 01 00 00 57 45 42 50 56 50 38 4c 5e 01 00 00 2f 5d 40 17 00 df e2 36 b6 6d 55 d9 e7 7e 97 d4 80 98 26 e8 80 da 29 85 dc e1 1e a4 09 46 91 24 49 c9 59 01 1c 56 f0 8b 32 4c f0 5a 6e da 4d 24 db 52 d5 ac 39 38 c0 08 fe 03 0c 60 83 e8 af e7 cc 7f 3a 4d 40 50 03 c3 c2 b0 08 85 e0 1d a8 4d f2 9d bc 4f 08 6e b4 19 11 aa a2 45 81 7d 21 28 08 01 61 aa 03 06 c7 e1 22 04 02 02 06 81 80 30 66 23 fc 03 81 43 1e 02 06 75 05 0a 7f 28 8e 81 53 a4 5e f7 47 ce 3f 97 7f f5 6a 37 0b d4 db 4b fa 41 9d 9f dd db 1f 59 a4 a8 2c 76 db 9b aa f2 0b 84 90 7f dd 8f 93 83 83 77 f2 2d c2 ba 2c 4e eb ec d5 21 f8 e7 7d e2 1f 7f e4 81 3f 0c b0 24 c9 36 6d ad 6b db b6 6d db 36 df fc e7 d2 b1 e2 fd 5e 45 f4 7f 02 e8 a5 b6 58 82 96 d2 57 a8 82 73 1a 1b cc 58 d3 2f 4b ab e7 0d Data Ascii: RIFFjWEBPVP8L^/]@6mU~&)F$IYV2LZnM$R98`:M@PMOnE}!(a"0f#Cu(S^G?j7KAY,vw-,N!}?$6mkm6^EXWsX/K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	50025	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	1100	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1420 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4097 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	722	IN	Data Raw: 52 49 46 46 84 05 00 00 57 45 42 50 56 50 38 4c 77 05 00 00 2f 33 c0 0c 00 09 33 6d db 28 7b 13 fe 88 3b 0e 11 fd 9f 00 fe 4a 90 71 0e 13 99 0f 2c 18 45 92 a4 28 17 8e f9 9e 7c fe 75 9d 95 f5 60 24 92 94 95 2f 09 c0 d0 3f 1b 01 50 08 c5 6d db c6 59 3e 93 f4 9c a0 c8 0e ed 7f aa 46 31 82 9e 1e 40 b4 f4 80 00 8e f3 b7 9d f5 ef 03 20 ff e2 db b1 1a 2b 00 f2 3c e0 d3 28 40 67 db b6 63 b6 73 dd df 60 ad d8 b6 6d bb b6 f3 13 8c 6e b7 31 5a a7 ca 91 3e 95 93 d6 e6 46 65 db d6 cc 7c ef 55 7c 6b 67 be 29 d3 d1 b1 b5 ed d8 f6 ec eb 7e 7f fb 8f 6d db 46 65 73 00 d6 30 b2 d2 3a a9 32 04 9b a5 93 ca 76 65 1b ef f3 5c 27 e5 da b6 55 db 4a 1f eb dc fb 0c 77 09 02 22 a0 e4 52 23 0f 62 21 0f 4a 0e 71 58 06 44 e0 f6 b8 77 c5 04 08 fc 3f 3e fb f9 5d f4 b2 ac 84 15 d1 62 b5 Data Ascii: RIFFWEBPVP8Lw/33m({;Jq,E(\|u`$/?PmY>F1@ +<(@gcs`mn1Z>Fe\|U\|kg)~mFes0:2ve\'UJw"R#b!JqXDw?>]b
2024-04-19 14:06:48 UTC	698	IN	Data Raw: 44 80 c5 40 b2 24 00 2c 32 5c a1 72 6a 69 eb d7 c2 19 87 06 00 70 d2 9e 23 db be 1b 00 80 9a 10 29 40 b1 56 e9 c0 11 41 4d 82 15 f6 7c 7b fa f1 c5 e3 ce 33 b4 93 31 30 fc 7f 1a f5 94 f4 d7 d4 28 02 80 a0 00 e8 62 11 80 85 54 6d db 5d 67 da f4 ed 71 fc 8e d7 56 4e d9 47 31 b3 1f d3 58 f0 fa c8 19 07 4e a3 00 08 50 ac 35 81 5e 6b 02 60 91 99 8c 5e f5 76 e7 ff 3b 68 f5 a4 3d bb f8 cc ff ff be df af 8f cc ad 97 07 f3 5f f3 c5 2d 1f 9f b1 f9 85 b3 0f af 51 84 02 c2 6a 62 21 11 09 95 02 ea da 1f 4e 74 7f 60 79 6d 07 5e 78 e2 9b 13 fd f1 d1 15 9f f4 dc 56 66 9f bf 4f f2 fa ac cf 3e 87 e6 2e ff 75 06 03 ab 89 05 62 cf f2 ae c8 92 9a e3 4d 06 12 6d 60 a0 e5 43 36 f5 46 3e 9b f5 ca 17 2b 3f 88 ee f4 83 5d 71 fa 09 66 dc ec bf 29 d7 52 05 2c a8 ca 6e fc ff a9 7a cc Data Ascii: D@$,2\rjip#)@VAM\|{310(bTm]gqVNG1XNP5^k`^v;h=_-Qjb!Nt`ym^xVfO>.ubMm`C6F>+?]qf)R,nz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	50026	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	1106	OUT	GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 40644 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4097 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	721	IN	Data Raw: 52 49 46 46 bc 9e 00 00 57 45 42 50 56 50 38 4c af 9e 00 00 2f 0d c2 49 00 4d 48 92 24 49 6c 1b 74 cd 8a 02 58 eb ff 3f 18 8b 01 a0 93 8f 11 fd 9f 80 fc 5f 85 1b bf 9f 8b 0f 57 47 65 24 39 64 41 22 a3 aa f1 a9 ea 25 aa c9 67 df af ac 20 e8 cc a8 0c aa 04 ad 8c 15 07 77 46 a9 71 e7 0a 02 27 e5 bc 9a c6 0b a8 ec fb de 48 55 cd af 3f 8d 31 52 23 2a a3 48 39 ca 33 2d 64 4a 5d 69 05 68 bc 0f 7c 52 b9 ff d7 66 2e f7 c6 e8 8d 24 c7 4b 6c 5b 40 8a 15 16 ad 81 20 c2 73 e6 6c 12 57 49 b4 13 2f 5f bb ad 9d d7 f9 1a 1f 00 1a 5a fb 6f d5 ac aa 54 8d 9f 07 80 dd 01 fb 0e 3b b0 03 9f ba a1 6c 36 9f 30 8f da 39 9b 37 81 24 2c 3b 70 e7 5d 00 41 93 06 a3 5a 9c 07 60 21 13 1e 52 85 d4 4a 6d 79 bb 9e 48 0a 43 22 99 4c 55 5a dd aa 32 75 ef f7 f4 e4 ec 8c 1a 61 91 5a e6 b8 c1 Data Ascii: RIFFWEBPVP8L/IMH$IltX?_WGe$9dA"%g wFq'HU?1R#*H93-dJ]ih\|Rf.$Kl[@ slWI/_ZoT;l6097$,;p]AZ`!RJmyHC"LUZ2uaZ
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d5 75 d1 75 dd 75 dd 59 51 0e ba e1 e7 e2 e0 05 3f ca 45 37 dd 4e ee ca 8d 90 c4 84 71 52 98 fd 3a 19 c2 18 21 12 67 42 c8 c5 b7 cf 0b 7a 87 14 42 50 6e 4e ec ed b5 bd be 82 10 e8 50 48 48 42 f4 e8 01 3d 40 02 50 4b 4c 5c 5f 92 06 67 9b 99 c4 98 c4 cc ae 10 8b 00 c9 18 75 91 24 c9 65 d4 7f 2a 54 53 c1 24 ce 2e a3 cb 28 bd b1 d7 2b d0 5a 66 bb 95 34 0a 82 c0 98 20 d8 30 c1 86 09 36 82 60 85 58 23 09 31 ba be 24 89 1f 9f bf bf 8c e7 5f ca db 05 62 c6 e6 cc b3 c9 09 63 32 4b 4c 61 72 22 31 85 31 e7 04 c5 97 61 fb ce f6 17 6f 57 48 d2 a8 30 a6 82 49 12 93 04 99 54 a8 60 cc 02 21 c4 17 f1 19 b3 ad 10 62 34 19 18 00 48 00 4e 49 82 02 2d 9d da cc 91 67 9b 91 d9 21 b3 01 7b 93 5e 9d 91 81 81 7e fc 6c 3f ef 5a 20 43 c6 44 66 49 62 2a 24 26 31 26 31 c6 98 24 93 c4 Data Ascii: uuuYQ?E7NqR:!gBzBPnNPHHB=@PKL\_gu$eTS$.(+Zf4 06`X#1$_bc2KLar"11aoWH0IT`!b4HNI-g!{^~l?Z CDfIb$&1&1$
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: df 7b 86 f7 19 31 6a dc 5d 36 72 25 38 cc 78 0a 77 87 20 67 88 bb 5b cf d0 ae b5 e8 11 8b c2 29 5c c7 76 fe b8 4d ef ea b5 98 c3 2c b8 3b d4 61 c4 6a 9c c6 0b a7 17 33 4b ce 5a 4f 16 77 84 bb bb 5e db 93 87 e9 9d 15 ee 0e dd b0 82 cb 08 46 ee 2e 67 e3 ee b0 af bb 8c b0 30 7c 18 5a 72 65 08 23 77 9d b1 1e 39 41 86 6e 67 74 fd de 19 35 c9 f4 fa bd 14 b0 ff 5f a4 44 df 89 4d d8 a5 a4 c3 c2 96 12 15 b0 10 bb eb ec 53 6c 0f bb bb 51 da 0e 04 e3 ec 6e cf 53 54 b0 29 01 95 96 92 6e 58 76 17 36 67 67 46 1b ad 6d c7 36 49 d2 71 9e d7 fd e0 7d bf 40 66 44 66 21 33 c7 b6 dd 4e c5 d7 b6 f5 6b 6c db fa 6d ab 6d 23 22 33 c7 b6 ed 72 2a 2a 26 f0 bd ef 83 fb ba 62 02 bc 64 db b6 49 92 b6 6d 91 b7 7f cb f7 15 a0 fa fa 01 51 bd 04 dc 4c ee f0 c4 a7 85 43 57 78 18 98 f4 c0 Data Ascii: {1j]6r%8xw g[)\vM,;aj3KZOw^F.g0\|Zre#w9Angt5_DMSlQnST)nXv6ggFm6Iq}@fDf!3Nklmm#"3r**&bdImQLCWx
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 4f 8f 74 4b d2 d5 10 a0 8f 41 4b 17 3c 4a ee c8 0e a9 47 3a 25 77 24 2e 4e 87 2c 49 b7 74 5f e8 0e a7 19 5c 57 43 33 38 26 fe 9c 93 91 61 b4 49 5a 80 06 e8 10 31 86 fd 47 1e 3b de 2e 38 1c 6c f4 d4 59 d9 72 42 a8 f6 f9 fb cb 3f bc bf e2 d3 fb ce f3 1f 69 c7 1c 01 2a 85 d5 5d 7c 68 6c c5 cf f9 f6 8e 01 fc 71 79 a1 ea d9 8e fa 00 cb 7c de a8 b4 3a 13 61 64 81 91 91 d5 b3 b2 48 64 e8 4a 54 13 ea b4 6a 22 70 25 88 9e 95 3d 91 05 f8 4a cb c8 c2 77 3e 49 df 2d 97 26 75 a2 19 a7 b4 24 51 4b cd b8 ae 71 4a 4b 9f 2e 24 1a a9 25 68 a4 46 6a 49 c7 c8 0e 49 97 e6 05 79 c1 ae 78 33 d8 fe f1 e9 18 78 53 b4 51 70 08 6c e9 4d ee 91 d8 b8 89 21 45 a8 22 b4 92 81 b1 70 61 73 d4 98 25 46 7a 4c a0 ca dc 03 36 3c 63 39 14 2c 17 05 55 9d 9f b5 82 ab c6 df 95 6b f0 2e 05 71 45 Data Ascii: OtKAK<JG:%w$.N,It_\WC38&aIZ1G;.8lYrB?i*]\|hlqy\|:adHdJTj"p%=Jw>I-&u$QKqJK.$%hFjIIyx3xSQplM!E"pas%FzL6<c9,Uk.qE
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 6f e0 16 00 da 37 60 90 1a 00 6e 4d d3 03 3a 3a 14 3b bd 5e ad 25 a6 e6 68 63 41 ea f5 49 5a 22 db 48 c6 8d 41 af 1f ef d7 91 56 0d 5d 36 60 20 d3 e4 2c c0 fd 69 7a e8 b5 4a d4 69 b7 24 11 d9 c9 f1 a8 94 52 ab 47 2c b7 1b c6 fe b5 ee 3f e3 15 c3 ac dc 03 cf 80 db 40 e9 01 64 dd c2 67 61 9a 46 89 41 0b 61 2d b5 ca 25 e7 72 1e 8e 1b bc 34 ba d6 da 9c ef 5b 3f 3f de 70 67 91 30 7c 4f 05 07 b4 9a 3c 83 4b 69 06 e7 03 3d f8 bf 7e cf 08 8a 68 66 1b a7 2c 77 cf 40 3e cf d1 cd 43 5a d5 34 fd ee d9 27 b7 03 d5 67 8d 0b 01 7e bf 4b 18 27 f7 75 2c a5 64 fe 64 e3 a8 74 ba 3e a2 e2 87 b9 05 da 5c cb fc a7 7c d1 f6 b6 06 18 42 d5 0c 2d b6 19 93 ee 09 fb 53 43 ce 55 76 2c 72 04 50 cd 03 14 1d 19 b6 9d 6c 62 25 29 c3 d6 69 c3 8a f7 6c dd 17 1e d0 aa 40 3e 34 a9 ee a9 dd Data Ascii: o7`nM::;^%hcAIZ"HAV]6` ,izJi$RG,?@dgaFAa-%r4[??pg0\|O<Ki=~hf,w@>CZ4'g~K'u,ddt>\\|B-SCUv,rPlb%)il@>4
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: be f6 76 0a 22 99 80 fe af a0 51 06 7a 7e 5a 16 12 f1 42 7d 11 b0 9e bc 91 67 26 f4 e2 bb 3a e7 a7 1d 8b 3b 79 5f 87 72 a5 36 41 46 60 e9 02 10 dd 4e 6a ec 68 90 80 29 c0 c4 52 32 90 22 4a 4d e5 ca a4 d0 51 0d 4d 88 93 da 3a 0b 27 e0 c6 07 4b fb 28 d9 a2 00 40 67 81 f2 ba 15 57 5c 48 a0 e4 88 b0 ed 91 5a 68 9d bd 28 39 72 04 ce 3c 78 9a f3 21 ff 7a 0c 50 9a 92 b4 3d 32 77 fe 5f 40 b5 19 95 49 2a 9b 1c 55 6d 89 09 e0 eb 34 62 8c 0d 31 42 d8 ad 17 a4 ab 4a 21 51 5d 6c d1 ee ee 61 cc d8 cb f3 c4 cb c7 08 00 fa 73 f6 2e 40 a9 e1 d3 74 c4 cb 45 e7 81 81 3f d5 ab 3e fb b5 a6 be ab 5a 6f 8b 9b d8 73 40 ea c0 9b 00 a6 19 80 d4 48 4a ec 08 89 4e c0 7c 58 db 50 3d 8c 67 40 a4 e5 ac f9 65 8f 82 e2 3b af d9 3c 7c ee 40 d5 dd a9 87 10 d4 3d 64 20 a8 2a 6f 0c 53 37 c9 Data Ascii: v"Qz~ZB}g&:;y_r6AF`Njh)R2"JMQM:'K(@gW\HZh(9r<x!zP=2w_@IUm4b1BJ!Q]las.@tE?>Zos@HJN\|XP=g@e;<\|@=d oS7
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: fc cb 12 28 16 18 69 d3 94 98 a3 8e 1a d6 c3 1b 12 15 27 4c 55 8e a0 57 74 cf 1d fb d8 2c 2c a9 80 44 19 ab 78 42 04 e7 9b a7 2c a0 f8 5c b7 de c4 4c 95 e2 a9 00 bb f9 00 8c c6 50 4a 8e 79 7c b2 62 af 0f 49 58 d3 51 43 e5 db b9 45 d1 89 78 66 25 f9 ec 6c 18 cd 4c a3 85 f6 b1 b7 65 f3 50 ec 96 e2 7d e5 3b 3f 55 80 41 95 37 50 3d dc 66 66 b4 d8 a4 3b 00 7c 89 4d 0b 7a bf 2f ba 36 24 c6 52 62 50 61 cf c7 eb 2d e1 a4 e0 35 f8 3b a6 60 fd f4 71 99 cb 6a b1 2a d9 90 6a 5a 73 9f dc f4 69 f4 fc d8 bd 3f 61 22 f5 4e 65 93 8e 54 21 b9 7c 88 f8 e2 4b b0 80 d9 c8 1a 38 93 3b 07 00 de 99 ca 54 65 ba 4f 12 ff 2c f0 b0 2d 23 1f 02 00 2e b4 5f eb ab c0 15 e7 cf 23 9e 88 0d 14 fc 47 fb 57 bf a2 c2 7c 60 52 ac 92 bb 3d fb 4f 00 4e 9d bb 59 a2 94 3c cf e9 73 77 39 27 d4 9c Data Ascii: (i'LUWt,,DxB,\LPJy\|bIXQCExf%lLeP};?UA7P=ff;\|Mz/6$RbPa-5;`qj*jZsi?a"NeT!\|K8;TeO,-#._#GW\|`R=ONY<sw9'
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 63 a5 07 80 d9 57 6e a2 cf 97 0d c0 f7 ea 95 b9 0f 2b e8 62 1e 36 e5 7c 9e 51 c8 7b 00 d8 e6 ca 35 1f 03 54 d7 9a da 00 e0 01 ad 3a 56 6b 84 3e 0f e5 91 6a 2e 32 fd a5 2f 92 dd 25 ca 14 8e db b3 9a 65 cf dd de ad e1 ad b5 f1 97 56 fb a2 d2 f0 ac 13 3c 77 a1 06 00 91 cd e5 f5 63 0f ac 4e b5 a9 d0 79 fa 46 7e 8f c6 10 09 32 b5 10 3f 33 1d 2e 5e 2e 05 f6 5d 03 50 60 4d 77 11 ad 99 8f b8 08 4f 61 6d 2b 57 98 4e a2 46 11 b7 42 da 18 2c 97 4f a7 79 a4 60 90 48 67 49 c7 c5 0b c4 02 89 03 23 89 40 83 69 7f cf 1f 5e 28 6d ff 64 9c 5c 55 c8 1f cf 74 3e 84 56 6b da 17 5a 68 ec 7e f6 68 7f e2 b5 56 f1 b3 61 ec 49 b5 dd 68 a4 a0 90 46 43 aa 36 73 b3 64 7a bc cb 36 47 46 53 28 0c 5e 26 86 61 c5 bb 4e 85 7f 6a fa dd 69 e4 da 0c e8 fc 5f c9 fb 97 a0 f2 e0 9c 6d d8 55 65 Data Ascii: cWn+b6\|Q{5T:Vk>j.2/%eV<wcNyF~2?3.^.]P`MwOam+WNFB,Oy`HgI#@i^(md\Ut>VkZh~hVaIhFC6sdz6GFS(^&aNji_mUe
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 2e 44 ac 9b 4a be a1 db 1b 9f b0 56 67 cc 68 66 bd b0 f6 ae 23 bc e3 f4 89 2e bb b3 e6 8e 35 cc 10 c7 0d bf 9d 11 89 dc 23 67 ec 97 b1 2f 31 66 dc a3 db eb 33 a5 e0 59 b1 00 0c 52 68 e0 39 9c 91 27 cf a8 0f ac f1 5d 4f 57 92 5c 5e 40 f0 2e f0 61 6b 4b 12 fd bc 8f 2a 2a 52 98 2f a8 a2 c2 b4 9f 87 11 8a 62 fd 63 2a 19 c1 c9 85 3c aa a8 d8 c6 82 a7 8a 18 fb 79 9f 31 45 d2 38 ed 2c 60 b5 f0 ca 2c 07 63 0a 31 48 16 3e 7d ed 71 99 70 b7 fd d5 87 28 5d 15 e8 ff bc bf e0 5f 8d 28 7f 6e 89 01 83 95 c5 7b 9d fa 3e 5d c4 fa 23 e1 5f 6e 7d 15 c2 05 a7 58 ee a4 dc 99 0d 62 b6 7d 0c 7e b9 58 89 05 af dd cf b7 67 0c e0 93 41 53 f7 b2 3b 5d aa b0 54 b2 11 c7 2b 8c 2d 1a c0 64 69 01 7c ba bf 6b 31 54 5b d3 10 ef 88 4a 85 d2 3a 2b a5 00 68 70 90 2d 7e d7 7f f4 e0 aa 66 21 Data Ascii: .DJVghf#.5#g/1f3YRh9']OW\^@.akK*R/bc<y1E8,`,c1H>}qp(]_(n{>]#_n}Xb}~XgAS;]T+-di\|k1T[J:+hp-~f!
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d3 5b 2f 2e 81 bc 9f 0c 77 0e 01 66 de 2d 4d ed 40 2a 83 a9 a4 e5 d7 e9 e8 64 a4 91 63 81 92 6d ba 6c 51 dd ba b0 84 ed 57 e6 54 ad f2 98 e6 3e 00 b4 21 f1 46 f5 83 8e 86 27 1e ab 65 69 4a 57 32 b5 9c d0 7f e9 f5 50 5d 54 4b d2 b5 4d d5 0f 2e 69 42 c2 a3 84 25 92 05 90 1b 1c e3 f9 ef fe db 07 3d d7 a4 c5 03 3f 54 20 db 7d d3 f4 4e 5e f4 3b 1f 2e 3c 3c dc a7 2c e1 48 14 5b 62 0f 7f 17 5f 68 8a b6 66 c4 20 ee 54 7a 44 3d a0 58 a2 55 de de 71 50 ea ef ea 96 88 c7 20 39 7b 40 21 dc 25 56 41 35 ea ff 39 9d 4d 4e 59 8e 8f af be 9c 50 16 2e 96 6b 49 12 17 b5 01 d2 c0 b6 50 d2 10 af 60 12 49 87 a0 4d 6d c0 94 01 89 5c cb ba ae c2 90 48 92 e8 a4 64 cb ae 8b 2a f9 b9 85 5d a6 cc 1d a9 c8 eb d9 f2 a5 98 28 e0 39 9a d7 c4 93 f4 3c 82 67 b8 d8 3d 09 97 e3 ea 4a 1d d5 Data Ascii: [/.wf-M@dcmlQWT>!F'eiJW2P]TKM.iB%=?T }N^;.<<,H[b_hf TzD=XUqP 9{@!%VA59MNYP.kIP`IMm\Hd](9<g=J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	50022	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	1106	OUT	GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 186166 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4098 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	720	IN	Data Raw: 52 49 46 46 2e d7 02 00 57 45 42 50 56 50 38 4c 22 d7 02 00 2f 0d c2 49 00 4d 48 0c 80 30 6c 9b 81 8c b1 21 ff 3f 2c c9 f6 7a 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 b7 8e 93 44 93 9d bd 94 85 93 29 d6 34 fb d5 75 5d 59 5a 92 f5 42 f1 a4 dc 78 dd 16 87 34 49 97 2c d9 f6 a5 44 d1 c4 24 a7 26 49 67 c2 37 c7 68 09 4a e7 42 b9 13 49 4a a6 28 fb 47 03 17 00 6e 30 4a 92 92 72 41 d4 9a 94 14 4b 3b 67 6d 2b 64 f9 6b 1f 74 37 70 5c a0 1d fb ac 0f 5d b1 6c 27 81 6c af 32 01 03 c0 d8 9d 00 40 de 2a d9 96 40 cb b6 20 d9 81 b2 85 9c 5d ce e9 4b ca 3a 30 48 b0 25 c9 16 20 c9 b2 24 ad c4 94 24 47 62 89 63 e0 18 00 81 01 10 e0 Data Ascii: RIFF.WEBPVP8L"/IMH0l!?,zAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%RD)4u]YZBx4I,D$&Ig7hJBIJ(Gn0JrAK;gm+dkt7p\]l'l2@*@ ]K:0H% $$Gbc
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: b5 6d 6d 23 6d db b6 7d 3f 95 8e 23 85 0d 95 5c 5d a0 66 66 e6 ff bf 76 f1 12 ed 76 5c cd cc dd d1 a9 b3 ff 0a dc b6 51 32 3c c6 57 a0 18 4a b9 a1 2e 33 d3 6e 9d c3 6e 86 61 45 79 89 14 14 2b c0 40 81 20 91 49 07 ea 85 8e 87 14 26 44 48 21 65 a7 5e 20 14 33 1d c3 87 d1 31 0c 9b 09 29 a4 14 40 21 4c 40 20 05 22 a4 10 61 98 30 6c 22 0c 71 05 a0 43 07 99 20 18 c5 0d 85 89 a2 5b d1 73 51 14 75 e9 10 04 00 8a a1 a3 e8 10 d0 61 00 41 00 82 d4 a5 6e c2 90 42 10 21 18 98 cd 90 86 35 0c 89 14 52 14 00 00 21 c2 84 08 99 09 11 a2 d9 f0 66 6f 10 00 05 06 0c 20 93 9b 60 98 26 1a 00 22 8b 8e c2 21 ba 21 1d d2 21 fd 2e 93 c2 3a cc 61 d8 0c 2b ac 5e 00 c4 86 a7 98 46 07 9b 14 1d a4 51 dc 80 bd c9 04 73 18 52 48 81 c2 0a 03 42 0a 13 10 70 18 a2 8b 86 01 80 02 48 81 02 b3 Data Ascii: mm#m}?#\]ffvv\Q2<WJ.3nnaEy+@ I&DH!e^ 31)@!L@ "a0l"qC [sQuaAnB!5R!fo `&"!!!.:a+^FQsRHBpH
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: c3 32 cc 7d bd ea 58 be a7 15 1a d7 03 05 34 3d 37 3d a2 d7 ad b6 e6 68 df bf 6a d7 9c f9 a0 f2 ce ac 5b d3 a9 49 53 34 bf 9c 7d ad 75 a9 fa 1d 5d 9a b4 7a 31 0b d2 74 a3 4e cd 2f 9b df 69 1a 4d 97 a6 27 a4 d1 f8 be e1 1d 37 f4 88 1e 61 48 21 18 82 04 61 b9 d0 d7 43 3d 9e f8 f7 13 fd 67 f8 fe e7 53 7d 7f ec e7 0d bf 9e de d7 99 ff 3c f1 9f a7 2b 7b fd 78 ba 0c fe f6 48 5f 1f 0b 86 82 0a 7c a5 cc d5 28 f5 72 5b a7 b9 cc 85 cb 6d bd aa 75 9d 7d aa 75 9d eb 8e ba d4 4b ad 6b ad bb 5a 57 ea 5a 79 67 ae f3 cc 57 53 99 f8 a8 f2 c1 e4 17 f5 52 eb 5c fd 6a e2 83 ca 5b 93 1b bc 83 e1 86 17 40 03 0d 08 2b a4 b0 f0 29 31 00 5c cd 1e 14 19 ea a6 bb ba 4c 26 14 d8 cd d5 ec 06 60 c8 bb 81 19 d0 cc 72 01 85 0d 75 c3 05 b3 01 60 16 86 37 19 5a 86 21 6f 52 17 0a 6f f1 39 Data Ascii: 2}X4=7=hj[IS4}u]z1tN/iM'7aH!aC=gS}<+{xH_\|(r[mu}uKkZWZygWSR\j[@+)1\L&`ru`7Z!oRo9
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: ca 26 5d d6 7a d8 25 a4 49 97 6b bd da 25 2b dd 76 93 5e 89 ca 7d e6 f7 3d cd 3b 21 6f d2 25 7c be 56 ba 34 09 59 2b 5d ba b7 a2 f6 59 3f fc 76 bc 35 6a b5 f9 f8 be 1e 44 46 10 d6 71 fc fa c7 4b bf f4 82 20 08 be 34 7f 82 4f f8 2d 5c f8 03 de f9 97 dd 91 e9 92 b2 56 be 9f 2f fc 74 a4 4b 54 c2 ee b6 f6 cd d7 dd 4d 33 6e de ec f2 cb 23 21 5d 36 f1 cc 33 b6 4d ba 34 5f 9d 99 c7 0a f1 6a 97 26 e1 e3 90 ff 49 93 26 4d ee 6b bf c9 9b df 9b fd 3d ee fe a7 b2 61 b3 0c b9 c7 97 82 b0 c6 b1 f0 41 d6 f3 e9 c7 0d 0c df 47 25 7c 11 95 cd 3b cf 95 2e dd cd 2f 8f b7 ba 57 d3 b6 cb 91 69 d2 fc a5 c9 9f 7b 36 69 5e 7d df 6b 45 36 69 f2 d3 23 dd 71 cd 6c 12 f2 58 ef 35 69 b2 49 54 9a 77 6e eb 30 44 33 4d 8e 4c 7a 27 f0 9f ed 95 67 64 13 41 58 f3 ec 23 92 8f a4 9c eb eb 90 Data Ascii: &]z%Ik%+v^}=;!o%\|V4Y+]Y?v5jDFqK 4O-\V/tKTM3n#!]63M4_j&I&Mk=aAG%\|;./Wi{6i^}kE6i#qlX5iITwn0D3MLz'gdAX#
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 74 65 98 78 12 6c 5b b6 6d db 6a 8a d5 36 36 7e 96 20 0d 24 ca cb 97 1f 25 0c 31 72 e0 c3 7b f7 ec d9 83 0d db 48 8a 7c fc 15 33 d6 fe b0 ed 5f 27 a7 fd bf fb 29 2f 9d 99 9d 59 d7 6c 92 8d 07 0d 12 25 10 68 71 27 a4 14 77 87 e2 4e 68 a1 86 cb 1b ab e0 b4 50 08 ee 14 d7 10 d7 0d 31 92 6c 92 75 1f 7d c9 53 8e e3 b5 52 e3 cd df 7a 25 db 56 6d db 76 4a a9 7d cc 39 d7 de 87 c4 cc cc cc 0c df 81 96 2c fd 00 33 bb ec c9 27 8b 99 c1 7c cc cc fc 24 9d 7b cf 5e 6b 8e d1 5b e5 6b db b6 6b 4b 92 9c 31 e6 da e7 be 67 66 ee e6 c1 0b 9c 73 ce a4 6c f8 09 7c 03 74 a8 10 39 f9 04 7c 49 89 90 21 73 ce 39 4d 47 78 98 b9 d9 7b f7 ec 3d 03 12 23 49 8e a2 18 2d c8 93 8d e0 bc fd f2 c3 ff 4f b5 a5 c6 de e7 fb ad aa b5 b6 ef e3 d2 e7 9c 76 83 6e dc 5d 1a 97 40 42 3c 99 90 d1 eb Data Ascii: texl[mj66~ $%1r{H\|3_')/Yl%hq'wNhP1lu}SRz%VmvJ}9,3'\|${^k[kkK1gfsl\|t9\|I!s9MGx{=#I-Ovn]@B<
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: b6 a1 57 62 92 7b 4a 57 ec cd 75 e8 9e 0b 43 75 48 52 b8 f7 a5 77 65 9b ef da 1a e6 d2 42 cf 05 46 97 f2 d5 ee eb 7b ff f4 c2 7b 55 2b df 8c 9f ea 1c 3f 23 97 9d 5b 19 7c c1 cf b3 c8 bd a5 65 ad 87 c2 ea a2 2c 19 f4 da 3e 2e cc a1 29 a1 e8 6b f1 d2 ae 24 5b 26 20 44 5e 09 56 9b 6b d4 ce f0 dc d7 33 52 ad a7 9f dd 8a 34 8a a5 9c 70 64 5b 17 bd 7d 6f b5 52 9b b7 7a cf 51 2d 40 c5 23 e3 f7 ee dd 56 b5 06 23 0f ae 35 91 2e fa 5a de c2 bd 42 4c d5 2a db f6 f7 9b 76 73 5d e7 29 a9 37 62 05 82 c2 b8 67 21 83 33 ed 98 e5 ec 3d a1 cd e6 8b 69 cb 58 eb ef d1 c3 fc 31 73 cb a6 2a a4 c4 25 30 ac 17 7a eb be f7 f9 f8 d7 d3 de f5 2c 51 42 39 4d bd 3c d0 2b 11 96 db a0 f9 16 45 37 ef 9d ad 37 0f e0 22 70 3a 66 45 61 80 d5 ae 6a ee 3d 54 8c 8b 0c ae a3 59 5a 30 79 69 af Data Ascii: Wb{JWuCuHRweBF{{U+?#[\|e,>.)k$[& D^Vk3R4pd[}oRzQ-@#V#5.ZBLvs])7bg!3=iX1s%0z,QB9M<+E77"p:fEaj=TYZ0yi
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 90 f8 76 bf 48 36 51 32 9a ca 86 63 69 f3 cd df 75 fa 06 a1 90 09 e5 77 ed d7 01 38 3c cc 39 9f 91 7b c8 97 79 d7 7d c2 84 ce 1e 27 c4 f2 c8 d0 96 d4 77 5c d4 8a 61 7b 77 c9 b3 2c 9a bd ae dd 95 8d 3b b6 5c e3 48 8d b3 61 af 5c bd 2c f7 d9 8f 7f 70 fb d7 7f 37 37 84 34 c3 cb 0c 2c 59 da 8a af f5 9e e6 84 1f b6 be 78 bf 49 2a 5c 69 8b ee a3 79 06 55 0c a5 21 b1 4d ea 50 dc 76 63 92 ea 3c 39 de ad 06 9b 8c bc 6d 54 42 f3 71 af 44 ed b8 3f b8 05 9a 61 e6 a6 84 71 b5 2b 70 d5 82 0b b6 d6 3b 57 aa f6 d4 34 28 c1 ce 47 02 d2 c2 8f af fc 4a 19 40 b6 2f c3 1d 06 ce 1a d8 42 a4 dc a0 8e ee a8 a4 14 6d ad 8d 01 49 f3 9b 04 27 f4 58 19 d6 cf d6 6f e6 4a 9f bf 78 e3 4b 40 e0 54 4b 35 28 02 e4 dd 92 0f 6e 3a 1a 07 4f 80 8e 56 6b ca 54 89 16 66 6b bf d8 0e 35 38 2e b4 Data Ascii: vH6Q2ciuw8<9{y}'w\a{w,;\Ha\,p774,YxI*\iyU!MPvc<9mTBqD?aq+p;W4(GJ@/BmI'XoJxK@TK5(n:OVkTfk58.
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: a3 49 fd af ff b1 ab ff f9 f2 80 5c da 2c 65 e6 32 b5 8c 5f d0 6c 7b 53 e2 c4 22 66 87 0e ca 2c d5 c7 7c b4 e4 5d f8 f6 40 36 1c b8 0b 8d 99 b6 2c 52 ec 81 2e 2e 55 30 ef 85 88 b1 41 42 49 d4 85 2e bb 38 a3 29 68 e8 de ba 81 c0 a3 5d 5b e3 96 8c 91 61 f7 26 dc b1 74 1f 9f 43 e3 90 c3 0f 99 19 06 97 37 9b 73 7b ed f1 73 ef 3d 7e 3f ba da 62 6c 9e 3e 5f bf 2f 07 e3 5b 4d dc 42 ba ba ad b2 a1 bc 6e a3 2d dc dd 14 2a ed 91 d3 cc 5b a2 73 b4 3d a1 9f 9b 2f 0c 46 f0 42 42 9d 9a e2 9b 88 9b 5f fe 06 ee 69 c6 da b5 1e 56 8e 0f f5 8e fd 18 90 8a 11 e5 a8 8a 43 06 44 a6 b1 ea 3b 0a 3b 6d 62 c0 dc b4 8c 64 bf fc f9 3d da 3e 63 bf da de 75 50 7a 2e f7 ed 98 5f cf fe e0 ed 5f a1 65 66 d6 08 3a cb db 21 02 78 d3 4d 61 14 b2 77 bf f2 d4 e3 17 1c fb 9a 99 0c ee 29 ed 98 Data Ascii: I\,e2_l{S"f,\|]@6,R..U0ABI.8)h][a&tC7s{s=~?bl>_/[MBn-*[s=/FBB_iVCD;;mbd=>cuPz.__ef:!xMaw)
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 00 7e 71 a3 70 63 49 5a 02 46 2f b3 c5 24 68 dd fc d0 80 99 38 66 5d 9c a6 d9 c2 76 fb fd 63 ef d6 e4 02 85 8a 07 07 44 c4 7d 09 72 73 d1 6d 95 05 9d e6 d6 e4 59 de 91 8b 9b b7 fb 6f f7 1b a6 96 44 48 3d 7f f3 a7 63 1f ec 0b 7f aa f2 bd c7 6d cf 2e ce e7 80 ef b3 5c ff ba 39 ab 09 6c 30 4b 9b 46 23 70 86 e0 f6 98 17 22 97 51 5b f6 91 fd a1 36 46 a5 6e 1a f6 0d bf 5f df bc d0 85 c1 6f 2d 8d 50 d1 d2 e7 2f 7d 2f 38 56 e3 2c 19 8a 90 c3 1b d0 b1 0c 69 b2 a5 89 da 54 ae 3c 64 d5 06 e2 16 62 13 5d 7a 4e 28 8a 29 d1 42 70 38 df d6 cd 1b 35 ca a1 e5 0a 3d 4e 31 4d 28 0e a5 e5 d2 c4 35 f5 e9 03 47 bf aa 15 11 e5 b6 c1 20 a7 4c dc cc ba e0 b0 d9 ea bd d8 18 53 53 6c 62 6f 6a 7c 2b 5b ef aa d5 fd de d7 7e 93 ea 5b c1 7f f8 9e 07 08 45 b9 74 56 72 62 39 75 6f 76 4c Data Ascii: ~qpcIZF/$h8f]vcD}rsmYoDH=cm.\9l0KF#p"Q[6Fn_o-P/}/8V,iT<db]zN()Bp85=N1M(5G LSSlboj\|+[~[EtVrb9uovL
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 2d f1 33 ee a1 b9 4a d0 34 98 c7 af b0 8d 29 6d b5 46 08 6d b4 2d 6b ee 31 50 d5 92 07 69 d3 4c c3 75 b8 e3 4a fc 45 cf e1 36 ea 98 f8 1b 19 f6 74 b8 77 e3 05 f0 54 04 66 6e d2 ab 71 9d f7 59 8c f6 5d bf 7b 77 c2 1c 00 4f d1 2e 6b 5a 5b 05 2f b7 22 63 c3 f0 bc 73 bc d0 72 bf c0 b2 7b 30 ae 44 b0 a1 b7 09 53 df 61 ec 68 3c aa d8 30 d3 c9 0b 72 6c 22 59 2e 74 f2 e1 ef fb 83 ba ec 9c d2 0c 59 3d c0 58 8f c6 6c 60 e3 2b 47 eb 21 60 df 98 be 6f b1 ad 28 14 21 14 b6 6d 6d b6 b8 1b 28 9d 21 e0 71 2a e7 c4 51 59 bd 34 2d c2 02 80 a6 4d fb 36 b3 99 d2 84 be 5d 8a 0f f0 7a fb e5 64 17 36 c1 75 ff 44 eb 5b 50 9c 2f b7 4d e1 ee 5e df ff be ad a1 f1 c7 80 58 84 61 86 c8 67 a9 c5 ba 6c 5c c2 66 62 52 6f 78 13 e8 46 9b 97 5b 1a bc f3 34 e6 36 56 68 7e 61 13 e6 9b 21 94 Data Ascii: -3J4)mFm-k1PiLuJE6twTfnqY]{wO.kZ[/"csr{0DSah<0rl"Y.tY=Xl`+G!`o(!mm(!q*QY4-M6]zd6uD[P/M^Xagl\fbRoxF[46Vh~a!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	50024	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	1107	OUT	GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 189446 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4098 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	720	IN	Data Raw: 52 49 46 46 fe e3 02 00 57 45 42 50 56 50 38 4c f1 e3 02 00 2f 0d c2 49 00 4d 48 0c c0 36 6c 9b 00 12 0c 1b e8 fe 3f 58 b2 9a ee 82 88 fe 4f 80 24 25 5e 25 29 ca bb 12 79 28 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 97 1c 39 d6 1a bd c5 47 ab d6 44 4e 12 c9 d6 d6 9b 27 4e 2c 39 ab 9f 58 eb 92 68 9b 75 23 6d 94 48 51 7e eb 38 49 b4 d8 79 97 b2 71 92 58 d9 ad 67 4e 72 5b d9 4a 89 a5 33 c5 8b a4 05 8e bc 24 7a 4b 22 59 56 8a c3 16 40 db e2 56 2c e9 8a a2 64 a0 80 84 1b 29 9e 47 b8 8a 6b a3 3c 32 4f d6 39 da 96 39 91 d9 92 24 da 4e f2 21 58 26 37 44 49 22 31 cf 80 39 e7 64 56 3b db 89 4e 78 82 2d 48 4d b4 65 ee e7 06 6d 73 ed e7 33 de da f9 e1 2e 4e 94 3c f0 03 46 26 a1 3e 4a 24 c9 b4 9f 38 24 31 08 e0 60 4b 9f 3d 7e 42 d8 97 75 ea 7d 2e 12 df bc c9 28 b1 93 d8 Data Ascii: RIFFWEBPVP8L/IMH6l?XO$%^%)y(R9GDN'N,9Xhu#mHQ~8IyqXgNr[J3$zK"YV@V,d)Gk<2O99$N!X&7DI"19dV;Nx-HMems3.N<F&>J$8$1`K=~Bu}.(
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 94 51 5a 1b 3d cb 5f af fd fc 8f e0 75 08 fb 3e 4b 1a a5 94 11 52 48 77 21 04 8f b6 6d ab 76 63 db 56 a9 b5 0f d9 4e 96 22 44 53 53 32 8f 60 66 e6 bf 5f cc bc 8c 55 f2 34 53 30 69 f4 d1 fa af b0 6d db 86 49 f7 bc 43 ad c0 50 15 a8 2a f6 74 95 a1 e2 2a 96 65 d2 de 03 4d ad 34 51 50 93 24 a8 88 06 b5 59 a9 43 c4 46 46 44 8c 81 da 24 b5 62 2b 85 6a d6 e0 61 b9 d8 88 88 21 a1 66 6c 30 a0 49 46 44 c6 b2 b1 5c 64 2c 79 45 68 d0 20 15 49 b2 5a 15 88 4d e3 d6 78 34 d2 a8 a2 49 12 42 ad 40 6b 34 09 9a 85 24 09 49 a2 8a 6a 63 89 48 32 92 45 71 b1 c4 61 0e 4b 10 11 69 42 08 23 63 23 a3 62 23 23 8b 0b b5 b8 16 0c 82 50 90 85 54 54 45 b2 6c 91 05 21 39 1a ad d9 64 b5 44 13 4d 7c 55 11 31 cd 36 cb c5 32 31 b5 09 c9 85 3a e5 69 0d 72 11 19 24 8e 56 05 b9 16 15 c9 36 4b Data Ascii: QZ=_u>KRHw!mvcVN"DSS2`f_U4S0imICPteM4QP$YCFFD$b+ja!fl0IFD\d,yEh IZMx4IB@k4$IjcH2EqaKiB#c#b##PTTEl!9dDM\|U1621:ir$V6K
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 61 a7 50 28 d0 6c 9c 45 59 54 24 6c 00 2a 8e e3 4f b8 a0 0a b9 60 97 24 c3 45 b5 88 da 64 d9 53 9c a6 0e dc a1 c1 0e ff 29 6e 70 53 ad e2 ab a8 f2 30 77 f1 9f 72 13 3b fc 87 0f ec 62 87 48 92 3c 24 9b 46 6d 32 55 72 95 06 66 ea 39 27 32 5f 50 37 cb 92 4d 1a d4 1c 38 e0 ab 65 59 92 3c cd 09 90 1c 12 82 26 09 18 11 51 11 12 44 24 58 28 58 5d 28 92 88 24 35 21 51 25 2c 26 f0 b5 9e f6 70 ea 02 62 21 15 c9 92 60 98 da 0a 1e f2 18 ec d4 61 4f aa c8 d3 42 88 5a 6d b5 9a 24 d5 82 55 59 9a 24 64 6b 33 b2 40 6b b5 c8 b8 8a 3d f0 70 a1 8a 4c b3 91 c5 d3 a9 6b 5b 0c 6a 1e aa 22 8b ab c8 a8 56 ea 58 1f 36 f7 b1 31 8f 4d 8f 21 8f 93 7d d9 7d 9c 7e b4 8d 47 db e1 57 1b 4e dd fa c6 79 3e b5 8f 93 d4 76 eb c3 e3 dc da c7 c6 5b db ee 4e 1e 39 7d e4 c4 ac 1b 47 f0 38 f1 38 Data Ascii: aP(lEYT$l*O`$EdS)npS0wr;bH<$Fm2Urf9'2_P7M8eY<&QD$X(X]($5!Q%,&pb!`aOBZm$UY$dk3@k=pLk[j"VX61M!}}~GWNy>v[N9}G88
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: a9 69 d2 ad 16 ab 98 e9 72 f6 84 2c 72 ef 79 f4 af b9 5c a1 df 27 bf 32 66 ee d7 b9 5f e1 3b dc af 71 bb c2 1d ee d7 90 3f e0 27 7c e5 d5 67 21 e1 49 cc 1f 42 fa 4c 93 2e 9c 09 09 79 95 55 56 69 f2 b1 ef 8b 76 eb 73 e7 2d 09 69 f2 f9 1f e1 de 2a 21 f7 9e 55 42 56 09 f9 e2 48 9b 69 f2 6e 1f 39 f3 03 5f 82 5c 98 fb 69 3e 7a f1 28 24 24 64 95 57 d9 46 62 e6 18 97 be 68 f9 a9 25 a4 49 48 c8 cc 5b 21 21 8b 31 24 fc 1c d2 10 f2 53 4b 48 48 25 f3 4c f6 7c d3 12 de 79 cb f9 9f 5a 42 be 38 3f 0c 59 bd 95 09 49 13 ce 84 34 d9 c7 18 3e bd b8 25 dc 7e f7 72 7c be ca ea 93 d9 6f 8f b9 0c 69 d2 67 16 17 43 42 42 fa cc ec 69 12 72 f6 8c 99 e6 bd 55 c2 3b e1 ab f7 b9 98 9f 7f 3a 13 12 f2 4c 5e 25 dc de 66 56 69 56 b7 91 90 70 79 cc 84 54 cf 77 67 3c bf 00 fc ed 87 af fe Data Ascii: ir,ry\'2f_;q?'\|g!IBL.yUVivs-i*!UBVHin9_\i>z($$dWFbh%IH[!!1$SKHH%L\|yZB8?YI4>%~r\|oigCBBirU;:L^%fViVpyTwg<
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d5 95 99 11 71 78 ba 6d db b4 6d 6d db 72 6b 7d cc 39 d7 5e c6 b6 2e fb 0a d9 b6 ed e8 15 bb fe d5 75 c5 af 7f c0 a0 6d 6b e3 f8 9c a5 c9 d1 5b c8 82 6d 2b 6a a5 05 c4 a7 99 30 d2 89 01 1c d2 9f fe f0 ff 5f e5 34 fe bf c7 91 71 9f 39 71 81 10 42 b0 e0 ee 14 a7 58 d1 e2 35 ac 50 58 da 6d a1 5b 37 e8 16 2d b6 c5 5d 4a 81 50 08 5e dc 29 6e 11 68 12 42 08 21 19 77 39 72 bd 93 33 93 f4 9d f4 ff 88 80 45 db 56 d4 e6 00 1d 9c 7a df 2a 2b e2 f3 81 24 9f de 68 6b 5b 36 27 da b6 6d df 8f e3 38 cf cb af f2 aa 54 c5 dd 13 1c 82 bb 75 d3 06 ed 7a bb 8e f1 b8 bb bb df 2e 6d d0 2e 34 d0 78 37 10 22 10 24 09 81 b8 54 a4 dc eb d2 f3 3c 8f 63 df c7 13 b8 fb f1 e7 b7 06 fe bf 55 bb 6d ac ff 5a 1b ce be 20 06 5b b2 24 b3 e5 38 4e d2 34 49 a7 4d 9b a6 30 85 99 d7 e1 c7 cc cc Data Ascii: qxmmmrk}9^.umk[m+j0_4q9qBX5PXm[7-]JP^)nhB!w9r3EVz*+$hk[6'm8Tuz.m.4x7"$T<cUmZ [$8N4IM0
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: c8 51 ba be dd 9e f5 9d ea d0 19 23 6c 57 d9 a6 01 f3 40 09 76 b5 10 75 73 25 81 c4 df 67 5f 89 20 38 d1 c6 8d 8e ed b9 4f 06 90 b7 d2 8b ed a3 6f b9 e4 e2 6d 2b fc f0 33 f8 11 1b e9 c4 8a ee 31 34 6d 82 b6 c9 76 b5 46 9f 5f 80 1d e0 66 21 23 3a 1d 53 b7 0e 59 4a 8d 6b dc 6e ed cb 75 36 58 c7 f1 c6 b1 d0 e5 f1 4f f7 fb be fa ba a8 b8 b2 1b 1a 1e 1a 04 45 81 7b 9b 02 b0 e8 05 70 23 72 d3 99 dd dc 7a 1e 86 1c 40 05 2d b2 d5 5a d6 46 51 54 14 3c ac 8c c6 3f 01 d8 18 6a 59 60 a1 ef 55 7c 10 2e c8 b1 d5 ad 24 59 90 82 07 a9 5b 0e 3e f3 33 1a c2 a2 92 8b 37 95 99 a4 c4 30 3a b0 5d 3c 55 fb e2 3e 65 d3 2b 17 42 c7 14 96 7f 46 c6 a8 a8 24 de c8 73 e5 8a f7 fc 89 57 3e e2 d0 4d 0b 56 db 71 83 f0 a1 a9 88 44 fb 36 98 3f 44 55 6e 6c f4 c2 17 53 69 ce 25 62 ac ac 90 Data Ascii: Q#lW@vus%g_ 8Oom+314mvF_f!#:SYJknu6XOE{p#rz@-ZFQT<?jY`U\|.$Y[>370:]<U>e+BF$sW>MVqD6?DUnlSi%b
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 0e 36 1e 12 ca 67 8d ab bd 4e b7 8d ec 81 29 61 a0 ae 6e ab 99 15 df 91 2d 23 07 4d f6 4a 96 a2 42 e3 9e c9 da b6 a3 e6 a3 e6 c5 50 13 e2 9e d3 31 bf fe f7 bf bd f8 d9 c7 bf b3 e7 4e db 00 85 11 77 da ab e4 7c f5 74 9e 5a dc 21 54 77 3f d6 a8 fb 41 cb 9e 6d 5c ee b2 28 8b ea d8 06 05 98 ae a6 80 d5 ec e0 c7 bb 78 7a c1 f9 e1 55 27 5e c7 ad e3 d6 4b 0a 6e cb 87 d1 46 69 d5 47 d6 2d 9a b4 6b 51 61 50 1e 0a 34 3b de fb 90 45 5c 75 33 ad 70 49 ae 75 e5 f9 9a cb 60 e3 dc 06 4f 45 46 07 0d 2f 0d 85 a3 cc 8d c9 25 1b 54 9c d1 fb 4b f6 71 a1 88 45 28 01 53 41 84 63 0b 6b df c4 a4 c2 38 79 29 15 85 48 cf f2 96 03 5c 6f 78 e9 a0 67 40 78 ef e6 73 9c b4 31 26 94 c3 11 87 09 06 d4 45 d5 8b 54 1b 6e c5 d1 03 ae 0a 17 6f c1 73 1e da e7 db 83 9f af bd 6f 82 2d c5 bc 29 Data Ascii: 6gN)an-#MJBP1Nw\|tZ!Tw?Am\(xzU'^KnFiG-kQaP4;E\u3pIu`OEF/%TKqE(SAck8y)H\oxg@xs1&ETnoso-)
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 7a 39 ba 14 69 77 69 bb 75 da cc 9a 39 9f ef 65 91 4c 14 b8 be 7c be 67 b7 ba cd da f5 ea 86 f1 6b bc 8d 47 1f 50 cb cb c6 6f 6f 75 60 db c0 24 99 da eb 7e 6f 47 76 d6 7c 39 7c b8 d1 76 77 bd 79 9d 19 ce fd 1f 7f 97 9f f0 7d 80 d7 db f5 b5 6f 25 c9 17 77 52 ec 3e 51 27 a8 7a bb 8f ef 98 22 1b 09 5a a5 f0 c9 9e b3 8a 6a 31 db 88 0a 9c 77 ef c6 5b 59 5a 2a 57 79 cb 78 75 6d 30 60 00 a7 af 16 6c 3a b9 3c 78 1d a7 cc be fd cd f6 0b 1b 65 c1 db 2e 16 3a 11 4b 23 53 42 55 ec 5a 21 dd 45 06 07 6c f7 a8 4d 98 52 e3 a4 4b 38 de 16 38 a5 e0 2a 95 f5 10 ba 40 74 a5 90 80 02 4b dd 9c 32 1a 71 62 a0 37 ef 17 3d 31 c7 dc d0 d2 99 5b 7c 18 f9 9c ba e1 70 49 64 23 db 3d 0e e5 67 d9 3b de ee 9b a1 54 6f ff 63 d5 50 d0 ee d1 35 d6 6f 33 2f 76 6e 15 99 b9 ba ea aa 8a 31 33 Data Ascii: z9iwiu9eL\|gkGPoou`$~oGv\|9\|vwy}o%wR>Q'z"Zj1w[YZWyxum0`l:<xe.:K#SBUZ!ElMRK88@tK2qb7=1[\|pId#=g;TocP5o3/vn13
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 2b 34 04 b4 88 10 9b 0b 38 57 b6 87 2c 5f 84 93 e6 9e 9f 78 eb ce ef 6d be bd f5 33 ab 98 88 05 81 ce 19 1b b8 93 65 bb 1f 7f c7 ec 4c 09 36 74 26 37 bb b5 e5 26 e9 b7 b1 af 0f ee a3 86 c9 2c 92 43 02 d2 b1 69 2a cf 91 c0 aa e2 35 fa 7e dd 3d f5 e1 2d a5 17 db 5b 2d 40 4b 8f 45 50 ed de c7 8b f3 e8 5f fc b3 af 7c 24 87 01 80 d8 9a a6 1e 01 84 8a af 46 e3 ad 5d e1 71 dc db 90 1f b9 eb 6b 91 19 75 e0 95 ed af ff 5d be 1d ed 6a af ad 43 b8 f8 3d 7f 7d f7 df de e1 9f f1 4c 66 63 5e 7a 16 ed e7 ad 54 34 b6 18 0a 86 20 6d ec a6 d4 71 d4 24 93 7d 77 3b 26 9a 93 3d ca 9a d2 a0 45 bc 79 a1 42 e1 4a 0f 6a cb 3c b9 36 f1 16 b1 e7 f5 d2 94 8d 81 aa 5b 61 d7 eb 14 5f 7a 9a 91 48 fb f5 69 4a 13 9f d6 5f 9a e7 44 8d ab 6a 92 e4 a5 01 c2 16 6d f7 0e bc 6c 30 2c be 96 96 Data Ascii: +48W,_xm3eL6t&7&,Ci*5~=-[-@KEP_\|$F]qku]jC=}Lfc^zT4 mq$}w;&=EyBJj<6[a_zHiJ_Djml0,
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: fa bc 29 70 93 19 53 e8 d4 da ea 06 33 60 41 74 5c ed ad 56 03 14 61 cb 1e 65 58 a4 a2 41 0d 2a 5b 36 19 1d 35 95 ad a9 51 61 bb 5b 9f f5 b3 86 f7 7c a7 08 04 1e 8a 40 66 c8 a9 80 c5 ac f9 98 99 b7 e2 d5 26 6d 56 b7 02 0b 12 7b 1a cf a7 6b 59 92 69 15 fa 9d 37 6f b0 2e e1 08 af c1 60 8b 45 56 c1 46 57 dd 9b 0b 8c 85 90 05 e5 8c 36 97 e7 d8 72 b8 f4 b2 ad 75 7a 27 dd 2c 83 6b 7a ba f3 22 64 b0 4c c7 12 23 c0 33 88 84 28 3e d3 f1 14 bc 79 e4 99 c3 3f a9 c1 86 b4 a4 4d 81 db 9d 69 30 04 34 12 50 32 3e 35 0a 53 b0 e8 90 87 14 9a 40 e3 0c 7b 72 0a 5c 11 5f d3 68 d6 8f 70 ae 6b 95 69 8e c2 7c d0 c9 53 0a 42 c6 0f 95 13 85 11 93 05 0c 41 d3 65 c8 62 9a 62 e1 bd 9c ff 0f c0 e4 17 8f 13 83 65 51 d0 a3 86 81 53 1f 36 90 37 37 66 08 69 c3 81 63 e9 de 02 5a 8a 96 cd Data Ascii: )pS3`At\VaeXA*[65Qa[\|@f&mV{kYi7o.`EVFW6ruz',kz"dL#3(>y?Mi04P2>5S@{r\_hpki\|SBAebbeQS677ficZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	50028	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:48 UTC	1106	OUT	GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 179240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4098 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	720	IN	Data Raw: 52 49 46 46 20 bc 02 00 57 45 42 50 56 50 38 4c 14 bc 02 00 2f 0d c2 49 00 4d 40 90 80 36 6c 73 10 13 62 d8 ff 3f 6c 3b ed fa 82 88 fe 4f 80 24 25 5e 25 29 ca 59 89 7c 29 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 43 5e 39 d6 1a 9d e2 57 ab d6 44 4e 12 c9 d6 d6 9b 19 27 96 9c d5 33 d6 ba 24 da 66 dd 48 1b 25 52 94 4f 1d 27 89 16 3b 67 29 1b 27 89 95 dd ea bc 75 92 e7 51 b6 96 64 7d a0 78 91 b4 08 db e2 d8 16 18 91 1e 59 b2 ed 47 92 a2 85 49 6e 2d 92 ee 28 4b 77 e7 71 b5 04 63 29 33 91 a4 24 51 a2 44 ca 7a 92 22 49 05 df 01 63 00 84 29 69 a1 24 25 89 d6 38 ce de 56 92 48 1c 7d 37 4b b6 9c 06 ed f8 42 7d 4b 92 ed 47 15 ec ce 5d ac 28 11 38 ae 77 db d2 9e 71 68 66 76 14 04 8a a2 05 4b 1f e2 8d da 7e 01 8d 6c 07 21 5a 6e 5b 82 45 59 99 91 e4 24 b2 29 92 37 c9 31 Data Ascii: RIFF WEBPVP8L/IM@6lsb?l;O$%^%)Y\|)RC^9WDN'3$fH%RO';g)'uQd}xYGIn-(Kwqc)3$QDz"Ic)i$%8VH}7KB}KG](8wqhfvK~l!Zn[EY$)71
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: c9 a9 62 66 e6 f9 cf a0 aa f1 86 33 8a 99 21 f4 ff ef bf c2 b6 6d 1b 26 dd f3 0e 94 40 a5 34 d4 15 e6 74 da 90 38 cd 30 ac 94 ef 42 0a 4a 14 10 a0 40 90 28 a4 03 f5 42 27 43 8a 89 88 14 a9 06 f5 02 a1 84 e9 04 39 8c 81 61 38 4c a4 48 25 80 42 4c 20 48 81 88 14 11 c3 c4 70 88 18 e2 0e c0 80 01 0a 41 30 4a 1a 8a 49 d1 b3 e8 55 94 a2 2e 1d 82 00 40 09 74 14 1d 02 3a 0c 20 08 40 90 ba d4 4d 0c 29 82 88 60 10 0e 43 1a d6 30 24 52 a4 14 00 00 11 31 11 51 98 88 88 e6 20 9b b3 41 00 0a 01 0c a0 50 9a 60 98 26 1a 00 a2 8a 8e c2 21 ba 21 1d d2 21 7d ab 90 62 1d e6 30 1c 86 15 ab 17 00 b1 91 53 9c c6 00 87 94 01 d2 28 69 c0 d9 14 82 39 0c 29 52 50 ac 18 10 29 26 10 38 0c d1 45 23 00 40 01 52 50 08 2b 86 61 c0 44 dd ea 42 31 18 06 d8 51 ac ef ad 6e 1d 0a d1 05 11 11 Data Ascii: bf3!m&@4t80BJ@(B'C9a8LH%BL HpA0JIU.@t: @M)`C0$R1Q AP`&!!!}b0S(i9)RP)&8E#@RP+aDB1Qn
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d6 81 61 0e 60 d8 08 65 03 30 8c 12 10 01 58 4a 28 9b d5 0b dd 30 a7 74 5a bd a8 7b 5e ca 33 00 86 49 51 2f 30 a7 38 1d 03 c3 fc c4 8a d5 0d eb 69 6f c0 0c 31 ac a3 40 30 11 ac 5e d4 0b 0a c4 cb 0c eb 69 f6 02 33 8c 01 85 82 42 df 1a 86 21 48 29 8a c3 cf a8 a1 18 a8 17 75 20 75 85 20 0d 03 31 80 13 2b 82 20 82 62 f8 3b 81 7a d1 61 00 02 40 37 03 28 04 43 40 65 f5 12 30 c4 18 98 4e 9c e0 f8 19 21 17 87 75 38 48 13 29 50 48 dd c4 c4 04 00 bc 8b 52 08 a6 1b 4e 33 31 27 ec 84 d3 0a 29 4c d8 e0 24 0d 9e 4a 13 cd 69 22 ca 4e c6 ce 70 b2 d7 f1 eb 38 d3 4b e9 bb e9 bc 3a cf e8 de 67 1f 34 86 63 ee 0e 9b d7 71 70 64 5f af 83 bd f6 f7 da 3f b3 7f e5 78 18 18 0c 27 7b 9d ef b5 93 e7 8e 86 3f 47 d9 eb e0 a8 43 8f 7d fa c0 6b e8 db c5 70 df af f3 cf 81 fa de b0 7b cc Data Ascii: a`e0XJ(0tZ{^3IQ/08io1@0^i3B!H)u u 1+ b;za@7(C@e0N!u8H)PHRN31')L$Ji"Np8K:g4cqpd_?x'{?GC}kp{
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 79 b3 e4 cf 23 7f 1d 1f 8c 95 d5 f3 e4 cb be 5e 29 69 d2 57 16 77 4b c6 ca b6 32 56 9e a9 e2 33 29 f9 3e be 3e ff 5f 92 f3 a7 3b d9 8a 77 be 59 a4 bc 58 52 b2 da 3a f9 f6 48 5f 39 2a 7d 3d fb e1 ab 92 55 9a ac d2 7c 5f f2 9e 0f 0a 4d 4a 94 38 f9 9c 6f 1c f3 93 5a 7f 33 1c 06 40 1a 36 04 74 ff df bc 28 da 6e 07 44 84 03 b7 6d 23 c9 1e 64 27 3d 9d 8c b1 8f 38 07 a7 12 7d 9d bf 80 67 22 ca 38 06 85 33 1f 09 02 ea be b5 3e e0 d1 56 78 25 05 2f 57 6c fa 4a d7 62 2c 6a 7b 58 0b a6 64 28 ca a8 20 0f 08 f3 cd 78 99 74 3a 31 5e 87 f6 29 1f d4 ac 90 22 72 dd 8e 9a 8c 7d 14 b4 e2 b6 9b e6 18 c0 87 b4 f8 84 e2 66 c7 f5 d6 fb 91 f7 87 e3 07 82 96 ec 95 f1 40 a4 44 52 bc 14 2b e0 a6 96 60 d7 55 e4 e2 dc ac b3 56 e5 76 1f 7d 56 74 a6 c1 97 fc c6 92 91 77 df b8 10 6b 3c Data Ascii: y#^)iWwK2V3)>>_;wYXR:H_9*}=U\|_MJ8oZ3@6t(nDm#d'=8}g"83>Vx%/WlJb,j{Xd( xt:1^)"r}f@DR+`UVv}Vtwk<
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 87 82 9f de f0 ff 57 6d a7 d9 b6 df ff 3f c6 98 73 f9 da ae d9 c4 85 24 84 10 dc 25 d0 a2 2d 3d 39 eb 7a da ed ee fa ce 5d 9e d3 ad 02 54 a8 1b 15 9c 12 20 41 12 20 46 b2 e3 db 5d 96 cd 39 c6 f8 ff 8f a3 72 3e ef ce d7 dc b0 6d 5b f6 b6 d1 75 9e d7 75 df f7 f3 bc af d8 b2 64 88 29 86 38 49 9d b4 93 32 a4 d3 59 cc cc cc cc 6b cd af c5 4c bf 98 99 66 3e 66 ea 7c 58 6e 93 4e 9b b8 71 e2 38 96 49 b2 64 99 84 ef fb 3e 37 5c 97 2f 49 92 55 db b6 6d cb cc a3 d4 d6 7a ef 63 cc b1 d6 5c 9b ce 65 66 86 14 dc cf 9b 00 4e e0 cd 0e 33 f3 dd 3c d7 a0 0e ad d6 e2 a1 86 6d 23 a5 cf 3f dd 3d 33 ac fe b0 6d 5b 9e c6 fa bf eb ba ef 27 46 42 08 12 dc ad 68 0b 15 a8 ae 4e 65 d5 3b 3e cb fd 75 77 77 97 e5 ee be d6 b8 cf b4 43 a7 d4 bd d4 70 d7 e0 90 04 48 42 e4 79 ee fb da 36 Data Ascii: Wm?s$%-=9z]T A F]9r>m[uud)8I2YkLf>f\|XnNq8Id>7\/IUmzc\efN3<m#?=3m['FBhNe;>uwwCpHBy6
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: cf 5d d6 62 e7 dd 6e 38 1f 19 82 00 b3 fd 85 c2 64 cd d1 1e 81 37 0c 27 4a f7 7e df 3f d7 13 44 cc ab 7e 93 07 05 c5 e0 e9 5a 43 06 55 2e a2 b5 28 63 b4 89 52 3b 4b bb e2 42 20 50 96 87 13 cc e2 12 0b d6 37 71 75 a7 91 4d 0d ae 1a 2e b8 e4 c0 50 d0 02 8c 6f 0a 46 42 fb 99 da 8e 2a 88 f2 9c 5a 03 0e 54 ea c5 9f 31 75 b8 f9 04 b6 fd 5e 32 ec d2 c6 8e 0c 2a 01 c6 50 b9 fd d6 de ab de 3e 58 7a 0f 79 4b 61 14 b5 d2 68 40 ca 66 24 e2 ee 67 f5 2c a4 cd b9 7f a7 45 31 86 4b ae a5 47 e7 e9 7c df 53 b7 38 de 2d ee d1 a9 d9 8d 2d 50 4d c9 3c 34 3f d7 77 b9 22 2f 09 f1 74 e6 48 96 04 15 c4 6e 34 82 5a 11 84 bc ad 5f f0 62 aa d9 50 83 b2 38 88 7b 1f 5b 48 dc 42 35 ad 46 17 b1 15 7d 6a f5 1d e1 42 ae f3 00 18 a9 d2 2d 37 dd 46 6d 30 5b 35 28 7d fb f0 ee 49 12 2a fe 9e Data Ascii: ]bn8d7'J~?D~ZCU.(cR;KB P7quM.PoFBZT1u^2P>XzyKah@f$g,E1KG\|S8--PM<4?w"/tHn4Z_bP8{[HB5F}jB-7Fm0[5(}I*
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: c7 9f 83 8c 5f e9 2f e0 6d 14 9b 79 60 50 b3 71 9a 89 20 a7 7a 30 35 14 df 5e de ee d6 78 e3 f8 ca d7 de 63 5b 53 8b b0 19 8f a2 84 34 66 0b 6c 37 28 6e cf 9d a4 1d b5 66 54 10 39 5c cf 59 6d 77 a3 35 b9 06 14 b5 8d 1f 42 09 54 93 5a 6e 6f 5e e3 ed b9 26 59 78 fa 5f 9c bc 71 73 ef bb 40 41 be cb ab 72 82 38 98 72 09 5a f4 02 7c 7a 91 5a 14 b1 10 87 2d 60 ac 09 9b 6f 7d fb 8b bf ca 6f d3 6f 42 ef 0d a1 37 d1 d1 e9 46 6e a7 3f 88 71 24 cb 82 8b e5 e7 2e 12 e8 c5 1e 0a 38 3c 0b fc ac 7a a7 d4 d4 7a a4 6c 23 e3 14 93 2c f0 74 6e 97 5a fe f1 5f 25 ee 04 f7 03 0d 6e 80 20 d7 b9 b3 8a 78 19 cb de 7e 7a a0 e7 46 be ea 6c c2 2d 55 04 20 d0 90 b8 aa c0 68 17 f6 9b 4c 37 60 b3 00 d4 fe 15 96 a7 e7 f6 d7 87 c7 28 3f 4f d2 ae ac 05 15 c3 d1 87 4b e5 ab 8e 84 0f 9a 16 Data Ascii: _/my`Pq z05^xc[S4fl7(nfT9\Ymw5BTZno^&Yx_qs@Ar8rZ\|zZ-`o}ooB7Fn?q$.8<zzl#,tnZ_%n x~zFl-U hL7`(?OK
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 32 92 a3 66 1d 30 cf fd b8 bd b0 5f 94 2e 00 7e 3c bf d1 97 0e 51 a4 86 9b 43 ee 57 9b 1b 5c 68 98 6d 3f 34 c6 ae 96 b7 7f b9 be 30 61 62 75 ab 9b 80 36 07 84 c1 60 f3 55 62 0a c2 38 f5 8c 93 66 78 fb bf d4 50 1e 35 8c d1 5b c0 4d 8d 13 46 2d 20 d6 b7 6e 13 39 95 68 70 d9 c8 11 d1 3a 0c 5c f6 2b 2d 69 bf db 01 36 8f 6d 7a a4 f6 9a d3 f9 f2 8f dd 04 4a eb 9f 28 58 56 ac 52 03 fa 2c 2f 81 dc f8 e1 1f 65 b7 99 6c bb 09 89 04 b9 ad 76 31 db 6f b7 c6 1f f2 4e b3 58 d5 2e 9f 65 4f 4f fc b8 c9 fc 3f da 8d 70 bf 54 10 6c 7e a4 6c f3 e1 90 3d d8 85 f1 9c f6 db 22 19 48 6c 46 4d 77 fd 44 74 a6 c6 ca 58 23 63 ce 58 7e 19 5f 65 f2 3e 7d 6f a0 93 b7 64 84 db b1 2b 53 dd 32 91 cb 1b 97 4f d3 78 8f ce 7c fb e4 52 a5 a1 db 89 68 1b 4b f8 bb 54 a3 32 67 37 4c ea 5b 4d 9d Data Ascii: 2f0_.~<QCW\hm?40abu6`Ub8fxP5[MF- n9hp:\+-i6mzJ(XVR,/elv1oNX.eOO?pTl~l="HlFMwDtX#cX~_e>}od+S2Ox\|RhKT2g7L[M
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d3 09 1b ba ba 4b 90 bd ea 85 fc 82 41 5a 41 64 7a af d2 b6 54 bd 87 9b 6e ae e5 d6 61 9b 7b 7f 2f 6b 4d da c2 3d 50 8c b4 35 f4 14 2a db ef ea 8a 55 af d8 1b d6 9a 81 30 6f 5e 3f 49 df c0 81 61 51 be fa 2b 1f 1e c9 1b 53 eb d9 c2 09 3f 4e af df ff eb ef fa 6f 6f 69 6c ad 01 2b 73 96 92 6f 34 3e 50 52 36 91 95 55 7d 26 d0 20 6c 63 9e fa 4a b2 6d f4 9e b2 f6 f4 43 9b b5 86 d3 76 10 35 10 4c 09 ed 08 ce dd 42 28 61 a0 b0 cc 00 28 c7 79 78 bf d7 c4 cd 87 4e 87 06 74 6e 62 bb 9e 2d dc c4 54 eb 19 d5 b6 45 93 62 75 f0 c8 91 4d 03 3d 32 45 03 38 16 1a 9a b5 a2 22 a8 b7 8b e5 bc 1b ee c8 8b 1f 9a c7 eb 72 8b 86 61 0b 38 15 ba d1 b7 b6 0e 1e d3 4f 20 dc f3 33 d5 98 1b e7 ea bd 04 06 b2 ea 14 ac 59 38 f9 d7 ba b5 8a 6e c7 b4 fb dd fd 99 b6 29 2b a5 55 db 1a 3d 57 Data Ascii: KAZAdzTna{/kM=P5*U0o^?IaQ+S?Nooil+so4>PR6U}& lcJmCv5LB(a(yxNtnb-TEbuM=2E8"ra8O 3Y8n)+U=W
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 01 c8 ec c2 ad d7 06 c1 15 7a 71 c0 36 8e c1 ea b9 1c bc b4 27 97 fc 5a ac d8 eb 6c bb 78 ca af 77 3b d1 38 84 bf 66 73 61 13 c0 f9 1b d3 34 2a 3c c1 bc a2 24 e3 43 0f b7 a9 c0 ba b2 0d b6 2a b6 c7 2d 6d 6c 58 08 06 f1 b9 fc 42 9a 20 db 92 06 4a 69 97 ba 00 9f d5 d0 1c 32 57 7b 23 f2 d4 9b 61 73 57 52 e8 57 5b 9e be 01 54 7f b6 7f bb ea 7e 6b fa fa cd f5 7a 5a 3d ee 04 8a 15 d1 31 b8 9a a8 d7 6a 5c 4d a1 b7 e1 2a fc 02 bf f0 eb 29 8e 20 c6 58 23 5a d6 54 8f da 50 6d 58 86 04 03 0b 7d 95 4b b2 52 af 6c 63 30 5b e3 e9 42 f3 0d 8f 46 e8 e3 b0 11 3d 0a 91 87 28 b0 85 e9 83 f6 6d fe aa 75 90 aa 17 a3 4c 46 9f 35 27 b0 e1 92 2a 34 fa 94 f7 60 70 8f dc 8b a6 c9 bd c6 2d 0b 92 62 b8 85 77 95 16 df b0 47 c6 0d c2 d5 b7 50 71 2b 47 9a 6c 74 e2 5b df 7a c2 b6 59 28 Data Ascii: zq6'Zlxw;8fsa4<$C-mlXB Ji2W{#asWRW[T~kzZ=1j\M) X#ZTPmX}KRlc0[BF=(muLF5'4`p-bwGPq+Glt[zY(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	50027	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:48 UTC	1106	OUT	GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 187116 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4098 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	720	IN	Data Raw: 52 49 46 46 e4 da 02 00 57 45 42 50 56 50 38 4c d8 da 02 00 2f 0d c2 49 00 4d 50 10 c0 36 6c 1b 05 90 61 d8 40 ef ff 0f 16 ed e4 f6 82 88 fe 4f 80 24 25 de 25 29 ca b3 12 79 29 89 94 c4 b6 32 5a 4a 62 29 52 ec 64 cb 43 5e 39 d6 1e 3d c5 af 76 ed 89 9c 24 92 ad d1 c3 1d 27 96 9c dd 77 ac 7d 4b 34 66 1f a4 41 89 14 e5 5b c7 49 a2 cd ce b3 94 c1 49 62 65 da df 39 c9 65 65 74 12 eb 0b c5 9b a4 21 91 b7 44 7a 48 22 0d c5 b7 6d 81 4b b1 a4 33 ca e0 44 7b e2 cc e7 a0 24 e4 37 c7 6a 5b e6 8d 14 db f4 ad 48 77 ae c4 d9 2f 9b d2 70 80 7c b1 1f 07 b3 db d9 cb f6 86 77 5d 89 92 c4 ce 75 1b b4 5d 92 2c b1 5e 81 53 9c 28 21 c9 b6 65 09 16 4a 24 c9 b4 ef 38 24 b1 88 ef a9 1f 90 03 a1 d9 8e 6d c7 24 be 5d 00 0e 32 4a bc d9 bd 0c 14 36 08 02 d9 4e f9 51 24 3f 2d d9 92 03 Data Ascii: RIFFWEBPVP8L/IMP6la@O$%%)y)2ZJb)RdC^9=v$'w}K4fA[IIbe9eet!DzH"mK3D{$7j[Hw/p\|w]u],^S(!eJ$8$m$]2J6NQ$?-
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: bf 05 de fb eb 3a 4d 72 91 34 45 23 84 08 16 42 1c 78 b4 6d 5b 75 63 db b6 4a ad 7d 18 a6 c2 02 4b 43 b2 23 a1 62 32 33 e3 cf 3b ad cf 58 a9 4a 66 2f 66 f0 e8 a3 f7 9f 91 db 48 8a dc 30 b4 74 da 47 a0 18 5a f2 8e 9a cc 1c f6 de 39 f6 6e 18 56 ca 2b a4 a0 58 01 06 0a 04 89 4c 1a a8 15 1a ee 52 4c 44 a4 48 ab 53 2b 10 8a 99 86 e1 61 74 74 c3 66 22 45 5a 02 28 c4 04 82 14 88 48 11 31 4c 0c 9b 88 21 6e 00 74 e8 20 13 04 a3 78 47 31 29 7a 14 bd 16 a5 a8 49 43 10 00 28 86 46 d1 10 d0 30 80 20 00 41 6a 52 33 31 a4 08 22 82 81 d9 0c a9 5b dd 90 48 91 52 00 00 44 c4 44 44 66 22 22 76 1b de ec 0d 02 50 30 60 00 99 bc 0b 86 d9 c5 0e 80 58 45 a3 30 44 33 a4 21 0d e9 0b 99 14 6b 98 61 d8 0c 2b 56 2b 00 62 c3 87 38 8c 0e 36 29 1d a4 5e bc 03 7b 93 09 66 18 52 a4 a0 58 Data Ascii: :Mr4E#Bxm[ucJ}KC#b23;XJf/fH0tGZ9nV+XLRLDHS+attf"EZ(H1L!nt xG1)zIC(F0 AjR31"[HRDDDf""vP0`XE0D3!ka+V+b86)^{fRX
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 93 e9 86 d5 4c 28 68 6f 7a 34 3d a4 07 d2 f4 a9 e9 de ea 32 94 5a cf b5 5e aa 99 b7 f0 d2 74 6f 7a e5 35 7b 05 28 d4 3e 16 ea ca 34 4c 43 19 a7 3a 4f 94 ea 8f f5 4d fe f1 60 23 07 10 60 42 97 22 62 08 62 53 41 77 ac f9 d4 ea 34 4e f0 e3 c1 28 43 a1 de d7 ba 8e 75 a3 6e 63 dd 28 15 28 56 60 0a 2e 18 65 ac 8d 52 a7 5a e7 5a c6 c2 f4 58 57 ea dc 04 35 de e2 eb e8 db c8 94 37 b1 00 ea 00 a5 10 79 17 9b 60 c5 b5 83 52 04 60 3f d9 71 81 01 0c 0a b0 9a 20 62 3d cc 14 50 5c bb dd 5d 64 d2 30 cd 6e 32 99 50 7c b2 a0 3b 1a bc c3 3b 66 6f 32 60 29 26 48 ad c0 30 87 74 58 ad 53 2b 28 30 cc 2c 30 17 c3 10 31 31 57 60 35 c3 8a 21 18 10 2b 36 41 74 c1 a4 a8 19 e6 10 cc 6b f9 dd 79 a8 e3 9f 95 47 7d e2 0d de 0d c3 74 33 3b 14 16 2c f4 85 61 5e 0d 41 1c d6 61 18 32 01 98 Data Ascii: L(hoz4=2Z^toz5{(>4LC:OM`#`B"bbSAw4N(Cunc((V`.eRZZXW57y`R`?q b=P\]d0n2P\|;;fo2`)&H0tXS+(0,011W`5!+6AtkyG}t3;,a^Aa2
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 38 4e 04 61 f5 d7 31 b3 c8 62 bf fa eb e2 f9 52 77 0b 16 8b 90 6b a6 c9 22 e7 ca 7f 7a 1e e9 52 56 09 89 ca ea 2e a4 49 c8 ff da 32 a4 c9 63 66 91 e7 91 9a d1 91 bb 84 44 e5 2f ed 87 e7 4c 93 e6 f2 0f e3 cb e6 f3 26 4d 16 59 e5 5c 8f 7c 1f be dd 86 41 bf 45 7f 46 bf 47 7f 46 7f 66 1c b3 d7 8f fe 3b 7d b1 1a c7 7c 1c 53 fd 19 be e8 c3 df 47 12 a2 23 ab 1c 2b e9 bb 40 f8 2e 24 fd b5 92 26 95 97 21 33 cf ef d2 e4 73 27 dc ae b2 af a4 57 21 e9 32 2a 59 69 12 12 6e 3e b2 db 56 fe d6 b2 af a4 ab c5 55 54 d2 ed 98 09 59 a4 55 6e 23 63 3c be 3c 8c fa 3b e3 40 bf 66 1c 4f c6 38 d1 ef 67 63 4c f4 5b be 3b 4c ce 9a 8f 63 36 8e f9 38 e6 77 fb 90 70 1f f5 af 90 ac 34 49 09 09 49 b9 cb 2a ab 34 09 b9 cb 2a b7 71 ff 7d 72 26 51 69 f2 fd 3b c2 fd 2a 21 d7 cc 2a 21 ab 84 Data Ascii: 8Na1bRwk"zRV.I2cfD/L&MY\\|AEFGFf;}\|SG#+@.$&!3s'W!2Yin>VUTYUn#c<<;@fO8gcL[;Lc68wp4II4q}r&Qi;!*!
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: ee 19 c9 f8 39 73 ea 5a eb f7 fb 7e b7 7b 08 b4 37 d7 76 f3 b7 06 6c db 96 bd 6d a4 fb 7e 5e f8 be ff d7 2f b0 6c 99 19 e2 d8 71 e2 60 31 dc e9 b6 1d 66 da 61 66 e6 76 3b a5 c1 2e 17 96 86 b7 ed d1 85 76 78 3a 4c 4d 9a 42 92 06 9c 98 41 92 6d 99 24 8b 7e f8 be f7 7d 9f 87 b3 24 db aa 6d db 76 22 4a 6b bd 8f 31 e7 82 7d f6 39 97 1f 33 53 4e 9c 63 66 a6 9f 60 66 29 a9 5f 50 8a 59 29 66 66 78 cc ef 89 0f ef bd d6 9a 73 8e 31 7a 6f 25 1c b1 6d e3 48 9a b2 d7 2f ce 66 7b df a7 3f 6c ff cf 46 fe ff ef f6 78 24 69 da 8e 67 d6 b6 ed a7 bd 4f db b6 6d db b6 6d db 5c ef bc d6 98 dd 59 63 b0 9c 1d d6 c9 23 b9 1f af 4c 1e 69 9b 99 e9 df 7e a8 6d 3b b6 db b6 ad e3 ba df ef ff 2b da b0 6d 23 b2 3d 32 db 36 22 db 36 32 db b6 95 75 db 36 46 6d ac ae f5 ff be f7 b9 3c 47 Data Ascii: 9sZ~{7vlm~^/lq`1fafv;.vx:LMBAm$~}$mv"Jk1}93SNcf`f)_PY)ffxs1zo%mH/f{?lFx$igOmm\Yc#Li~m;+m#=26"62u6Fm<G
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: a7 96 12 46 82 db 49 9e 16 4c d9 b4 d7 01 a8 ad 2d 0f b5 39 c9 28 78 97 1a c2 c1 a2 74 02 e4 20 5d 5f 6e 0f fa 41 79 e8 b4 11 d6 2b 6d 65 40 09 68 42 dc 46 08 5f 96 04 80 f0 7d fa 4a 0c 80 29 5a 16 9d d8 d9 6f 01 d0 56 ea f9 f6 c9 37 5e 72 f1 b6 16 7e f8 0c de 63 47 76 d0 42 dd 31 30 6d 82 b6 62 9b f6 46 9f af 41 0e 64 13 95 25 76 18 b5 ae 76 88 64 1c d3 d8 2e dd 27 75 14 a4 7d 9c 63 28 68 39 b9 d3 75 df 27 af 0b 16 2a 7b 03 c3 a1 41 50 14 b8 b7 ca 01 f3 9e 03 37 22 36 9d c1 0d ad e6 66 c8 01 54 d0 3c 6b 2d 65 ad 15 45 45 c1 c3 6a 68 d2 1b 80 c5 50 35 03 e5 7e 9f 92 82 70 83 5c ca 57 4f 55 36 05 0f e2 2b 03 cf 5c 46 87 62 23 92 c5 4b 2d 24 e9 09 82 09 ac b7 6f ae 6f ee eb 4b 6f ad 21 74 c2 f2 96 5e 24 46 8d 9a 24 89 9c 35 6b bc 4b a7 dc e2 11 87 ae 2c 58 Data Ascii: FIL-9(xt ]_nAy+me@hBF_}J)ZoV7^r~cGvB10mbFAd%vvd.'u}c(h9u'*{AP7"6fT<k-eEEjhP5~p\WOU6+\Fb#K-$ooKo!t^$F$5kK,X
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d3 c2 1c f4 87 f5 da 06 c7 0d b5 25 59 9a ed 8a 06 02 55 82 1d 6b bc 86 4d 5b 1e 6c 3c 24 54 9f 25 d6 4e 76 bd 6e 2d 1e 4c 0f 03 74 b6 2d 32 5b b8 23 17 23 83 92 5d cf de a8 a1 b8 0b b3 b6 ee a8 f5 51 eb c5 50 13 85 9e b5 3d 7e fe f7 bf 3d fc e4 ed ef f4 dc 71 6b a0 30 e2 8e 7b 99 98 07 a7 63 54 62 0e 45 74 f5 be c6 ba 77 86 f4 6c e5 65 2e 1b 21 5a 8d 36 20 90 da 59 8a 90 9a 0e de df c9 e9 a1 8e 87 ab 26 ac c3 56 e9 56 4b 0a 6e e3 87 d1 46 d9 ab 8e ac 6b 34 61 97 a2 c2 a0 7a 28 d0 ec f4 de c7 8c e2 ca 9b 69 81 4b f2 d9 3e b9 d4 b6 16 b0 38 8f c1 e3 c8 e8 a0 f0 a6 a1 70 94 ad 98 d6 64 41 0b 19 7d 3f ee de 26 34 52 34 34 01 e3 20 c2 a5 f2 76 2a 91 b4 3c 66 c9 14 47 21 ea ab ad 16 e0 f3 c2 9b 0e ba 00 c2 bb 87 df e3 d4 c5 98 50 1d 8e 38 8c d3 a0 5e 31 bf 91 Data Ascii: %YUkM[l<$T%Nvn-Lt-2[##]QP=~=qk0{cTbEtwle.!Z6 Y&VVKnFk4az(iK>8pdA}?&4R44 v*<fG!P8^1
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 13 37 38 fe 6d 61 16 dc 53 da 71 8f e9 3b 8c 34 a0 c6 9b a2 96 ec b5 9e 8f 2e 45 da 2c 6d d7 4e 9b d9 6e 9d c7 7b 51 24 13 05 6e df be df fd e5 6b b3 d7 ce 17 c2 d5 b8 8d 63 0e a0 78 69 d2 7a 6f 67 ee 0a 24 69 78 57 fd 4e 47 76 d6 fa ea f0 e1 46 ed 6a 3d bb 8e 1c e6 fa c3 1f f2 11 ef 03 bc dc 2e af 6d 4b 09 9e dc 51 81 7b df 3a 03 aa db 35 1c c7 2a a6 11 a0 ab 2a 7a bf 67 5d 95 b1 e8 b4 91 aa 60 5e dc 8d 5b 29 43 c6 2c e5 96 e5 ac 6a 85 01 03 38 75 ed c1 a6 13 ab 07 af c3 a4 d9 b6 ff e7 f6 b5 b5 b2 e0 6d 13 0b 9d 88 a5 91 49 a1 4a 76 a9 9c e9 46 82 03 7a 7d bc 84 35 1e 33 dd 84 cb b5 c3 e9 0d 6e bd 35 7b 09 dd c0 e8 96 40 06 2a 62 33 de 8c 12 8d 78 22 b0 77 df 0f 9d c8 d8 0a 55 cf 56 e5 09 da b9 f6 e6 c3 4d 22 8b f4 fa 9c 5b 9a 7d 77 b9 9e 2b 50 dc 9d fe Data Ascii: 78maSq;4.E,mNn{Q$nkcxizog$ixWNGvFj=.mKQ{:5*zg]`^[)C,j8umIJvFz}53n5{@b3x"wUVM"[}w+P
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 51 ae 9d 37 39 a9 39 0d ef 0e 4c 82 dc 8f bc df c6 6f db 54 9d 81 8c 36 c2 c5 d6 05 bc 56 b4 9b 8c 5f 84 99 e6 99 3f b8 9b 5e da dd fe 73 37 af 68 25 85 08 02 3d 13 1b b8 a3 45 9b 4f 7f c7 6c 94 38 2b 3a c5 0d 6e 69 b1 49 0e 6b e9 97 82 fb 54 98 46 34 19 32 50 1a 4d 43 39 17 32 c7 56 6e 8b df 8f bd af 7d bc 42 7a b1 9d 6a 04 5a 78 2c 12 d1 e6 3e 2e c6 e9 5f ff 5b 4f fc 08 a6 01 00 df 76 95 1e 01 78 0a 57 63 e3 d6 96 3f f6 bd 95 f2 91 b9 9e a2 a9 23 0e 7c a5 fd cc ef 72 6c ef ce 7a 2d ed c0 c4 f7 dc fa ea 5f 6e f7 27 4e 93 d3 a8 2f 9d 79 fb b0 a5 f2 c6 e6 43 c1 10 a4 95 cd 94 3c 1d 35 49 b1 1f 6e 87 78 eb 44 8f b2 24 35 68 9e de 7a a1 5c f9 56 1f aa 7d be ba dd 26 a9 10 ef 0e a6 e9 8b 81 e6 ab f3 da 4d 56 3e 7a 86 91 48 fd ff a7 21 83 70 5a be 34 e7 c4 1a Data Ascii: Q799LoT6V_?^s7h%=EOl8+:niIkTF42PMC92Vn}BzjZx,>._[OvxWc?#\|rlz-_n'N/yC<5InxD$5hz\V}&MV>zH!pZ4
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: d1 42 79 f0 2e d2 58 6a 6c 56 71 c3 12 96 cb 11 f6 eb 3b e7 4d 80 4d 32 a2 a8 b3 d6 1d 2f 98 99 08 a2 63 ed 24 6f 03 d0 88 d8 e2 49 c3 22 25 35 72 50 d1 9a 64 74 54 6a b1 ad 45 0d d9 55 7d c0 af a5 b8 e7 38 23 11 09 87 20 22 a7 92 a9 02 f3 59 f2 29 03 a7 e2 b5 4f d8 a0 6a 09 16 c4 f7 34 3d 9f af 71 49 ca 4a d4 bb de 7a 83 75 0e 47 78 09 06 5b 69 24 07 8b 6e be db 1a 88 0d 21 65 6b 59 b4 b5 c4 a5 5a b8 e9 2d d6 e8 e9 3d e9 cd a6 62 9a 4e 57 be 20 72 50 6a 7b 12 47 02 9f 8a 94 24 16 ce 4c 9c 8a 9c 73 92 33 23 bd a9 60 21 23 75 29 70 9b 29 83 21 a0 91 80 82 f1 d4 98 4f 91 c2 84 7c 48 67 08 14 67 de c9 e9 70 79 fa 2a a3 59 3e c2 6b 5d 2a cd ee 28 cc 47 1d 3d a5 23 34 d2 50 33 a3 30 62 b2 80 26 68 ba 0c 59 cc 2e 5f 78 2f e6 6f 01 4c ae 38 d6 58 48 0a 23 f4 11 Data Ascii: By.XjlVq;MM2/c$oI"%5rPdtTjEU}8# "Y)Oj4=qIJzuGx[i$n!ekYZ-=bNW rPj{G$Ls3#`!#u)p)!O\|HggpyY>k](G=#4P30b&hY._x/oL8XH#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	50029	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:48 UTC	1107	OUT	GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:48 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 24734 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4098 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:48 UTC	721	IN	Data Raw: 52 49 46 46 96 60 00 00 57 45 42 50 56 50 38 4c 89 60 00 00 2f 0d c2 49 00 09 49 92 24 c9 6d 64 91 59 6c a0 99 85 ff 3f 18 10 9a 8b 66 39 46 f4 7f 02 f8 af 1a ff 02 59 d0 37 ac 26 fe 26 e9 57 10 5f 6f 7f 9b 01 09 d0 d7 d8 02 1b a8 fa 0e fb 74 9c aa aa f5 59 05 b4 6d 6f 42 92 29 6f f2 42 8b 84 08 a2 dc d0 4f 4c 7c d9 13 29 33 8c 21 dd db a3 46 91 40 97 29 49 b9 23 f0 61 5b 42 bb 0a 6b a9 83 2e 3b 92 d0 b9 a5 1f a2 13 f3 aa f6 02 7b ce 85 18 08 11 24 19 02 43 f2 53 30 a0 40 04 55 80 ed 85 65 b3 ec 0b 73 f7 6d eb ca 85 6e 18 a8 a5 c2 ec ec 3b c5 14 fb 0a 12 94 6f d8 8f 31 d6 94 b3 24 45 09 5a 01 e2 1b ed 00 5a 50 74 19 b5 24 55 bd 02 a8 ba 12 8a f0 42 11 20 18 92 f0 c2 f6 69 54 5d 44 40 56 de 2f 3d ba 7b 2f 19 d8 46 01 b6 db 1f f5 dc 9e 39 6d 73 3e 1e 5b d5 Data Ascii: RIFF`WEBPVP8L`/II$mdYl?f9FY7&&W_otYmoB)oBOL\|)3!F@)I#a[Bk.;{$CS0@Uesmn;o1$EZZPt$UB iT]D@V/={/F9ms>[
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 0c 44 60 c5 4b 40 34 35 ae 60 7e 87 88 04 a2 01 1d a1 43 44 0a 32 bf fc 19 42 30 ae 00 20 8c 1a 16 08 2d c7 4d 9d b1 40 84 c2 62 92 40 82 04 91 10 5a b2 f3 26 88 04 19 02 21 84 71 15 3a e6 15 88 3b ea 87 27 f7 ec 6f 91 ba b2 58 2d 12 84 20 32 25 00 d0 23 09 06 81 48 2d 88 29 c8 3c 06 3b 22 b5 aa 75 11 69 00 04 09 41 66 f7 88 48 5f 0d e2 83 48 cb 6b 37 cb 08 2a 32 f5 ea d9 de a3 1e 28 06 0f 94 9e 9c fe b7 0f 83 96 2e 52 a5 68 40 07 b4 3c 10 39 8b 4e 5a 00 60 0d 9d 16 8a 0d 69 d9 a8 25 c8 2a 05 62 a7 ff 99 ab 16 6b 88 2a 7b db 3c c8 38 68 b5 0a d3 49 58 d8 f8 30 33 12 01 59 a9 51 03 31 8a ad 62 83 b4 40 9a 26 4d 43 09 2a d0 94 b7 00 00 08 07 cf 44 60 b5 03 68 a7 f0 42 87 34 fd b3 b3 80 90 6a 1e 60 2f 97 00 90 7b a2 f4 a4 94 ab 32 ac ba 44 92 04 df 97 12 63 Data Ascii: D`K@45`~CD2B0 -M@b@Z&!q:;'oX- 2%#H-)<;"uiAfH_Hk72(.Rh@<9NZ`i%bk{<8hIX03YQ1b@&MCD`hB4j`/{2Dc
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: f5 22 f9 d0 27 d7 2e 0e d9 bc 52 55 87 6e 02 48 44 8d 91 27 ff 3f c0 45 92 d2 8d aa 3a 33 83 72 88 90 74 cb 22 49 ab 68 c9 e3 9d 80 dc 19 90 f4 9a 4f 8c aa 39 d2 0d 73 65 c1 23 9e 42 68 e3 4e 32 05 b4 14 a2 8f 27 55 75 18 69 74 2b 94 44 c5 75 82 8a 80 09 02 cd 22 e7 23 14 ad 9a 09 02 8c 52 f3 ba c8 79 5f c1 92 89 31 61 40 9e fb 33 35 0a b2 92 09 04 c7 84 7f 06 c0 21 c8 90 9e 40 20 5e e8 7c 58 0d 04 28 26 1c 2c 72 3d 44 a2 98 90 50 d4 19 e8 13 10 bc c5 15 5a 4c 9b 80 40 37 4e 30 fe 2d 23 2c 43 58 35 01 11 23 2c cb f2 53 3e da 4f 5b c2 09 58 09 ea 53 f5 4e 14 55 50 56 2a 1b 9d cc 58 3e d3 8f ea 0c 11 00 bf 51 3e 03 9f 51 7e 31 0f f2 f0 56 ea ac 0f b1 98 d5 c3 de ad d3 bd 5e 29 dd b3 a1 ed 4b 92 1b a7 c7 d0 6d 62 1f 50 1a b2 b8 70 8e 7c cc e0 3b ec 75 8c 81 Data Ascii: "'.RUnHD'?E:3rt"IhO9se#BhN2'Uuit+Du"#Ry_1a@35!@ ^\|X(&,r=DPZL@7N0-#,CX5#,S>O[XSNUPV*X>Q>Q~1V^)KmbPp\|;u
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: b9 35 37 ff be ef 0c d6 7c dd 75 5b 3c 69 ed 39 28 3b 3d 5a d3 a3 57 39 a3 a9 a4 b2 40 00 96 d8 7f e8 e2 3f 77 d1 75 a8 4f a5 a7 07 74 a1 d6 fc ef 23 d1 dc af c7 b8 03 6a 25 0c 70 b3 11 9f 73 f5 48 46 eb ab 10 a5 72 3b 98 ff 3e 4c ad 6d 78 94 cd 95 97 db 31 ea 98 cd 4d 67 5e ca a2 95 60 d5 9c 47 45 90 54 23 8b ed a1 bf 32 8a 25 2e 3e 6f b9 e4 fc b5 10 07 5f f7 2c 63 fa 9e ce ad 3d de 30 56 19 65 3d bf bb 94 92 03 5f b6 be 42 05 78 62 29 ce 36 80 49 27 8a 72 67 ba 59 7e 73 1d f5 e6 cc 49 b5 af 37 ad ce 8a 40 f3 b2 9f a4 43 7c 9d a1 ca c9 b2 85 fc 4c 3f 74 33 b9 6c d8 fd 31 da a0 12 b9 d9 45 fe e3 2a ea 8b 5e 78 e4 9f 5b 54 ec 20 66 49 fc c2 28 18 00 d7 51 97 27 71 7c 26 9f fb 21 ce 99 f3 e4 de b3 e6 6b 50 83 43 d1 2a 62 1e 88 b0 1e ae da f6 50 35 2e cb 7d Data Ascii: 57\|u[<i9(;=ZW9@?wuOt#j%psHFr;>Lmx1Mg^`GET#2%.>o_,c=0Ve=_Bxb)6I'rgY~sI7@C\|L?t3l1E^x[T fI(Q'q\|&!kPCbP5.}
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 82 b9 d3 be b4 6f c0 52 09 2e e9 a8 f9 c5 ea 23 cc 9a 88 cc 6e 53 86 58 45 35 9a 3a 57 6f 80 73 ac 9b d3 23 35 de 9b 68 48 44 c6 72 63 35 3a 91 fd 02 4e 4a ff 0c 31 23 3c 02 ec 84 6f b5 2a ad 2a 09 4a 79 22 00 1c 24 d6 8a 57 e3 a1 c4 cb d8 2d 23 6d ea e3 b3 d9 fc 56 bc cf c9 2a c5 32 15 5c da 55 3f d1 3f 72 84 59 13 1e 5f b3 55 41 45 97 e8 b0 03 ac d4 a9 0b e8 f1 33 ab 7d 53 ce f6 8d 1d 9a 13 c0 08 58 c9 23 9d c4 22 b2 ba 9b 93 ce 57 5f 4a a5 09 5f f8 89 08 0f 57 98 aa f0 8b 00 0e 89 64 4c a7 a9 8b 2b 42 4f dc d3 9e 0e 03 5b 52 78 c2 c9 49 c2 f4 05 f0 66 e2 89 66 a9 6a 2e e3 ae de 98 09 22 bc 49 54 d0 5f de 39 bf 98 30 f2 09 ed 13 7c e3 cb bd 75 99 37 5e 96 e8 da 26 0b 24 b3 cc 20 1a c2 d2 75 0f ba 89 45 84 75 17 07 89 a2 a5 48 b7 03 89 64 80 49 04 03 41 Data Ascii: oR.#nSXE5:Wos#5hHDrc5:NJ1#<o*Jy"$W-#mV2\U??rY_UAE3}SX#"W_J_WdL+BO[RxIffj."IT_90\|u7^&$ uEuHdIA
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 58 f5 8d 3e 50 a9 b9 df 17 c9 8a 94 ed 8f 5e aa 05 a3 f0 e2 ab eb 2c 6f 1d 80 4f ba d4 9f ec 88 02 da c6 d7 fc 0d 0d e2 1b 00 7f 08 42 fa 43 01 39 24 40 2d e4 67 73 3f c7 b7 7f 0d d0 18 eb 16 3e 70 d7 0b d9 f3 42 9e 2b 94 d9 1a dd 60 11 79 dd 23 ea 48 82 57 12 00 23 32 86 cc 6e 44 00 3f 8e 7c 86 a4 54 e3 c4 9e 89 ed cf 5a 83 1c 0a 63 d9 77 7e b6 5b a3 29 01 62 a2 cb a6 58 79 d1 5a bd 60 29 47 67 e0 b7 50 3a 60 be fa b4 b1 a8 51 c3 6e 8b aa b1 42 3a 70 c5 0e c2 0d 87 3e c8 44 72 e1 96 db 81 73 8c df 0f 54 9a b1 fa d8 bb b6 1c 61 ab 3d e7 27 e8 38 8f 4f cd 3d fb 84 5c 7a ca c9 e5 b2 7d 5c 2b c5 3a b6 e0 8a b3 06 ec 71 21 8f df c7 bd ee 8c a9 57 f3 fc c5 47 79 3d a3 9e a6 5b c5 5a 32 a5 c2 ea 31 cc 7b 5d 71 35 fc d1 5c 77 cd f9 26 e3 ca 47 1a 4f 3c eb 57 b9 Data Ascii: X>P^,oOBC9$@-gs?>pB+`y#HW#2nD?\|TZcw~[)bXyZ`)GgP:`QnB:p>DrsTa='8O=\z}\+:q!WGy=[Z21{]q5\w&GO<W
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 81 7a dd 8a 4f fd f4 52 e1 38 e9 d1 e1 ff 57 07 a3 44 4c 13 71 2b 40 8c 48 70 cc 96 69 ba 94 6a f0 1b ae 96 f8 4b 7c f7 e3 b0 51 40 0a b7 e4 71 b6 7b 36 f7 c1 84 5b 56 59 a1 1b 48 3a c3 c9 46 41 4a ee 93 26 d8 2e ca e5 1c af 56 5b 6d 8d 1a a7 c1 80 4b cb 89 a2 22 3a f1 2c bd 16 d8 f2 af d9 cd 8b 2b 5e 80 a2 eb 75 99 c3 77 4b b4 84 0d 36 79 ed 01 a7 6c 82 75 42 b6 a7 28 c8 4b 41 11 82 90 b6 42 63 6e 54 f3 6c 43 d7 59 17 42 42 c2 f6 62 e2 12 7f d4 8a ad 96 8e 65 9b 72 19 ed de cf 7b df 74 a2 5f cf 14 b3 40 29 bd e6 84 15 6e f6 e3 76 20 01 58 78 64 60 78 16 d9 4c 42 d6 8d dc aa df 0f 59 4e ab cb 60 cc 4b 1a f7 67 73 2f f9 4b ba 95 af 6b 7f 3b 87 1e ac 64 44 dc 4e fd b6 be 02 85 3a 40 37 eb 3c ac bf b9 9b c2 0c 65 f8 85 52 23 71 24 4d 91 a3 04 91 d7 65 26 11 Data Ascii: zOR8WDLq+@HpijK\|Q@q{6[VYH:FAJ&.V[mK":,+^uwK6yluB(KABcnTlCYBBber{t_@)nv Xxd`xLBYN`Kgs/Kk;dDN:@7<eR#q$Me&
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 09 d7 f9 44 ea c4 74 38 a4 39 1c 0a ae 2b 28 5b e1 b4 cc 28 8e 24 60 04 14 19 a1 aa 97 50 94 01 01 a6 04 91 62 fa 2a f3 c8 a4 c2 e0 64 ad ff 9e 77 b6 1d fb f5 25 17 70 57 c7 19 81 43 11 8a 45 77 fe e4 b6 c7 fe 86 1c 1a 2b c4 57 ae 32 20 84 21 29 7f d5 dd f7 55 8a 0a d8 7a 1d 1d 1b ac 68 37 9f 91 23 09 5d 4a ad 31 f7 ee c2 5f 86 61 0f 28 06 b2 c9 fa 2b 76 58 be fd ba c4 30 4e b4 c0 ca c7 65 3f 64 a5 2e ab 92 07 6f fe d5 7f 92 43 32 5f 95 71 fe 85 8c 42 0b ac 62 68 5b c5 0b 7e 7e 22 4c 3f 06 7c 79 25 b7 5f e0 dd ec b8 dc d7 09 d3 db 24 71 ee f7 8f e5 80 ad 97 6f 23 9f ca 72 9d b2 4a 7f 18 f3 dc 6d 97 5d 52 41 b7 79 aa d1 3b ac d1 8f be 23 cf b7 b6 80 c4 e7 70 e1 54 ba 57 1e ec 7d 65 df 61 95 8d 34 ee fc ab 3f 07 2f 7a 85 91 39 fd 04 88 1e 78 a5 a9 eb 58 c1 Data Ascii: Dt89+([($`Pb*dw%pWCEw+W2 !)Uzh7#]J1_a(+vX0Ne?d.oC2_qBbh[~~"L?\|y%_$qo#rJm]RAy;#pTW}ea4?/z9xX
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: dc 1c 50 f2 02 1d f5 d1 3e 5f f2 b6 fc 19 7b 6e a1 f4 92 82 00 be b8 25 87 b2 5c ef 74 2a ed b1 1f 7e ff 13 6c 32 79 49 8a c7 1d 7f f3 ae 3a 2c aa 05 80 95 4f f5 ee b2 af 34 34 5d 13 2b c3 4d 41 9e 7b 5d dd 37 fa 98 43 7a 30 5f e4 f7 97 d6 09 7c 60 45 79 49 aa a1 81 d5 7e d8 17 aa ef 1b 2f 2d 64 e0 6d d6 ff e4 3f e5 17 70 64 9f 2f 3f fa 03 03 7e db 10 10 be 2c 5e c4 d8 6b bb 24 d7 5c 02 3c c3 13 4e bb cd 88 42 93 73 11 61 50 3f 32 4b d8 60 4d df 06 95 a7 d7 ad 30 d9 3e 29 d5 2e a6 fe 9e 4f e1 46 ab ef 9e 6c cc 65 9f a3 ba 49 08 9a fd b8 ca b7 f4 69 da 6d 63 f5 05 18 f2 c8 4d 57 ad 7b 6d 5f b2 99 3d 87 ed d9 25 c3 98 d3 26 e1 c8 8d 57 cc ce 75 b1 07 1d 19 d5 fb 1f c5 b9 e7 9d 4b 97 32 fd d4 b3 f7 21 fb 2b e5 80 30 ad 56 d5 59 7d 88 de 00 71 ca 61 dc 69 a9 Data Ascii: P>_{n%\t*~l2yI:,O44]+MA{]7Cz0_\|`EyI~/-dm?pd/?~,^k$\<NBsaP?2K`M0>).OFleIimcMW{m_=%&WuK2!+0VY}qai
2024-04-19 14:06:48 UTC	1255	IN	Data Raw: 55 cb 58 da 8b 85 38 5f 57 56 7f df 45 1b 75 a7 b2 45 ec 0c cd 04 8c 74 7a 92 18 93 cd 1e 97 d8 64 5d 6f b7 6c 69 7c 2d a2 92 ad 11 7f 50 51 7e ac 9f ce a5 6a b7 63 95 1a 3b 35 cc 58 75 d2 bc ec c2 5e bd f7 12 f3 5b 9c 81 fa f4 b1 2e f1 47 de 64 3b 37 1e 7e 98 f7 5a 2a d7 04 e5 b9 7e 9b 4d b5 c9 b6 1a f5 1f 62 6c 94 78 fa 15 c7 e5 ec ef 8f 1e 55 fa fb ff 34 89 e4 cc 7f ae 30 8f f5 37 7a bd 91 ab 9f 54 aa 45 d3 6f 8b 59 6e 2c 7c d9 0c 3b 61 3d 63 e1 86 8e 49 59 6d 60 77 2e 5b df ff 1c 22 9d 76 9b 0e 7b c4 22 6f 3c 2a 26 95 69 b5 a3 b2 f8 11 1b cb 8b e5 29 61 66 39 49 32 16 7e c3 8b bd c9 fc d5 ea f0 39 94 e5 dd 3a 96 a1 6f af bb a8 59 79 36 75 e3 45 70 50 79 a9 5d 75 b8 6b bc 1d 8b b1 af f5 86 2f b5 e9 94 15 61 c0 82 32 9e d3 32 7f f5 54 9b 95 66 50 47 39 Data Ascii: UX8_WVEuEtzd]oli\|-PQ~jc;5Xu^[.Gd;7~Z~MblxU407zTEoYn,\|;a=cIYm`w.["v{"o<&i)af9I2~9:oYy6uEpPy]uk/a22TfPG9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	50030	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:48 UTC	1100	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 15902 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:11:57 GMT Expires: Sat, 20 Apr 2024 10:11:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 14091 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	720	IN	Data Raw: 52 49 46 46 16 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c ce 3d 00 00 2f ff c0 3f 00 4d c0 92 64 37 6e 53 ef e1 01 02 0c ea fe 07 06 b5 64 fd 8e e8 ff 04 e0 3f 7d a0 27 00 be 63 7d 90 cd ad 5e 30 63 92 f4 63 43 e9 89 19 d9 c3 87 7b 89 4f 48 1e 24 99 d8 b9 ee 59 44 77 03 f1 19 3e 93 77 da 0c 0d 00 11 4a 92 c3 f3 0e ad 37 11 11 2a fa fc 24 1f 20 24 01 50 d5 c6 ef ac 3a 5c d3 6c 2d b1 ea 0d 4d 5b 66 26 9e 55 83 77 a8 59 c6 ad 6f b2 5e a8 8d 79 b9 7b d6 17 54 91 3c cd 1e 91 a4 c8 33 d0 dd bd 6e 21 f3 82 92 62 6d 5f d0 a0 90 f3 00 79 eb 1c 39 48 00 dd dd eb 16 8e a1 dc 6c cd ec 1e 36 ca bc b0 67 50 48 52 64 0f 7b 03 11 81 eb f5 0a 10 6b 8d b5 d6 5b 7f f4 42 92 6b db ca 16 ad 26 ce 17 5a 84 f9 0f 84 30 02 29 f7 d3 22 Data Ascii: RIFF>WEBPVP8XVP8L=/?Md7nSd?}'c}^0ccC{OH$YDw>wJ7*$ $P:\l-M[f&UwYo^y{T<3n!bm_y9Hl6gPHRd{k[Bk&Z0)"
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: e1 8d 41 de e6 e8 17 8a 47 fa ef 14 87 db b6 8d 04 49 b2 fa af fa f6 f7 2e fa 38 22 26 80 7f da e7 54 3f 72 bf f3 db dd a4 bc 75 d7 55 be f0 c5 aa 7c b9 75 dc d8 3a ec de aa ad dc b6 47 5e 77 bd 75 e2 f2 c4 a6 da cf 9b ac 01 53 d0 76 d8 05 35 60 09 60 ed e1 d5 00 9a c7 b6 d5 ae 3c f5 c0 56 cd 3b 80 95 80 3b 2a 1f 0c 01 75 ca bd 3d 36 18 e3 53 1f 0d d0 93 f7 e8 e1 e9 9c be 11 81 1a 97 f2 56 a1 f6 53 f9 50 a8 03 ca a7 3e 53 e5 9f b6 1b db b6 6b db ca fd 68 ad b5 8b 09 29 60 91 08 98 04 41 91 00 41 50 b8 b8 10 c2 37 d1 1a 32 d0 5a 73 cf 31 f6 d9 ea d5 3a fb 59 d4 eb a8 93 00 b5 6b 63 1d 0b ad bc 8e 5c 11 20 ac 1f c3 b7 96 37 22 20 84 ed a3 95 45 04 04 40 00 2a 19 3c a7 d5 b6 2d cb 8d bb d3 dc 49 d0 d8 82 21 18 81 c6 21 d1 dc 17 a0 33 01 0b 7c 99 25 a0 bb db Data Ascii: AGI.8"&T?ruU\|u:G^wuSv5``<V;;u=6SVSP>Skh)`AAP72Zs1:Ykc\ 7" E@<-I!!3\|%
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: ca 5d 30 d9 fa fe ad 0d cb 59 60 7f f1 35 bf 73 9d 5f 39 e6 db ba 7c dc 65 ce 74 35 65 d9 a4 95 9b 7b 1b e2 e6 b9 b0 62 28 2f a9 33 0d 1c 87 0b 17 af 39 78 e7 17 7d fc f3 91 4f 3f 1e 7f 79 0c 6c 57 91 35 38 91 bf 73 c3 5f 37 ed db 26 3e ee 26 ab 2b 1a 31 94 95 22 8a 2c 4e 87 08 2f 22 7e c0 cd d9 6c 11 e1 4c b6 f7 3d f8 30 a3 db 39 65 81 6f b5 cc db 57 47 11 f5 1b 27 7f e4 fe b7 f4 b6 39 df ee c5 01 ab a1 a0 86 a2 9d 4e 54 44 08 04 e2 e4 c6 20 97 fc 80 97 fc 00 03 10 b6 62 64 1e 9c 83 90 06 67 1e be b8 cd ca f9 8e 35 2e 92 72 4e 9e be 9a 1d 2f 87 db 25 ee 53 9c 6e a1 cb c9 75 d1 28 11 a7 e3 c6 f5 c4 4b 1c 25 b5 55 59 92 51 1a 52 24 06 d7 ed ac 44 ea 9c 75 c2 f9 6d 56 9e 0d ee c8 22 48 9f b7 9d 4d 77 84 db 12 3c 28 f8 2a 59 b8 c2 e5 e5 44 13 6b b9 31 c4 e9 Data Ascii: ]0Y`5s_9\|et5e{b(/39x}O?ylW58s_7&>&+1",N/"~lL=09eoWG'9NTD bdg5.rN/%Snu(K%UYQR$DumV"HMw<(*YDk1
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 62 8b 88 71 14 cd 63 bd e2 a9 f7 ee 40 4e 67 c9 bd d9 9e 03 ab 74 2a ae 4c b4 f9 d9 65 86 26 02 c9 4c 66 a8 5a a6 5b ca 11 d8 9e 75 d3 8b f5 84 b3 54 18 39 23 95 58 a6 b2 49 08 51 77 a1 50 65 2b d4 63 d5 56 05 7d 69 84 88 9b 4b b6 78 4a e4 6c 61 9a 37 d8 63 c0 1a 86 d9 f9 86 60 cf 73 d7 4e 0c 8e 38 4b 41 67 14 95 a2 0e ea 08 cf 76 27 23 8b ba 2a b9 9c 9d ac 73 55 92 10 97 c0 1a 77 3a 50 58 0b 36 8d 10 00 48 93 a4 8d ab b8 38 d5 9b 62 5e a9 9c 26 2a f3 fb 35 1a 8d f9 2a 2f db 8d 8e ce 52 4f 93 e5 04 a8 d7 61 b8 b1 ba 16 39 8b e1 c6 c8 59 d5 63 62 55 ab 9c d5 22 9f c9 70 f2 08 6c 94 77 36 f5 4c 52 49 c9 4c 14 21 00 ea da 9b 42 c2 cc 80 46 c2 6c 3e f3 12 ce 1a fe 3a 6f f8 95 54 eb c3 33 8f df 5d 2f 45 00 a8 5f 51 aa 69 22 ac 34 7e 20 27 9d 4e 54 a5 a5 21 84 Data Ascii: bqc@NgtLe&LfZ[uT9#XIQwPe+cV}iKxJla7c`sN8KAgv'#sUw:PX6H8b^&5/ROa9YcbU"plw6LRIL!BFl>:oT3]/E_Qi"4~ 'NT!
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a3 24 69 35 99 81 dc 30 ff 9b 9f 8f 5f 7e 0c 71 54 0d b9 fd 00 28 14 b1 7c f9 9f 9f d8 8f 69 3e f0 9f db 17 e8 6f 5c 1f df 7e 7c 53 cb f1 e4 c8 96 8b aa 73 88 84 da c7 d5 6c 18 40 41 17 f7 d9 e9 61 ca f1 cd e9 21 ae e1 60 fa 0a fb b1 f1 85 c7 2c 4e f6 49 39 d8 56 df d9 c9 b5 a4 b7 00 0e 46 29 48 1b 07 99 95 02 fe 87 8d 13 4e 8e 73 75 54 96 9c 3c c7 31 c8 47 85 59 fc d5 dd bb 4f e1 cb ce ef 41 5d 75 2c ca 11 f2 d7 5b fc 8b b7 e4 cf bb 7e 9d fc e5 29 1e c6 03 7c a7 66 7b 59 cb b6 29 28 17 6a 28 30 80 11 98 01 a4 01 02 bc f9 0a 18 0e 75 d1 1c 34 d7 9a eb f2 fd af 19 3e 26 d7 1f 31 fe 98 78 aa ef e6 05 8f 5c 8c 75 94 23 08 02 b3 30 62 af 61 50 aa 8e 89 fa 33 cd ea 7a da c3 fb 2e ed dc 3d ab e9 46 2d 37 05 84 58 b7 62 a6 f3 c9 e6 e5 df f8 7c 38 c2 97 1c 43 b9 Data Ascii: $i50_~qT(\|i>o\~\|Ssl@Aa!`,NI9VF)HNsuT<1GYOA]u,[~)\|f{Y)(j(0u4>&1x\u#0baP3z.=F-7Xb\|8C
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 66 db c4 b6 55 b6 25 40 93 59 50 24 68 31 60 7c c5 d0 ce 47 7c c9 26 5d ca b6 ae 63 23 26 fb 02 36 65 56 41 c5 21 a5 50 5d 74 29 aa 39 66 27 4a ed 86 2b 45 79 39 38 9d e4 72 3d 92 73 5e 5f 93 77 47 80 67 69 ca dd 02 74 28 bd 6a 17 69 ef aa c4 0a 98 f6 3e 91 cd 80 9f e1 46 e1 0e 6b 95 66 b5 7b e6 be 55 2e 9d a6 92 ad 3b bb 5c 3a ee 7c 0b be f2 2f f0 d4 09 0b 97 83 68 33 a5 a6 98 6e d1 22 99 5d d4 91 9b a2 8d 51 4b e3 ac 48 e6 06 68 b1 c9 ac b3 80 75 31 5b 90 72 bb 68 0b ad da 92 8a 82 b2 33 c0 a5 74 94 71 bc b9 3d ec 3c bd bc cb 79 cb ad b0 a9 5a 0f 16 ab 72 20 af ad 8e 94 13 0d d0 21 4d 6b 6e b8 ce 4b 3a 00 12 04 6a 06 74 48 9e 60 1e dd 73 02 24 ca 81 bd 51 1d 9d 66 91 ac a4 76 fe d7 cb 4e 3b b8 e5 4b d7 cb 41 97 45 39 a9 16 75 eb 5b 4b eb af d9 ee 53 34 Data Ascii: fU%@YP$h1`\|G\|&]c#&6eVA!P]t)9f'J+Ey98r=s^_wGgit(ji>Fkf{U.;\:\|/h3n"]QKHhu1[rh3tq=<yZr !MknK:jtH`s$QfvN;KAE9u[KS4
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: d4 f5 76 ae 16 d5 82 98 29 6a 9c 36 9b 04 35 f8 75 2c 35 d5 70 f9 7f 54 97 74 55 2f 02 4a 59 a6 bd b4 24 05 fa c1 a8 ec 6f b1 30 d2 62 7f 6d 11 8b 39 4a 49 1a 25 1f 21 9a b9 00 2a 78 4b 14 cf 0a 64 9b 73 b9 eb 83 c3 81 08 32 43 78 0a 07 5f 9c 9d 1e d5 41 cd 5a 58 b2 72 06 13 e8 24 06 73 61 73 b9 b5 14 c5 81 42 0e c4 97 44 e3 04 0e da 1b 0d f4 bd 50 b3 f3 a2 59 48 7d d3 0b ae 4d 41 9b b0 94 fc c2 dc 0c 29 88 09 52 81 21 b9 c2 74 65 6c 95 42 d1 52 5c c5 52 83 49 7b 69 14 d5 74 e5 b4 eb 8a d3 ce da 53 d7 73 92 f2 cf cb 5a ba 35 57 1c 67 e5 d2 60 62 65 e0 b5 f1 90 6f 95 a3 67 52 8b 40 28 10 12 da 48 ba c6 06 39 8b 23 f4 32 20 0b 7a 4c ce 01 18 4e 0b 18 33 84 64 5e ae 8c d8 b8 94 73 d7 2e 7c 8f 91 0e 57 ef d5 1d be 4f 88 2a 61 b8 9f 49 58 07 07 a4 38 41 ff 4f Data Ascii: v)j65u,5pTtU/JY$o0bm9JI%!xKds2Cx_AZXr$sasBDPYH}MA)R!telBR\RI{itSsZ5Wg`beogR@(H9#2 zLN3d^s.\|WOaIX8AO
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: eb 7a 37 79 74 46 f8 01 4e ad 75 30 81 00 08 02 9f d7 69 ee d5 39 67 2f 2c 34 68 72 b8 ec 42 41 c7 b5 ac 14 2a 2e 80 27 a2 00 ea 3a 59 eb 7a 0c be 25 29 cb d0 73 da fb 0e 2b 79 ab 5e 04 c5 5f d7 ee 41 a5 11 53 db 6f 4b f5 b5 15 75 1d 6b 7d 70 19 b7 99 fe 0b 7e 6a 33 0f bd c6 f0 0e 3b 6e 1a 4c 63 89 a2 46 fe 01 35 9c 36 62 6b e4 47 86 32 28 37 39 65 2d e5 72 7c ed 93 e5 24 39 18 20 39 b4 c2 2b e9 b5 77 fa 0c a5 28 80 2c 42 b1 6c 59 0a 25 0c cc 14 07 e0 42 a3 ba 12 ad e7 9c 39 fc bf d5 50 d4 b1 c3 aa 23 f7 0e 19 b5 62 53 b3 ee 73 76 d5 fd a5 9a d7 a3 ea 9a 72 75 55 c6 28 eb 6c 9f 3e 0a 6f 07 69 ad 4b 63 76 56 af 34 28 8a a2 46 c3 10 a1 5f 44 32 51 14 19 c2 6c 8f 57 37 b9 ec ae f1 4a 6c f7 df fa 7e ad f8 2a 73 25 7b 97 5d ad 9d fe 1e 09 53 35 66 21 86 0c 50 Data Ascii: z7ytFNu0i9g/,4hrBA.':Yz%)s+y^_ASoKuk}p~j3;nLcF56bkG2(79e-r\|$9 9+w(,BlY%B9P#bSsvruU(l>oiKcvV4(F_D2QlW7Jl~s%{]S5f!P
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 0e 82 11 2c 70 68 45 18 e2 ae 77 55 0e 6a 81 3f e4 a1 90 92 1e c1 43 ad 5e db c3 7e 65 66 1c 2a 4c b4 40 8b 31 f2 19 4e ee c0 3a e4 2d f5 ee 79 13 c3 d7 dd 81 ae 2a 8b 8d da e7 c0 4e 01 90 89 7e bc dd 8f a2 6c 05 bd 62 01 c2 90 b8 e2 30 72 84 f7 e9 87 6c 0d 30 1b 92 6f e8 02 e3 40 f8 8a bd 47 2d bd 2a 50 35 c2 4a 85 17 23 17 1b 1c 92 5a 12 f6 c7 78 bf 6d b3 b5 09 58 ea 18 17 a5 0a 94 de 7d 50 7f 60 57 fa de 77 3a fd 4d 72 74 b6 2d 9e 22 58 1c 21 28 1c 48 90 b0 32 15 40 26 fa 71 86 e1 5e 57 a0 5d 05 25 25 e9 23 ec 9b 7d c6 7c 7c af 33 d9 77 46 1a b8 09 c3 40 00 0e 4f cf a0 c2 0a ee aa 3c c1 fa 5b f6 0e 05 52 d8 a3 98 2a 76 6a 9b 21 e5 32 a0 cc ec 3b f4 7c c8 7c da ba 3d 3f 67 38 50 1b a3 c2 11 2e 49 50 ac ec c7 54 24 22 f3 9d ba 75 15 ec 7d 36 2a 57 92 7d Data Ascii: ,phEwUj?C^~efL@1N:-yN~lb0rl0o@G-P5J#ZxmX}P`Ww:Mrt-"X!(H2@&q^W]%%#}\|\|3wF@O<[Rvj!2;\|\|=?g8P.IPT$"u}6*W}
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 26 4d e0 19 b9 21 40 32 9d 7e a0 10 02 f8 23 e6 51 ee 45 5c 05 11 11 a6 5d 0d 47 ac 05 a1 0f 05 30 85 df a9 7e 31 cd 55 77 06 d8 6c ee 0e bf d6 89 78 a5 df 5d b3 8c 29 b8 ba 6b c5 4b a0 f3 cb 08 90 1c 01 4a 36 bc 2b 92 9d 64 a1 81 46 4f ea a6 04 bc f7 7d 0f 09 fd b0 02 56 d6 f0 3b a4 5c 0c 19 22 a2 e9 06 74 b4 7a c8 85 96 04 00 3b 35 56 c0 77 c9 67 72 6e 18 35 aa ab 7b 31 d0 07 dc 80 6f 1a af 67 ef 77 3c 79 ef 36 64 3a 2a 95 8a d6 5a 53 c0 6c e0 a4 67 82 95 68 52 58 48 23 4d bc c0 cd 15 9b 38 ed 6b 2c b0 1c 63 9f f2 81 0e 30 86 0c 61 da 15 2e 3a f4 e8 ff 79 28 00 f0 fd 7f 9f ea ef 83 96 ff e2 f1 da 45 46 54 1a 4a 29 70 2b 3e 47 f8 e8 83 de f4 b3 69 6d d2 06 a6 7c da 4d ab 92 23 6c c9 39 89 3d 11 49 7d a8 92 e4 41 36 d9 92 2d d9 92 ef 59 b3 7d 4f 15 a8 12 Data Ascii: &M!@2~#QE\]G0~1Uwlx])kKJ6+dFO}V;\"tz;5Vwgrn5{1ogw<y6d:*ZSlghRXH#M8k,c0a.:y(EFTJ)p+>Gim\|M#l9=I}A6-Y}O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	50031	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:48 UTC	1101	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4722 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:57 GMT Expires: Sat, 20 Apr 2024 11:15:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 10251 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	721	IN	Data Raw: 52 49 46 46 6a 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 21 12 00 00 2f ff c0 3f 00 2a bc f2 ff 2d ba 2d e5 72 67 06 c6 fd 59 eb 1d d7 6d 47 b6 8d fb ec 7d dc dd dd dd dd dd dd 2d d8 fb 7d fb 79 9e 7e 9e 5e d1 d4 59 27 22 f5 4c 8f 44 93 22 d1 8b 2f 24 1a cb 4e 8d ac 2b 78 6b 73 01 16 b9 6b b4 6b 1a 97 d0 dd 89 74 57 e3 84 2e 8b ec 64 38 ec 0b c0 5f dc dd dd 75 47 5d bc b8 c3 8a 88 a6 26 c2 e5 4d b1 95 e2 d7 40 35 ce 1d 90 b9 bb fb 26 ea 93 4d 4e 4c 4d 48 dc 17 70 62 dc dd d9 d5 b8 73 e4 06 70 c2 a9 fa 4f 4a 4d 86 86 4e 3e a4 0e 1d af 3b 20 e2 02 88 1a 89 08 5d 62 aa f6 44 54 75 32 12 e2 ee 90 0d d6 35 11 16 75 46 fe 9e 89 b0 7d ea 5f 45 e6 8d 84 96 e9 aa c2 dd 9b 22 3b 17 80 13 d9 8e 1b a9 92 00 d9 b6 69 47 2b Data Ascii: RIFFjWEBPVP8XVP8L!/?*--rgYmG}-}y~^Y'"LD"/$N+xkskktW.d8_uG]&M@5&MNLMHpbspOJMN>; ]bDTu25uF}_E";iG+
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a6 d6 63 c6 2c 1a 1b 8b 88 b8 41 47 c7 fa cd cd 82 d9 18 11 b1 71 ac 6f df 52 2d 94 8e ab a9 39 be 86 c6 81 d7 ac c9 40 5c b4 6d cf d8 37 1c 68 d5 aa 31 be 7e 7d b5 6b 58 ab aa 4a 65 4b 27 25 cd ee e3 73 fc 21 2f 5d 6a 2b c4 5e c0 2f 7a b6 ed b7 91 92 1a fa da b5 19 bd bc 5a 8d 1f 5f 2d 27 a7 81 20 4d 09 54 2b 2a 66 84 e8 b6 be 2f 81 b4 ec db cf 39 d4 95 2b 33 ba b9 bd b2 3a 5e 7d fe 90 90 09 74 74 3a 4c 9f 5e 30 75 d7 a8 82 fe 51 46 08 00 88 aa 24 24 0c f7 99 40 8b d7 1a 7a 1c 8e fc ea d5 bc 41 41 bc ad 98 9b 3b b5 ad 6d e7 05 0b 3c 3f 20 10 65 84 a8 29 f6 4f fd 42 d7 f3 e7 7f 80 9f 15 b2 b3 4f f6 db 5e 99 40 46 88 9a 66 64 24 e6 48 2f 5e 2c 12 1d cd c3 da b5 b5 d3 39 3a b6 56 54 f4 dc 26 a8 99 56 52 f3 84 53 59 5a be 02 a3 a7 1c f2 ca 15 bb 1c 42 4d b6 Data Ascii: c,AGqoR-9@\m7h1~}kXJeK'%s!/]j+^/zZ_-' MT+*f/9+3:^}tt:L^0uQF$$@zAA;m<? e)OBO^@Ffd$H/^,9:VT&VRSYZBM
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 53 ba 31 77 78 69 96 98 f4 19 dd dd f9 3b c4 b1 63 29 08 31 fd 25 fe fe 5f 17 93 b7 72 41 01 77 33 d8 d8 98 20 48 f3 36 b8 fb 76 4f 48 7d ef 12 79 5f a5 b8 d8 8e 44 11 d9 ab 94 94 f0 86 77 d9 57 44 e9 a8 ef de 71 b7 ff 5e bd 08 64 84 10 26 81 fb e4 6e d4 b7 6f 53 11 e9 b3 fb fa f2 36 c6 87 0f 65 10 68 f9 09 78 fb 69 5d 44 f1 4a b9 b9 9c f5 2a 82 50 8b bd 38 bb f3 58 40 a5 14 f9 de d8 ad e5 24 08 39 a9 75 37 e6 0b d3 92 78 ac 43 ee d9 c3 59 d7 2b 57 52 e0 b2 54 9c 48 47 a7 d5 d0 a1 01 1f 90 1a 9c 3d aa 25 1e 77 12 73 73 be e6 f6 f3 8b 81 4b 02 e6 22 b1 b1 d8 a3 cb a5 4b 26 1f 10 bf 18 5f bf e8 8a 27 d9 9c ab 3e 7e 89 0b b7 f5 b8 71 5b 23 22 4e 65 64 94 2f 71 51 f2 fb 70 b5 79 22 1e 73 3b ae 0e 7e e4 c8 9e 00 78 34 87 b8 7a 15 bb bf 58 42 82 49 80 07 30 8e Data Ascii: S1wxi;c)1%_rAw3 H6vOH}y_DwWDq^d&noS6ehxi]DJ*P8X@$9u7xCY+WRTHG=%wssK"K&_'>~q[#"Ned/qQpy"s;~x4zXBI0
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a1 a0 a0 18 51 01 ff 01 29 75 39 75 ca 12 51 25 a1 d4 4a 46 26 a4 42 a0 d5 e8 d1 28 de 39 bd bd 6d 3a e1 f7 53 4a 2a 22 02 73 f1 b8 38 2a 8b c5 c5 15 80 e6 4b f8 5b 0b 08 c7 fc f8 31 a1 02 85 cb a1 f2 d8 26 08 d9 9d dc d2 92 ca e5 19 54 f2 4b 24 27 a3 90 1f 21 a5 62 5c 1e 95 c9 2d 2c 5c 31 85 6d bb 74 a1 f1 45 36 d0 2c 4c 63 6a 8a 62 fe ca c3 bf 03 0d b0 bf 88 46 db ae 5d 43 31 81 bd 5a 49 09 85 c9 4d 4d 5d 1a ee 30 b7 6f a3 a8 57 2a 2a b2 23 1a ee 40 0a 2f 69 83 a0 cb d3 3b 3b 53 78 ce be 14 08 ec 07 50 dc b3 b9 b9 c5 34 fa 3e 27 85 e3 94 45 45 a0 fd f4 e9 ca 7a 99 19 21 94 67 54 55 bd 55 4b 4b 05 86 97 e2 52 00 b3 97 b2 1f 20 20 2a b0 57 2d 2e 56 34 c2 b3 67 29 05 6f 0e 4f 4f 14 fa 7e 65 64 08 50 48 4f 4d d1 6b d9 20 6c 77 a0 22 a7 a2 2c 18 e6 ce 1d 14 Data Ascii: Q)u9uQ%JF&B(9m:SJ"s8K[1&TK$'!b\-,\1mtE6,LcjbF]C1ZIMM]0oW*#@/i;;SxP4>'EEz!gTUUKKR W-.V4g)oOO~edPHOMk lw",
2024-04-19 14:06:49 UTC	236	IN	Data Raw: 25 df 3e 9d 83 43 9b ae 5d 3d b7 5a 4e 0e 6a 80 95 d4 37 bb 9e 3b f7 a3 6b 94 97 f3 b6 58 6c ec c4 86 86 e7 eb 95 43 a8 31 46 86 6e 7f c2 98 3f 7e cc 13 18 f8 92 bc 2c 11 17 37 9d b3 f3 c1 76 ec 30 1d b7 09 6a 9a cd 69 e2 59 d7 34 b5 83 c3 8d 1c 9b c9 2b bc ff ef 8e f9 fd 7b 5b 35 35 cf 29 5b 11 d4 50 4b 56 39 29 78 e7 fb 13 a3 bd 7b 37 8d 93 d3 39 cd 17 1c fc 38 6f 74 3b 5b 7d 25 22 36 de 52 bf 6f 5f 2a 29 e9 0f ce 7e 26 4f cf 89 0c 0c 86 ba 7c b9 fd e4 c9 a9 e7 e8 69 08 35 df 66 2b 2d eb 89 63 c6 9e 67 17 6d db 8b 0b a6 9f e8 c1 9e 80 40 7d 46 88 0d fd bf a1 ff 0f 37 37 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: %>C]=ZNj7;kXlC1Fn?~,7v0jiY4+{[55)[PKV9)x{798ot;[}%"6Ro_)~&O\|i5f+-cgm@}F77EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	50032	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:48 UTC	1100	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9974 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:00 GMT Expires: Sat, 20 Apr 2024 12:12:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 6889 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	722	IN	Data Raw: 52 49 46 46 ee 26 00 00 57 45 42 50 56 50 38 4c e1 26 00 00 2f ff c0 3f 00 09 58 92 ec c6 6d ea 3d 80 04 f8 20 dd ff c0 9b 41 67 f9 8e e8 ff 04 e0 ff 68 b0 4d 9c f0 5d 13 ce 3d 39 e7 2e 60 0f 62 d7 5a 4b 7b 80 01 c2 c0 ae 42 64 12 3c 91 d9 25 89 e0 32 83 7b 8b 6e 60 66 36 dc 3b 20 a9 00 9a d9 5a ee 0d 92 44 c0 6f 16 9b 0a 80 db 6a 9a 92 88 db 0b 3f 93 a4 ba 8b d9 35 6e 22 22 bc 49 97 b8 9e 0d 9c 03 a8 0a 32 33 e3 b4 cf 7c 8e 81 8a c8 cc c8 b4 16 a0 2a 79 3d ad 03 9e d7 cb 71 f4 c0 33 33 06 eb 68 bb 56 1d d7 0d 7f f0 02 8a 24 c9 aa ad 8c 13 13 f3 18 14 7d d2 7f ff 2b fb 12 dd 65 d4 8a db b6 8d 43 cc dd 67 59 45 92 ec a4 c9 19 de 7b 20 00 11 f8 97 83 85 fc d1 ff 09 f0 77 ac c7 64 30 04 c1 50 a0 e4 1b 84 1d 00 82 21 00 10 b0 12 0b 85 a1 82 74 fe 7b 07 02 8e Data Ascii: RIFF&WEBPVP8L&/?Xm= AghM]=9.`bZK{Bd<%2{n`f6; ZDoj?5n""I23\|*y=q33hV$}+eCgYE{ wd0P!t{
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a0 a2 1f fd e8 4b 5f 1f 9f 93 68 08 ed 81 a1 43 87 9e 76 46 4b 7e 7a d3 47 c7 dc 3e c6 c9 0b 83 43 0b 9e 28 0b 93 85 7f 1a 78 9b 8b 8d 9b 7e 1a 7a db 22 ed a3 a3 e1 a5 43 e1 d6 b6 ad 5a 59 fb 7c c1 dd dd 5d ca a0 0b 22 fa 21 d5 2a ac 02 32 1a f8 31 ee 9e d9 b9 db 6d db 48 92 24 ee 9b 7f 9c e7 9f b9 15 13 e0 03 7c b2 ff 3f d9 ff 1f e7 d4 b3 f2 ec c9 4a 05 b9 52 6b 4f be f4 f4 51 6e f7 1f 2e bb b3 81 03 99 bf c1 de 6b 3b 37 56 50 db 90 78 59 f9 f5 c5 8f 92 1f 9e dc 88 00 7e 4f dc bc 2c da be 37 d8 c1 11 0b 64 9e 9d 72 14 2c c2 42 00 59 14 3c 53 dc 42 37 4a ee e2 11 02 d8 fc 61 07 0f 10 d7 a4 61 23 f8 10 e5 d3 b8 29 e6 6e 50 e9 11 b8 66 85 ce 9c a5 07 cf c6 47 5c 13 40 e0 04 ee 99 f3 41 78 b7 21 e5 1a b4 5c 53 3b 1e 5d 6d 16 27 0e d2 e2 d6 c1 f2 94 9b 92 d9 Data Ascii: K_hCvFK~zG>C(x~z"CZY\|]"!*21mH$\|?JRkOQn.k;7VPxY~O,7dr,BY<SB7Jaa#)nPfG\@Ax!\S;]m'
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 31 3e 4b 90 90 50 80 0c 34 8b b0 43 60 37 63 1b 63 c2 a1 ed f3 e4 fb 4e 27 bb e8 6a 6a 40 59 21 77 7a 47 12 c0 12 38 dc f5 79 f2 a7 74 fa ad 67 20 00 41 c3 c6 80 03 30 06 73 25 5d 9d fe 79 a2 7b 3b f7 86 c1 01 8e 8b 00 f3 9e 4d 52 7e 96 08 40 cc 2b 6f 3e f2 9e b9 5f 98 10 33 fc ae b0 f0 67 09 43 63 32 ce b9 91 6c e4 96 6c 90 00 9e 98 dc 72 cb 6d 5e 95 8d 11 e3 fc 79 c2 e0 98 64 5f 8a 45 38 5a f5 a5 15 e3 74 38 8d d3 38 09 28 95 d4 0f e4 e7 89 10 92 80 30 ef 74 60 4c 98 f7 97 3e 53 7a 47 02 95 c2 50 28 16 74 a8 e6 58 9d 25 28 05 d6 83 f4 d5 39 e9 82 8d c7 94 6a 64 c1 ac 95 5d b6 d6 f2 09 61 39 81 05 e2 fe 70 98 bb 06 6c 0c 10 06 f5 e0 01 57 e9 9d fd ad 41 e0 c8 d9 8c aa 6f 53 29 92 01 d7 fe 33 cb c6 63 b7 92 ba 24 10 01 e6 fe 52 2c 01 26 30 77 a5 26 7d 50 Data Ascii: 1>KP4C`7ccN'jj@Y!wzG8ytg A0s%]y{;MR~@+o>_3gCc2llrm^yd_E8Zt88(0t`L>SzGP(tX%(9jd]a9plWAoS)3c$R,&0w&}P
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 53 09 07 c0 90 4c 31 a5 84 53 51 75 42 d5 d5 37 f4 5f 9e 2f 65 11 f6 06 37 da 69 9b 7b 73 6e ce dd cd 4d d7 f2 38 f7 b9 4d fc 36 37 e9 e2 9d b7 47 6d fd 41 0e d8 9f 4a 21 80 00 2d 68 b0 79 26 09 c8 c3 9e 38 6b be 14 45 6d ab 3d fa 37 1f e4 c2 96 1a cb 22 da f5 e2 33 b2 7d b0 6d 61 2d 1b 35 e3 30 d6 b2 5b f5 e7 73 7b 98 bb d9 66 20 07 60 41 48 12 90 4e d8 84 31 36 a2 c9 a6 b2 a8 a2 66 71 1e a6 2c 66 6d d9 3e d5 77 86 45 8e f5 5c 0e 23 c0 dd 96 85 8d 8d 59 cf 32 a8 09 d1 fa 0d 7b 90 7b d2 59 bc 3a 5e 2b 0d 00 57 42 03 31 71 2a e7 60 4c 6a 22 28 ea 1a d4 a9 c6 c7 77 58 82 fe 8c 25 ac be 86 39 b6 1d 6d 3b ce 4d ce cd 73 63 6e ce 0d 9c 6f 26 37 c8 0d 83 da 7e c3 fc 20 d7 f9 21 b7 fc 67 06 73 01 20 40 3a 0d 60 6d d8 f8 40 9b 66 c5 25 aa fc c2 1f a6 2c a6 bf 6b Data Ascii: SL1SQuB7_/e7i{snM8M67GmAJ!-hy&8kEm=7"3}ma-50[s{f `AHN16fq,fm>wE\#Y2{{Y:^+WB1q*`Lj"(wX%9m;Mscno&7~ !gs @:`m@f%,k
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a1 14 76 9f 74 a6 62 83 1b 8d 6f 2c 35 96 24 90 d0 12 0d 5d 0b ad 40 52 09 9a 70 1c f5 51 b0 f1 b7 87 30 ad 29 55 93 4d 4e 63 e6 5c 1b b8 30 40 91 80 81 65 16 84 8f a3 6f ed 7a 50 26 68 7c e3 f4 5c 20 fa 02 15 42 a5 92 8c 24 15 12 a8 08 dc 3f 0e 3a 53 9f 32 98 5a ad 36 99 c8 30 a9 e2 f4 b4 c2 a4 a9 49 71 ef c5 ae 48 c3 24 fa c6 2f 2b 3e 63 39 b1 00 07 d5 17 95 bb 6c b9 e3 2e 56 17 a2 75 c4 ea 80 56 b4 a2 ff d8 3e 12 2a dd 7d 6a 5d d5 94 68 9a c1 84 7a 9a 94 8d 59 49 56 26 30 0d 27 b3 52 0a bf d1 d2 ea 2d c1 04 37 fa de da 8b 85 6d 59 12 c8 88 6b 05 5a 0d 90 b0 24 55 7b d9 6f 73 1f 0b b3 fa 9f 3d a8 65 dc 9a db 94 a6 0d 17 88 ac 24 d7 04 af f4 c6 35 4c d9 c6 39 29 24 d8 d2 f4 66 96 09 be 3d 6f 65 4b 3b 4a b4 4d f6 12 a4 6c 49 bb 74 d9 94 dd db ea 97 5d 1f Data Ascii: vtbo,5$]@RpQ0)UMNc\0@eozP&h\|\ B$?:S2Z60IqH$/+>c9l.VuV>*}j]hzYIV&0'R-7mYkZ$U{os=e$5L9)$f=oeK;JMlIt]
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 4f 99 20 2e 6b 11 e4 ae ad 1e 8c 18 f1 30 dc fc b3 e8 1f ec ed af 17 cc b5 36 db be 98 01 f4 2d 54 ed 99 d6 91 5b 38 ac d5 ca bd dc 2c ab d3 4d 43 a5 50 ff a4 0e 7b bf 6f 37 f3 90 75 97 0b ce 58 bc dd e3 a5 53 1a 26 35 dc c3 f2 1f 13 c2 08 fd 6b e1 9f aa 7f c2 7e 45 e0 09 df 7d f9 7f b0 40 e8 c7 25 70 ff 19 a0 12 08 09 7a ab 06 68 09 6c f5 d2 f3 27 b4 b1 c6 1b 8f cf 3f df fd ff e6 c6 f1 4b bd 11 99 01 43 a9 74 1f 76 b0 59 44 bd e0 da 30 3e 53 8b 61 93 0e 87 04 84 3e 9f 5c 20 06 d8 6f d8 29 7e 4a ce 3f 89 d6 bf d0 ad 73 d3 a3 b5 ed 6f 6f 74 10 da ce 9c f7 b8 c6 97 fd 36 f7 c9 0c 5a bd cf 69 5b b2 ca fc ca 98 34 b3 7b 4a 71 2d 43 04 49 34 4e 83 03 67 4b dc 0a 0e 2e a9 cd 74 c8 22 52 50 dd 72 c9 47 86 01 d8 b6 7d 9c a1 dc 7d 85 b1 ac b2 0a b4 66 4b ec dc 5e Data Ascii: O .k06-T[8,MCP{o7uXS&5k~E}@%pzhl'?KCtvYD0>Sa>\ o)~J?soot6Zi[4{Jq-CI4NgK.t"RPrG}}fK^
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: e0 12 fa 56 73 56 03 1b d2 85 13 98 80 89 a2 01 52 49 61 75 01 a5 42 a5 d5 4a ab 01 e8 83 ba eb af 1f ba fa e6 ec 27 cf b9 30 0e 1b 1c 13 d6 e6 d9 df 5e 4e fa 49 23 94 e3 9b 2f 07 49 73 8c 83 53 7d 5e 68 49 cf 96 1d 12 90 18 c4 b9 16 95 f1 54 38 9a ef 61 84 25 ec f4 8a 32 3d 26 76 69 81 91 ba 81 d6 97 00 1c 38 1c 4b ae 46 18 f6 1b f6 7e 8f 3a f2 c2 fd a1 b3 ee 6d 8d 5f a5 9d 84 b7 6b d0 4f 70 a1 71 61 6a 42 cb 1a d6 69 9e b2 1c 5c 72 72 3c 31 96 a6 2a 11 16 9d e9 d1 a4 48 73 0b 94 91 ef 66 fd 05 8c b8 54 d1 2c 9d 89 28 32 11 97 20 80 17 0b ee e8 bf 8a 42 d5 80 30 1d 6e 1c ef 7d 56 c2 f3 47 44 df f6 58 37 1f 95 69 01 2d 58 4a bf bd 94 b2 14 e3 2f a8 c3 38 c5 70 22 9d 5b 92 17 02 2e 82 01 97 06 1b 46 ee a6 89 5d b7 e1 75 dd f1 00 56 f8 bc 67 33 3c 97 78 3e Data Ascii: VsVRIauBJ'0^NI#/IsS}^hIT8a%2=&vi8KF~:m_kOpqajBi\rr<1*HsfT,(2 B0n}VGDX7i-XJ/8p"[.F]uVg3<x>
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: bf 3c 83 49 4b 8d 3a ef 78 a0 88 72 2e 8e 2b 47 f9 6d bf d5 0f 22 d2 e3 61 eb da c7 b9 5f a9 ce 59 7f db 69 c8 80 76 5e d3 2f d7 ea 78 55 b2 b4 22 a0 41 64 22 10 f1 dd de 60 f4 ef 9a d4 78 d9 09 e9 87 e7 61 84 07 95 b7 26 72 1e 24 c6 40 a4 e0 75 64 03 0b c6 98 c4 73 59 51 d8 97 be fa ee 8d fe fd 82 4d b0 e1 1a 47 43 83 f8 22 ef f3 5c a1 8f ee ba 2f 99 37 c7 24 0f 11 ca 83 a6 32 94 21 46 21 5d 4e b7 3d 15 55 ff f1 ce ef ef 78 37 2f fe fa e7 95 1b f0 58 05 59 40 9c dc 4c c5 6a 89 6b 12 a4 b2 17 30 0a 6a 8f 5c a6 92 8b af 81 69 08 42 a2 2f 72 48 2e 1a 68 cc 52 e8 b5 fa 07 ac 5a 6e d0 a7 67 8b 80 f8 4e c7 99 fd 7c de 5e 5f 71 ee c1 cb 07 d3 fb 79 8e e4 39 0d 98 2c 65 93 58 1c 8b d8 3a 51 74 72 19 5d 8e dc 21 26 f7 75 ff 78 5d f8 70 f5 d1 ef c3 ce 00 82 d3 0d Data Ascii: <IK:xr.+Gm"a_Yiv^/xU"Ad"`xa&r$@udsYQMGC"\/7$2!F!]N=Ux7/XY@Ljk0j\iB/rH.hRZngN\|^_qy9,eX:Qtr]!&ux]p
2024-04-19 14:06:49 UTC	467	IN	Data Raw: ca 2d 8f f7 3e 57 07 01 b0 39 44 c3 14 bf 18 a3 0e 68 0e 78 5b 20 e1 4d ad d9 81 3a e9 c1 05 27 09 4e 36 82 00 71 1e 0d b4 68 94 e7 45 ab 82 60 e8 88 cd 9b cb ef e2 bb 84 9a 14 80 8e 48 99 b0 4e 2f 04 af 0b d3 0d a7 9a a5 65 36 a7 17 56 48 2b ce 74 fd 3b b7 bb e9 76 6b 07 81 71 ce 90 34 44 f0 da 4c 72 0d 05 b2 d8 a2 b0 08 63 de e4 d8 b4 31 e1 c2 a5 40 50 12 86 97 2a b5 86 e7 a5 9a 33 cb 2f 08 90 8b 97 64 f9 d6 b1 38 9f 0b 68 ac 4d 40 0b ae 84 dd 60 02 d2 07 f8 1f 3e 41 11 15 d5 5f f8 71 b0 95 5b 98 7b 26 1d 0e 1c 39 08 96 4d bd b2 cf d6 59 be 6d fc 76 95 0e 93 80 45 da 89 68 86 48 1b 42 5c ea 54 9e 60 d6 5e fd f7 9e f6 7b e7 dd e6 79 6e 30 e3 40 08 9e bc 90 96 95 bb 55 2c b1 55 6c b6 06 63 53 26 9c 12 db b1 95 47 5b 1f 0f c1 db 61 43 47 82 50 55 34 49 13 Data Ascii: ->W9Dhx[ M:'N6qhE`HN/e6VH+t;vkq4DLrc1@P*3/d8hM@`>A_q[{&9MYmvEhHB\T`^{yn0@U,UlcS&G[aCGPU4I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	50033	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:48 UTC	1503	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1281 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Bbu9_CWl9x9lUa6JUq7HyjBBlnEM-rSmr3Ih5nSnWSffWSUQLvYispsNP-fKZErDnZRwd4R1PO6F1zz-CVASavtyc_STqoabr37QeH3T7NZpC8uItyEPXhqZr0HZWfW42bINGiyqTWsVM8v2zqmxoy_US33UuWrEzF2eRIDFziU; _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535604.0.0.0
2024-04-19 14:06:48 UTC	1281	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 70 6c 61 79 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 34 31 37 2e 31 31 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 38 34 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_playuiserver_20240417.11_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1884,
2024-04-19 14:06:49 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; expires=Sat, 19-Oct-2024 14:06:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 14:06:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 19 Apr 2024 14:06:49 GMT Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 14:06:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	50037	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1100	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10602 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:32:57 GMT Expires: Sat, 20 Apr 2024 11:32:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9232 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	721	IN	Data Raw: 52 49 46 46 62 29 00 00 57 45 42 50 56 50 38 4c 55 29 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 d9 91 b5 20 f2 ff 1f de b3 bb 67 ce 11 fd 9f 00 fe df 3a 62 03 11 e7 9e 07 ec 2d 12 80 64 43 c4 86 47 70 07 92 04 d2 84 07 6d 3c 3b e4 c9 ab bc 7e 9f 10 ae 2b b4 76 26 d5 11 95 6a cf 65 93 4d 4b cd cc 88 a9 8b cc 4c 5b 5d d4 9d b2 25 fb 17 e4 17 41 a3 03 fd 4d c1 e4 fb 36 7a 25 fb 1d f5 9f c6 ee 65 da 5e 7a 00 6c e9 35 d4 ba c6 1d 00 96 bd 2b 22 b8 80 ce de b8 2e a0 d6 7d c3 73 7f ec 02 72 64 db aa 95 46 02 20 ff a8 dc 6d d7 ab ef 8a bb 3f e1 32 fa 53 48 b2 6d ab 6a 16 10 c1 5d 5e d1 3a f3 1f 4b 9a ee ee ee 9e 82 14 49 92 23 c9 67 7a 14 8c e5 8f 64 21 c8 bb 0b 08 f7 d2 aa ff 13 80 55 73 60 f4 8c 9e f1 2f 2c e7 f5 05 00 0b 33 b0 d8 9c 46 65 14 ea 3d 43 bd 9a 43 Data Ascii: RIFFb)WEBPVP8LU)/?M@rH g:b-dCGpm<;~+v&jeMKL[]%AM6z%e^zl5+".}srdF m?2SHmj]^:KI#gzd!Us`/,3Fe=CC
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: fb f0 f8 f3 79 3c 1f fa 5f b6 8d 24 29 aa e3 4b f9 cc d7 67 f9 31 bc cb a4 98 00 4b d0 f6 2f 92 a4 64 56 96 b6 8c bb fb cc e2 ee ee ee ee ee ee ee ee 76 73 77 77 77 97 75 77 df 1d d7 96 ea aa cc 3a d4 4c 4f 55 ed d2 73 fd b0 3a e1 90 91 14 92 b8 bb fc 22 56 12 5d ef 88 c6 12 ed 13 0e 1d ff c0 7e b8 bb ac 27 2e 85 24 5a ab 13 dc dc a1 d1 53 21 cd 22 eb 7d c3 39 d1 6c 10 41 3b 92 24 45 b6 15 51 3d 7b e0 31 33 33 cb f8 ec c0 ff 13 e1 6a f0 a4 78 42 30 33 9c 73 f9 2e 4c 57 52 a2 6d eb 98 24 dd fb 3e e4 1f 11 7f 32 22 72 ad 18 b5 6d db 9a 19 33 73 d4 23 db b6 dd f3 1a f6 c8 56 d9 b6 cd 70 c4 1f f1 7f df 8b 09 c0 ec fe 9f 22 c9 76 32 eb c0 65 d3 ac cc cc 7e 04 7a 44 af ef d2 0f e2 87 f0 33 dc bd 99 67 26 73 d1 33 39 55 75 68 fb 35 2e d9 a1 bf d2 10 c6 d5 55 69 Data Ascii: y<_$)Kg1K/dVvswwwuw:LOUs:"V]~'.$ZS!"}9lA;$EQ={133jxB03s.LWRm$>2"rm3s#Vp"v2e~zD3g&s39Uuh5.Ui
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8e 9b 7a da 3b 49 0a 7f f1 5d bf 5d 50 cb d1 49 41 58 1a 94 8d 8e ae eb a7 0c e4 3a 07 8e 2c 2c 0d c5 a0 5e e9 6c db 42 61 01 c9 fe d5 f7 fb de 69 30 9b 15 65 aa 2d a6 59 81 d5 0a ea e0 dd 4e 35 a0 23 47 63 a8 41 a7 a7 46 8a 09 96 2d 02 de fa 4b d0 29 ff ea 7e 33 69 bf fd 01 9f b7 6f bd 6b cc aa c2 42 91 ad 5a 47 6a bc 02 0e c2 0c 8d 4c 48 06 a8 62 86 4e a9 b6 50 85 86 22 46 9d b3 b5 d3 33 a9 93 b4 f0 fc 7f 9a 59 9c 13 00 71 04 df 6d d9 74 df 4c 86 f3 31 69 ce 17 25 a2 57 97 23 91 54 86 5a 15 9b 4e 6d d7 0d a2 08 db 24 68 fd 65 a4 1a 2c 20 f9 ff ff d5 bb 82 9a 4c aa 00 a2 71 93 2c cb a2 cd 58 e2 bb d8 23 e9 19 c9 8d 3e c4 1c 07 a7 03 e7 28 de c5 73 07 2c c3 48 04 63 d7 5a 4c 91 29 70 e7 6b 0a 6a 86 73 62 81 49 43 da b9 a7 0c 2f 34 31 43 f6 6a 73 72 97 61 Data Ascii: z;I]]PIAX:,,^lBai0e-YN5#GcAF-K)~3iokBZGjLHbNP"F3YqmtL1i%W#TZNm$he, Lq,X#>(s,HcZL)pkjsbIC/41Cjsra
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 6c a1 96 47 e6 70 cf bc 35 e3 4d 0c 8e 08 30 c3 21 91 00 e3 55 2a 00 27 34 3b 45 e1 19 0a 27 52 05 ad cf a8 b0 53 2a fb 84 ca 4e 09 03 f7 c2 0b d1 78 19 af 00 1b c7 d5 f0 80 97 cc 85 ab 49 c4 da ce f3 41 b1 03 51 47 8a ac ab 98 da 71 85 c0 42 f3 d9 6c 04 ca e4 83 ba ec 25 24 ac 61 10 28 a8 f6 34 48 10 20 6e 65 48 c0 88 28 00 9b 08 48 a9 b0 91 70 22 2a a2 f5 8e 00 12 95 49 00 01 09 d5 0d 02 43 00 1c 03 03 ce 71 7e 7e bd 79 c0 73 6e 28 6d 24 f6 94 82 8b 35 e0 e5 41 3a 2d 6b d7 1b 96 65 6b ad 95 48 12 90 90 ce e6 f3 2a 7a df cf 44 e2 28 21 f4 2d 05 a8 ea 94 b0 18 80 c1 64 c9 98 c7 3f bd 8a 61 77 46 1c f8 9b 9c 74 1e e6 54 36 08 68 bd cf 52 61 10 1f 95 ca 46 74 66 a4 b2 33 68 bc 02 38 47 7d 0e 45 33 c9 25 23 35 67 10 6d 49 ed 22 05 8b d2 4e fb 1c 2d 0b d9 54 Data Ascii: lGp5M0!U'4;E'RSNxIAQGqBl%$a(4H neH(Hp"ICq~~ysn(m$5A:-kekHzD(!-d?awFtT6hRaFtf3h8G}E3%#5gmI"N-T
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 39 e7 8d 75 37 f8 aa 0d e3 0d 68 f6 11 c0 ca 38 87 3d e5 42 20 84 32 59 82 49 90 18 2b 25 a6 72 47 90 78 10 c0 16 b1 20 12 0c be 09 e0 ee 2c 12 4e 89 95 84 82 d6 83 3a 97 cb 87 7d 2d de e2 81 2b e7 f0 40 4f bb 8a f5 f5 af 43 04 bc 0e 28 5b 3f fd d0 33 2b b1 6b 32 00 90 aa de d5 bb 7a 43 59 24 94 01 66 22 08 80 60 a6 a6 aa ba 56 56 92 c0 1a 98 a4 64 29 d5 ba 2e 48 04 9d 59 37 31 9a 15 23 0f d5 59 ed 4a 44 eb 00 12 fa f6 1f bc 4b 78 3f 18 1b 7a 43 12 59 dc 35 33 31 81 40 04 60 a0 e8 8d 89 09 23 6f 5b 54 ac 0b 52 45 00 dc 63 34 cb 75 c9 fc d6 45 b4 de 01 64 ab 9d 09 e6 f3 c0 40 8d 49 ef 95 de fb 17 b8 70 cf 54 53 43 30 73 dd 81 a0 7d b8 5c 78 e1 b2 18 ba 75 dd 86 75 01 55 44 eb 1d 15 18 6b dd cc 51 53 eb 24 60 b6 da 99 d0 bf e7 7f e7 a7 30 77 26 a9 ae be 3a Data Ascii: 9u7h8=B 2YI+%rGx ,N:}-+@OC([?3+k2zCY$f"`VVd).HY71#YJDKx?zCY531@`#o[TREc4uEd@IpTSC0s}\xuuUDkQS$`0w&:
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 15 c0 f4 b0 13 c1 48 be 03 db 13 90 68 5a a4 ca 56 4d 00 1b a0 cf 44 b4 71 04 76 80 13 9e de cb 21 04 39 f5 7b 8f ee 98 e5 b8 45 cc 38 14 90 b0 d1 03 12 54 e3 98 41 a3 3f 01 a9 dc a2 32 05 03 60 27 d0 67 88 36 8e 37 89 e1 c9 76 dc 13 da 43 10 6e f8 fa 7a 26 44 63 18 a7 e0 54 76 4a d8 20 ec 8c 68 f4 ce b0 70 aa ec f9 13 bb 05 e9 27 d0 3b 04 70 85 1d c0 27 a3 ec bd 59 4e 0e 01 f8 94 6d 0f 3a 93 af 0b 2f 30 54 e7 1c 2f 48 54 bd a7 a4 72 42 a3 f7 27 20 30 b0 e7 fe 37 28 95 35 8d 0d f4 3e 13 d1 c6 11 31 b4 f3 e9 3d c1 5c 57 76 9e 1e c2 f6 ac bb cf ec 2f 63 59 72 91 a8 e8 33 a8 0c 01 f4 27 20 61 27 d1 fc 09 4a 65 03 a0 09 30 13 d1 c6 f1 2a 31 74 46 10 5a 1c 8f cc 11 9f 78 ac bd 68 f5 2e fa 0c e7 b2 33 02 3e 33 54 d9 49 04 db c9 08 c7 ae c2 4d 00 d0 00 1d a0 31 Data Ascii: HhZVMDqv!9{E8TA?2`'g67vCnz&DcTvJ hp';p'YNm:/0T/HTrB' 07(5>1=\Wv/cYr3' a'Je0*1tFZxh.3>3TIM1
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: bd cf 41 43 b5 ae 4b de 6c 88 56 00 9f 32 4d 26 27 13 e8 1d a2 31 82 0a 60 83 08 b3 16 2f 7c 68 fd da 5f 2d b5 73 34 c7 c9 a1 02 ec 94 e0 62 54 bd cf 11 20 c1 82 88 d6 d2 dd e1 30 fd 63 8f c5 f0 62 86 33 11 8c 23 2a 86 db 33 a2 d9 a1 87 02 70 e0 5c 34 1b 70 05 e0 94 0a 93 2a fa 1c d1 90 6a 5d 51 41 4b 77 87 a6 3d 04 53 79 cc 79 e1 1a c0 24 d0 3b 11 6d 1c af 12 c3 8d 88 66 e7 43 1f 5a 0f c7 21 1d 0a 9a 23 ce 45 c0 89 0a 3b 25 3a d0 80 82 45 02 b7 c3 82 64 36 1c 02 64 4d ad 33 7b 3a 98 d6 4e a0 f7 39 80 f1 2a 15 d0 7b 7f 46 83 94 ea e1 38 a4 03 66 03 9b 08 d8 08 20 a5 ea 7d 8e 00 09 23 15 76 76 77 30 13 95 c3 20 f5 cd 8c fc 60 f3 c2 60 9e 52 09 f4 3e 03 ed 4f af 50 0c fb 1c 60 50 e1 38 a4 eb 39 e6 01 e7 22 98 53 2a 0c 2a fa 1c d1 90 ea 62 28 ec 3c 9f 69 5a Data Ascii: ACKlV2M&'1`/\|h_-s4bT 0cb3#3p\4pj]QAKw=Syy$;mfCZ!#E;%:Ed6dM3{:N9{F8f }#vvw0 ``R>OP`P89"S*b(<iZ
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 3a ea b7 e2 50 89 17 b0 eb 50 0a 58 7b 4a 15 9f e6 26 7a ff b5 c0 e3 38 ab 63 3e 7a a1 2c b0 d0 42 d5 b7 d1 cb ce 77 da e6 04 7e 59 7b 5d 77 80 19 c9 70 a2 86 f7 8d 46 60 ec 97 f5 b2 fc 95 d1 62 19 0e e5 b0 1e c0 cf c5 5b f5 f0 81 cc 3f 1d da d1 c7 d7 79 9b 91 3e c9 34 e8 a9 43 18 d7 88 f9 6c 56 03 79 79 2f 63 01 66 4c 63 7a 76 dd 70 6d 8d 49 f0 08 64 98 26 a2 51 f7 02 1c b4 33 6d 6d a8 e8 10 e0 9c 1c 5d 7c fb f1 c4 4e 3f a1 54 a8 87 a1 03 04 60 26 80 33 23 9c 2d 7d e6 2c 89 92 99 62 2f e8 ae 62 d7 04 69 7b e3 3d 10 01 73 6b 71 43 92 5a 98 c7 bc b9 9b ab fc 59 dc df 5e e1 cf 32 13 d4 df 9a d3 ec a8 37 63 1f ee 21 cf a7 f3 f9 34 07 33 98 94 ce f8 bb c6 ff 47 c1 9f 5d 86 03 a7 db 37 5b 18 01 13 09 6c fa b5 66 71 52 73 32 14 b9 b2 d0 cd 41 fb fe 78 1f de 83 Data Ascii: :PPX{J&z8c>z,Bw~Y{]wpF`b[?y>4ClVyy/cfLczvpmId&Q3mm]\|N?T`&3#-},b/bi{=skqCZY^27c!43G]7[lfqRs2Ax
2024-04-19 14:06:49 UTC	1096	IN	Data Raw: 0d b7 7a e3 a2 78 c6 0d 28 90 84 08 a1 44 2c 20 33 40 08 00 42 94 d7 7b 9c c5 c1 6b ad 58 a9 1c 88 57 3d 1d ba e8 7b 1f 35 ea 85 12 d5 c5 03 ca 38 23 85 7c 8e 1c bf 18 20 1a 9e 94 58 7a 96 0a 2e 96 a4 52 91 42 45 a6 30 02 11 01 58 bd e7 65 bc 40 62 4b 58 b9 02 d7 c4 0e a2 d7 e8 47 fc b8 4e 81 05 07 b7 cc 56 c5 0d 1f b5 1f 69 02 c2 8d b3 38 53 e0 32 4f 94 48 21 6a 6a cd 01 84 78 82 c4 4b 85 3c 32 85 9c 5c 04 4a 2a 25 7a d0 10 7d 9f dc 18 9e 5e f6 af 6a b4 4b 89 92 32 f3 dc bc 1c ad 24 6b 6c 8c 09 88 86 27 a0 a5 02 84 2c 45 94 86 c5 24 06 00 22 22 a1 f1 9a 62 ff b2 26 c3 13 dd 4a 34 20 89 12 54 92 cb ad 0f 51 b5 4b 89 dd c0 cc d7 d6 b4 b2 43 4d 36 36 66 32 24 16 a0 a2 4d 10 44 28 2a 8b 79 94 ae a5 86 2e 32 ba cb ae ac 59 68 a1 85 c6 12 7f 7e 6b 3e f2 45 89 Data Ascii: zx(D, 3@B{kXW={58#\| Xz.RBE0Xe@bKXGNVi8S2OH!jjxK<2\J%z}^jK2$kl',E$""b&J4 TQKCM66f2$MD(y.2Yh~k>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	50038	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1101	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13280 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:05 GMT Expires: Sat, 20 Apr 2024 10:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 14084 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	720	IN	Data Raw: 52 49 46 46 d8 33 00 00 57 45 42 50 56 50 38 4c cc 33 00 00 2f ff c0 3f 00 09 48 92 24 c7 6d a2 30 0b d0 43 e8 ff 0f 06 24 c0 eb 39 a2 ff 13 c0 7f d4 af 99 ed f0 4b b6 6b e0 7e cd e6 04 77 77 dd 78 16 b3 5d bb d1 5a 9b 73 ce c5 ec ca c3 e7 7e 64 c6 5b 6d f0 83 16 80 64 00 de 53 40 fb ec 61 bb 13 eb 41 cb 54 8f 57 2d b4 84 cc 13 d6 87 ed c3 fa 1c 0c c8 de 23 17 09 06 ed 42 76 5f ec 8e 24 65 67 9b 43 d2 98 9f d1 24 69 97 49 97 9a 9d 00 d8 e2 e4 00 e6 89 1b 65 aa ec 5d bd bb e2 65 27 38 d1 15 99 11 55 78 d8 05 57 65 64 45 64 65 da 05 dc ab 36 11 61 57 70 af aa b1 d8 25 f0 a8 aa 08 bb b7 9f 5f f6 d7 2e 24 b9 b6 d5 48 d2 29 87 10 42 e8 2b 55 be dd 6f df fb 5f 59 ef 01 94 30 aa b1 db 48 92 14 29 8f 47 1c f1 9e df 7f ab 5e 64 66 0c 37 8a 24 39 52 1c ac 96 b5 d2 Data Ascii: RIFF3WEBPVP8L3/?H$m0C$9Kk~wwx]Zs~d[mdS@aATW-#Bv_$egC$iIe]e'8UxWedEde6aWp%_.$H)B+Uo_Y0H)G^df7$9R
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 2c a7 46 a2 80 6d db f1 36 bb ee 37 5f ea f6 b0 91 ee b7 6d 7b e6 6f db b6 6d db b6 6d 5b b3 bd d5 6e b7 22 69 d3 e4 fb be c7 8f 6d db ae 5d 49 b6 d5 da 98 6b 6d 60 03 67 03 c6 39 e7 39 e0 a6 7a f1 8c b8 e6 2e bb 44 93 60 ee b9 f1 54 b8 e8 e6 b2 8b c6 c1 d7 9a 73 f6 98 00 3d ae b6 bd b6 6d 2b 6b ee 7d bd f7 3e c3 7b 13 11 79 93 13 52 13 ca 40 4a 19 48 49 09 6d 4e 08 d9 f5 de 7b b3 cd 9a c1 18 73 ae 73 70 f1 83 ad c0 d5 a7 57 3d f9 4a d0 31 53 43 9f 34 83 53 82 29 0d dc 5f 03 bc 37 5f 1d 50 d7 8f ed 25 18 d8 a5 af 0c 44 1d d7 33 6c 8a f4 e3 a1 04 9e 9e c0 8e 64 5b b5 32 6b df f3 70 77 f7 3c 48 81 18 88 80 64 f8 25 8f 17 0a ee ee 0e a7 de 39 0b 5a 6d db aa 96 b5 ee 7b b8 3b 3f e9 42 36 08 a5 09 18 84 a0 80 c3 d3 7b 77 4c 80 05 38 dd ff a7 fb df d6 53 09 7b Data Ascii: ,Fm67_m{omm[n"im]Ikm`g99z.D`Ts=m+k}>{yR@JHImN{sspW=J1SC4S)_7_P%D3ld[2kpw<Hd%9Zm{;?B6{wL8S{
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 66 80 61 dd 52 7c 01 95 ab 3b be f8 99 5a 41 39 9b eb fe f6 c3 0c 06 72 1c 92 69 c8 a4 c0 30 ef da 70 1f 63 e6 0a 71 fa 75 7e 1d ce e6 45 27 fd dc 52 4b 8e 94 4e be 10 c3 7e 7d 4b 6f 61 e6 6a 52 55 7f 99 c3 bb a3 59 b6 f8 6e 0b fd 0e 39 9a 0e 0b e7 dc 61 04 2e 99 ff 70 eb 1c 85 b3 58 ce b2 6a 35 4e e6 3a 3f fd 34 09 90 db 16 ea f8 d9 b7 18 89 ec 6a 4f cf b7 cf 0d 26 d3 af f1 dd 74 32 af 72 e5 fd f4 58 cf 4d bc 61 be e6 73 24 e3 19 11 58 d3 b4 ad a4 ee 90 9b fa d8 78 f9 4b 9b 83 e9 58 72 a7 31 ce cb 89 9a c9 3c 71 ce 2d 46 e8 15 3e fc 65 3e 7b 6e ce 0b d3 97 2c d0 b9 5c ff cf 5f 9a 01 39 9d 52 ca ab 5e f1 1f 8c 54 2d e4 e5 af ed 0d 31 72 82 46 e6 a2 f9 dd b9 bc d9 85 77 75 b5 e4 a6 a3 cf d7 fe f3 cf 23 06 d7 fe a9 37 b0 9d 97 93 fa 1a de f0 ac cd b1 6c e9 Data Ascii: faR\|;ZA9ri0pcqu~E'RKN~}KoajRUYn9a.pXj5N:?4jO&t2rXMas$XxKXr1<q-F>e>{n,\_9R^T-1rFwu#7l
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 9b f0 57 ed 0e fa 44 20 95 e4 95 6c 3d 7c b9 53 9c 4e eb b4 de 7a ac 44 6f a9 58 f6 90 d3 23 6d 0f 94 b4 1e 6b 63 bd be 1d 6b 4b ab 58 9b 48 cb 4c 79 a7 f5 58 a3 db 91 6a bd 75 5a 5e 97 43 d9 7a 4b d1 c8 e8 e1 bd ad d7 b7 e3 ed f7 9b 4f a1 fb 25 e7 d7 76 b7 a1 99 13 bf 58 3f 05 fe 50 c6 8a c4 e3 23 79 53 2b ce ca 39 8d e4 91 b1 72 ba 52 05 90 7c 44 23 01 ae 2b 6f 1c 1f 56 be 03 96 cf 79 b2 b7 95 f3 c8 42 98 f0 8a 24 4a 21 5c 8e 1c e1 20 70 b1 cf 0f 01 2e 97 53 f3 09 2e 97 0b 5c 80 0b 5c 48 20 74 e2 e8 81 0c 70 b9 c0 e5 c8 95 01 8e 1c e1 72 99 bf 66 cd 93 9d 75 f7 aa 93 cf 24 d0 0a 02 32 c8 80 0c 32 20 23 83 0c c8 20 23 83 47 97 91 41 36 ca 80 b2 95 f1 96 35 11 67 93 20 c7 42 9c 2b cb c8 80 de 48 22 19 46 12 6b b0 22 0f f5 f1 eb 57 ec f6 65 fa e8 48 65 95 Data Ascii: WD l=\|SNzDoX#mkckKXHLyXjuZ^CzKO%vX?P#yS+9rR\|D#+oVyB$J!\ p.S.\\H tprfu$22 # #GA65g B+H"Fk"WeHe
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 82 38 c9 e0 34 e3 cc 9b fa 30 45 4a 4e 94 d5 b6 55 49 da f0 99 5d b8 70 e1 c2 ca d8 99 29 db 05 b8 00 db e7 2a eb d1 6c 25 a7 cc 19 b6 b1 78 ee 1e 25 4a 14 40 4e 6f 72 ce cb 01 6e 07 e7 7b 03 e4 3c 3a 82 9b c2 0a 03 7c 3c 36 e3 5c 06 24 91 81 0b 10 a0 96 15 9b 12 e8 2e 0c d8 aa 36 ce ca e5 00 bd 65 70 da 1b c8 e9 4d ce 79 42 1d 1c ff db 66 1b d7 79 69 8f 13 e1 8b c8 70 65 53 b6 1e 19 19 24 41 46 12 19 09 0d 65 a3 13 19 90 01 14 16 eb 46 97 dd 18 9c e1 82 0c 1e 9b 01 19 19 9c f5 e1 f7 69 26 a3 86 9c 7a 62 12 28 03 32 c8 c8 a6 8c 0c 9c 1e 19 19 19 ae 6c ca d6 23 23 03 22 26 2e 77 0d b6 71 dd 37 68 8a 04 12 0f 8e 85 eb 0a f0 8a 38 94 45 02 72 e4 40 cd 2e e7 74 dc f6 5b f6 45 dd a6 59 0b 06 91 c1 d9 8c 33 19 3c 36 03 01 02 e8 78 0a 7b 3c 14 c4 34 4d 80 1c c6 Data Ascii: 840EJNUI]p)*l%x%J@Norn{<:\|<6\$.6epMyBfyipeS$AFeFi&zb(2l##"&.wq7h8Er@.t[EY3<6x{<4M
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8f 04 5c c5 f1 26 61 02 a8 e2 b6 82 da 4e 0a 2b 43 0e 9b 5b 69 87 2a 28 ed 94 76 29 45 f2 a3 e2 d9 da c3 24 62 f9 c2 2b 43 19 60 05 2e 00 2b 96 61 bb 96 43 cb b0 c2 95 01 60 15 fa 07 e2 1f f6 ef a6 d9 5d cf b1 67 ab 79 37 a8 48 66 2f ab db 3b 72 61 bb 00 c5 ec 6c 17 b6 4b 45 42 41 d6 2c 57 de 3f 50 15 ab 85 01 b0 5e 01 2b 96 81 95 2b 03 ac c0 05 60 04 59 a6 ef b5 87 06 28 7a 01 69 cc 75 3e 32 32 a0 3b 41 46 ce d5 72 de d5 12 22 e1 ea bd 75 8f 04 5c 42 f0 51 3f fb 2c 7b 1e 58 39 7a 3b 90 0b 9f 0b ac 5c cb 21 9f 77 b9 d6 ab 73 af d8 21 57 0e fc f2 af 53 e5 c3 38 e4 a0 c6 ed e0 b6 13 19 dd 23 ff d8 f3 95 75 3e 32 32 a0 3b 41 86 f4 14 0c 2a 9e a3 3d c4 aa 23 02 92 92 8f b4 8b 37 74 62 15 e0 8e bc 38 3d 53 58 3c 47 12 19 09 44 32 96 61 39 0c 26 ec a5 92 30 aa Data Ascii: \&aN+C[i(v)E$b+C`.+aC`]gy7Hf/;ralKEBA,W?P^++`Y(ziu>22;AFr"u\BQ?,{X9z;\!ws!WS8#u>22;A=#7tb8=SX<GD2a9&0
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 3d c6 f0 ad f3 73 f7 7e 99 33 5c 0e a9 63 de 8d 1e ec dd e3 a9 41 6f ca c6 3d ed 57 be bf 7c 5a 00 a2 4a 85 48 01 88 b3 eb 35 83 87 95 74 f1 a0 80 e5 db 0a d1 5c ec a2 bd a6 fd 89 00 7a 76 22 42 d0 7a a3 d3 fa b1 44 6f 29 f0 ab f7 70 52 ae d6 5b 46 6f f4 a6 d1 56 6a cd 68 c4 d1 1d 2b 22 5f e1 2d 6c 82 6c 4a 5a 8f a4 89 65 b8 c0 9f 82 3c 7a 90 1f 47 ff eb ff de be 35 ff 68 aa 3c c8 0d c8 0d 25 bd ab 07 19 64 24 ae d6 69 f4 ec 44 84 a0 f5 46 c7 17 66 8a b9 75 81 5d b6 15 ae ff 0d 21 a0 a2 3f 75 ce 96 c1 58 20 9e 2e 50 50 40 0d a0 a0 60 64 51 36 5d 2c 37 5a 29 c3 ca c2 bd e2 82 4d e4 4b f7 7a 99 46 06 45 c6 12 09 57 28 5b af 25 69 5a 95 6e 31 0b 92 0a e9 29 81 a2 10 54 41 19 94 51 56 56 06 50 d1 9f 3a 67 cb 10 21 99 86 c3 ce 8b 6d 4c 8b ad 29 54 50 a5 d2 a6 Data Ascii: =s~3\cAo=W\|ZJH5t\zv"BzDo)pR[FoVjh+"_-llJZe<zG5h<%d$iDFfu]!?uX .PP@`dQ6],7Z)MKzFEW([%iZn1)TAQVVP:g!mL)TP
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 56 db 56 64 a8 23 76 c3 56 70 7f 67 f2 9e a5 2a 6c e1 ac 15 d4 46 9d a5 aa 36 8a aa 2a a8 85 41 95 15 56 56 86 fa 9d bc 02 83 82 28 7f b5 49 7e d0 04 e1 69 aa ef df a3 ab 74 f0 35 ca 07 53 38 4d 83 02 a8 a2 aa 0a 19 55 90 55 b5 15 55 05 55 aa c2 16 28 c0 a0 87 76 ec 36 da cb 85 8e 59 fe 82 0e 35 54 4f f4 dc ea 69 da a8 52 d2 c9 95 5c 6b 3a a0 df 61 5e 77 c6 d6 9e 68 95 6a dd 83 ee cb 3c f6 f9 d2 17 77 e3 04 79 37 94 c7 2a c4 2a 1e f6 f1 bc 84 2f fd db 41 06 bd d1 63 dd c2 e9 90 9a aa d3 c7 e8 64 af 49 4c 55 9d 0e 35 54 4f d5 53 f5 f4 e1 57 0e a6 6b c5 d8 cb 21 3b 9e 7a e8 d0 7b 1f 05 04 09 64 ef 20 80 2b 88 b3 91 60 05 cc 05 91 9c cf ef c3 e0 bb 49 00 77 93 00 90 97 d8 d1 79 87 20 05 14 a7 5d a0 12 1d 04 02 a9 03 f4 de 47 01 01 c9 f7 e7 fa a8 ef 3c c1 5e Data Ascii: VVd#vVpglF6AVV(I~it5S8MUUUU(v6Y5TOiR\k:a^whj<wy7**/AcdILU5TOSWk!;z{d +`Iwy ]G<^
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 47 ef bb ee b3 02 a1 ca 60 65 14 06 05 60 65 50 60 85 41 41 4a 51 56 18 aa fb 31 0f f0 0f ff f2 63 3c 36 83 37 cc 78 e8 f4 5e 04 10 96 6d a6 ee f5 0e 3b c4 1d e7 11 60 87 02 0a 2b ce da 09 65 65 14 1c de d9 8f fb f0 2b 36 15 f2 78 ec 47 b7 64 1c 17 c5 01 ac 57 1c d9 b3 c2 a6 00 ac 1c 04 53 b8 c8 b3 5c fa 8d 63 34 f7 f7 d7 7f f8 07 ce 4f 71 42 62 03 32 1e 78 38 cf 30 05 80 45 65 0b ac f3 d2 ab 8a 28 15 aa aa fe e3 5e d9 84 8b 0c d6 ab 0b fc 36 20 db ad 8a d2 36 ea 21 0f 7f d1 a6 f0 90 27 9f af 67 f5 a9 7c 29 82 24 32 92 07 6d 64 64 30 11 13 a8 ff 6e 70 1c e2 af 31 bc 0d c0 14 27 1f d5 84 35 4e a6 e0 ac 9b 30 b3 11 4e b6 35 ea b2 df 47 01 8c 67 ce 5b 05 19 49 64 64 64 d0 ad b0 54 ff 50 9e f7 c5 57 60 d7 8d 25 3c f8 51 5b 6a 40 81 37 f4 57 c4 85 0b 97 23 ce Data Ascii: G`e`eP`AAJQV1c<67x^m;`+ee+6xGdWS\c4OqBb2x80Ee(^6 6!'g\|)$2mdd0np1'5N0N5Gg[IdddTPW`%<Q[j@7W#
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 1e d0 51 63 d9 7a ee 4e 5a 32 59 5e f2 8f 4d e1 fe c4 31 af 2d 83 b5 a5 0f f3 0c 47 be 8e 3d 69 d9 f0 bc ae f2 ee b8 e7 de f0 35 12 4f b6 cb 35 9b 90 13 a7 42 cc 51 71 5d 9a d6 c8 6b 92 08 e5 b0 89 fd a4 bf 1f 9c c2 a9 ab f6 0e d0 0b 14 12 5a e7 7c 56 39 22 b2 4f a6 2c ac 59 19 c6 3e 9b 99 d1 54 1c 59 60 97 58 c0 01 ca e7 3d 0c 8e d9 1c b8 b0 1b 87 95 95 63 ec 46 5b 0a 6f 56 56 b4 1b 25 38 0f 5b 16 19 31 22 f0 48 6a a7 ae f6 f1 af 70 8c 57 7a ef 6e 1a 43 95 dd 9c ba 94 55 a8 66 3a 8e d4 62 52 d8 57 2f 39 dc 96 22 c9 8b a5 a5 a7 05 66 90 b4 99 b2 32 8c 35 f6 25 7c 79 21 83 65 2c 4b 18 80 e5 b1 44 71 76 19 0b 31 d1 18 8a 5f d2 89 1d ac 61 20 2f 10 e5 48 14 e5 d5 1f 7d 4a 0e e3 1c b4 90 4b de 36 eb b3 a7 97 8c 0c de 86 da b5 4d ed be 44 04 25 de 8a 69 bc f1 Data Ascii: QczNZ2Y^M1-G=i5O5BQq]kZ\|V9"O,Y>TY`X=cF[oVV%8[1"HjpWznCUf:bRW/9"f25%\|y!e,KDqv1_a /H}JK6MD%i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	50042	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1106	OUT	GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 185044 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4099 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	720	IN	Data Raw: 52 49 46 46 cc d2 02 00 57 45 42 50 56 50 38 4c bf d2 02 00 2f 0d c2 49 00 4d 40 0c 80 36 6c 33 70 08 09 74 ff 1f 6c 3b cd 76 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 6f 1d 27 89 26 3b 7b 29 0b 27 89 95 d5 fc cc 49 2e 2b 4b 29 b1 f4 4c f1 24 69 91 c8 53 22 4d 52 92 48 96 a5 e2 db b6 c0 95 58 d2 19 65 e1 44 73 e2 ac cf 85 72 8b fc e6 18 6d cb 47 52 6c d3 b7 22 dd b9 12 67 be 6c 4a 11 c9 05 37 6b 66 b6 33 8b 2d 60 b7 66 53 24 89 9d eb 36 68 9b c4 c0 d1 92 6f c4 89 56 2d 47 c9 12 64 59 10 26 7c c7 21 89 57 e9 95 57 64 49 b6 2c 49 b6 2c 71 3b b6 9d 93 ed 1b 25 23 c9 4e 64 93 30 66 1b d3 5d b4 80 d7 22 41 b6 20 5a 74 Data Ascii: RIFFWEBPVP8L/IM@6l3ptl;vAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%Ro'&;{)'I.+K)L$iS"MRHXeDsrmGRl"glJ7kf3-`fS$6hoV-GdY&\|!WWdI,I,q;%#Nd0f]"A Zt
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 76 64 ce b9 64 fa 44 7a 6b ad ff 0a db b6 6d 98 74 cf 3b 50 4c 9a 76 91 aa 2d f4 b8 0c 4e 5c 82 20 4a 79 85 14 14 2b 90 09 05 86 c5 66 35 a9 16 aa 7c 5a 09 31 b1 62 cd 41 b5 c0 28 16 aa 4c 6e c1 c0 19 c4 42 ac 58 d3 10 0a 09 11 91 14 98 58 31 09 42 82 98 49 60 0e 41 18 30 c0 66 18 41 71 91 12 52 f4 2a 7a 2f 4a 51 b5 9a 61 08 42 31 a9 15 35 43 6a 81 60 18 82 61 55 ab 86 04 56 0c 13 23 90 c5 02 eb 8c ce c0 62 c5 4a 81 20 88 98 84 98 d8 42 4c 4c 89 c9 5b bc 89 08 52 64 42 20 d8 ec 62 04 a1 98 22 08 66 16 b5 42 33 35 b0 9a d5 ac ff d8 ac 44 2d b4 20 16 44 89 6a 81 60 36 b9 9b 1e 0c 88 59 19 60 9d c5 45 88 37 9b 11 5a 60 c5 8a 94 28 81 88 95 10 11 d1 02 53 4d 91 09 82 14 c1 8a 14 59 94 20 08 c4 90 6a 54 8d 52 c4 19 08 5b 4a f4 bf a8 46 cd 66 aa 61 62 62 25 88 Data Ascii: vddDzkmt;PLv-N\ Jy+f5\|Z1bA(LnBXX1BI`A0fAqR*z/JQaB15Cj`aUV#bJ BLL[RdB b"fB35D- Dj`6Y`E7Z`(SMY jTR[JFfabb%
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: fa bd e9 bd eb 63 d6 5d fc cb ae 0f 9c d2 87 74 97 9a 68 d2 87 44 3b 06 06 06 ec f6 cb ed 76 ee f5 05 86 18 e1 b4 0d 9c 81 61 b8 c8 e4 9b 5c 7a 1d 75 12 bf 9e 4d 65 ae 5d f5 5d ad 7b ab 7b 2b ad 0e 95 a6 67 d7 d3 90 05 29 32 bd 94 3a d5 ba d6 d2 8a a6 a7 a9 d6 2e ff e1 be de fe a5 35 4e 29 b3 ee b3 5e 8f 6a 3f 73 4a b1 aa be ae e2 8b ee 52 5e 8e b5 19 17 76 c8 46 65 4d ad 3e aa 87 bd d9 64 d2 29 48 29 c4 66 36 23 88 4f a1 14 43 88 6f 76 e2 6f 44 37 3d 8c d4 26 8b aa 61 62 84 d3 90 92 2a 71 51 b1 59 2d 24 55 5c c5 66 88 a6 df 7f de bf fd 63 67 2a 96 f4 a5 ca ec f1 a8 fd 5f 75 29 52 d5 ac ff 7e 59 9f f4 e7 2e da 17 3b 06 76 08 65 6d aa 4d 0c 9b 10 29 66 6f 56 35 35 08 dd ea 51 1d 54 0b 82 20 8c 82 70 0b 5b 60 7a e8 e1 2e 44 d5 88 12 98 2d 0c 31 a2 11 13 02 Data Ascii: c]thD;va\zuMe]]{{+g)2:.5N)^j?sJR^vFeM>d)H)f6#OCovoD7=&abqQY-$U\fcg_u)R~Y.;vemM)foV55QT p[`z.D-1
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 03 e9 b7 0a 0d 95 31 30 73 96 8b 86 40 c3 ab 5a 31 43 fa 3a 90 7e 8a c5 e7 1f c2 db 77 ae b7 c9 ef 95 ea a4 69 31 c5 a2 9b ae 41 60 c1 39 b8 c3 9b 1e d6 81 f0 5b ac fb 40 2e 16 24 e8 04 12 0f ac 58 d1 10 78 60 c5 d7 8d 3f 3b 77 88 45 43 e2 db ce 8a 15 e1 66 45 e0 1c ac 68 58 11 f8 fa a4 ad eb 86 97 31 79 86 37 05 85 cd b6 58 f1 c0 36 89 c5 39 2e 7f 3c 09 04 1a 02 01 fa 07 81 c0 62 0c 84 fb 40 a3 c0 af 8d 40 e0 1e cc 0e 1d 85 f0 d1 47 ce ce 49 e0 eb fe 71 60 f5 c1 c7 d8 cc 41 c3 c7 b8 0b 34 8c 39 06 de dd a2 be 59 f0 fb f9 ed 8a d5 db 73 dc e6 3a 0f cc 90 8b c5 9f 81 40 20 17 0d 0d 7d 71 0d fa a2 f9 64 a5 f0 49 b8 88 45 2e 62 7d fb 7d 67 9f 04 ee f0 40 58 f7 c5 8a 66 7a 20 10 68 68 f0 f8 31 17 b9 ee de d4 d7 14 8b 80 c2 0c 1f e3 93 7d bc 11 eb 9e 21 b1 6d Data Ascii: 10s@Z1C:~wi1A`9[@.$Xx`?;wECfEhX1y7X69.<b@@GIq`A49Ys:@ }qdIE.b}}g@Xfz hh1}!m
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 66 86 70 3a 1d 3b cc 66 3b 31 c8 96 31 b6 98 59 97 19 0e ee bd ab 7e bf f5 2a 4e 3a 33 6b 45 7f 73 c0 f6 df b9 dc b4 da ef f7 5f e5 5d bb 4c 93 34 92 46 bd cb 2a ee 25 14 57 82 9d e0 d0 12 3a a4 51 72 20 3d d4 1c 0e 3d b4 24 90 f6 39 5f 62 48 c1 a1 86 03 27 f4 de c1 05 6c 63 35 cb b6 a4 51 d7 8c da 8c 34 75 ef b7 ac b5 fe bc 6d db 56 6d 47 b2 d4 5a 1f 73 ed bd 0f 48 32 99 39 bb 07 73 c4 4d 66 66 66 fc 85 5b f2 89 99 99 99 f9 07 18 df 98 39 f3 32 53 b8 07 ba 87 87 99 74 a4 73 36 ac 39 47 b8 82 24 2b 6a 06 30 77 f2 46 f0 36 f8 ef 8b d6 b6 65 73 5b db ba ef e7 fd 7e 2c 66 52 81 b0 c4 92 85 96 31 30 92 c1 bc 36 33 33 1e 31 33 33 33 33 8f d0 48 e2 38 46 d9 b2 18 4a 52 95 8a 54 a0 62 fc f1 fb de e7 6e 4b ce 58 87 e3 98 02 ff ff 8f 46 e4 f3 bf bb e7 ee 7f 67 24 Data Ascii: fp:;f;11Y~N:3kEs_]L4F%W:Qr ==$9_bH'lc5Q4umVmGZsH29sMfff[92Sts69G$+j0wF6es[~,fR1063313333H8FJRTbnKXFg$
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 96 64 14 bc 4b 0d e1 60 51 16 1a 91 bd 74 3d 1a 37 fa 51 79 e8 f4 11 b6 2b 6d 65 40 09 68 42 dc 66 08 5f 2e 24 21 e3 ef d9 17 02 48 9c 51 e3 a2 d3 36 f7 c1 08 cc 2b f5 7c fb e4 9b 2f b9 78 db 0a 3f 72 82 07 d2 08 19 6a 4b 1b e3 88 68 13 b4 15 db 55 1b 7d be 05 3b a0 9b 89 99 82 e3 69 e8 c6 3e 53 a8 38 c6 75 ab ef c7 e9 c4 38 4c 2f 4e 4b 3a 3c fd c3 fd de d7 5f 17 11 47 76 43 e1 49 83 a0 28 70 6f 93 03 e6 3d 07 6e 44 6c 3a 93 9b 5a cb dd 90 03 a8 a0 79 b6 5a cb 5a 2f 8a 8a 82 87 d5 d1 a4 37 00 8b a1 ea 06 0a bd 57 e9 13 c9 01 79 28 5f 23 4d d9 14 3c 88 af 9c f8 e4 e7 28 24 83 42 0e 5e 6a 21 c9 48 10 2c 60 9d 3f 54 7d 77 4f 59 7a e4 40 d2 09 cb 5b 7a 91 18 35 6a 92 24 72 d6 ac f1 2e 9d 72 8b 47 1c ba b2 60 d5 1d 37 08 9f 34 2b 05 82 5d 0d f2 27 b1 22 17 8b Data Ascii: dK`Qt=7Qy+me@hBf_.$!HQ6+\|/x?rjKhU};i>S8u8L/NK:<_GvCI(po=nDl:ZyZZ/7Wy(_#M<($B^j!H,`?T}wOYz@[z5j$r.rG`74+]'"
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: d0 98 e8 82 57 33 b4 e5 c1 c6 43 42 8d 59 63 ed 64 d7 eb de e2 c1 8c 30 10 57 d7 6a ce 88 6f a4 34 e5 44 c9 56 32 05 05 8a 9b c1 da b6 a3 36 46 6d 14 43 4d 69 92 31 32 c0 9b de bb 1f fd dc 73 ee f2 f4 b8 75 50 18 71 c7 bd 4c cc f3 87 b3 ac c1 1d 92 e2 ee 7b 0d ba ef 6a d8 d3 c6 e5 2e 83 32 a1 4e 5b 10 40 c3 d5 2c c4 68 76 f0 7d e7 0f 2f 78 76 f2 a8 33 1e 87 ad 31 ac 95 14 dc e6 0f a3 8d 52 ab 8d ac 6b 34 61 97 a2 c2 a0 46 28 d0 ec 8c de c7 cc e2 ca 9b 69 85 4b f2 d9 3e b9 d4 f6 16 b0 38 b7 89 67 a5 4c 9d 28 3c 34 29 1c 65 2f a6 37 59 d0 e2 1c ed af ea 87 81 20 26 20 04 8c 83 08 97 ca db a9 44 12 61 3a 78 28 2b 95 44 7b f5 d5 03 7c 5e 78 d3 41 17 40 78 f7 e5 f7 71 da 62 4c a8 01 47 1c c6 e9 50 17 51 0f 42 2d 5c c5 d1 23 1c 95 1c bc 82 39 43 7d b3 6e 7c f3 Data Ascii: W3CBYcd0Wjo4DV26FmCMi12suPqL{j.2N[@,hv}/xv31Rk4aF(iK>8gL(<4)e/7Y & Da:x(+D{\|^xA@xqbLGPQB-\#9C}n\|
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 29 6a c9 b6 75 7f ea 52 4a 0c d2 38 36 6d 66 d5 06 4f f7 a2 48 26 0a dc fe f2 7e 8f 97 af dd de 3a 5f 98 7e 8c d7 78 ea 23 44 7a b5 e9 d7 3b ec 79 52 20 c9 cc da 9a df e9 c8 ce da 58 03 3e dc 44 b2 52 4e ad e3 86 e2 ea f3 53 7d a6 ec 01 5e 6f 97 d7 be a5 04 cf ee a8 d8 7d 81 0e 10 f5 ba 4f df 31 0b 6c 4a a2 2a 0b bf d8 9c 2a 15 49 b6 88 95 70 be 7f 1b af 32 34 14 2e f2 ca f4 68 da 60 c0 00 4e 5b 35 d8 74 62 8d e0 75 98 34 fb f6 bf df be b5 5e 16 bc ed 62 a1 13 b1 34 32 29 54 c9 2e 95 b3 dc 48 70 40 6f 8f 97 30 65 4d 07 1d c2 c3 95 c8 39 1a dc 46 eb f6 1a ba 81 d1 6d 49 02 b0 90 a1 6e ce 32 35 e2 89 c0 de 7f 3f 74 22 63 2e d4 72 ce 15 1f 8d f9 3c 76 b7 c3 4d 22 8b f4 f6 9c 5b 9a ba bb 5c 2f 15 28 ee 4e 7f 72 a1 a0 dd a2 ab af 3f 67 5a ec dc 28 30 b9 b8 ea Data Ascii: )juRJ86mfOH&~:_~x#Dz;yR X>DRNS}^o}O1lJ**Ip24.h`N[5tbu4^b42)T.Hp@o0eM9FmIn25?t"c.r<vM"[\/(Nr?gZ(0
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 33 3f 8c ae 0a 1b 06 6a 10 5d 6c 43 c0 5b 45 bb cb fc 45 74 d0 bc e7 97 b6 ee fc b6 f9 b6 bb 57 b4 92 42 04 81 9e 89 01 b6 82 c5 70 96 67 cc 99 25 ce 86 4e 71 93 5b 5b 6c 92 c3 5a fb a5 e0 3e 15 a6 93 20 27 01 b8 9c 36 9b c8 f3 c0 c0 55 c4 63 f4 be ea 9e 78 78 85 f4 62 3b d5 0c b4 f0 58 42 05 ac ed c8 20 71 ea f7 fd a7 13 1e 85 cb 00 80 6f 55 a5 47 00 21 e2 6b 83 f1 6a 47 78 3c 6c 1b e6 c7 dc f5 91 60 a2 0e ac ac bf f5 d7 f8 3a e8 6a 6b 63 9f 1c fc 9e 3f 7e fa 2f b6 ff 93 9e 93 6c 9a 2d 4f de 7e dd 52 79 63 f3 a1 60 08 d2 c6 6e 4a 9e 81 9a a4 d8 8f b7 43 bc 0d a2 47 59 93 1a 34 cf 68 a3 50 ae 7c 6b 0f 55 9d df dc ee 93 54 b0 67 3d 34 cb 62 42 d4 55 f8 d6 2d 56 3e 7a a6 91 48 fd 5f a7 09 cd f8 b0 fe b2 79 4e d0 b8 8a 29 cd 92 69 80 bc 8a de be c0 b2 60 32 Data Ascii: 3?j]lC[EEtWBpg%Nq[[lZ> '6Ucxxb;XB qoUG!kjGx<l`:jkc?~/l-O~Ryc`nJCGY4hP\|kUTg=4bBU-V>zH_yN)i`2
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 3a 30 53 20 1a 15 73 f4 da 90 cc 1c 2f 98 1b 11 44 c7 da 49 de 26 a0 11 b1 c5 93 86 45 4a ea e4 a0 a2 75 c9 e8 a8 d4 62 db 8a 1a d6 dd f8 ba af 35 79 f3 9d 52 48 c4 93 52 48 32 ca 59 09 e6 b3 e6 53 26 4e c5 ab 4e d8 a4 66 09 16 c4 f7 34 23 9f af 79 49 ca 4a b4 bb d1 4a c0 da 27 a7 f0 21 31 31 4a 23 39 58 74 f3 dd de 40 0c 24 29 20 e7 a8 39 3c 2f d5 c3 4d 6f b1 66 4f ef 49 6f 86 91 63 7a b8 b3 48 12 8c b0 4b 13 11 e0 02 a2 21 88 4f 3a 3d 0b bd 3c e5 c9 48 6f 2a 58 c8 4c 5b 0a dc 6e 94 c1 10 d0 48 40 c9 f1 a1 41 98 85 96 3a c9 90 c1 14 28 ce 6d 27 67 c0 e5 19 ab 8c 66 fd 08 6f 75 a9 34 d5 51 98 8f 3a 7a ca 40 e8 a4 a1 66 46 61 c4 64 01 5d d0 74 19 b2 98 2a 5f 78 2f e6 b7 00 26 3f 78 3a 30 31 2c 95 68 54 18 38 fe c4 40 de 5f 4c 17 52 87 03 c7 d2 bc 19 54 8b Data Ascii: :0S s/DI&EJub5yRHRH2YS&NNf4#yIJJ'!11J#9Xt@$) 9</MofOIoczHK!O:=<HoXL[nH@A:(m'gfou4Q:z@fFad]t_x/&?x:01,hT8@_LRT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	50039	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1102	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9990 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:46 GMT Expires: Sat, 20 Apr 2024 11:15:46 GMT Cache-Control: public, max-age=86400, no-transform Age: 10263 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	721	IN	Data Raw: 52 49 46 46 fe 26 00 00 57 45 42 50 56 50 38 4c f2 26 00 00 2f ff c0 3f 10 09 58 92 e4 d6 6d 6a b1 02 f8 58 dd ff c2 02 21 d2 76 f2 1d d1 ff 09 c0 bf 98 99 94 e9 95 31 17 73 31 87 fd 1c 77 f7 13 90 62 f6 71 80 74 c4 d5 c7 a6 31 1e ee dd b7 e8 99 b5 5b 12 96 2b 52 6d 65 46 31 2f b5 66 99 c6 b6 46 92 ee 1c 63 53 c4 35 e7 74 3e 85 65 85 11 11 00 0e 90 02 00 1f 83 14 f3 37 29 e2 ea 7d 83 d1 17 64 5c 5d c8 b5 e8 80 0a 44 f1 1e 19 70 b3 5c a8 5a cd ec 14 76 e8 98 a1 be e3 e5 ed a7 7e ed c2 6d 24 c9 ae d2 01 a0 b5 e6 8a fc 83 c3 c4 e7 bf e3 1e ca 46 10 49 4a 36 01 43 00 50 03 d8 3f 97 01 1c 86 6d 24 49 4e fa b5 44 58 e4 1f 1b 51 50 58 fd 9f 00 fc d3 f4 27 29 c3 78 e9 e7 8f 98 31 43 e8 32 73 71 01 58 78 3a cc 5c 18 5c b9 cb c2 37 73 0e e1 f2 38 8a 10 76 e3 02 70 Data Ascii: RIFF&WEBPVP8L&/?XmjX!v1s1wbqt1[+RmeF1/fFcS5t>e7)}d\]Dp\Zv~m$FIJ6CP?m$INDXQPX')x1C2sqXx:\\7s8vp
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: db b6 bc 52 ee e7 fd be e4 cf fe e3 99 19 dc dd 1d 4a a7 72 3a 7a 4a 2a ab a8 1c 8e 80 e3 70 ab ac f3 03 70 77 87 2d 91 5f be 47 0a 2c 00 04 e8 bc 6f db b6 6d 24 0d d1 5e b5 bd c6 ee c5 dd 9a 6d 7b c9 b6 d1 6c db a1 6c 2b 71 f3 cc f2 74 42 51 5c 02 a6 5f 70 42 c0 ef fa ff 7e df ff e3 41 fe e3 81 24 43 0c ca af 3a bc e9 dc fd b5 2f 17 1a ef fc bf 67 27 c6 3d 98 23 81 53 41 90 c5 91 9e 3b a0 33 e0 6a fc 70 44 0f 72 74 8e ec b5 de ca 1f 3a 05 80 f5 3a 28 9c 0f 86 f5 33 0a 77 e1 14 2b 7d e2 3e 28 8e 54 76 fd 5f 9c e2 c9 99 72 ab 28 dc 36 5e 57 1c 4b 41 18 9f 0b 97 d2 b9 0f 01 36 45 8e f6 55 13 27 76 1e f1 5d 2d 11 f0 a2 af e0 8a fc bd 60 37 de 1d 59 e3 38 0a c8 19 95 ef 8e a3 f5 66 c8 57 a6 93 2a dd 94 01 aa 2a 20 e9 55 b3 51 8c d9 14 65 ef cd 71 25 80 40 60 Data Ascii: RJr:zJppw-_G,om$^m{ll+qtBQ\_pB~A$C:/g'=#SA;3jpDrt::(3w+}>(Tv_r(6^WKA6EU'v]-`7Y8fW* UQeq%@`
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8b 95 75 aa 7d 77 3d 29 d7 da 4e 58 47 f1 31 c7 ee 1a 2a 0a b2 9b 41 6b 22 80 63 e2 95 22 05 03 9a 80 b7 fb c4 9c 02 21 5d a6 05 a9 b7 e4 da 8a 12 ca 6c dd 5d 4f b1 d2 ea 54 1b a4 c9 aa 50 99 54 ee 61 1c 33 90 12 d2 74 a5 76 8d b0 34 65 8d 62 1a 26 7a 3a 80 47 69 0f 18 a3 a2 bc d8 6e 08 48 59 4a 4e b0 6a 98 9f 2b 69 9d 0b 42 69 8a 51 ec 52 12 a7 20 87 a0 ed c0 0a fc 90 fa 7d 68 c5 44 45 38 09 7c 24 8f 88 1e 9c cf b1 28 a4 29 d7 16 10 d7 c9 75 59 a1 c6 5c 8b 67 75 95 7a 18 91 06 ad 64 27 02 b6 63 16 96 42 42 43 20 31 19 14 0c 06 17 33 8f a1 f7 1d 46 65 35 d7 56 55 64 f6 79 8b 6c c7 ca 51 cb 35 2e 51 64 93 f0 87 52 0e 72 d9 a7 32 5c d1 6c 2d e9 da 90 9d d2 49 d1 f6 8f 59 18 a0 43 53 08 25 d3 4c 58 7c b7 1f 4c 02 19 63 30 ce 17 9c af 20 42 a3 11 02 b0 0b 35 Data Ascii: u}w=)NXG1*Ak"c"!]l]OTPTa3tv4eb&z:GinHYJNj+iBiQR }hDE8\|$()uY\guzd'cBBC 13Fe5VUdylQ5.QdRr2\l-IYCS%LX\|Lc0 B5
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: b2 68 66 5e ab 59 2b 41 08 35 8c 93 5b cf 62 03 5e 09 31 2d 07 61 5d 67 1d 62 e2 c4 fc 7e 7b 50 13 14 86 b5 cb 2c 1b d3 09 f9 94 78 b9 16 ce 8c 8b 85 74 13 2c d9 b5 4b 11 a9 74 a4 1a 90 ce 62 45 b2 eb d7 b1 95 90 ea 04 1b 8b 40 fc 56 ad a1 b5 11 c2 6b 9e 0a 04 28 23 ee d9 b0 11 7b 86 90 e4 75 b2 11 14 11 b8 97 a3 b1 d3 8d 15 04 43 a1 6d 85 57 ad 6a 12 f3 13 d6 fc 6f 60 1f 6c a4 c4 29 01 c0 53 1c 72 fb ae 15 42 3b 64 35 67 15 92 e6 d8 12 99 d7 83 31 00 75 41 b3 1b 53 0c 43 79 9d ec 20 46 b1 02 ed 2a 72 d1 c5 40 ac 23 e6 52 d6 91 e6 5a a5 19 bc e4 0d 7b 9e 5b 5f c2 1f 34 f4 e8 98 63 77 3d 0d 22 62 55 d9 c6 cd 64 37 5e 02 a4 89 19 9a 94 6a c6 4e e2 42 96 a0 5a 20 5d 21 c7 11 75 82 b3 15 91 84 2e 92 e0 12 92 fa dd c0 9e 3f fd 25 53 13 32 4c 42 0e d9 21 dc 49 Data Ascii: hf^Y+A5[b^1-a]gb~{P,xt,KtbE@Vk(#{uCmWjo`l)SrB;d5g1uASCy F*r@#RZ{[_4cw="bUd7^jNBZ ]!u.?%S2LB!I
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: c6 91 ad 6d 99 09 58 93 ef 6e d4 46 26 be ba ee 3b cd b9 36 9d 5c 5b 81 d4 95 56 a8 48 a1 e2 2a d3 4f 55 a0 95 46 bf 1a d4 ed bb 6b e7 93 f7 12 82 cc 0b 4a 2c 7b 2e 5f 38 6c f8 6f 79 27 0c ec 91 59 83 5c 4f 25 92 17 5b 31 4f ae f5 83 71 67 f1 b3 11 82 5c 0f 92 30 fa df 2c 8e 40 43 ef a8 71 77 8d 90 52 ee 33 89 44 a5 42 82 4f ed 2a fe 19 7a 22 cd 15 29 d5 c6 fb a5 9b 6b 5d 88 aa 90 68 81 50 b4 c6 4a 2e 6e 52 b7 03 0e 92 08 75 e2 ce fe 47 24 68 3b 60 f5 b6 dd b5 c5 12 62 74 48 07 52 0c 03 b1 48 f8 f5 d8 5f da b4 92 b7 83 27 df 0a c1 d1 08 c9 0a 84 66 48 31 30 eb 52 78 57 14 59 42 23 a4 b7 dc a2 b5 be c3 91 66 af 14 d9 11 ba 78 10 2e 9d 72 3b 0e 76 05 72 f5 01 72 e9 fc e0 3f 50 8e 07 95 bc 94 af 4c 50 67 8f a9 10 3f bd fc 0e 50 a9 aa 2f d2 eb 5b 84 70 7a 3a Data Ascii: mXnF&;6\[VHOUFkJ,{._8loy'Y\O%[1Oqg\0,@CqwR3DBOz")k]hPJ.nRuG$h;`btHRH_'fH10RxWYB#fx.r;vrr?PLPg?P/[pz:
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 0f 7a 9d 2d 77 7c ae dd d3 79 b0 34 af 55 a9 b4 32 45 c3 bc 10 4a dd 12 21 a2 0a 7d 7e 2f 2a 0b 66 d1 e0 98 ad 41 29 97 b3 50 83 10 5c 74 26 41 9a 86 e6 fc 6b 8e 7f ca 10 dc 4d e0 80 06 23 ed 1d a8 a1 35 89 f9 20 45 3f 57 ad 44 ae 0c e2 a9 0d 64 60 7f 90 c5 60 14 48 45 d1 2b e7 97 ca 92 f5 a7 26 8f f1 15 a1 9b c8 2d b2 13 63 a5 04 36 08 36 b6 67 3e d3 c2 11 93 c4 15 5d f7 94 21 21 06 c9 91 2d 0a de a4 ff 19 f2 fc 56 4a e7 c7 15 ee bf d2 8e b1 71 21 93 ac 50 04 a0 bc f2 4e f9 c8 0d 79 5b 0d 59 83 53 4a 16 f2 38 d9 3e a4 a3 3b 92 31 db 3f 3f ba 6b 3e 30 99 9a 49 e8 fd fd 52 e3 00 f7 9b a9 5a 1e c5 36 37 c8 f3 f9 8e 6c 44 19 47 df b1 ce 5e 48 78 2a af d8 b5 15 57 30 c8 77 56 f0 43 05 52 b3 c2 2e 15 67 13 32 a3 28 2a a3 2c 14 bc 65 3f 7f 76 dd fa 92 fb f0 a9 Data Ascii: z-w\|y4U2EJ!}~/fA)P\t&AkM#5 E?WDd``HE+&-c66g>]!!-VJq!PNy[YSJ8>;1??k>0IRZ67lDG^HxW0wVCR.g2(*,e?v
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 0b 61 2a 44 ec 6b b6 72 3a 21 d2 74 41 81 0a fd 16 36 27 b6 1b 38 ef 21 3b 75 4e b1 3d 4b d3 40 8e 60 23 43 2a 21 96 00 97 00 f7 57 36 47 81 83 20 10 c8 1a 83 70 e5 97 9e 75 f5 e7 9e 76 b6 58 13 76 93 dd 4a 17 c5 c7 71 56 2f 40 b7 bc f4 e4 cd 1b 91 b7 ac 2a e4 d5 dd ad 90 50 93 15 8e 95 f6 35 7e ea 2c 67 79 3c 94 20 15 6e 0d 2a 50 47 b0 4b 64 c7 9a 5d f9 e9 b9 8e 78 e6 24 53 b1 87 ff df 06 ae fa b1 04 07 0c 24 e0 c0 bd c9 a2 11 41 da ca b4 22 47 71 cf e5 18 ba da 0b 4f 39 45 64 df 92 ec de 2a bf fe 6f bb 64 af 52 16 d5 47 b6 94 61 ba 38 d1 e8 29 4a 48 5b a5 e1 a9 f5 fc dd 59 83 55 7a 81 c1 7e 6e cd 01 85 b6 d8 5d c0 85 ce cc 9c ed f2 99 76 18 63 56 12 8b 60 0b 19 01 9a 22 d9 23 95 87 25 bd 58 44 91 5e a6 a6 9b 9d d8 91 ab bc f4 82 f3 ad e4 4b 96 7d 5f fd Data Ascii: aDkr:!tA6'8!;uN=K@`#C!W6G puvXvJqV/@P5~,gy< nPGKd]x$S$A"GqO9Ed*odRGa8)JH[YUz~n]vcV`"#%XD^K}_
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: d2 8a 5e 2a 3a db c0 5f 38 37 04 3d df 29 c1 a5 e4 f5 1b d0 91 9b 46 34 58 4d 85 b8 56 46 c4 41 56 36 71 f6 fa cb 51 cf 17 10 2d e0 eb ab 85 bf 5e 9d f0 13 f0 77 b5 80 90 eb e7 f1 c9 77 38 f3 e4 f0 fa 9c 38 9e 63 f3 c3 20 3c 6e db 49 f2 78 9c 4a 36 38 38 b6 5f fa fb f8 f2 fd 94 09 dc 9e c6 21 a4 24 5c 08 52 10 43 4a 4b 83 30 63 fb c7 96 e0 c7 78 dc 8e 83 ed e5 b6 6d 0f 5e 7d 14 d9 36 7b 43 e9 29 a5 07 89 2c 94 6d 75 14 b9 7d b4 8d c3 f7 5b 70 d3 a9 8b a3 35 02 1e 08 88 10 f0 6d f5 5f 2d fd ed 84 40 40 d8 f0 1b c6 05 04 ae 3e c0 ce 13 f0 ab f9 55 37 35 0f b6 2d 06 09 0f 52 f8 1b 4e e4 38 b1 8c c9 74 27 43 76 fc 54 57 05 84 f6 a1 30 e1 84 fc fb 9c 67 27 cc 4f 98 4e b8 3f bf 7a 5e dc fd 91 f1 e1 f1 e5 02 82 df 0f df ff e7 8f ce 1e fb db 26 31 35 13 c4 86 44 Data Ascii: ^*:_87=)F4XMVFAV6qQ-^ww88c <nIxJ688_!$\RCJK0cxm^}6{C),mu}[p5m_-@@>U75-RN8t'CvTW0g'ON?z^&15D
2024-04-19 14:06:49 UTC	484	IN	Data Raw: d6 ad d4 db d3 2b 8c be 9a dd 75 01 81 e4 ec ab 2c 24 41 c5 b6 e5 6d ea c2 8b d6 b3 bb 2e e6 af 17 bd 0d 8b b3 37 65 14 5a cf ee ba 92 6b 2d a4 98 a6 ea 26 63 7b 13 42 23 56 b5 bb 76 21 24 e5 12 de cf 4a 6f 53 07 97 e4 81 f9 c3 24 e1 94 99 59 cb b5 51 2b b2 a5 bd 4c 5d c5 ee da 19 b5 9e ee 48 72 c0 90 1e 75 94 c0 09 69 32 83 5b 66 56 8b ec c2 2f ba 20 46 c7 0b cd 40 d1 6a e5 46 28 4a ec 5a 88 3d ea 92 24 c8 06 ab 8b fb 77 53 62 a7 da 91 da 2b 56 97 a6 22 3b 24 d7 aa 87 25 f0 26 f4 33 95 ac 52 14 45 b6 46 34 59 f9 90 e1 ab ec 67 88 ba 09 2d 37 58 d9 df 0e 15 b0 92 12 26 d2 42 50 e0 59 b5 42 e8 c3 44 63 56 ac a6 42 c8 dd 5b de 04 93 fc 58 24 1c 18 25 84 07 41 05 c4 b1 5a 02 52 02 90 c0 37 88 c7 9e 84 f1 da 39 9a 98 4d cb 40 52 57 8d 70 ff 60 52 2d 90 18 0b Data Ascii: +u,$Am.7eZk-&c{B#Vv!$JoS$YQ+L]Hrui2[fV/ F@jF(JZ=$wSb+V";$%&3REF4Yg-7X&BPYBDcVB[X$%AZR79M@RWp`R-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	50040	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1101	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8966 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:34 GMT Expires: Sat, 20 Apr 2024 11:12:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 10455 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	721	IN	Data Raw: 52 49 46 46 fe 22 00 00 57 45 42 50 56 50 38 4c f1 22 00 00 2f ff c0 3f 00 09 48 92 e4 b6 91 a2 1a 20 c6 a0 f7 ff 0f 96 01 d7 5f 23 fa 3f 01 fc 23 7b a2 9f c7 07 1f 7c e8 59 1f b4 47 27 47 59 9f a7 4d 61 48 21 bb f7 38 82 3c 48 ba f0 40 01 ba 11 01 d2 2d 49 77 a2 0f 3d c9 8c 10 b2 81 ee 1e 91 09 11 48 07 d3 31 3a 9e 2c 56 f4 5a cf d4 06 40 32 b0 46 a7 06 ec 97 aa 32 33 9f f9 dc e4 57 51 95 b9 d6 1e 1c 0b a8 aa cc 4d 37 6b c3 c7 00 78 4d ca 13 c7 e4 cf ba 80 23 db 76 23 e5 e0 7f fd 9a 81 8f f7 a0 fd af 8e 90 5c 6a a9 23 48 1d 47 b2 ad 2a 8d 7f e7 20 6b ea e6 1f 13 16 82 b3 a4 dc 48 92 e4 28 89 3e 7d 83 d6 d0 ff 7f 1d 1e 6e ff 27 40 82 ff e3 4f e3 fa 6e ee eb 4e ac b5 07 cc b7 bb 76 b6 36 24 5b 28 76 72 42 b6 98 66 2e e7 06 e7 00 68 bf dd 47 34 b5 41 30 6b Data Ascii: RIFF"WEBPVP8L"/?H _#?#{\|YG'GYMaH!8<H@-Iw=H1:,VZ@2F23WQM7kxM#v#\j#HG* kH(>}n'@OnNv6$[(vrBf.hG4A0k
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 33 33 33 6f b4 66 76 44 31 33 33 43 c4 cc be cc cc 34 2c ee ee 73 8c 67 8e 34 dd 7d cd fe 4d 37 da ec 96 aa dd 06 99 99 3d d5 5b aa b2 cc 8e 5c b5 28 e3 52 b6 91 8c c7 cc ec 29 19 bb ca 21 d3 2d 99 f3 8d cc cc 8c 32 ca 90 31 4f 42 8d b6 ad 43 92 74 ee fb 22 a3 18 15 3d b6 6d db b6 6d db b6 e7 9f 6d db b6 6d db b6 23 57 46 32 e2 7b 74 6c db 56 6d 2b 63 ac bd f7 39 17 77 77 77 0b 89 88 dd 33 c8 28 80 c5 1e 52 03 ea e0 ee ee 96 ba bb c3 f3 f7 fe 95 b3 57 4c 40 03 7c 94 ff 6f ed ff 5b fb ff 66 58 b1 4f dd df 7a 2b 50 2e 50 94 a0 22 a8 10 0c 72 9b 41 3e 9d 41 06 83 dc 66 90 4f 67 90 c1 20 9f 0b 07 42 c3 29 e7 39 be 62 9a a3 b4 87 5c af 2e 7a e5 07 17 dc ff 9e 12 b4 83 19 bb 51 06 99 13 6d 21 83 01 e4 36 83 cc 89 b6 90 c1 00 72 9b 41 e6 44 5b c8 60 0b d9 16 62 Data Ascii: 333ofvD133C4,sg4}M7=[\(R)!-21OBCt"=mmmm#WF2{tlVm+c9www3(RWL@\|o[fXOz+P.P"rA>AfOg B)9b\.zQm!6rAD[`b
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: f6 8e 02 20 8d 77 f9 f6 d1 e5 7f 18 6f c8 1c 8f 8f 4b 53 19 4d 8c 77 6b 6a 3c 9a 9c 52 df cd 70 54 3c 7d 6a 99 b7 df 7d 43 8a d4 d5 4e 23 13 4f c6 91 b7 e5 9b c6 ed bb 9a 19 af 36 e5 29 a9 81 95 2e 30 96 1f 8e a8 dc 44 26 fe 62 59 0c 92 66 ea c7 7c 43 fb 28 11 a1 3a 68 95 6b fb 13 51 8f 42 64 2e f8 a8 34 54 11 44 98 6e 76 67 dc 7f 31 f9 12 2b 87 74 24 b8 86 80 60 cf 37 04 ba d9 ef d1 ec 75 21 23 c1 0d 2f 11 26 c8 84 0d eb fa cd 78 b5 09 46 cc 2e 76 52 a1 87 68 4b ae 7a cb 34 cf 92 d1 6e 6e 81 18 f5 ec fd 16 57 bd a2 5d fd e6 31 9f 1e 0d 97 37 63 b3 f6 bf ae fa 4d df 79 1e 7a 2e f2 72 41 2d b1 e0 96 7d f3 33 71 cc 13 40 51 2c bd ec 8d fa 88 50 d3 30 e9 f3 c7 55 a5 16 e9 d8 4c 31 ab 4d b8 9c 53 cd d8 45 2d 40 cc b8 7c df e3 fa 04 da cb ec 32 5b fe 44 3c 80 Data Ascii: woKSMwkj<RpT<}j}CN#O6).0D&bYf\|C(:hkQBd.4TDnvg1+t$`7u!#/&xF.vRhKz4nnW]17cMyz.rA-}3q@Q,P0UL1MSE-@\|2[D<
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: ad dc 5e 82 da 62 b2 23 8d 30 23 46 85 13 45 02 91 44 92 2c 09 52 8b 37 e2 78 c0 24 e6 fb cf 2e 0c 27 db fa 91 d5 b2 93 b8 1f 4b 70 00 72 90 92 31 a5 03 01 c6 7d 13 04 33 1f 8f 14 a5 f6 bd e9 37 81 a0 a6 d5 79 a0 01 8b 90 86 38 59 24 10 49 20 48 22 a9 d0 3e e1 e1 2d bf ee db 9c ef bd e5 61 9b 4c 71 66 c9 77 33 c9 7a 50 d8 2c 25 f2 cf 08 40 f1 3f 50 f5 3b 04 33 ad 5d de 4d 4d c2 ca 99 2b c1 e0 57 f9 31 95 c8 34 4e d9 48 02 48 40 41 55 13 a5 00 25 12 91 26 98 3c ee ee 9c 82 4b ee f5 e9 74 3f 1f 2e c5 ee 73 aa 9a 33 67 23 b3 b2 2b a9 63 60 8a c7 93 d5 ff 42 30 dd fc 83 1f a8 05 71 da c5 1a 41 97 cb 11 52 9a 8a 38 b9 63 0d 02 91 d0 0a 4a 41 14 cb ab 20 55 8a 4f b0 af c8 e7 0b 65 11 0d c4 a9 a6 35 f3 75 87 6c 16 87 94 3c 0f 66 a0 f8 4e b8 fa 29 49 50 30 15 a7 Data Ascii: ^b#0#FED,R7x$.'Kpr1}37y8Y$I H">-aLqfw3zP,%@?P;3]MM+W14NHH@AU%&<Kt?.s3g#+c`B0qAR8cJA UOe5ul<fN)IP0
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 29 83 d1 89 bc 67 99 72 43 1c d5 f5 e9 0c 47 dd ef d9 f5 b4 74 00 84 55 e6 da b6 e4 aa 6d df cd 16 08 0c 34 60 92 d1 9b 34 d8 20 7c 5b a3 f5 43 7f 30 63 88 64 e9 86 1e 53 0c 0f 7b c7 d6 5e f1 97 7a d7 53 07 64 01 98 41 05 a1 65 02 5c 42 01 79 8d b3 e2 17 be e6 bc 50 df eb 3e b6 1c 5a c5 e3 21 ac 55 89 77 de c1 1e 6f 59 f4 f7 88 5a 85 81 06 0c c9 34 d8 d6 06 0d f4 5e 42 f8 e5 96 a5 59 32 50 81 fb 6d a3 05 0e 9c 71 aa fd 65 e5 33 eb 63 20 d7 8e 99 a7 e9 48 46 19 a3 82 58 b2 2e f2 17 bc b9 ff c4 6b df fc fc e7 9c 47 e0 3f af fe 50 3f f7 2e ed 61 fc 84 10 ee 9a 03 e3 e9 53 8d 33 96 91 dd 38 fa 04 32 61 92 a9 21 d3 30 30 f4 1a 86 32 65 ea da 1f 8d 31 b1 a6 be eb ea 73 ec bf e0 74 07 db 2c c5 48 83 47 28 ca 05 c1 80 56 44 e4 0c 23 c7 18 05 ab 86 65 03 c8 05 2f Data Ascii: )grCGtUm4`4 \|[C0cdS{^zSdAe\ByP>Z!UwoYZ4^BY2Pmqe3c HFX.kG?P?.aS382a!002e1st,HG(VD#e/
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8d 99 d9 b5 02 3a 60 84 58 2b 52 0e 98 b2 34 22 12 2a a4 64 86 8d 2b ac ac 40 bc d5 da e8 51 a5 9a 87 4c a6 72 1a 45 8f 99 b1 df 88 0a 21 2c 3b 0a 87 95 7e ff 2c 4f ff e1 3c c8 aa 20 90 8c 31 90 84 cf 98 a6 6e cb e9 88 32 9a ac f4 5b f8 35 98 76 65 0c b2 60 02 19 e8 20 20 c8 21 c8 a2 07 44 a5 1d 4c a2 cb 85 9d 4a 19 36 a5 31 de 72 05 b6 6d 7d 94 c9 8e cd f3 ad 7f 6b 86 be e7 98 41 87 8c 89 3c ee ab bb d2 2e 08 5e 71 ed df f7 9d ff 8b ac 63 ee 22 0f 45 8a b9 aa 71 66 0e 9a 92 fd 91 a6 90 e9 b5 68 ce 02 87 66 ab 89 cd 54 79 d2 10 d1 00 9d 8d 74 59 d3 13 1b c9 44 ea 04 38 ac a1 64 28 fe 9e 4c ec 87 54 de 72 e6 3e 14 a9 ab 22 61 c8 b3 06 77 b6 ff 98 75 66 7a 79 59 d7 3e 71 66 33 0a 70 d1 5f db 1d 9b 52 f4 0a ce a4 3b 1b fd 49 a8 8e d1 ff b5 e1 ff 5b 90 fa 82 Data Ascii: :`X+R4"*d+@QLrE!,;~,O< 1n2[5ve` !DLJ61rm}kA<.^qc"EqfhfTytYD8d(LTr>"awufzyY>qf3p_R;I[
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 39 20 3b be f2 ff a0 65 f6 0c b7 2f f1 86 ce 8b 43 ac aa c2 75 55 63 ef 0d 9b f3 d3 31 35 f2 c1 5d 13 fc 31 5c 83 ae 87 61 10 e7 fb 15 dd e4 cf e2 5d bd 83 33 f0 63 ef 10 d0 1f 76 40 64 88 4c 64 0f 94 89 28 8e 21 56 8c c7 66 13 4b dc 6e 71 ff 7c da 5d 0b 89 68 71 e4 99 c8 91 6c f0 c7 fd 93 c1 65 30 87 b4 b9 66 c8 62 5e a4 b4 2f 2d 53 99 10 89 1d 99 c6 80 8c 88 1b f8 1b 5e c7 8f fe fc 9e 0e 18 21 09 49 81 36 a0 b5 88 35 89 43 92 0a 8b ef ce 37 2c 33 3d cb 6d a6 6a 5b 0c 12 10 24 20 52 2f af ac 80 6f bd 5c 67 a5 0f 5e eb d8 b1 7b e7 28 61 65 50 0c 80 cb 01 01 0e 5d ce 39 77 c0 88 3d 03 5f f2 2a 1e 69 bd 26 70 0b 56 c9 81 80 11 05 49 d9 81 02 e2 3f 68 89 71 8b 5b 95 f9 1c b0 13 44 0f 18 ed b9 1f ca a3 a7 63 f9 2a 1b fd c9 70 28 55 a7 72 37 a3 8d d3 58 05 95 Data Ascii: 9 ;e/CuUc15]1\a]3cv@dLd(!VfKnq\|]hqle0fb^/-S^!I65C7,3=mj[$ R/o\g^{(aeP]9w=_i&pVI?hq[Dcp(Ur7X
2024-04-19 14:06:49 UTC	715	IN	Data Raw: 1b 7c 3c 5a 66 51 e7 52 cb e0 ab cd 96 90 c1 e5 2c 16 e0 08 0c b4 3b 22 11 b8 9c c5 02 1c 81 81 76 47 24 02 97 b3 58 80 23 30 d0 ee 88 44 e0 72 16 47 e0 08 e8 93 3f 63 64 ec 11 64 b1 19 9e 3d 4e cb ab 65 ea cd 19 70 55 f0 53 f2 60 d5 08 c8 c5 4e 3d 20 bc c5 18 01 c7 d4 03 72 b1 53 0f 08 6f 31 46 c0 31 f5 80 5c ec d4 03 c2 5b 8c 11 70 4c 3d 20 57 67 5d 0f 74 5b 8d dd 1f 9d 89 01 5e b4 72 1e bf 70 82 54 3b 4b 8a 25 64 22 30 f5 e7 fe 67 6e b7 4d fe 6f 26 05 30 c6 c7 63 34 42 0f 08 03 22 1d 81 a6 71 4c 01 94 a8 0b 46 47 0f 08 03 22 1d 81 3d c7 14 40 89 4b 8c 8e 1e 10 06 44 3a 02 7b 8e 29 80 12 97 18 1d 3d 20 6c 62 7b 97 65 ff 34 f5 ec fe 31 5b c5 e8 f7 ae 44 c3 5b 47 27 98 3a 41 e2 7b 93 8f ff 75 8d 9f 2e 2b e9 1d 88 ad b3 b8 61 47 bb 70 ce 53 38 ed c2 39 4f Data Ascii: \|<ZfQR,;"vG$X#0DrG?cdd=NepUS`N= rSo1F1\[pL= Wg]t[^rpT;K%d"0gnMo&0c4B"qLFG"=@KD:{)= lb{e41[D[G':A{u.+aGpS89O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	50041	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1100	OUT	GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6354 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:12:05 GMT Expires: Sat, 20 Apr 2024 13:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 3284 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	722	IN	Data Raw: 52 49 46 46 ca 18 00 00 57 45 42 50 56 50 38 4c bd 18 00 00 2f ff c0 3f 00 09 47 92 e4 b6 4d 61 21 88 de 5a e8 ff 0f 66 02 9d ce 11 fd 9f 00 fb 9b bd e0 da 78 7c 0f 1b c0 16 de 2e 0f 78 27 eb ef d7 42 2e 28 22 c8 e8 5b 66 09 4d 94 e8 f2 06 96 04 44 19 94 6a 40 11 98 80 c4 03 bd 14 2d b3 02 d1 06 28 53 04 80 36 00 aa 4c 0d 62 a8 cc 4c b4 23 73 65 56 5c a6 de cc 8c 2c 19 2a 3b 27 0f 99 7b 9d 06 ab 7b 38 f5 e4 1e 37 fe d7 05 1c d9 b6 db 36 a7 c0 60 fe 50 e9 3b 67 1b 8b f2 fe 6b 97 2a dd 33 00 8e b5 e3 b6 91 1c 89 68 ac b7 b5 77 17 c0 e4 1f df f9 97 e3 48 92 1c 25 4f 01 6f e2 fe 57 68 e9 bf 3d 67 4a ff 27 40 c2 bf f9 52 97 f4 34 ff 9e c7 6f 9f a0 37 74 fb af e3 51 d4 45 1e 75 7c bd 58 68 8c d9 53 01 a0 cb 00 49 92 1c ad f7 d6 31 80 10 42 34 1a 09 90 6c 50 98 Data Ascii: RIFFWEBPVP8L/?GMa!Zfx\|.x'B.("[fMDj@-(S6LbL#seV\,;'{{876`P;gk3hwH%OoWh=gJ'@R4o7tQEu\|XhSI1B4lP
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 0a 41 96 4a a6 ac f3 7f 75 ee 5e 1c 82 16 da aa 5f 3e 07 e3 6f 14 97 c6 84 22 4b fe b9 aa 59 65 81 31 b0 e4 d0 a2 6d db 94 24 ad 40 da 81 17 51 b6 6d db b6 6d db b6 6d eb cf b6 6d 75 87 1d 91 b6 8d 17 41 c7 b6 ed 36 76 74 ee 03 c1 47 56 ad 6f 22 e5 1a 88 4f 35 4e c5 9a 92 f7 5e ea 26 01 12 c0 8b 09 70 80 09 ff 4f f8 7f 22 a9 41 f6 da 16 e8 7b 2c e2 02 9b b0 91 da d0 de aa 65 53 2c fd 0c f6 f9 ed 45 d8 a4 b6 a9 1f fd 67 f1 9e a9 5d 94 b3 b7 b6 c5 6b fa 57 19 0e bf b4 8b 9d b6 2d dd f5 7d 65 40 27 0b ea 79 97 5e bf a6 e1 a7 6b 46 c5 f5 b3 b9 61 ae ec 6f 4f 29 e9 78 9c 16 5b c3 84 52 1b 35 3b e2 e4 c3 64 2f 19 f6 31 98 b1 df 3e ab 2e 6c 7c 17 6c 68 81 ca 04 2a f2 e9 3d 06 1e 51 a9 1f 36 6f c1 ef 67 b4 24 40 8e fd bc cf 91 e0 f7 b3 0c f8 a2 a4 79 db 9f 4d b3 Data Ascii: AJu^_>o"KYe1m$@QmmmmuA6vtGVo"O5N^&pO"A{,eS,Eg]kW-}e@'y^kFaoO)x[R5;d/1>.l\|lh*=Q6og$@yM
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 20 54 5b 8d af 26 03 6d 64 34 8a 40 2b c9 58 0c eb 78 fa bc 20 66 f1 9b f0 a1 f7 db f7 2b 28 7c b9 63 cb b3 91 70 5c 4c ae de f9 81 c7 32 12 a7 2f a6 37 9c 32 12 f8 c0 c7 e5 fb 4c 6c a8 ea 27 7c 1a ef fa 34 a0 2a 46 7b fe eb a6 e7 99 88 aa 39 13 19 3c c0 87 df 6f bf ed cd 77 df ea 7a 1e 6f 82 85 57 b7 b5 ef 70 3c 9b 63 a7 db 91 e3 4b d3 ab b7 7d c8 77 7e fc e0 f5 9d fa 0f 03 ce 07 be cf 3d bd ff 23 4e c6 bb 22 df fe d6 d3 6f 7a 6d fb f8 3f 0a df e5 dd b3 ef 78 fb c9 3b 3f 0d e5 92 69 29 d5 4f a7 4d c5 ac e9 31 6d 7d a8 f9 5b 5e 59 23 d6 d4 e1 fe fb ef 07 38 6e 3e 97 9e 26 58 3e 98 36 90 2d 61 19 54 34 15 f2 40 0a 03 0c a3 b5 c2 6a c0 8e a2 6f ce ce 83 05 dc f8 f3 7f 0b 56 38 3a ee 84 4d e5 5e 11 73 f6 16 6f 8e 11 28 c7 b9 d7 ae c8 c7 0e b6 38 41 fe a9 34 Data Ascii: T[&md4@+Xx f+(\|cp\L2/72Ll'\|4*F{9<owzoWp<cK}w~=#N"ozm?x;?i)OM1m}[^Y#8n>&X>6-aT4@joV8:M^so(8A4
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: d5 4d 9c 12 80 b5 f0 8f 35 e5 51 b5 1a 2c 4a 68 fd 85 ce 98 22 94 54 59 13 00 18 3e 5b 5e d7 85 3f 5d 14 dd 6b 04 98 ae 40 4b 9f 47 93 dd b8 35 8f 5c 7e 6f 48 ab 2b 2c 5f b7 b8 ae c7 1b 53 65 0d 51 6d 4f 64 bf 83 6c 14 9d 77 b5 0b d5 4d 7c 90 04 06 a6 56 6a 5c b8 4d 77 cc 07 8d 0c 4a d0 f8 cc 97 73 ea 84 e6 82 d5 84 04 6d 3e 65 52 49 4d 1f 41 b8 e8 b1 74 1a 3b 18 ea cb ee d8 01 08 6a d8 74 1b e1 9b a7 34 57 3a 1d 03 76 14 5b 5d 2b 0b 5d 71 e5 00 16 b5 21 68 b0 f6 cc a7 18 b7 46 83 57 c6 f7 bb 63 11 e6 2a b4 14 39 a5 68 cd 68 99 4e 5f 34 09 1b cf 79 48 0d 78 25 3c de 69 e9 2a 9e b4 7a 8a 97 09 cb 58 0e 75 95 85 78 ce c5 88 81 45 2d 44 bb 67 85 97 bf f9 7f 6d 4b 65 d9 4a fa e9 6a e9 cb 15 13 68 48 19 fd d8 3f 3a a3 77 81 53 e6 46 2a 4d 58 fb 40 69 75 57 f5 Data Ascii: M5Q,Jh"TY>[^?]k@KG5\~oH+,_SeQmOdlwM\|Vj\MwJsm>eRIMAt;jt4W:v[]+]q!hFWc9hhN_4yHx%<izXuxE-DgmKeJjhH?:wSF*MX@iuW
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 61 8c 1f 47 b4 09 29 62 fd 4e c6 b1 2d 71 8f 60 06 28 41 e3 57 b0 d5 1a 8e a8 fc 3a e3 ce 47 73 5c b6 09 ac e6 74 89 f1 a3 51 63 f1 f9 69 1b 31 90 4a 7e 97 de 67 12 34 42 63 65 21 fd 8f f9 5d f1 82 ed 5c a9 22 68 31 ac 98 d3 65 f2 e8 b2 76 1e d1 66 2f f9 bd e1 94 2f 50 9c 1a 0c cd 0a 66 db a3 b7 fc 5e b5 e7 e6 7c 0b 24 86 5b 18 ae 86 6b cd a4 35 53 a3 81 b5 96 d9 5b fe 2b 79 3d d8 4b f5 ca c3 00 cd e4 67 36 9e 3c f3 1a 48 51 3b 6c 07 02 ad c5 70 35 ba 6a 33 29 86 c7 b1 18 d7 3a 12 aa f5 0b fe e6 d5 ee ae f3 30 03 dc c9 3a f6 f7 d7 be 19 79 b5 3a da 22 7a 47 73 f9 15 2d 33 69 d8 8c 6f 09 a1 68 7e f4 97 fe 5d 5f be fa f3 6d e2 95 2d fa de 1b a7 bf 90 46 0c 13 de f1 95 ef 74 f7 c3 d7 38 b5 ba e8 4c 9c 8f fa 9e 1b 7c 49 cd f0 34 92 91 95 46 cd a6 16 e3 2b 31 Data Ascii: aG)bN-q`(AW:Gs\tQci1J~g4Bce!]\"h1evf//Pf^\|$[k5S[+y=Kg6<HQ;lp5j3):0:y:"zGs-3ioh~]_m-Ft8L\|I4F+1
2024-04-19 14:06:49 UTC	612	IN	Data Raw: 87 fe ff 6f 17 75 38 38 2c 87 65 b1 5c 17 7e f6 d3 3b 78 be 9c 0e cb 96 0f b7 9e f7 c5 b2 3c a0 e3 c5 f5 e0 6f 9e 53 3d bd 1d 1e 7c d2 cf fe dc 9b 2d df dd 3e 3c f7 fc f0 e2 e0 b0 2c d8 e1 7a f0 5f ce 93 e5 a9 ad 96 c5 19 2d b6 fc 96 33 be cd 61 81 42 73 2d ac 57 e9 11 3c ed 6e b1 0b ed f0 72 87 2d cb 72 d8 c6 0b ca 70 87 eb 81 d7 f1 d1 a8 9e 96 be e8 72 58 fa ad 9b e5 80 05 e5 da f8 ba fc df e5 29 2d 70 aa c3 d2 1f 6c 99 e5 60 72 87 eb c2 ab 78 14 ef e4 29 d1 69 0f 7d 59 0f 8b be 2c 8b 65 ec da f8 5f 2f 64 4b 4f 6d 58 96 7e 3a b0 38 b8 6e 9e e3 02 de a8 8b 9e be c0 72 bd 38 2c eb 1b e3 40 2d 58 6a c1 e1 7a b1 2d bd 31 58 8a 05 0e ae 97 f7 87 2d bf 51 46 77 e8 ae 9d 7d f1 d3 f7 ed 87 eb de 75 bf ef c2 c3 57 79 bf 9b 2d a3 50 30 67 45 df 47 ee da b7 39 fb Data Ascii: ou88,e\~;x<oS=\|-><,z_-3aBs-W<nr-rprX)-pl`rx)i}Y,e_/dKOmX~:8nr8,@-Xjz-1X-QFw}uWy-P0gEG9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	50043	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1102	OUT	GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13528 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	721	IN	Data Raw: 52 49 46 46 d0 34 00 00 57 45 42 50 56 50 38 4c c3 34 00 00 2f ff c0 3f 00 09 46 6e db 46 82 e3 b4 45 e1 f4 ff 0f de e0 39 cd 35 a2 ff 13 80 3f 1a 9f 21 2d e3 22 b2 40 43 e8 42 92 08 83 70 9d 24 89 f4 a9 aa 70 cc b7 b8 55 d5 38 21 9e f4 b4 c6 18 dd a6 2d 47 ef 1d d0 4b 3c 48 fa 6c ad be 03 e5 10 f9 20 da ba e3 5e 64 8c 4b 19 b4 47 3f c2 91 9c ad b5 4b 2f 03 c8 39 67 bf 92 86 20 1f 68 49 14 85 23 3d 3f 75 01 47 b2 6d 55 55 17 72 0a f8 ee ee 32 ff c1 69 a4 f7 dc c3 cd 48 1d 47 b2 ad 2a fd ff c7 dd 1d a2 60 49 fe 71 b8 bb eb c2 8d 24 49 8e 2a 2a 99 3d 2d 17 4f c3 9a 04 96 86 fe 4f 80 52 c1 66 49 01 b0 9b aa 47 4d 68 40 c1 fe b7 8b 84 49 ca 24 65 c8 cc 8c 7c 57 35 11 c0 c4 4e ca 80 20 00 94 40 a9 00 8b 5e 00 98 10 0c 58 b0 00 b9 56 02 c8 08 55 b8 ad 75 cc 36 Data Ascii: RIFF4WEBPVP8L4/?FnFE95?!-"@CBp$pU8!-GK<Hl ^dKG?K/9g hI#=?uGmUUr2iHG`Iq$I*=-OORfIGMh@I$e\|W5N @^XVUu6
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: de 5f cd ad 0e db b6 6d 7b 04 a7 1d 33 43 66 cc 36 43 b6 6d 5b dd b6 dd 6b af ad fe f5 ff bf ef 89 09 e0 9a ed bf 6c db b6 9b 31 a7 6a 21 89 d5 12 96 5c 04 e6 70 1c 97 53 a8 50 5d d7 f5 1e 60 ad a3 18 be 4c 1c 87 73 d8 b4 c1 3f ee d4 f0 9f 92 69 a7 c2 03 76 fa c7 33 85 95 92 e9 a0 9d 2e ba 68 a3 8a e1 64 b2 62 38 74 d2 49 37 35 fd c7 25 7a a1 17 ed b4 c3 e3 18 7a 4a 87 4e b8 f1 a5 0b fe a8 73 38 29 38 14 a5 d0 a8 2f 35 6c d4 e1 38 08 a7 d1 a8 eb 82 de a8 9c c0 48 61 53 f7 18 e4 d6 b6 ed 5a cd 5a 07 0f a1 4d 7d 17 d4 45 15 54 01 35 10 51 02 55 90 ca 46 5e 7a 77 41 8e 24 49 92 12 91 0b 7f 44 40 7f 71 78 23 c5 7d ed 74 c4 04 18 80 95 fe 5f e9 ff 95 fe 7f 8b aa 63 03 34 f5 a2 17 c4 eb 98 21 4e e2 12 17 b9 d4 05 2f a4 54 41 98 93 cf 48 1a 2c a1 58 86 db 84 0e Data Ascii: _m{3Cf6Cm[kl1j!\pSP]`Ls?iv3.hdb8tI75%zzJNs8)8/5l8HaSZZM}ET5QUF^zwA$ID@qx#}t_c4!N/TAH,X
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 6b 9d 82 8e 60 8b 56 92 20 d9 eb 0e d4 7d 61 fc 50 41 8e 9f 98 22 0b 96 35 57 df 9f 52 9b 66 48 80 48 64 4a 36 0e f7 3c c4 7b b7 da 07 38 42 04 e3 75 7f d6 4f fd b2 4e bd da 40 c0 1d b7 ab e9 5f 6e b0 d9 82 95 99 f7 43 de f5 b4 14 9d 51 9e 9d 67 6c 40 6c 63 c3 0e ab db 20 ef a9 62 da 80 60 af 7b 71 cd 3d bf 1e e6 2b 24 1f cd 99 a4 ee e6 62 57 4d d7 d2 a7 f9 b0 40 21 46 17 df cc df 43 6e 07 b9 5d 8f e3 ae 7d 4c 4d 7a 92 85 79 cd 35 7b ad 11 b5 4a de cb 68 1b 6c 10 09 ef 67 c9 b1 19 7d 8e 8c 2c da c6 06 c4 3e b2 be bb b9 65 51 11 c4 7b 9d 28 99 12 e8 78 27 44 2e 80 83 0f 15 09 51 39 b5 57 e6 5e ee 6e 97 bb 46 25 58 b6 6e 84 19 1f 63 5d 0e b8 cd 8d 60 b4 10 cf 26 03 7a f8 f8 86 c5 44 71 cc c1 d2 d7 24 8c 2c b8 75 16 f3 9b b3 66 94 84 48 54 2c f3 f9 d4 44 55 Data Ascii: k`V }aPA"5WRfHHdJ6<{8BuON@_nCQgl@lc b`{q=+$bWM@!FCn]}LMzy5{Jhlg},>eQ{(x'D.Q9W^nF%Xnc]`&zDq$,ufHT,DU
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 63 1f d0 b0 c8 b5 cf 69 03 58 a7 35 59 05 8d fb ae b1 07 d0 8a a1 31 83 29 df fe bd fa 37 a4 1e d4 45 98 6d 6b 21 f7 b2 67 f2 71 07 77 bc c6 eb db bd b8 6e 17 c8 18 0b 2d e9 99 7b c3 4a 4c 7d 2a 55 91 54 4b 0c 8e 1b 76 19 cd 62 1b 17 79 0f 99 8a 11 6d ba ef 21 1a a5 d5 ab 19 01 ad c4 2d 92 68 18 58 6d 7b 40 ae b2 b7 7f f2 ef 79 19 27 ea 62 bb ac be 6c ef fb 74 c3 5a 26 88 30 08 88 a8 b1 d4 fa 9c a0 b5 c4 29 3e ac 4a d7 ef 5b 07 25 31 e9 7c 55 77 7a 9d bd aa d7 c2 04 2b 4d 25 57 d4 28 63 7b 68 27 f6 73 66 55 5a 35 9a 8a 5d d0 1a 01 f6 b9 ac e4 a3 ef 0e 20 6d 76 de a1 31 ef 18 a2 55 5a 63 98 88 65 fb 9d 92 92 91 7c 2d 7a 45 19 fb d2 5e d7 6a 48 f3 70 cf 71 cf 59 bb d7 fb fe 7a af f7 5a c3 ef 11 ff f1 77 8a f7 fe c9 a3 17 90 55 38 ec 4d 22 f4 6a 48 94 26 2f Data Ascii: ciX5Y1)7Emk!gqwn-{JL}*UTKvbym!-hXm{@y'bltZ&0)>J[%1\|Uwz+M%W(c{h'sfUZ5] mv1UZce\|-zE^jHpqYzZwU8M"jH&/
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 19 f5 63 a9 73 bd 76 df 71 56 92 c5 f1 5f 6c 88 12 ff a9 5e 31 2e d6 59 f7 a2 b1 47 69 22 4a e3 16 40 2b 6b 32 6e 71 29 a1 bb a5 49 77 4c 36 0a 39 1a 06 a6 73 75 ac 2a 34 f1 4a 7f 94 f5 a3 57 c3 f4 e7 9c d2 22 f4 7f 2c 7f af 7c 29 cb cb fd 78 6a 2f 65 f1 25 7d 59 f8 ed cb 13 96 4f 4b f1 dd fd 27 f7 d2 ed fb 59 48 ab 96 4e be 21 1c 89 f9 f0 74 33 3b 59 1c 76 c5 b2 f0 dc 3c cd 51 80 21 be 2a 5b 50 d4 4a ec a8 55 9b 85 e6 ba 37 95 30 da 28 39 2c 87 c1 fc b9 ac 29 56 90 a9 74 aa 2a 68 c5 87 fd cb bd 74 1d 4c df ab ee d7 c6 35 ce 97 85 cb 1a cb f2 25 fd 4b 59 96 85 4f d7 58 7c 29 ee 3f 7d 3a 22 3f cd 9f 96 db ab b3 00 78 69 3e 8b 71 c6 d9 2a 71 4c a0 1e 92 43 eb 70 bb e0 9d 6d a1 16 a6 20 ef 22 32 a6 27 83 59 a8 58 dc 08 0c f1 d8 42 fb 30 8a 34 b3 4e 3c 0a ad Data Ascii: csvqV_l^1.YGi"J@+k2nq)IwL69su4JW",\|)xj/e%}YOK'YHN!t3;Yv<Q![PJU70(9,)VthtL5%KYOX\|)?}:"?xi>qqLCpm "2'YXB04N<
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 40 46 ed 9e c3 d0 0c 83 1b 31 f3 d9 30 18 79 6f a6 42 2b df e6 8c fd 6c 18 65 4c 33 16 02 93 e9 35 79 f0 c3 1f c6 1f 76 01 4c 9f 95 d3 09 a4 4a 89 5c 80 4a 85 48 fa 10 7d 34 c9 63 0f 6f c0 89 8f 5e ca a7 02 5e 8a e7 69 9e 77 6d c3 f0 8b c7 57 c9 08 6e f4 2e d1 cd f3 1c 99 39 a9 f4 6b 8c 20 c8 98 07 62 16 eb b4 b2 dd 7f 53 d0 3c 78 0f 41 33 8a c6 7b ec f1 b9 80 a9 dd 99 be 4a 58 bc 0f 50 91 fe e3 4f 6c b4 ed b5 e6 1d 52 8c d4 10 4f e4 a0 01 38 13 b7 1a 54 e3 a3 d2 d0 30 97 8b ba de 9e d8 b6 e0 b3 3b 2c e6 56 84 d3 b0 3e fb a7 87 a4 26 ef 12 dd f1 2f 2d 7b aa 1a 7a 64 e4 b8 c2 ba c9 9e f5 dd bc 8d b2 33 4c 58 91 be a6 9d 36 7d 05 3b 5b 49 1b c2 ca c8 47 d9 4f a3 81 11 08 b6 56 fa 59 7d a8 1a b7 da 55 e6 bd 42 8d ad 95 db 54 12 72 94 68 0e 0c 62 22 e8 ab a8 Data Ascii: @F10yoB+leL35yvLJ\JH}4co^^iwmWn.9k bS<xA3{JXPOlRO8T0;,V>&/-{zd3LX6};[IGOVY}UBTrhb"
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: e6 26 e3 bc 61 75 1f bb 82 e6 26 eb 46 c3 1b 32 ec 0f 3b 89 a5 23 d1 83 9a ce 36 ef f5 43 31 a1 6c 7f b0 27 35 87 a8 66 18 93 06 72 9d 0f 06 a6 c0 86 23 68 67 f8 e7 57 d9 43 3f b5 45 3e bb 55 76 37 47 56 14 a5 56 e3 42 46 62 5b f8 11 5a 9b be de 2f 31 ea 74 4d 7b 35 c9 10 34 ac 9b ac a6 22 07 cd 1b ad f4 06 26 6c 24 5a a7 d5 1b 32 b7 b1 4b 40 f7 d1 b8 b9 9f 01 d3 8f 62 12 51 17 c0 f9 c0 45 43 26 7d e5 81 4c 36 52 a5 a3 72 aa 22 a9 9b da 43 f1 99 f1 4b 5f d6 63 76 60 7d 99 85 5b d0 1c bd 95 94 d8 ea 3e 9b 84 bb 17 25 93 80 cf 4d d6 0d f1 48 43 21 f3 06 32 24 63 4d 31 f2 91 8f a5 d1 dc 64 1d 93 a1 a0 e5 30 cc 6b 7d 43 87 c7 b6 dd 6c de e1 f9 58 b5 58 47 2f d3 e0 34 68 c8 4c a9 7b 33 b7 b3 32 a0 23 a4 b0 36 42 c6 e7 16 bf cb 28 53 6c fd ee ec 91 63 2f d5 6f Data Ascii: &au&F2;#6C1l'5fr#hgWC?E>Uv7GVVBFb[Z/1tM{54"&l$Z2K@bQEC&}L6Rr"CK_cv`}[>%MHC!2$cM1d0k}ClXXG/4hL{32#6B(Slc/o
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: af 21 59 17 df 5c d5 54 bf 8e bd f5 e2 56 df 9f d8 0e 37 4d 39 d2 8d a8 19 89 3d a6 3d 6a 94 1a 32 dd 8c 6e 34 84 d1 63 d7 7a 85 d3 64 b8 09 eb 46 f3 56 64 74 8b 1b 75 1f 32 a0 69 f1 59 c9 96 cc 57 3c ed f7 c6 75 30 3d f7 6a cc 6c a3 36 cd 5d 10 31 85 db a8 e9 78 af 38 02 06 b4 a0 0b d5 11 32 4c b2 de 40 a3 b8 6d f1 12 07 31 83 70 4a a2 45 ba 19 29 c1 b5 d8 5a 25 4a 89 b6 e8 f9 00 73 99 cc 4d 46 37 43 de e6 6e de 14 76 d8 c8 87 1b b2 6e 98 9c 86 79 83 49 ce 7c b7 a8 e7 ad 47 7c fd 45 f3 a6 ba 99 6e 15 88 95 3a 81 5a 77 8e e1 d5 11 54 4e 04 a3 76 9a cb 24 1f 75 74 bb eb ef d2 d4 16 d3 82 63 36 1e 9b fd 9b 5f 68 88 5c 3e 54 09 2e 1e 77 b4 9f 21 37 1a 02 43 08 73 ad f9 38 e2 c6 c3 4d a5 d1 0d eb 26 cc 69 6d 69 be de 42 9b 02 29 19 20 61 68 ef d2 c1 ff 99 b7 Data Ascii: !Y\TV7M9==j2n4czdFVdtu2iYW<u0=jl6]1x82L@m1pJE)Z%JsMF7CnvnyI\|G\|En:ZwTNv$utc6_h\>T.w!7Cs8M&imiB) ah
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 3e cd bc dd 8d 0a 92 4e 1a 90 0e 40 45 f0 33 d3 09 5c f7 1e 4e 40 65 14 ce 80 38 1b ad 5f 48 8f f8 6c f9 d3 83 f1 50 7c 17 8b e1 cc 96 7f b7 39 b3 89 0f 23 79 83 11 37 3d f9 cc 69 d0 dc 1a 20 61 6e 42 18 2d 8e 47 86 09 19 72 33 04 6a 45 20 4c c6 03 18 3a 38 88 3a ec c7 9b b6 1c ea e4 61 8e e7 90 94 03 9c 70 1c aa 43 e0 c3 a1 86 43 0d 9d 85 1a b0 4a 83 a6 c6 4f 8f d0 63 0a bd d7 ac 85 89 e1 5f 6e 54 4c 21 09 2e e6 6f 53 fc 96 70 38 87 01 3e 67 d2 9c 06 8d 98 2c a6 50 69 20 43 20 73 99 d5 a9 d5 2b 87 3a ad dc 02 61 fd df 84 2c 8e d6 27 61 fa 61 74 d5 64 0d 87 e3 84 e0 c4 f1 01 d4 38 02 a2 e2 44 25 3c a4 a0 06 be 22 c9 9b 75 fd a2 6f b3 17 7d 57 bc ab 04 ea 2d 6e 42 24 03 ec 16 14 d2 e9 5c 52 ae 0c 76 85 91 d1 50 51 03 68 5a 1a 23 b1 56 ed 2a c8 a8 d6 5c 86 Data Ascii: >N@E3\N@e8_HlP\|9#y7=i anB-Gr3jE L:8:apCCJOc_nTL!.oSp8>g,Pi C s+:a,'aatd8D%<"uo}W-nB$\RvPQhZ#V*\
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 99 f4 e5 ed 8a f3 af 98 ef d4 4b c5 4a a8 8d 18 d7 a5 4c a1 cc 0a d4 3c b3 22 3c f0 f0 18 1e 40 75 ab 54 4e a2 ee 41 85 b7 d3 e2 1c b3 8f 0d 4f 92 f0 c0 05 f1 df 9f 60 0d 2c 60 9c 6e 11 1b e7 b3 f2 30 3e 1b 63 14 e6 78 95 42 e8 58 b8 3a c4 71 3e 9f d2 51 2a 9f 4a c5 49 6d 4c fe 32 c6 ee 18 59 27 f1 0b 78 9c 7c c1 05 5c a7 8f 31 49 c5 99 c4 22 f1 c0 17 c6 8d 9f fe fd 8f d0 bd 54 d2 20 92 4e a8 28 07 d7 c8 77 c5 33 f1 12 05 a8 4f 57 8c 6e b3 ad 90 9d 6e 55 99 0b e2 80 87 8f 2b 86 83 23 9e d0 09 c2 83 71 21 29 22 20 aa 05 6f 84 86 ef 0b 90 c9 99 2b 38 ea e1 be d5 53 ad c0 89 67 f1 cf 03 79 77 23 7b ff 55 08 1d 0b 37 9f 3a cd 8d a3 fc c7 e4 c3 50 49 5d c5 a0 86 8b e3 38 cf 8b 29 ee a6 0c 72 8a bb a9 ce a7 e8 e6 b8 9c 8a bb 62 38 ee e8 99 1f 88 27 60 0b a4 e3 Data Ascii: KJL<"<@uTNAO`,`n0>cxBX:q>Q*JImL2Y'x\|\1I"T N(w3OWnnU+#q!)" o+8Sgyw#{U7:PI]8)rb8'`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	50045	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	523	OUT	GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 370 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	370	IN	Data Raw: 52 49 46 46 6a 01 00 00 57 45 42 50 56 50 38 4c 5e 01 00 00 2f 5d 40 17 00 df e2 36 b6 6d 55 d9 e7 7e 97 d4 80 98 26 e8 80 da 29 85 dc e1 1e a4 09 46 91 24 49 c9 59 01 1c 56 f0 8b 32 4c f0 5a 6e da 4d 24 db 52 d5 ac 39 38 c0 08 fe 03 0c 60 83 e8 af e7 cc 7f 3a 4d 40 50 03 c3 c2 b0 08 85 e0 1d a8 4d f2 9d bc 4f 08 6e b4 19 11 aa a2 45 81 7d 21 28 08 01 61 aa 03 06 c7 e1 22 04 02 02 06 81 80 30 66 23 fc 03 81 43 1e 02 06 75 05 0a 7f 28 8e 81 53 a4 5e f7 47 ce 3f 97 7f f5 6a 37 0b d4 db 4b fa 41 9d 9f dd db 1f 59 a4 a8 2c 76 db 9b aa f2 0b 84 90 7f dd 8f 93 83 83 77 f2 2d c2 ba 2c 4e eb ec d5 21 f8 e7 7d e2 1f 7f e4 81 3f 0c b0 24 c9 36 6d ad 6b db b6 6d db 36 df fc e7 d2 b1 e2 fd 5e 45 f4 7f 02 e8 a5 b6 58 82 96 d2 57 a8 82 73 1a 1b cc 58 d3 2f 4b ab e7 0d Data Ascii: RIFFjWEBPVP8L^/]@6mU~&)F$IYV2LZnM$R98`:M@PMOnE}!(a"0f#Cu(S^G?j7KAY,vw-,N!}?$6mkm6^EXWsX/K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	50046	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	524	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1420 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	722	IN	Data Raw: 52 49 46 46 84 05 00 00 57 45 42 50 56 50 38 4c 77 05 00 00 2f 33 c0 0c 00 09 33 6d db 28 7b 13 fe 88 3b 0e 11 fd 9f 00 fe 4a 90 71 0e 13 99 0f 2c 18 45 92 a4 28 17 8e f9 9e 7c fe 75 9d 95 f5 60 24 92 94 95 2f 09 c0 d0 3f 1b 01 50 08 c5 6d db c6 59 3e 93 f4 9c a0 c8 0e ed 7f aa 46 31 82 9e 1e 40 b4 f4 80 00 8e f3 b7 9d f5 ef 03 20 ff e2 db b1 1a 2b 00 f2 3c e0 d3 28 40 67 db b6 63 b6 73 dd df 60 ad d8 b6 6d bb b6 f3 13 8c 6e b7 31 5a a7 ca 91 3e 95 93 d6 e6 46 65 db d6 cc 7c ef 55 7c 6b 67 be 29 d3 d1 b1 b5 ed d8 f6 ec eb 7e 7f fb 8f 6d db 46 65 73 00 d6 30 b2 d2 3a a9 32 04 9b a5 93 ca 76 65 1b ef f3 5c 27 e5 da b6 55 db 4a 1f eb dc fb 0c 77 09 02 22 a0 e4 52 23 0f 62 21 0f 4a 0e 71 58 06 44 e0 f6 b8 77 c5 04 08 fc 3f 3e fb f9 5d f4 b2 ac 84 15 d1 62 b5 Data Ascii: RIFFWEBPVP8Lw/33m({;Jq,E(\|u`$/?PmY>F1@ +<(@gcs`mn1Z>Fe\|U\|kg)~mFes0:2ve\'UJw"R#b!JqXDw?>]b
2024-04-19 14:06:50 UTC	698	IN	Data Raw: 44 80 c5 40 b2 24 00 2c 32 5c a1 72 6a 69 eb d7 c2 19 87 06 00 70 d2 9e 23 db be 1b 00 80 9a 10 29 40 b1 56 e9 c0 11 41 4d 82 15 f6 7c 7b fa f1 c5 e3 ce 33 b4 93 31 30 fc 7f 1a f5 94 f4 d7 d4 28 02 80 a0 00 e8 62 11 80 85 54 6d db 5d 67 da f4 ed 71 fc 8e d7 56 4e d9 47 31 b3 1f d3 58 f0 fa c8 19 07 4e a3 00 08 50 ac 35 81 5e 6b 02 60 91 99 8c 5e f5 76 e7 ff 3b 68 f5 a4 3d bb f8 cc ff ff be df af 8f cc ad 97 07 f3 5f f3 c5 2d 1f 9f b1 f9 85 b3 0f af 51 84 02 c2 6a 62 21 11 09 95 02 ea da 1f 4e 74 7f 60 79 6d 07 5e 78 e2 9b 13 fd f1 d1 15 9f f4 dc 56 66 9f bf 4f f2 fa ac cf 3e 87 e6 2e ff 75 06 03 ab 89 05 62 cf f2 ae c8 92 9a e3 4d 06 12 6d 60 a0 e5 43 36 f5 46 3e 9b f5 ca 17 2b 3f 88 ee f4 83 5d 71 fa 09 66 dc ec bf 29 d7 52 05 2c a8 ca 6e fc ff a9 7a cc Data Ascii: D@$,2\rjip#)@VAM\|{310(bTm]gqVNG1XNP5^k`^v;h=_-Qjb!Nt`ym^xVfO>.ubMm`C6F>+?]qf)R,nz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	50047	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	530	OUT	GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 40644 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	721	IN	Data Raw: 52 49 46 46 bc 9e 00 00 57 45 42 50 56 50 38 4c af 9e 00 00 2f 0d c2 49 00 4d 48 92 24 49 6c 1b 74 cd 8a 02 58 eb ff 3f 18 8b 01 a0 93 8f 11 fd 9f 80 fc 5f 85 1b bf 9f 8b 0f 57 47 65 24 39 64 41 22 a3 aa f1 a9 ea 25 aa c9 67 df af ac 20 e8 cc a8 0c aa 04 ad 8c 15 07 77 46 a9 71 e7 0a 02 27 e5 bc 9a c6 0b a8 ec fb de 48 55 cd af 3f 8d 31 52 23 2a a3 48 39 ca 33 2d 64 4a 5d 69 05 68 bc 0f 7c 52 b9 ff d7 66 2e f7 c6 e8 8d 24 c7 4b 6c 5b 40 8a 15 16 ad 81 20 c2 73 e6 6c 12 57 49 b4 13 2f 5f bb ad 9d d7 f9 1a 1f 00 1a 5a fb 6f d5 ac aa 54 8d 9f 07 80 dd 01 fb 0e 3b b0 03 9f ba a1 6c 36 9f 30 8f da 39 9b 37 81 24 2c 3b 70 e7 5d 00 41 93 06 a3 5a 9c 07 60 21 13 1e 52 85 d4 4a 6d 79 bb 9e 48 0a 43 22 99 4c 55 5a dd aa 32 75 ef f7 f4 e4 ec 8c 1a 61 91 5a e6 b8 c1 Data Ascii: RIFFWEBPVP8L/IMH$IltX?_WGe$9dA"%g wFq'HU?1R#*H93-dJ]ih\|Rf.$Kl[@ slWI/_ZoT;l6097$,;p]AZ`!RJmyHC"LUZ2uaZ
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: d5 75 d1 75 dd 75 dd 59 51 0e ba e1 e7 e2 e0 05 3f ca 45 37 dd 4e ee ca 8d 90 c4 84 71 52 98 fd 3a 19 c2 18 21 12 67 42 c8 c5 b7 cf 0b 7a 87 14 42 50 6e 4e ec ed b5 bd be 82 10 e8 50 48 48 42 f4 e8 01 3d 40 02 50 4b 4c 5c 5f 92 06 67 9b 99 c4 98 c4 cc ae 10 8b 00 c9 18 75 91 24 c9 65 d4 7f 2a 54 53 c1 24 ce 2e a3 cb 28 bd b1 d7 2b d0 5a 66 bb 95 34 0a 82 c0 98 20 d8 30 c1 86 09 36 82 60 85 58 23 09 31 ba be 24 89 1f 9f bf bf 8c e7 5f ca db 05 62 c6 e6 cc b3 c9 09 63 32 4b 4c 61 72 22 31 85 31 e7 04 c5 97 61 fb ce f6 17 6f 57 48 d2 a8 30 a6 82 49 12 93 04 99 54 a8 60 cc 02 21 c4 17 f1 19 b3 ad 10 62 34 19 18 00 48 00 4e 49 82 02 2d 9d da cc 91 67 9b 91 d9 21 b3 01 7b 93 5e 9d 91 81 81 7e fc 6c 3f ef 5a 20 43 c6 44 66 49 62 2a 24 26 31 26 31 c6 98 24 93 c4 Data Ascii: uuuYQ?E7NqR:!gBzBPnNPHHB=@PKL\_gu$eTS$.(+Zf4 06`X#1$_bc2KLar"11aoWH0IT`!b4HNI-g!{^~l?Z CDfIb$&1&1$
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: df 7b 86 f7 19 31 6a dc 5d 36 72 25 38 cc 78 0a 77 87 20 67 88 bb 5b cf d0 ae b5 e8 11 8b c2 29 5c c7 76 fe b8 4d ef ea b5 98 c3 2c b8 3b d4 61 c4 6a 9c c6 0b a7 17 33 4b ce 5a 4f 16 77 84 bb bb 5e db 93 87 e9 9d 15 ee 0e dd b0 82 cb 08 46 ee 2e 67 e3 ee b0 af bb 8c b0 30 7c 18 5a 72 65 08 23 77 9d b1 1e 39 41 86 6e 67 74 fd de 19 35 c9 f4 fa bd 14 b0 ff 5f a4 44 df 89 4d d8 a5 a4 c3 c2 96 12 15 b0 10 bb eb ec 53 6c 0f bb bb 51 da 0e 04 e3 ec 6e cf 53 54 b0 29 01 95 96 92 6e 58 76 17 36 67 67 46 1b ad 6d c7 36 49 d2 71 9e d7 fd e0 7d bf 40 66 44 66 21 33 c7 b6 dd 4e c5 d7 b6 f5 6b 6c db fa 6d ab 6d 23 22 33 c7 b6 ed 72 2a 2a 26 f0 bd ef 83 fb ba 62 02 bc 64 db b6 49 92 b6 6d 91 b7 7f cb f7 15 a0 fa fa 01 51 bd 04 dc 4c ee f0 c4 a7 85 43 57 78 18 98 f4 c0 Data Ascii: {1j]6r%8xw g[)\vM,;aj3KZOw^F.g0\|Zre#w9Angt5_DMSlQnST)nXv6ggFm6Iq}@fDf!3Nklmm#"3r**&bdImQLCWx
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 4f 8f 74 4b d2 d5 10 a0 8f 41 4b 17 3c 4a ee c8 0e a9 47 3a 25 77 24 2e 4e 87 2c 49 b7 74 5f e8 0e a7 19 5c 57 43 33 38 26 fe 9c 93 91 61 b4 49 5a 80 06 e8 10 31 86 fd 47 1e 3b de 2e 38 1c 6c f4 d4 59 d9 72 42 a8 f6 f9 fb cb 3f bc bf e2 d3 fb ce f3 1f 69 c7 1c 01 2a 85 d5 5d 7c 68 6c c5 cf f9 f6 8e 01 fc 71 79 a1 ea d9 8e fa 00 cb 7c de a8 b4 3a 13 61 64 81 91 91 d5 b3 b2 48 64 e8 4a 54 13 ea b4 6a 22 70 25 88 9e 95 3d 91 05 f8 4a cb c8 c2 77 3e 49 df 2d 97 26 75 a2 19 a7 b4 24 51 4b cd b8 ae 71 4a 4b 9f 2e 24 1a a9 25 68 a4 46 6a 49 c7 c8 0e 49 97 e6 05 79 c1 ae 78 33 d8 fe f1 e9 18 78 53 b4 51 70 08 6c e9 4d ee 91 d8 b8 89 21 45 a8 22 b4 92 81 b1 70 61 73 d4 98 25 46 7a 4c a0 ca dc 03 36 3c 63 39 14 2c 17 05 55 9d 9f b5 82 ab c6 df 95 6b f0 2e 05 71 45 Data Ascii: OtKAK<JG:%w$.N,It_\WC38&aIZ1G;.8lYrB?i*]\|hlqy\|:adHdJTj"p%=Jw>I-&u$QKqJK.$%hFjIIyx3xSQplM!E"pas%FzL6<c9,Uk.qE
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 6f e0 16 00 da 37 60 90 1a 00 6e 4d d3 03 3a 3a 14 3b bd 5e ad 25 a6 e6 68 63 41 ea f5 49 5a 22 db 48 c6 8d 41 af 1f ef d7 91 56 0d 5d 36 60 20 d3 e4 2c c0 fd 69 7a e8 b5 4a d4 69 b7 24 11 d9 c9 f1 a8 94 52 ab 47 2c b7 1b c6 fe b5 ee 3f e3 15 c3 ac dc 03 cf 80 db 40 e9 01 64 dd c2 67 61 9a 46 89 41 0b 61 2d b5 ca 25 e7 72 1e 8e 1b bc 34 ba d6 da 9c ef 5b 3f 3f de 70 67 91 30 7c 4f 05 07 b4 9a 3c 83 4b 69 06 e7 03 3d f8 bf 7e cf 08 8a 68 66 1b a7 2c 77 cf 40 3e cf d1 cd 43 5a d5 34 fd ee d9 27 b7 03 d5 67 8d 0b 01 7e bf 4b 18 27 f7 75 2c a5 64 fe 64 e3 a8 74 ba 3e a2 e2 87 b9 05 da 5c cb fc a7 7c d1 f6 b6 06 18 42 d5 0c 2d b6 19 93 ee 09 fb 53 43 ce 55 76 2c 72 04 50 cd 03 14 1d 19 b6 9d 6c 62 25 29 c3 d6 69 c3 8a f7 6c dd 17 1e d0 aa 40 3e 34 a9 ee a9 dd Data Ascii: o7`nM::;^%hcAIZ"HAV]6` ,izJi$RG,?@dgaFAa-%r4[??pg0\|O<Ki=~hf,w@>CZ4'g~K'u,ddt>\\|B-SCUv,rPlb%)il@>4
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: be f6 76 0a 22 99 80 fe af a0 51 06 7a 7e 5a 16 12 f1 42 7d 11 b0 9e bc 91 67 26 f4 e2 bb 3a e7 a7 1d 8b 3b 79 5f 87 72 a5 36 41 46 60 e9 02 10 dd 4e 6a ec 68 90 80 29 c0 c4 52 32 90 22 4a 4d e5 ca a4 d0 51 0d 4d 88 93 da 3a 0b 27 e0 c6 07 4b fb 28 d9 a2 00 40 67 81 f2 ba 15 57 5c 48 a0 e4 88 b0 ed 91 5a 68 9d bd 28 39 72 04 ce 3c 78 9a f3 21 ff 7a 0c 50 9a 92 b4 3d 32 77 fe 5f 40 b5 19 95 49 2a 9b 1c 55 6d 89 09 e0 eb 34 62 8c 0d 31 42 d8 ad 17 a4 ab 4a 21 51 5d 6c d1 ee ee 61 cc d8 cb f3 c4 cb c7 08 00 fa 73 f6 2e 40 a9 e1 d3 74 c4 cb 45 e7 81 81 3f d5 ab 3e fb b5 a6 be ab 5a 6f 8b 9b d8 73 40 ea c0 9b 00 a6 19 80 d4 48 4a ec 08 89 4e c0 7c 58 db 50 3d 8c 67 40 a4 e5 ac f9 65 8f 82 e2 3b af d9 3c 7c ee 40 d5 dd a9 87 10 d4 3d 64 20 a8 2a 6f 0c 53 37 c9 Data Ascii: v"Qz~ZB}g&:;y_r6AF`Njh)R2"JMQM:'K(@gW\HZh(9r<x!zP=2w_@IUm4b1BJ!Q]las.@tE?>Zos@HJN\|XP=g@e;<\|@=d oS7
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: fc cb 12 28 16 18 69 d3 94 98 a3 8e 1a d6 c3 1b 12 15 27 4c 55 8e a0 57 74 cf 1d fb d8 2c 2c a9 80 44 19 ab 78 42 04 e7 9b a7 2c a0 f8 5c b7 de c4 4c 95 e2 a9 00 bb f9 00 8c c6 50 4a 8e 79 7c b2 62 af 0f 49 58 d3 51 43 e5 db b9 45 d1 89 78 66 25 f9 ec 6c 18 cd 4c a3 85 f6 b1 b7 65 f3 50 ec 96 e2 7d e5 3b 3f 55 80 41 95 37 50 3d dc 66 66 b4 d8 a4 3b 00 7c 89 4d 0b 7a bf 2f ba 36 24 c6 52 62 50 61 cf c7 eb 2d e1 a4 e0 35 f8 3b a6 60 fd f4 71 99 cb 6a b1 2a d9 90 6a 5a 73 9f dc f4 69 f4 fc d8 bd 3f 61 22 f5 4e 65 93 8e 54 21 b9 7c 88 f8 e2 4b b0 80 d9 c8 1a 38 93 3b 07 00 de 99 ca 54 65 ba 4f 12 ff 2c f0 b0 2d 23 1f 02 00 2e b4 5f eb ab c0 15 e7 cf 23 9e 88 0d 14 fc 47 fb 57 bf a2 c2 7c 60 52 ac 92 bb 3d fb 4f 00 4e 9d bb 59 a2 94 3c cf e9 73 77 39 27 d4 9c Data Ascii: (i'LUWt,,DxB,\LPJy\|bIXQCExf%lLeP};?UA7P=ff;\|Mz/6$RbPa-5;`qj*jZsi?a"NeT!\|K8;TeO,-#._#GW\|`R=ONY<sw9'
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 63 a5 07 80 d9 57 6e a2 cf 97 0d c0 f7 ea 95 b9 0f 2b e8 62 1e 36 e5 7c 9e 51 c8 7b 00 d8 e6 ca 35 1f 03 54 d7 9a da 00 e0 01 ad 3a 56 6b 84 3e 0f e5 91 6a 2e 32 fd a5 2f 92 dd 25 ca 14 8e db b3 9a 65 cf dd de ad e1 ad b5 f1 97 56 fb a2 d2 f0 ac 13 3c 77 a1 06 00 91 cd e5 f5 63 0f ac 4e b5 a9 d0 79 fa 46 7e 8f c6 10 09 32 b5 10 3f 33 1d 2e 5e 2e 05 f6 5d 03 50 60 4d 77 11 ad 99 8f b8 08 4f 61 6d 2b 57 98 4e a2 46 11 b7 42 da 18 2c 97 4f a7 79 a4 60 90 48 67 49 c7 c5 0b c4 02 89 03 23 89 40 83 69 7f cf 1f 5e 28 6d ff 64 9c 5c 55 c8 1f cf 74 3e 84 56 6b da 17 5a 68 ec 7e f6 68 7f e2 b5 56 f1 b3 61 ec 49 b5 dd 68 a4 a0 90 46 43 aa 36 73 b3 64 7a bc cb 36 47 46 53 28 0c 5e 26 86 61 c5 bb 4e 85 7f 6a fa dd 69 e4 da 0c e8 fc 5f c9 fb 97 a0 f2 e0 9c 6d d8 55 65 Data Ascii: cWn+b6\|Q{5T:Vk>j.2/%eV<wcNyF~2?3.^.]P`MwOam+WNFB,Oy`HgI#@i^(md\Ut>VkZh~hVaIhFC6sdz6GFS(^&aNji_mUe
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 2e 44 ac 9b 4a be a1 db 1b 9f b0 56 67 cc 68 66 bd b0 f6 ae 23 bc e3 f4 89 2e bb b3 e6 8e 35 cc 10 c7 0d bf 9d 11 89 dc 23 67 ec 97 b1 2f 31 66 dc a3 db eb 33 a5 e0 59 b1 00 0c 52 68 e0 39 9c 91 27 cf a8 0f ac f1 5d 4f 57 92 5c 5e 40 f0 2e f0 61 6b 4b 12 fd bc 8f 2a 2a 52 98 2f a8 a2 c2 b4 9f 87 11 8a 62 fd 63 2a 19 c1 c9 85 3c aa a8 d8 c6 82 a7 8a 18 fb 79 9f 31 45 d2 38 ed 2c 60 b5 f0 ca 2c 07 63 0a 31 48 16 3e 7d ed 71 99 70 b7 fd d5 87 28 5d 15 e8 ff bc bf e0 5f 8d 28 7f 6e 89 01 83 95 c5 7b 9d fa 3e 5d c4 fa 23 e1 5f 6e 7d 15 c2 05 a7 58 ee a4 dc 99 0d 62 b6 7d 0c 7e b9 58 89 05 af dd cf b7 67 0c e0 93 41 53 f7 b2 3b 5d aa b0 54 b2 11 c7 2b 8c 2d 1a c0 64 69 01 7c ba bf 6b 31 54 5b d3 10 ef 88 4a 85 d2 3a 2b a5 00 68 70 90 2d 7e d7 7f f4 e0 aa 66 21 Data Ascii: .DJVghf#.5#g/1f3YRh9']OW\^@.akK*R/bc<y1E8,`,c1H>}qp(]_(n{>]#_n}Xb}~XgAS;]T+-di\|k1T[J:+hp-~f!
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: d3 5b 2f 2e 81 bc 9f 0c 77 0e 01 66 de 2d 4d ed 40 2a 83 a9 a4 e5 d7 e9 e8 64 a4 91 63 81 92 6d ba 6c 51 dd ba b0 84 ed 57 e6 54 ad f2 98 e6 3e 00 b4 21 f1 46 f5 83 8e 86 27 1e ab 65 69 4a 57 32 b5 9c d0 7f e9 f5 50 5d 54 4b d2 b5 4d d5 0f 2e 69 42 c2 a3 84 25 92 05 90 1b 1c e3 f9 ef fe db 07 3d d7 a4 c5 03 3f 54 20 db 7d d3 f4 4e 5e f4 3b 1f 2e 3c 3c dc a7 2c e1 48 14 5b 62 0f 7f 17 5f 68 8a b6 66 c4 20 ee 54 7a 44 3d a0 58 a2 55 de de 71 50 ea ef ea 96 88 c7 20 39 7b 40 21 dc 25 56 41 35 ea ff 39 9d 4d 4e 59 8e 8f af be 9c 50 16 2e 96 6b 49 12 17 b5 01 d2 c0 b6 50 d2 10 af 60 12 49 87 a0 4d 6d c0 94 01 89 5c cb ba ae c2 90 48 92 e8 a4 64 cb ae 8b 2a f9 b9 85 5d a6 cc 1d a9 c8 eb d9 f2 a5 98 28 e0 39 9a d7 c4 93 f4 3c 82 67 b8 d8 3d 09 97 e3 ea 4a 1d d5 Data Ascii: [/.wf-M@dcmlQWT>!F'eiJW2P]TKM.iB%=?T }N^;.<<,H[b_hf TzD=XUqP 9{@!%VA59MNYP.kIP`IMm\Hd](9<g=J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	50048	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1102	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 14592 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9593 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	721	IN	Data Raw: 52 49 46 46 f8 38 00 00 57 45 42 50 56 50 38 4c ec 38 00 00 2f ff c0 3f 00 4d 40 72 1b c9 91 84 c8 8c 34 e5 fe ff e0 ac ee aa 99 35 e7 88 fe 4f 00 fe d7 32 06 c0 8f 98 89 08 79 49 87 98 98 88 35 90 37 cc 58 cc 5a 6b 0d e4 81 aa 59 a6 d8 b6 35 55 90 07 46 3e b5 a6 55 de b5 ec 4f ed 61 c8 1b 91 ac 22 63 8c d1 b4 e2 84 9e 11 63 16 a8 02 38 72 32 29 5b 0c ef 37 dc c1 f9 54 4f 7a 77 77 79 c5 83 b1 19 3b d9 f0 08 0b 60 d1 28 ee 07 06 2c 33 80 1a c1 cd 7a 05 b1 aa 3a 11 11 24 e9 be f4 95 9b 99 ce a9 da d3 d2 49 d2 f5 00 a6 35 33 3d a2 e8 c1 56 7b 66 a6 45 26 b5 9e e5 36 22 d7 9a 77 e0 1a 22 21 6b ce 5b 00 56 ac 59 ef fd 43 17 72 1c 49 72 24 c9 e5 e5 ec ff 6f f3 65 85 44 62 48 1c 6f 9c 3a bd d5 2d ad 0c 4b 92 64 55 55 e2 0e 8d 3b 9c fd 2f 8c 2f e7 b9 06 1c c9 b6 Data Ascii: RIFF8WEBPVP8L8/?M@r45O2yI57XZkY5UF>UOa"cc8r2)[7TOzwwy;`(,3z:$I53=V{fE&6"w"!k[VYCrIr$oeDbHo:-KdUU;//
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: c8 f9 92 33 db fb b6 c0 3d d9 1e e8 06 77 54 70 0b db 56 ce aa a9 1b 52 5b 97 d4 b2 4b 60 33 b4 98 1c 36 42 4d 1e 51 41 6a 8e dc 59 0e 29 b7 96 73 71 77 43 f1 60 c5 af 8d 37 ff bf 55 92 ec 1c a8 6a 9a c6 e1 59 66 66 14 33 33 33 33 33 33 33 59 97 99 19 97 99 99 69 96 79 77 b0 7b 66 67 ba a7 ab bb aa ce 31 16 b4 db 73 aa da bb fb 73 37 01 85 42 39 d4 f3 c8 7a 2d 3d 47 2c 55 0a 6f 04 72 ef 4d 43 6e 2b 01 6c 71 b9 7f 57 95 80 28 8a cd 43 ee c8 6c 77 2c 81 fb 8a d5 22 97 3a 05 d9 74 29 02 b9 eb 8e db 62 ad 7b a2 10 43 0e 98 c0 35 77 dc 71 5b ac 1c 4e 5c d7 14 43 bb 6d be 79 a8 43 50 2a 9b c2 d8 62 a6 d7 dd 04 84 31 c8 65 d6 d8 4a e1 b8 77 12 10 8c 2b 53 16 4b 31 c8 be ee a4 20 86 d7 bc e3 52 a0 6d db b4 1c ed 7d 1e ea ab 2a b6 ed b6 6d db b6 6d 77 ff 42 46 db Data Ascii: 3=wTpVR[K`36BMQAjY)sqwC`7UjYff3333333Yiyw{fg1ss7B9z-=G,UorMCn+lqW(Clw,":t)b{C5wq[N\CmyCPb1eJw+SK1 Rm}mmwBF
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: b0 73 62 86 f1 ec d2 1b 05 08 f0 cf 06 2a e9 6c d3 fa 1c fc 87 4d d5 66 7f e1 96 ca f6 ae 55 6a 4c 03 d8 d2 8e 5f 9a 94 53 fd 08 01 81 c5 24 3f dc c3 2f cd a7 15 25 27 42 e1 d9 b6 c6 41 00 11 04 91 b0 5c 4b 87 d5 a9 a3 73 e4 24 1c 35 cb 3b 70 8b 37 99 67 4c 2d 05 05 14 4c c9 f4 5a c6 fe 73 c6 c7 40 ca 90 5c ea 37 6f 68 3d 34 b7 61 b6 3c 70 55 e9 d1 87 ab a5 7d 00 1c 20 11 71 41 14 8b 53 7a 3c 47 6c cc 49 ed c9 e6 c6 d5 7a 8d a9 4c cf a4 dc 0f a1 80 82 c5 1c 34 66 74 4d 38 0a 85 a8 5b 80 68 42 b9 4f f6 d0 26 aa b5 e7 f9 dc d1 f4 81 11 04 22 80 0b 9a 45 91 e6 22 ee 61 74 e2 d0 20 13 e3 64 6b 33 2c b7 ac 59 1d 10 f4 5a 50 21 02 1c 30 1d eb b7 d9 52 8d 29 4c 66 8d c6 cb 0c 60 13 85 44 50 d9 17 eb f7 fe 4a f4 d1 74 93 3e 12 62 e6 f2 bd ab de b6 5e 16 84 6b 6c Data Ascii: sb*lMfUjL_S$?/%'BA\Ks$5;p7gL-LZs@\7oh=4a<pU} qASz<GlIzL4ftM8[hBO&"E"at dk3,YZP!0R)Lf`DPJt>b^kl
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 5e 84 49 c3 ca 48 04 01 22 4e 64 17 e9 08 27 fd e7 d4 dd 95 0d 7c e3 cd d1 0f f0 97 35 5a 39 a8 08 00 c3 39 4a 16 25 66 8e 3e 38 ba a5 42 c1 07 73 3c 0b c1 33 4a 81 f6 4c 90 94 03 68 bd 5b fa 77 08 08 18 1c 80 35 f6 58 6f cb db eb d2 bd aa ed 41 b6 b0 d7 8d 20 40 10 20 22 0b c6 3b 3b 6d a6 27 cf a4 b5 c9 8c f7 3d ca 7f 9a fe cb f8 8f 62 ef 55 9f cf 46 2e a8 b5 00 30 83 82 cc cf 7a 0e 06 81 fa 16 2b 72 32 40 5f 94 e0 69 23 7b 59 57 94 a0 36 42 00 71 46 2f 0a 88 b1 4d bf b5 b7 ee 6d e3 f6 e2 9b ad ed f3 3a ff 78 f9 c7 d3 29 eb 2b b3 fd c4 e1 3b e4 f6 31 d6 fe af 7f d0 99 65 7d ae 53 4a 86 b1 e0 ee ac 41 8e 49 6d e7 3b a1 c2 17 cd ef 41 69 6e 00 1e 42 82 6a 4d f1 c7 de 68 41 52 60 e1 12 2d 44 68 84 63 ad d6 bd d4 57 58 71 5c 3b a8 d6 f6 79 b5 fb 73 da 8f d6 Data Ascii: ^IH"Nd'\|5Z99J%f>8Bs<3JLh[w5XoA @ ";;m'=bUF.0z+r2@_i#{YW6BqF/Mm:x)+;1e}SJAIm;AinBjMhAR`-DhcWXq\;ys
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: b1 a8 ef 30 e3 9c d9 51 10 a9 97 01 c1 2e 88 5c 75 f1 0a 03 6d 4b ac 48 d8 2e c3 9c 14 36 6a 0f d1 6a 93 10 e5 b4 9e 3f fe 28 0a 24 22 d4 47 1f d7 fa 6b e4 bc 38 fc ee ae 9d a6 38 08 5f 7f da 03 c9 08 9f b6 fe 0a 34 24 24 97 51 73 65 88 cb 17 66 d4 77 83 c5 6a 8e 9f 7b d3 51 32 67 df 22 e8 03 44 27 d8 4c f2 8c c1 dc a3 85 01 8e 28 84 51 00 53 46 6b ad c5 fd e2 77 8e 3b ad 75 b5 ee bd 7a 4e ed b2 35 00 82 db de 29 db a9 1b a4 f7 7d 7c cf af 7f 4f 4d 29 25 71 b5 ae fc ce d6 bc f9 4d 75 82 5a be da 6b fa be bd 37 dd 8d 0a d6 98 4e f7 c2 ab 07 17 77 f3 f9 e8 e1 88 53 65 93 22 90 01 30 0a 05 2d c8 26 b3 1d 38 1a af 36 8e d2 36 1c 08 74 53 0e 20 70 fa fa 49 f3 80 f7 7f 9e dc 7f 92 7e 48 b5 84 84 6f 2e cb 0c e6 da 8c 52 6b c5 30 b3 71 38 86 72 a1 2a 97 4d 50 fc Data Ascii: 0Q.\umKH.6jj?($"Gk88_4$$Qsefwj{Q2g"D'L(QSFkw;uzN5)}\|OM)%qMuZk7NwSe"0-&866tS pI~Ho.Rk0q8r*MP
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 6f 5b 9a b4 86 86 c6 a6 e9 f2 73 da be 97 de bb ba 7b df 8d e9 d2 b0 6f 3b ff 7c 34 5d cc eb 78 92 c8 e5 cd 96 24 ee d5 df af 24 b8 5f a9 fb c5 17 8e 3a e2 f8 4a fb e7 3b 9e 39 d2 2f 7d b7 9f f9 da 6f f6 ea eb 46 b1 e0 82 1d 39 40 7c b1 87 75 ef fd 03 68 67 68 2b 53 07 76 f4 f1 ab 7b d7 1b dd ba 4f 45 f7 74 69 5a 35 8d d6 55 ad bc 6e bb 45 2e 91 1b 7a f5 5e fb 6e c8 60 6d ca e5 d0 63 7d 1f 63 64 5a 17 ba 84 42 42 22 cf c9 75 bc 58 8f fb 9f e0 a8 b3 24 2e 78 c3 70 e4 3f fd 98 07 89 8f d2 4e d8 47 80 00 e1 ec 9d 29 6d d7 5d 5a 57 b7 b1 6f d5 b4 1d 9a 7d 2b d5 4e f2 ba 44 f2 88 24 31 62 ca 17 6d d9 27 91 44 14 c5 5c 0c a7 eb 58 64 4c 02 a0 14 ea a4 bd 3e fe 29 87 5e 9c cf 4a a3 15 b4 c9 e6 6a 0e ff 9a 71 1f 59 7a 88 b6 2b 40 1c c4 69 d5 fc 81 ea b6 b7 56 e7 Data Ascii: o[s{o;\|4]x$$_:J;9/}oF9@\|uhgh+Sv{OEtiZ5UnE.z^n`mc}cdZBB"uX$.xp?NG)m]ZWo}+ND$1bm'D\XdL>)^JjqYz+@iV
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 49 56 d6 79 20 a2 65 2b 7d e0 91 0f 59 8d 69 0f 9c 3c 2c 7d 64 75 9e 5c c5 2c d4 1a a4 b5 29 21 4d 1a 9d 7f da da 2a c4 53 b1 e3 67 dd 7f f1 cf e4 75 db 7b 1e c9 bf 38 6a ed ae 0f 82 65 0c 77 b8 c3 3d dc 6e 49 00 7d 9c 70 86 77 47 43 2f 40 cb 9a 4b f4 e3 3d 6b b1 be 7d 69 5b 3d bd bf b6 9c d4 e7 50 d2 64 32 5a 8b cb 35 ef 47 3c aa fe 3f 1d da d1 7c af f3 2a 89 f7 d7 9a 36 57 18 c3 48 05 87 3b dc 91 ab 02 5c 3d 4e be a2 76 14 87 68 ef 44 01 d0 03 9c 97 a0 e2 64 8b b2 b6 59 9a 95 38 ba d2 a0 b5 e8 d7 16 95 24 e3 29 35 5a a0 f6 ad b6 bd 9a 7b 5e 1e be 22 49 2c 55 f5 79 31 22 2e d7 86 70 5c c1 fd 8a dc e4 10 8f 93 3c 35 50 61 05 c2 a5 f6 b9 54 00 ca 51 67 a2 4d 2c 39 bc 59 c9 49 43 19 47 02 1d e5 23 9e d3 26 66 11 11 ae ef be d7 25 79 bc e6 3d 47 55 9c 75 7e Data Ascii: IVy e+}Yi<,}du\,)!MSgu{8jew=nI}pwGC/@K=k}i[=Pd2Z5G<?\|6WH;\=NvhDdY8$)5Z{^"I,Uy1".p\<5PaTQgM,9YICG#&f%y=GUu~
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 4c 37 ae 0c 19 c7 e0 24 07 70 f8 ee 01 e0 f9 8f 87 ed df cd 9f 84 95 c8 48 ea 96 24 43 ee b7 32 3c c4 83 60 18 24 98 19 d6 be 10 33 e5 de d9 fd da b0 4c 47 93 e9 37 a8 08 54 a1 0c 5c 21 8c 9c fb f8 7e 08 08 15 d2 dc c4 4d 9d 47 bd eb 4c b1 1e 09 bb 75 ba ec 09 5c f8 2e de 77 cf 7a 6c 7f ae 2d 22 94 44 c8 3d 49 c4 52 5b 92 48 ea cf 54 a4 11 c1 2e 2b d3 ba 75 f5 82 c9 99 e1 85 c3 69 98 e5 9e 91 b6 90 4e d4 37 ea b1 01 78 51 8d aa 57 33 cd b7 4e c2 60 d3 ec f1 7e 55 b5 a7 86 b8 a8 81 3c 8c 5e 1a 05 c8 00 7f e6 26 6e 91 4c 92 e0 8a eb f1 c5 12 c9 83 78 48 7a 17 fe 7f b1 a3 35 ea 7b 19 31 13 6e 91 d9 b7 4c d9 24 9f 37 e0 5c ea d6 d5 15 bc 12 05 19 a4 b8 60 43 1b 7d 50 e1 7c d4 ad d0 d5 95 88 8e e5 78 bf e6 d2 df c0 bb 04 5e 97 24 be 9d 71 f5 22 15 12 41 12 93 Data Ascii: L7$pH$C2<`$3LG7T\!~MGLu\.wzl-"D=IR[HT.+uiN7xQW3N`~U<^&nLxHz5{1nL$7\`C}P\|x^$q"A
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 71 1c 97 b1 8e e3 38 ae 47 94 f4 11 cb f2 ea 72 3d 76 8b 72 5b 97 34 8e e9 5c 96 b2 5f ca 3e dd ea b8 90 87 bd a5 3f c1 83 07 ca 92 9e 6f 33 c0 8d c3 7e 65 d6 97 7f 14 71 38 7c 14 b4 fe a2 a9 69 75 b2 ac 57 bb 92 c1 20 e6 7e 34 6f e5 3d 55 eb 97 2f c5 e9 d4 60 64 b3 bb 06 c6 f3 1e b9 32 21 82 90 91 71 1c cb 07 eb b8 dc a6 69 91 7a 5b 5e 5f 1f 96 61 ac 69 7c ef 1b e3 a1 a4 43 49 e7 6e dc 95 f5 39 04 7d 89 7a 27 f9 3c 4d da 87 bb f2 e0 f9 b4 ab e9 2f 2e d4 2b d5 d6 08 c0 e8 53 4c 1b 39 30 4c 9d 66 d7 55 7b 95 c3 cd dd 75 e4 4a a5 52 39 bf 9e d3 e6 a7 af 3c f7 58 91 b7 77 78 1a 81 d7 d5 7f 11 32 0f 42 c4 65 e4 36 d5 0f d6 f9 30 f6 7a bb 3c d3 71 44 92 94 ae a5 07 39 dc ee eb 52 d2 94 4a 59 3f 5c 97 d2 d7 17 cc 9b de 6a f7 f3 7d bf bd de d1 db e7 c3 d1 96 97 Data Ascii: q8Gr=vr[4\_>?o3~eq8\|iuW ~4o=U/`d2!qiz[^_ai\|CIn9}z'<M/.+SL90LfU{uJR9<Xwx2Be60z<qD9RJY?\j}
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 1a b9 4c 05 63 1f 5e 5e e6 32 a4 21 e7 9c cb cb cb 8b b2 db 1f 0f d4 cc bb d4 d2 94 8b 37 fe a1 6a 07 92 ca 71 c5 92 81 00 45 8e 02 58 7e a6 d5 26 10 6e 13 2c 27 8e db bb 77 8e da 0e 07 c5 50 c7 60 9f a5 04 05 0d 3e 6a 4e 9e 42 09 15 89 29 fe f8 18 dc f6 3e 7d 3f 83 49 05 32 f4 f6 86 f9 e3 fd f9 fa b8 3f ca 98 ee 52 4e d8 a7 eb fd 1e 09 a5 22 15 0c c9 73 7a f7 be 94 32 94 8b 72 f1 30 ec f7 25 a3 bc 3c 5e 88 ae 07 e4 77 7e fe 77 ee d6 1d 5d cb 9d 61 2a d4 31 b5 64 c9 3c 47 43 61 f4 2d 3f 08 48 e6 27 79 10 1f 57 ba 03 92 5b 7d b9 fd 95 43 36 7a d3 98 8d f2 e9 93 c5 1d e2 12 04 96 b3 18 3f 28 78 c4 5b 1c 1f 21 10 19 70 73 35 51 2d eb 0d 07 2e fb 77 f7 fa 97 e3 fe 23 d7 29 61 87 e5 d5 f5 1a 5a 50 90 d2 a1 60 a8 d3 52 86 8b 21 fb f1 98 9f e7 9c 33 f6 65 bf 1f Data Ascii: Lc^^2!7jqEX~&n,'wP`>jNB)>}?I2?RN"sz2r0%<^w~w]a*1d<GCa-?H'yW[}C6z?(x[!ps5Q-.w#)aZP`R!3e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	50052	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1701	OUT	POST /_/PlayStoreUi/data/batchexecute?rpcids=qnKhOb&source-path=%2Fstore%2Fapps%2Fdev&f.sid=-3106867419827377814&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58010&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 490 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535604.0.0.0; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:06:50 UTC	490	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 25 35 42 25 35 42 25 32 32 71 6e 4b 68 4f 62 25 32 32 25 32 43 25 32 32 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 31 25 32 43 25 35 42 31 30 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 39 36 25 32 43 31 30 38 25 32 43 37 32 25 32 43 31 30 30 25 32 43 32 37 25 32 43 31 38 33 25 32 43 32 32 32 25 32 43 38 25 32 43 35 37 25 32 43 31 36 39 25 32 43 31 31 30 25 32 43 31 31 25 32 43 31 38 34 25 32 43 31 36 25 32 43 31 25 32 43 31 33 39 25 32 43 31 35 32 25 32 43 31 39 34 25 32 43 31 36 35 25 32 43 36 38 25 32 43 31 36 33 25 32 43 32 31 31 25 32 43 39 25 32 43 37 31 25 32 43 33 31 25 32 43 31 39 35 25 32 43 31 32 25 32 43 36 34 25 32 43 31 35 31 25 32 43 31 35 30 25 32 43 31 34 38 25 32 Data Ascii: f.req=%5B%5B%5B%22qnKhOb%22%2C%22%5B%5Bnull%2C%5B%5B1%2C%5B10%5D%5D%2Cnull%2Cnull%2C%5B96%2C108%2C72%2C100%2C27%2C183%2C222%2C8%2C57%2C169%2C110%2C11%2C184%2C16%2C1%2C139%2C152%2C194%2C165%2C68%2C163%2C211%2C9%2C71%2C31%2C195%2C12%2C64%2C151%2C150%2C148%2
2024-04-19 14:06:51 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:50 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:51 UTC	15	IN	Data Raw: 38 30 30 30 0d 0a 29 5d 7d 27 0a 0a 37 33 32 Data Ascii: 8000)]}'732
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 33 34 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 71 6e 4b 68 4f 62 22 2c 22 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5c 22 71 67 4a 4a 45 6b 63 4b 49 77 6f 68 43 68 74 74 62 33 4a 6c 58 32 4a 35 58 7a 59 33 4d 6a 41 34 4e 44 63 34 4e 7a 49 31 4e 54 4d 32 4e 6a 49 33 4d 6a 63 51 4c 52 67 44 45 41 44 79 43 42 31 4e 62 33 4a 6c 49 47 4a 35 49 45 31 70 59 33 4a 76 63 32 39 6d 64 43 42 44 62 33 4a 77 62 33 4a 68 64 47 6c 76 62 67 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 22 2c 5b 5b 5c 22 6d 6f 72 65 5f 62 79 5f 36 37 32 30 38 34 37 38 37 32 35 35 33 36 36 32 37 32 37 5c 22 2c 32 5d 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: 34[["wrb.fr","qnKhOb","[[null,null,null,[\"qgJJEkcKIwohChttb3JlX2J5XzY3MjA4NDc4NzI1NTM2NjI3MjcQLRgDEADyCB1Nb3JlIGJ5IE1pY3Jvc29mdCBDb3Jwb3JhdGlvbg\\u003d\\u003d\",[[\"more_by_6720847872553662727\",2]]],null,null,null,null,null,null,null,null,null,null,nul
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 2d 32 46 7a 6a 78 6c 44 5f 69 75 68 55 74 51 67 6d 51 6b 6c 71 69 4b 5a 32 4a 6e 39 35 35 66 6f 35 76 70 56 67 70 41 76 37 38 36 47 34 6c 48 39 6b 52 74 4d 6b 56 2d 58 47 4b 47 6e 77 4f 42 6f 65 4f 4d 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 39 32 30 2c 31 30 38 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 72 75 4c 6f 5f 55 41 35 38 64 59 65 49 70 5a 75 51 62 5f 34 43 35 63 76 6f 4c 49 48 77 68 44 65 54 77 6e 51 47 67 6d 68 47 72 39 49 69 79 6d 70 75 5f 4e 68 72 2d 57 4c 4c 46 57 4a 78 56 30 79 2d 51 5c 22 5d 5d 5d 2c 5c 22 4c 69 6e 6b 20 74 Data Ascii: //play-lh.googleusercontent.com/-2FzjxlD_iuhUtQgmQklqiKZ2Jn955fo5vpVgpAv786G4lH9kRtMkV-XGKGnwOBoeOM\"]],[null,2,[1920,1080],[null,null,\"https://play-lh.googleusercontent.com/ruLo_UA58dYeIpZuQb_4C5cvoLIHwhDeTwnQGgmhGr9Iiympu_Nhr-WLLFWJxV0y-Q\"]]],\"Link t
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 30 30 33 63 62 72 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 4d 61 6b 65 20 65 6d 61 69 6c 69 6e 67 20 79 6f 75 72 73 65 6c 66 20 70 68 6f 74 6f 73 20 61 20 74 68 69 6e 67 20 6f 66 20 74 68 65 20 70 61 73 74 20 61 73 20 79 6f 75 20 73 68 61 72 65 20 79 6f 75 72 20 66 61 76 6f 72 69 74 65 20 69 6d 61 67 65 73 20 62 65 74 77 65 65 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 50 43 2e 20 43 6f 70 79 2c 20 65 64 69 74 2c 20 61 6e 64 20 65 76 65 6e 20 64 72 61 67 20 61 6e 64 20 64 72 6f 70 20 70 68 6f 74 6f 73 20 77 69 74 68 6f 75 74 20 65 76 65 72 20 74 6f 75 63 68 69 6e 67 20 79 6f 75 72 20 70 68 6f 6e 65 2e 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 Data Ascii: 003cbr\\u003e\\u003cbr\\u003eMake emailing yourself photos a thing of the past as you share your favorite images between your phone and PC. Copy, edit, and even drag and drop photos without ever touching your phone.\\u003cbr\\u003e\\u003cbr\\u003e\\u003cb
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 73 77 69 70 65 20 64 6f 77 6e 20 66 72 6f 6d 20 74 68 65 20 74 6f 70 20 6f 66 20 79 6f 75 72 20 73 63 72 65 65 6e 20 74 6f 20 61 63 63 65 73 73 20 69 74 29 2e 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 45 78 63 6c 75 73 69 76 65 20 66 65 61 74 75 72 65 73 20 6c 69 6b 65 20 63 72 6f 73 73 2d 64 65 76 69 63 65 20 63 6f 70 79 20 61 6e 64 20 70 61 73 74 65 2c 20 50 68 6f 6e 65 20 73 63 72 65 65 6e 2c 20 66 69 6c 65 20 64 72 61 67 2d 61 6e 64 2d 64 72 6f 70 2c 20 61 6e 64 20 41 70 70 73 2e 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 4c 65 74 20 75 73 20 6b 6e 6f 77 20 77 68 61 74 20 66 65 61 74 75 72 65 73 20 79 6f 75 5c 5c 75 30 30 32 36 23 33 39 3b 64 20 6c 69 6b 65 20 74 6f 20 73 65 65 20 6e 65 78 74 Data Ascii: swipe down from the top of your screen to access it).\\u003cbr\\u003eExclusive features like cross-device copy and paste, Phone screen, file drag-and-drop, and Apps.\\u003cbr\\u003e\\u003cbr\\u003eLet us know what features you\\u0026#39;d like to see next
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c 69 6e 6b 2f 3f 4c 69 6e 6b 49 44 5c 5c 75 30 30 33 64 32 34 36 33 33 38 20 61 6e 64 20 50 72 69 76 61 63 79 20 53 74 61 74 65 6d 65 6e 74 20 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c 69 6e 6b 2f 3f 4c 69 6e 6b 49 44 5c 5c 75 30 30 33 64 32 34 38 36 38 36 2e 5c 22 5d 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 5c 22 2c 5c 22 31 2c 30 30 30 2c 30 30 30 2c 30 30 30 2b 5c 22 2c 6e 75 6c 6c 2c 5c 22 5c 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 32 2c 5b 30 2c 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f Data Ascii: /go.microsoft.com/fwlink/?LinkID\\u003d246338 and Privacy Statement https://go.microsoft.com/fwlink/?LinkID\\u003d248686.\"],\"Microsoft Corporation\",\"1,000,000,000+\",null,\"\",null,null,null,null,[null,2,[0,0],[null,null,\"https://play-lh.googleuserco
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 70 6d 61 6e 61 67 65 72 5c 5c 75 30 30 32 36 72 64 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 6d 69 63 72 6f 73 6f 66 74 2e 61 70 70 6d 61 6e 61 67 65 72 5c 5c 75 30 30 32 36 66 65 61 74 75 72 65 5c 5c 75 30 30 33 64 6d 64 5c 5c 75 30 30 32 36 6f 66 66 65 72 49 64 5c 22 5d 5d 2c 6e 75 6c 6c 2c 5b 5c 22 43 41 45 5c 5c 75 30 30 33 64 5c 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5d 5d 5d 2c 5b 5c 22 49 6e 73 74 61 6c 6c 5c 22 5d 2c 6e 75 6c 6c 2c 5b 5c 22 43 67 59 4b 42 45 4e 42 52 54 30 5c 5c 75 30 30 33 64 5c 22 5d 5d 5d 5d 2c 5b 32 5d 2c 6e 75 6c 6c 2c 5b 31 2c 6e 75 6c 6c 2c 66 61 6c 73 65 5d 5d 2c 5b 5b 5c 22 63 6f 6d 2e 6d 69 63 72 6f 73 6f 66 74 2e 6f 66 66 69 63 65 2e 65 78 63 65 Data Ascii: pmanager\\u0026rdid\\u003dcom.microsoft.appmanager\\u0026feature\\u003dmd\\u0026offerId\"]],null,[\"CAE\\u003d\"],null,null,null,null,null,null,null,[]]],[\"Install\"],null,[\"CgYKBENBRT0\\u003d\"]]]],[2],null,[1,null,false]],[[\"com.microsoft.office.exce
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 71 56 46 71 4b 41 6a 47 75 2d 55 2d 70 56 48 52 77 44 33 51 5f 30 64 70 44 63 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 32 37 37 38 2c 31 32 38 34 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 50 49 55 6d 34 32 7a 32 64 64 67 33 73 6a 38 35 6d 39 51 54 6a 36 77 39 33 36 46 53 43 6d 44 7a 77 42 4e 34 6b 58 42 41 56 49 48 79 72 6a 77 4c 37 35 56 51 78 4b 4c 41 6f 67 75 2d 4c 72 6f 74 7a 61 67 5c 22 5d 5d 5d 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 3a 20 53 70 72 65 61 64 73 68 65 65 74 73 5c 22 2c 5b 5c 22 34 2e 38 5c 22 2c 34 2e 37 38 33 32 32 35 35 5d 2c 5c 22 50 72 6f 64 75 63 74 69 76 69 74 79 5c 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: qVFqKAjGu-U-pVHRwD3Q_0dpDc\"]],[null,2,[2778,1284],[null,null,\"https://play-lh.googleusercontent.com/PIUm42z2ddg3sj85m9QTj6w936FSCmDzwBN4kXBAVIHyrjwL75VQxKLAogu-Lrotzag\"]]],\"Microsoft Excel: Spreadsheets\",[\"4.8\",4.7832255],\"Productivity\",null,null
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 74 73 2c 20 74 72 61 63 6b 20 65 78 70 65 6e 73 65 73 2c 20 61 6e 64 20 63 6f 6d 70 69 6c 65 20 63 68 61 72 74 73 20 61 6e 64 20 64 61 74 61 20 2e 20 43 72 65 61 74 65 20 63 68 61 72 74 73 20 64 69 72 65 63 74 6c 79 20 66 72 6f 6d 20 79 6f 75 72 20 70 68 6f 6e 65 20 66 6f 72 20 63 6f 6e 76 65 6e 69 65 6e 74 20 64 61 74 61 20 61 6e 61 6c 79 73 69 73 2c 20 61 63 63 6f 75 6e 74 69 6e 67 2c 20 61 6e 64 20 66 69 6e 61 6e 63 69 61 6c 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 41 63 63 65 73 73 20 74 6f 20 73 70 72 65 61 64 73 68 65 65 74 73 2c 20 70 69 76 6f 74 20 74 61 62 6c 65 73 20 61 6e 64 20 63 68 61 72 74 20 6d 61 6b 65 72 73 20 6d 61 6b 65 20 62 75 64 67 65 74 69 6e 67 20 69 6e 20 45 78 63 65 6c 20 65 61 73 79 2e 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 Data Ascii: ts, track expenses, and compile charts and data . Create charts directly from your phone for convenient data analysis, accounting, and financial management. Access to spreadsheets, pivot tables and chart makers make budgeting in Excel easy.\\u003cbr\\u003

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	50051	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1072 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535604.0.0.0; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:06:50 UTC	1072	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 30 39 35 35 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535609554",null,null,null,null,
2024-04-19 14:06:51 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:50 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:51 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 31 30 39 35 36 22 5d 0d 0a Data Ascii: 1a["900000","1713535610956"]
2024-04-19 14:06:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	50057	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	532	OUT	GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 503752 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	720	IN	Data Raw: 52 49 46 46 c0 af 07 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 ff 0e 00 6f 08 00 56 50 38 20 cc ad 07 00 b0 92 22 9d 01 2a 00 0f 70 08 3e 3d 1e 8d 44 a2 21 a3 26 22 b3 69 30 c0 07 89 67 6e d4 b0 5f 9b eb 8b f8 82 5f d4 73 0f 91 46 8a b0 e3 ce cb b2 97 0d 1b 66 ff fd ff e7 d0 d1 37 fb bf fc ff f1 f3 67 c4 ea d9 fd df 97 1e ef ff 49 a3 fb 1f d9 3b f2 b2 6e 5f b0 4f f5 6f f2 7e 9e 3f dd f1 c1 ea 3f ff b7 cd 57 fe df 53 5f fb fd 13 7d bd 8e 67 b1 ff ce e6 79 8f 9e 9f ce 5f 73 0e 69 f4 83 ec 7e 5f ff 39 f3 77 ff 1f 1e be 07 ff 37 99 5f aa 7f 57 ff af fd 6f e5 d7 cc 9f fd 1f fd 7f e3 7c 03 fe a9 ff 03 ff 87 fb 2f df 4f a2 5f e8 df e2 ff ea 7f 9b ff 43 fb 77 f4 c7 ff b7 ee 37 c3 3f f1 df fb fd 60 7f 63 ff 9d fb 8f ff 3f e1 23 ff 7f ee 8f fd af 94 9f d5 Data Ascii: RIFFWEBPVP8XoVP8 "*p>=D!&"i0gn__sFf7gI;n_Oo~??WS_}gy_si~_9w7_Wo\|/O_Cw7?`c?#
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 60 21 87 e6 38 f2 f6 f9 af 98 4c 0b 93 fa f6 10 05 2d 0c 31 69 93 31 3b 59 a1 7c 97 50 90 54 cf 56 23 01 da b2 36 e1 6f 43 18 54 ae b5 9a cb cf 92 e1 75 d6 2d b3 f7 a8 b7 fc 9b c7 d1 f6 48 12 95 ec 16 78 5f 36 01 a9 c3 32 07 de 17 23 df 84 49 6b 4d 49 25 6e 91 19 38 1a 5f ac c1 fb 26 de b5 10 15 96 7c 86 5e 7d c9 6f 71 35 e7 de 15 0b d7 70 5a b7 e5 6f 43 20 6a a2 21 bf 62 4b 25 4c b4 33 bd 57 9f 25 75 cc c7 f7 0c c8 1a b8 bc da cb a8 24 74 d1 0a e4 64 5c 85 41 81 a7 66 42 fb 87 86 9a 50 91 ab 09 a4 d7 0b a3 8a 09 9f 49 5c 7e c2 d5 75 c2 7a 11 02 56 b7 84 cb 70 dc f9 0c bc fb 92 d9 76 74 8e 5a de cb c2 1d fa a2 0a 7c 37 1b 72 1b 40 ca 60 0b 91 ff de 17 26 b1 4c f7 45 ed b4 03 74 42 0f d0 0f 6b c8 80 15 e3 b6 8b fc ed 97 9f 77 ec 83 9a eb e1 5d 08 1a be 5c Data Ascii: `!8L-1i1;Y\|PTV#6oCTu-Hx_62#IkMI%n8_&\|^}oq5pZoC j!bK%L3W%u$td\AfBPI\~uzVpvtZ\|7r@`&LEtBkw]\
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: e4 b6 5d 86 a9 62 20 79 6d ff dc 7e f3 98 b2 0d 1a dc d3 7a 7f ff ea 57 2f 1f c7 66 e3 70 37 f6 eb 18 50 49 78 ed a0 15 9f 3b 1e 5e be 1a 85 9d 32 93 31 9f 69 fa b5 85 e2 ad d4 81 4c e5 8f 38 c0 44 3b ae 49 ec 78 9a ed 54 42 d5 5d ea 06 9d 07 60 ce 79 3c 0b 9d 76 5e 01 c8 f4 e5 3a 3c 4a d7 3a 20 42 b8 54 63 c9 6f 11 75 74 00 a3 29 54 94 75 51 45 57 30 c5 40 56 bd e4 c3 74 02 ee 96 31 7e 3b 06 19 a9 7f 95 fe a9 da 16 5d 3a 57 71 3c 10 69 83 14 ad 07 83 6a 67 18 5e c5 ec cd df 47 b9 35 15 ed 6c 57 e9 67 01 2e 04 7a 9f 53 49 c7 60 c7 51 30 45 e6 f2 79 be 82 65 a5 6d f9 49 f9 6f 63 74 f0 4f 93 ff 13 07 5b fe 0a a2 6f 71 96 fc ff 2b 00 cd 5b 93 e7 c4 0e a9 97 54 d7 2d 76 b2 1c fa cd 5c 11 8c eb 68 b9 d3 31 74 d6 28 cd 11 af ec ca 05 0f 6e fc 0e c3 56 25 e2 cf Data Ascii: ]b ym~zW/fp7PIx;^21iL8D;IxTB]`y<v^:<J: BTcout)TuQEW0@Vt1~;]:Wq<ijg^G5lWg.zSI`Q0EyemIoctO[oq+[T-v\h1t(nV%
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 2b f9 47 f5 aa 3b b6 f0 ab 42 c9 d6 53 15 d2 00 a3 4e 1f 30 d2 3f d5 e9 b4 75 7a 46 05 ec cc 10 2a 42 ab 57 93 f6 29 62 58 84 11 89 1b 4b 19 15 90 34 5d 9e 41 56 11 c0 75 26 17 1e 3d a7 40 0a ea d6 5e 77 a2 92 1e 0a d8 e1 eb 07 59 e6 9c 1b 0d 52 c3 ba c7 9b 29 1d 17 01 b4 ff 65 91 62 84 c0 96 8e 52 a8 5e e2 10 3a bc a7 75 9a 1c 25 45 46 12 4e a8 56 c5 c1 04 78 f4 60 17 35 4a 20 49 50 6b 3b 85 0a 35 44 ce 67 e4 1d de e8 b0 a5 05 da ec a1 77 e6 9f 5d 9e 72 8f 0d 1f 58 0a 94 97 10 6c bb 7b 48 e2 4b 0a cf d4 b0 fa 7f 71 6e e2 c0 a2 0e 86 80 1b b1 7b a6 f1 1f f5 e0 39 ef ba 1a 32 42 bc 34 e6 80 43 08 cb 78 69 49 27 86 8d ec ca 86 c0 54 04 60 5e 20 11 c5 3b 06 1a c0 08 c9 dc e3 cf ff dd e2 c8 69 91 59 b0 3e e8 5e 85 1a 8b e2 7a ff 7e 9a bd d4 75 af bf 92 2f 13 Data Ascii: +G;BSN0?uzF*BW)bXK4]AVu&=@^wYR)ebR^:u%EFNVx`5J IPk;5Dgw]rXl{HKqn{92B4CxiI'T`^ ;iY>^z~u/
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a9 8b 2b 82 1f f5 a4 20 a3 6b e8 a7 38 33 21 76 e9 d7 95 df 46 24 bb f3 62 9a 8a 6b 6f 16 78 53 8c dc 30 58 45 f7 f0 cf 68 cc 19 e7 f7 f4 aa 94 11 f3 62 8f b3 b3 dc 5a eb ac 92 94 79 92 73 2b aa f7 cb cc 05 d1 c1 52 1d 92 d7 42 68 1c 82 fe e4 1e f1 07 34 c5 67 5c 5b a8 72 c8 b0 c6 ee b6 49 59 bb 1c 71 f8 ad c6 42 15 13 89 39 c3 a3 ac 48 5f 93 10 ac 28 b8 f9 a3 71 40 a8 8e cd cd 86 f6 ca 55 4f e5 f7 89 9c 76 88 0e c2 84 9a 9e 7d 8b 19 93 46 d5 f0 c1 62 4c 97 ec 58 aa 45 0e b1 96 cc de 8c 12 b7 6d 76 9d 1f 11 e0 5e 66 80 3e fb aa 91 a9 f8 76 28 73 4e 69 d7 c7 c5 db b5 13 ec 6d 60 62 53 d9 d5 4e 08 60 e4 0a c8 6d ff b7 0f 5d 74 d2 35 dd 0d 35 da 99 f5 fb 14 d6 c5 77 dc 31 f8 ac 68 9f 4f 2d 28 53 fa 49 65 79 22 7b ff 53 54 22 ce fa 0a f3 53 cf b6 76 58 b3 31 Data Ascii: + k83!vF$bkoxS0XEhbZys+RBh4g\[rIYqB9H_(q@UOv}FbLXEmv^f>v(sNim`bSN`m]t55w1hO-(SIey"{ST"SvX1
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 22 6e 53 55 ef 07 bc e5 5e 72 2f ed 64 19 78 5c 24 af 0e 5d f5 85 58 fb 3e b3 e3 a6 21 98 5e 4a c9 c5 99 df e8 c0 87 62 46 f6 a4 75 f9 e4 7c 41 c2 68 52 d4 8b 64 52 e9 ab 31 0a b5 f8 dd 53 71 22 c5 a3 31 3c 95 6d 28 1e e3 86 09 49 09 c6 20 4b 87 13 e1 94 84 43 be a3 eb 8c f0 5b f2 73 7e 67 09 5f 1f 9a c7 bf ca 87 ce 4e 78 47 6d c9 e0 c8 c2 b5 d5 ea 3a 09 4d fb 3c 64 cc 0d 94 68 9e a1 47 8c 39 af 27 c6 dd 52 61 28 e1 07 b0 e4 3f 1d 43 63 e0 76 97 9f ed ea 78 35 f8 ab 3c 00 5e ee 93 8e 4c 34 37 f0 2b 82 06 57 c6 ba 41 1e 32 6a 2b a7 5c 1b 8c ef 81 20 3e 26 93 5e 9b fb 02 0b 14 fb f5 e0 95 bc 5d ec 88 46 b7 c2 68 f5 fc 53 d9 c4 e8 5c 0d 6f 34 7d 22 b3 f1 18 73 4f d7 bb 18 03 99 8b a0 1a db 4f 8c 3d d2 d8 cb 82 22 48 93 87 2e 19 1c d4 dc 6d 5e 1b c6 2c 6a 41 Data Ascii: "nSU^r/dx\$]X>!^JbFu\|AhRdR1Sq"1<m(I KC[s~g_NxGm:M<dhG9'Ra(?Ccvx5<^L47+WA2j+\ >&^]FhS\o4}"sOO="H.m^,jA
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 3f 96 9e e6 ce ba 7a 2b 3b 27 b6 91 c5 35 0b 69 85 19 10 51 bc 5f 34 8c d3 84 ac f0 d7 36 6d 82 bc e2 f2 62 6b 0d b2 aa 1a e3 43 03 20 46 01 86 ab d3 97 59 60 a8 f0 8e 6b 48 66 49 7c e2 f1 cf 1a 0c 85 76 04 e6 22 4f 37 ca d8 eb 62 53 dd c0 35 b0 79 40 70 09 ae bf ed 01 6d 56 ec 17 8f 91 db 5b 9e b4 61 06 d7 38 2e 62 73 0a 12 e0 5e 6f 9f a9 d6 c3 b4 a8 c4 6e ca ec ad 8d b0 1c 1f 3d 59 45 b9 9f d6 02 20 97 b7 fd 62 0b 2d 4b e5 79 88 a7 9a 80 52 b7 4d 81 c0 87 4a 42 aa 7f 00 27 9b 17 9d 1f f9 43 36 1e 0f 1c 72 da 5e c8 fc 4d a1 b3 2d f2 14 3e 0f 25 c7 3d 47 9a 6e 9d 12 55 f1 dc c5 6f 8f 0d c7 61 0f 3e f2 51 a7 23 52 43 37 15 85 3e 71 8b a8 e6 ac b0 8b 13 88 e0 ab 11 8d 2c 76 eb 20 cb 1a 9f 95 e6 5a 0a ac e0 df 27 20 bb 66 eb 64 16 55 90 77 45 fe 15 ab 33 84 Data Ascii: ?z+;'5iQ_46mbkC FY`kHfI\|v"O7bS5y@pmV[a8.bs^on=YE b-KyRMJB'C6r^M->%=GnUoa>Q#RC7>q,v Z' fdUwE3
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: fa 0e 2a 53 e0 13 4f 46 3c ff aa a5 04 bc 69 33 db 83 cd f2 57 d8 a6 f3 a6 73 7b 6e 92 47 a2 5e 0b 9f ca f8 72 9f ca fe d5 33 87 f9 30 fc 90 6c bc 17 04 ad f7 b3 50 08 c4 77 af 58 2e 01 06 84 78 56 64 ed 92 ef 26 c8 07 05 be e2 f1 e2 25 47 10 8e aa 91 18 85 16 b9 12 d1 61 a8 a4 ce a8 cc 15 7e 58 9d 77 88 19 dd 87 c1 39 00 7c 84 f7 d5 a7 25 11 50 93 55 a7 57 49 1b 75 65 de 96 75 2f 38 a3 7b 10 1b dd 58 a1 a0 23 aa ac bd f3 07 db f6 29 fa 52 28 12 20 c5 9b 23 e9 f5 6e 23 68 d4 8c 84 72 46 09 6e ed 17 e7 6b 8b 8d 46 87 f0 ed 6e 3b bd 83 5e 1e 2a b8 b4 73 4f 47 6d 64 21 b6 d7 64 48 b3 d0 88 ac 92 a8 b7 ee a5 01 ca 73 9b 39 cc 9a 74 42 8a eb 8a 16 25 1d 58 ef 22 d9 29 75 f7 2b d4 9a 89 7a 22 ba 90 86 ef 67 00 54 66 6e 18 ab 18 0f 3a a8 56 5d 5d 88 d3 af fc 16 Data Ascii: SOF<i3Ws{nG^r30lPwX.xVd&%Ga~Xw9\|%PUWIueu/8{X#)R( #n#hrFnkFn;^sOGmd!dHs9tB%X")u+z"gTfn:V]]
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: d0 9d 26 5f f3 e0 45 ac 2e 0c ce 31 a6 8a a6 1e 05 30 47 81 34 e9 fb da 99 dc 05 51 e2 42 c4 a1 1d 0c a1 57 b0 04 ed 86 a4 8d 49 ce e0 26 a7 b9 87 5f 4f 7b fa 19 f7 be 1a cb ce 58 b6 7b 34 53 42 46 77 f0 a2 8f 9b 2e 5e 83 1b 6e 18 a3 f3 cc ae 71 3a 7c 4b d3 cc bd e5 57 88 88 bb 3e fd d0 e2 27 c7 f4 bc 79 5b ff de 9a d6 c1 c9 83 01 42 ee c2 22 44 f5 6d 28 6b 75 0f 9b 66 48 e7 65 ab 16 4d cb b0 bf ba ba 1f 2c b7 db f9 24 4c b9 ee d7 35 d6 c1 c0 c7 32 e4 d3 fd 5e 68 3a 49 b6 f0 7f e9 af d3 42 26 cf 26 71 e9 ba 9f bf 14 68 d4 18 f4 96 91 3e 51 fd c4 0f db ce d1 05 aa 64 00 14 f0 84 8c 71 de 1a 1a 48 4d a9 0a 78 87 5f e2 6e 74 8b 0c 62 92 c0 33 fc 2d 83 a2 9d 6e 16 54 58 27 12 59 01 ee e1 94 03 78 8f da c6 73 60 b1 dd dc 14 c9 1b 52 e2 21 02 f0 d5 f5 7b 8f cc Data Ascii: &_E.10G4QBWI&_O{X{4SBFw.^nq:\|KW>'y[B"Dm(kufHeM,$L52^h:IB&&qh>QdqHMx_ntb3-nTX'Yxs`R!{
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 88 0d a1 f4 49 31 a5 0f 0f 48 fe 24 e0 0f 58 b5 19 75 c5 3d d9 18 3c 40 3b c5 2d 4f 92 9f b4 81 d0 8c 8d 45 58 6d c1 39 65 54 6b 1d 5b d8 dc 3c 90 fb 0a 39 7f 32 cf d1 d0 de b9 9e 72 5d 72 43 8c c3 96 d1 3c c1 5c ed 87 0c dc 57 fb 3a 61 c1 fd d6 c8 79 e4 4b 47 1b ab 72 dc a9 45 05 71 ee 17 62 23 d9 98 1e 17 19 11 d5 fb 50 c7 87 58 70 58 22 5d f0 19 66 d5 c0 a3 e3 5b 55 9d a9 ec 75 d1 4c 67 b7 9d 47 91 05 eb a5 49 6c 34 5d 5b 9b 02 75 f0 76 c4 e7 bf 32 07 91 7d 1c d0 59 f6 06 c3 08 e2 4e 12 29 6c 34 e7 74 14 47 2d 08 dc 11 e1 a5 6a 5c a8 c2 7f 0d bf 6c 0e 0e b7 8c 63 07 2a 21 db 9b bd 26 df 04 84 cd db 7f f7 a5 10 b3 3b 9e 86 a5 1c 7a f5 4b db 74 48 4a 8b a1 33 40 b7 72 4e 4f 88 e5 d5 0a 10 2a 51 5f 11 99 28 b2 6d 28 20 db 53 ff 42 c8 97 c9 12 ca f4 7b 3e Data Ascii: I1H$Xu=<@;-OEXm9eTk[<92r]rC<\W:ayKGrEqb#PXpX"]f[UuLgGIl4][uv2}YN)l4tG-j\lc!&;zKtHJ3@rNOQ_(m( SB{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	50050	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	531	OUT	GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 189446 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	720	IN	Data Raw: 52 49 46 46 fe e3 02 00 57 45 42 50 56 50 38 4c f1 e3 02 00 2f 0d c2 49 00 4d 48 0c c0 36 6c 9b 00 12 0c 1b e8 fe 3f 58 b2 9a ee 82 88 fe 4f 80 24 25 5e 25 29 ca bb 12 79 28 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 97 1c 39 d6 1a bd c5 47 ab d6 44 4e 12 c9 d6 d6 9b 27 4e 2c 39 ab 9f 58 eb 92 68 9b 75 23 6d 94 48 51 7e eb 38 49 b4 d8 79 97 b2 71 92 58 d9 ad 67 4e 72 5b d9 4a 89 a5 33 c5 8b a4 05 8e bc 24 7a 4b 22 59 56 8a c3 16 40 db e2 56 2c e9 8a a2 64 a0 80 84 1b 29 9e 47 b8 8a 6b a3 3c 32 4f d6 39 da 96 39 91 d9 92 24 da 4e f2 21 58 26 37 44 49 22 31 cf 80 39 e7 64 56 3b db 89 4e 78 82 2d 48 4d b4 65 ee e7 06 6d 73 ed e7 33 de da f9 e1 2e 4e 94 3c f0 03 46 26 a1 3e 4a 24 c9 b4 9f 38 24 31 08 e0 60 4b 9f 3d 7e 42 d8 97 75 ea 7d 2e 12 df bc c9 28 b1 93 d8 Data Ascii: RIFFWEBPVP8L/IMH6l?XO$%^%)y(R9GDN'N,9Xhu#mHQ~8IyqXgNr[J3$zK"YV@V,d)Gk<2O99$N!X&7DI"19dV;Nx-HMems3.N<F&>J$8$1`K=~Bu}.(
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 94 51 5a 1b 3d cb 5f af fd fc 8f e0 75 08 fb 3e 4b 1a a5 94 11 52 48 77 21 04 8f b6 6d ab 76 63 db 56 a9 b5 0f d9 4e 96 22 44 53 53 32 8f 60 66 e6 bf 5f cc bc 8c 55 f2 34 53 30 69 f4 d1 fa af b0 6d db 86 49 f7 bc 43 ad c0 50 15 a8 2a f6 74 95 a1 e2 2a 96 65 d2 de 03 4d ad 34 51 50 93 24 a8 88 06 b5 59 a9 43 c4 46 46 44 8c 81 da 24 b5 62 2b 85 6a d6 e0 61 b9 d8 88 88 21 a1 66 6c 30 a0 49 46 44 c6 b2 b1 5c 64 2c 79 45 68 d0 20 15 49 b2 5a 15 88 4d e3 d6 78 34 d2 a8 a2 49 12 42 ad 40 6b 34 09 9a 85 24 09 49 a2 8a 6a 63 89 48 32 92 45 71 b1 c4 61 0e 4b 10 11 69 42 08 23 63 23 a3 62 23 23 8b 0b b5 b8 16 0c 82 50 90 85 54 54 45 b2 6c 91 05 21 39 1a ad d9 64 b5 44 13 4d 7c 55 11 31 cd 36 cb c5 32 31 b5 09 c9 85 3a e5 69 0d 72 11 19 24 8e 56 05 b9 16 15 c9 36 4b Data Ascii: QZ=_u>KRHw!mvcVN"DSS2`f_U4S0imICPteM4QP$YCFFD$b+ja!fl0IFD\d,yEh IZMx4IB@k4$IjcH2EqaKiB#c#b##PTTEl!9dDM\|U1621:ir$V6K
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 61 a7 50 28 d0 6c 9c 45 59 54 24 6c 00 2a 8e e3 4f b8 a0 0a b9 60 97 24 c3 45 b5 88 da 64 d9 53 9c a6 0e dc a1 c1 0e ff 29 6e 70 53 ad e2 ab a8 f2 30 77 f1 9f 72 13 3b fc 87 0f ec 62 87 48 92 3c 24 9b 46 6d 32 55 72 95 06 66 ea 39 27 32 5f 50 37 cb 92 4d 1a d4 1c 38 e0 ab 65 59 92 3c cd 09 90 1c 12 82 26 09 18 11 51 11 12 44 24 58 28 58 5d 28 92 88 24 35 21 51 25 2c 26 f0 b5 9e f6 70 ea 02 62 21 15 c9 92 60 98 da 0a 1e f2 18 ec d4 61 4f aa c8 d3 42 88 5a 6d b5 9a 24 d5 82 55 59 9a 24 64 6b 33 b2 40 6b b5 c8 b8 8a 3d f0 70 a1 8a 4c b3 91 c5 d3 a9 6b 5b 0c 6a 1e aa 22 8b ab c8 a8 56 ea 58 1f 36 f7 b1 31 8f 4d 8f 21 8f 93 7d d9 7d 9c 7e b4 8d 47 db e1 57 1b 4e dd fa c6 79 3e b5 8f 93 d4 76 eb c3 e3 dc da c7 c6 5b db ee 4e 1e 39 7d e4 c4 ac 1b 47 f0 38 f1 38 Data Ascii: aP(lEYT$l*O`$EdS)npS0wr;bH<$Fm2Urf9'2_P7M8eY<&QD$X(X]($5!Q%,&pb!`aOBZm$UY$dk3@k=pLk[j"VX61M!}}~GWNy>v[N9}G88
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a9 69 d2 ad 16 ab 98 e9 72 f6 84 2c 72 ef 79 f4 af b9 5c a1 df 27 bf 32 66 ee d7 b9 5f e1 3b dc af 71 bb c2 1d ee d7 90 3f e0 27 7c e5 d5 67 21 e1 49 cc 1f 42 fa 4c 93 2e 9c 09 09 79 95 55 56 69 f2 b1 ef 8b 76 eb 73 e7 2d 09 69 f2 f9 1f e1 de 2a 21 f7 9e 55 42 56 09 f9 e2 48 9b 69 f2 6e 1f 39 f3 03 5f 82 5c 98 fb 69 3e 7a f1 28 24 24 64 95 57 d9 46 62 e6 18 97 be 68 f9 a9 25 a4 49 48 c8 cc 5b 21 21 8b 31 24 fc 1c d2 10 f2 53 4b 48 48 25 f3 4c f6 7c d3 12 de 79 cb f9 9f 5a 42 be 38 3f 0c 59 bd 95 09 49 13 ce 84 34 d9 c7 18 3e bd b8 25 dc 7e f7 72 7c be ca ea 93 d9 6f 8f b9 0c 69 d2 67 16 17 43 42 42 fa cc ec 69 12 72 f6 8c 99 e6 bd 55 c2 3b e1 ab f7 b9 98 9f 7f 3a 13 12 f2 4c 5e 25 dc de 66 56 69 56 b7 91 90 70 79 cc 84 54 cf 77 67 3c bf 00 fc ed 87 af fe Data Ascii: ir,ry\'2f_;q?'\|g!IBL.yUVivs-i*!UBVHin9_\i>z($$dWFbh%IH[!!1$SKHH%L\|yZB8?YI4>%~r\|oigCBBirU;:L^%fViVpyTwg<
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: d5 95 99 11 71 78 ba 6d db b4 6d 6d db 72 6b 7d cc 39 d7 5e c6 b6 2e fb 0a d9 b6 ed e8 15 bb fe d5 75 c5 af 7f c0 a0 6d 6b e3 f8 9c a5 c9 d1 5b c8 82 6d 2b 6a a5 05 c4 a7 99 30 d2 89 01 1c d2 9f fe f0 ff 5f e5 34 fe bf c7 91 71 9f 39 71 81 10 42 b0 e0 ee 14 a7 58 d1 e2 35 ac 50 58 da 6d a1 5b 37 e8 16 2d b6 c5 5d 4a 81 50 08 5e dc 29 6e 11 68 12 42 08 21 19 77 39 72 bd 93 33 93 f4 9d f4 ff 88 80 45 db 56 d4 e6 00 1d 9c 7a df 2a 2b e2 f3 81 24 9f de 68 6b 5b 36 27 da b6 6d df 8f e3 38 cf cb af f2 aa 54 c5 dd 13 1c 82 bb 75 d3 06 ed 7a bb 8e f1 b8 bb bb df 2e 6d d0 2e 34 d0 78 37 10 22 10 24 09 81 b8 54 a4 dc eb d2 f3 3c 8f 63 df c7 13 b8 fb f1 e7 b7 06 fe bf 55 bb 6d ac ff 5a 1b ce be 20 06 5b b2 24 b3 e5 38 4e d2 34 49 a7 4d 9b a6 30 85 99 d7 e1 c7 cc cc Data Ascii: qxmmmrk}9^.umk[m+j0_4q9qBX5PXm[7-]JP^)nhB!w9r3EVz*+$hk[6'm8Tuz.m.4x7"$T<cUmZ [$8N4IM0
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: c8 51 ba be dd 9e f5 9d ea d0 19 23 6c 57 d9 a6 01 f3 40 09 76 b5 10 75 73 25 81 c4 df 67 5f 89 20 38 d1 c6 8d 8e ed b9 4f 06 90 b7 d2 8b ed a3 6f b9 e4 e2 6d 2b fc f0 33 f8 11 1b e9 c4 8a ee 31 34 6d 82 b6 c9 76 b5 46 9f 5f 80 1d e0 66 21 23 3a 1d 53 b7 0e 59 4a 8d 6b dc 6e ed cb 75 36 58 c7 f1 c6 b1 d0 e5 f1 4f f7 fb be fa ba a8 b8 b2 1b 1a 1e 1a 04 45 81 7b 9b 02 b0 e8 05 70 23 72 d3 99 dd dc 7a 1e 86 1c 40 05 2d b2 d5 5a d6 46 51 54 14 3c ac 8c c6 3f 01 d8 18 6a 59 60 a1 ef 55 7c 10 2e c8 b1 d5 ad 24 59 90 82 07 a9 5b 0e 3e f3 33 1a c2 a2 92 8b 37 95 99 a4 c4 30 3a b0 5d 3c 55 fb e2 3e 65 d3 2b 17 42 c7 14 96 7f 46 c6 a8 a8 24 de c8 73 e5 8a f7 fc 89 57 3e e2 d0 4d 0b 56 db 71 83 f0 a1 a9 88 44 fb 36 98 3f 44 55 6e 6c f4 c2 17 53 69 ce 25 62 ac ac 90 Data Ascii: Q#lW@vus%g_ 8Oom+314mvF_f!#:SYJknu6XOE{p#rz@-ZFQT<?jY`U\|.$Y[>370:]<U>e+BF$sW>MVqD6?DUnlSi%b
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 0e 36 1e 12 ca 67 8d ab bd 4e b7 8d ec 81 29 61 a0 ae 6e ab 99 15 df 91 2d 23 07 4d f6 4a 96 a2 42 e3 9e c9 da b6 a3 e6 a3 e6 c5 50 13 e2 9e d3 31 bf fe f7 bf bd f8 d9 c7 bf b3 e7 4e db 00 85 11 77 da ab e4 7c f5 74 9e 5a dc 21 54 77 3f d6 a8 fb 41 cb 9e 6d 5c ee b2 28 8b ea d8 06 05 98 ae a6 80 d5 ec e0 c7 bb 78 7a c1 f9 e1 55 27 5e c7 ad e3 d6 4b 0a 6e cb 87 d1 46 69 d5 47 d6 2d 9a b4 6b 51 61 50 1e 0a 34 3b de fb 90 45 5c 75 33 ad 70 49 ae 75 e5 f9 9a cb 60 e3 dc 06 4f 45 46 07 0d 2f 0d 85 a3 cc 8d c9 25 1b 54 9c d1 fb 4b f6 71 a1 88 45 28 01 53 41 84 63 0b 6b df c4 a4 c2 38 79 29 15 85 48 cf f2 96 03 5c 6f 78 e9 a0 67 40 78 ef e6 73 9c b4 31 26 94 c3 11 87 09 06 d4 45 d5 8b 54 1b 6e c5 d1 03 ae 0a 17 6f c1 73 1e da e7 db 83 9f af bd 6f 82 2d c5 bc 29 Data Ascii: 6gN)an-#MJBP1Nw\|tZ!Tw?Am\(xzU'^KnFiG-kQaP4;E\u3pIu`OEF/%TKqE(SAck8y)H\oxg@xs1&ETnoso-)
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 7a 39 ba 14 69 77 69 bb 75 da cc 9a 39 9f ef 65 91 4c 14 b8 be 7c be 67 b7 ba cd da f5 ea 86 f1 6b bc 8d 47 1f 50 cb cb c6 6f 6f 75 60 db c0 24 99 da eb 7e 6f 47 76 d6 7c 39 7c b8 d1 76 77 bd 79 9d 19 ce fd 1f 7f 97 9f f0 7d 80 d7 db f5 b5 6f 25 c9 17 77 52 ec 3e 51 27 a8 7a bb 8f ef 98 22 1b 09 5a a5 f0 c9 9e b3 8a 6a 31 db 88 0a 9c 77 ef c6 5b 59 5a 2a 57 79 cb 78 75 6d 30 60 00 a7 af 16 6c 3a b9 3c 78 1d a7 cc be fd cd f6 0b 1b 65 c1 db 2e 16 3a 11 4b 23 53 42 55 ec 5a 21 dd 45 06 07 6c f7 a8 4d 98 52 e3 a4 4b 38 de 16 38 a5 e0 2a 95 f5 10 ba 40 74 a5 90 80 02 4b dd 9c 32 1a 71 62 a0 37 ef 17 3d 31 c7 dc d0 d2 99 5b 7c 18 f9 9c ba e1 70 49 64 23 db 3d 0e e5 67 d9 3b de ee 9b a1 54 6f ff 63 d5 50 d0 ee d1 35 d6 6f 33 2f 76 6e 15 99 b9 ba ea aa 8a 31 33 Data Ascii: z9iwiu9eL\|gkGPoou`$~oGv\|9\|vwy}o%wR>Q'z"Zj1w[YZWyxum0`l:<xe.:K#SBUZ!ElMRK88@tK2qb7=1[\|pId#=g;TocP5o3/vn13
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 2b 34 04 b4 88 10 9b 0b 38 57 b6 87 2c 5f 84 93 e6 9e 9f 78 eb ce ef 6d be bd f5 33 ab 98 88 05 81 ce 19 1b b8 93 65 bb 1f 7f c7 ec 4c 09 36 74 26 37 bb b5 e5 26 e9 b7 b1 af 0f ee a3 86 c9 2c 92 43 02 d2 b1 69 2a cf 91 c0 aa e2 35 fa 7e dd 3d f5 e1 2d a5 17 db 5b 2d 40 4b 8f 45 50 ed de c7 8b f3 e8 5f fc b3 af 7c 24 87 01 80 d8 9a a6 1e 01 84 8a af 46 e3 ad 5d e1 71 dc db 90 1f b9 eb 6b 91 19 75 e0 95 ed af ff 5d be 1d ed 6a af ad 43 b8 f8 3d 7f 7d f7 df de e1 9f f1 4c 66 63 5e 7a 16 ed e7 ad 54 34 b6 18 0a 86 20 6d ec a6 d4 71 d4 24 93 7d 77 3b 26 9a 93 3d ca 9a d2 a0 45 bc 79 a1 42 e1 4a 0f 6a cb 3c b9 36 f1 16 b1 e7 f5 d2 94 8d 81 aa 5b 61 d7 eb 14 5f 7a 9a 91 48 fb f5 69 4a 13 9f d6 5f 9a e7 44 8d ab 6a 92 e4 a5 01 c2 16 6d f7 0e bc 6c 30 2c be 96 96 Data Ascii: +48W,_xm3eL6t&7&,Ci*5~=-[-@KEP_\|$F]qku]jC=}Lfc^zT4 mq$}w;&=EyBJj<6[a_zHiJ_Djml0,
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: fa bc 29 70 93 19 53 e8 d4 da ea 06 33 60 41 74 5c ed ad 56 03 14 61 cb 1e 65 58 a4 a2 41 0d 2a 5b 36 19 1d 35 95 ad a9 51 61 bb 5b 9f f5 b3 86 f7 7c a7 08 04 1e 8a 40 66 c8 a9 80 c5 ac f9 98 99 b7 e2 d5 26 6d 56 b7 02 0b 12 7b 1a cf a7 6b 59 92 69 15 fa 9d 37 6f b0 2e e1 08 af c1 60 8b 45 56 c1 46 57 dd 9b 0b 8c 85 90 05 e5 8c 36 97 e7 d8 72 b8 f4 b2 ad 75 7a 27 dd 2c 83 6b 7a ba f3 22 64 b0 4c c7 12 23 c0 33 88 84 28 3e d3 f1 14 bc 79 e4 99 c3 3f a9 c1 86 b4 a4 4d 81 db 9d 69 30 04 34 12 50 32 3e 35 0a 53 b0 e8 90 87 14 9a 40 e3 0c 7b 72 0a 5c 11 5f d3 68 d6 8f 70 ae 6b 95 69 8e c2 7c d0 c9 53 0a 42 c6 0f 95 13 85 11 93 05 0c 41 d3 65 c8 62 9a 62 e1 bd 9c ff 0f c0 e4 17 8f 13 83 65 51 d0 a3 86 81 53 1f 36 90 37 37 66 08 69 c3 81 63 e9 de 02 5a 8a 96 cd Data Ascii: )pS3`At\VaeXA*[65Qa[\|@f&mV{kYi7o.`EVFW6ruz',kz"dL#3(>y?Mi04P2>5S@{r\_hpki\|SBAebbeQS677ficZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	50061	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	530	OUT	GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 186166 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	720	IN	Data Raw: 52 49 46 46 2e d7 02 00 57 45 42 50 56 50 38 4c 22 d7 02 00 2f 0d c2 49 00 4d 48 0c 80 30 6c 9b 81 8c b1 21 ff 3f 2c c9 f6 7a 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 b7 8e 93 44 93 9d bd 94 85 93 29 d6 34 fb d5 75 5d 59 5a 92 f5 42 f1 a4 dc 78 dd 16 87 34 49 97 2c d9 f6 a5 44 d1 c4 24 a7 26 49 67 c2 37 c7 68 09 4a e7 42 b9 13 49 4a a6 28 fb 47 03 17 00 6e 30 4a 92 92 72 41 d4 9a 94 14 4b 3b 67 6d 2b 64 f9 6b 1f 74 37 70 5c a0 1d fb ac 0f 5d b1 6c 27 81 6c af 32 01 03 c0 d8 9d 00 40 de 2a d9 96 40 cb b6 20 d9 81 b2 85 9c 5d ce e9 4b ca 3a 30 48 b0 25 c9 16 20 c9 b2 24 ad c4 94 24 47 62 89 63 e0 18 00 81 01 10 e0 Data Ascii: RIFF.WEBPVP8L"/IMH0l!?,zAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%RD)4u]YZBx4I,D$&Ig7hJBIJ(Gn0JrAK;gm+dkt7p\]l'l2@*@ ]K:0H% $$Gbc
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: b5 6d 6d 23 6d db b6 7d 3f 95 8e 23 85 0d 95 5c 5d a0 66 66 e6 ff bf 76 f1 12 ed 76 5c cd cc dd d1 a9 b3 ff 0a dc b6 51 32 3c c6 57 a0 18 4a b9 a1 2e 33 d3 6e 9d c3 6e 86 61 45 79 89 14 14 2b c0 40 81 20 91 49 07 ea 85 8e 87 14 26 44 48 21 65 a7 5e 20 14 33 1d c3 87 d1 31 0c 9b 09 29 a4 14 40 21 4c 40 20 05 22 a4 10 61 98 30 6c 22 0c 71 05 a0 43 07 99 20 18 c5 0d 85 89 a2 5b d1 73 51 14 75 e9 10 04 00 8a a1 a3 e8 10 d0 61 00 41 00 82 d4 a5 6e c2 90 42 10 21 18 98 cd 90 86 35 0c 89 14 52 14 00 00 21 c2 84 08 99 09 11 a2 d9 f0 66 6f 10 00 05 06 0c 20 93 9b 60 98 26 1a 00 22 8b 8e c2 21 ba 21 1d d2 21 fd 2e 93 c2 3a cc 61 d8 0c 2b ac 5e 00 c4 86 a7 98 46 07 9b 14 1d a4 51 dc 80 bd c9 04 73 18 52 48 81 c2 0a 03 42 0a 13 10 70 18 a2 8b 86 01 80 02 48 81 02 b3 Data Ascii: mm#m}?#\]ffvv\Q2<WJ.3nnaEy+@ I&DH!e^ 31)@!L@ "a0l"qC [sQuaAnB!5R!fo `&"!!!.:a+^FQsRHBpH
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: c3 32 cc 7d bd ea 58 be a7 15 1a d7 03 05 34 3d 37 3d a2 d7 ad b6 e6 68 df bf 6a d7 9c f9 a0 f2 ce ac 5b d3 a9 49 53 34 bf 9c 7d ad 75 a9 fa 1d 5d 9a b4 7a 31 0b d2 74 a3 4e cd 2f 9b df 69 1a 4d 97 a6 27 a4 d1 f8 be e1 1d 37 f4 88 1e 61 48 21 18 82 04 61 b9 d0 d7 43 3d 9e f8 f7 13 fd 67 f8 fe e7 53 7d 7f ec e7 0d bf 9e de d7 99 ff 3c f1 9f a7 2b 7b fd 78 ba 0c fe f6 48 5f 1f 0b 86 82 0a 7c a5 cc d5 28 f5 72 5b a7 b9 cc 85 cb 6d bd aa 75 9d 7d aa 75 9d eb 8e ba d4 4b ad 6b ad bb 5a 57 ea 5a 79 67 ae f3 cc 57 53 99 f8 a8 f2 c1 e4 17 f5 52 eb 5c fd 6a e2 83 ca 5b 93 1b bc 83 e1 86 17 40 03 0d 08 2b a4 b0 f0 29 31 00 5c cd 1e 14 19 ea a6 bb ba 4c 26 14 d8 cd d5 ec 06 60 c8 bb 81 19 d0 cc 72 01 85 0d 75 c3 05 b3 01 60 16 86 37 19 5a 86 21 6f 52 17 0a 6f f1 39 Data Ascii: 2}X4=7=hj[IS4}u]z1tN/iM'7aH!aC=gS}<+{xH_\|(r[mu}uKkZWZygWSR\j[@+)1\L&`ru`7Z!oRo9
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: ca 26 5d d6 7a d8 25 a4 49 97 6b bd da 25 2b dd 76 93 5e 89 ca 7d e6 f7 3d cd 3b 21 6f d2 25 7c be 56 ba 34 09 59 2b 5d ba b7 a2 f6 59 3f fc 76 bc 35 6a b5 f9 f8 be 1e 44 46 10 d6 71 fc fa c7 4b bf f4 82 20 08 be 34 7f 82 4f f8 2d 5c f8 03 de f9 97 dd 91 e9 92 b2 56 be 9f 2f fc 74 a4 4b 54 c2 ee b6 f6 cd d7 dd 4d 33 6e de ec f2 cb 23 21 5d 36 f1 cc 33 b6 4d ba 34 5f 9d 99 c7 0a f1 6a 97 26 e1 e3 90 ff 49 93 26 4d ee 6b bf c9 9b df 9b fd 3d ee fe a7 b2 61 b3 0c b9 c7 97 82 b0 c6 b1 f0 41 d6 f3 e9 c7 0d 0c df 47 25 7c 11 95 cd 3b cf 95 2e dd cd 2f 8f b7 ba 57 d3 b6 cb 91 69 d2 fc a5 c9 9f 7b 36 69 5e 7d df 6b 45 36 69 f2 d3 23 dd 71 cd 6c 12 f2 58 ef 35 69 b2 49 54 9a 77 6e eb 30 44 33 4d 8e 4c 7a 27 f0 9f ed 95 67 64 13 41 58 f3 ec 23 92 8f a4 9c eb eb 90 Data Ascii: &]z%Ik%+v^}=;!o%\|V4Y+]Y?v5jDFqK 4O-\V/tKTM3n#!]63M4_j&I&Mk=aAG%\|;./Wi{6i^}kE6i#qlX5iITwn0D3MLz'gdAX#
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 74 65 98 78 12 6c 5b b6 6d db 6a 8a d5 36 36 7e 96 20 0d 24 ca cb 97 1f 25 0c 31 72 e0 c3 7b f7 ec d9 83 0d db 48 8a 7c fc 15 33 d6 fe b0 ed 5f 27 a7 fd bf fb 29 2f 9d 99 9d 59 d7 6c 92 8d 07 0d 12 25 10 68 71 27 a4 14 77 87 e2 4e 68 a1 86 cb 1b ab e0 b4 50 08 ee 14 d7 10 d7 0d 31 92 6c 92 75 1f 7d c9 53 8e e3 b5 52 e3 cd df 7a 25 db 56 6d db 76 4a a9 7d cc 39 d7 de 87 c4 cc cc cc 0c df 81 96 2c fd 00 33 bb ec c9 27 8b 99 c1 7c cc cc fc 24 9d 7b cf 5e 6b 8e d1 5b e5 6b db b6 6b 4b 92 9c 31 e6 da e7 be 67 66 ee e6 c1 0b 9c 73 ce a4 6c f8 09 7c 03 74 a8 10 39 f9 04 7c 49 89 90 21 73 ce 39 4d 47 78 98 b9 d9 7b f7 ec 3d 03 12 23 49 8e a2 18 2d c8 93 8d e0 bc fd f2 c3 ff 4f b5 a5 c6 de e7 fb ad aa b5 b6 ef e3 d2 e7 9c 76 83 6e dc 5d 1a 97 40 42 3c 99 90 d1 eb Data Ascii: texl[mj66~ $%1r{H\|3_')/Yl%hq'wNhP1lu}SRz%VmvJ}9,3'\|${^k[kkK1gfsl\|t9\|I!s9MGx{=#I-Ovn]@B<
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: b6 a1 57 62 92 7b 4a 57 ec cd 75 e8 9e 0b 43 75 48 52 b8 f7 a5 77 65 9b ef da 1a e6 d2 42 cf 05 46 97 f2 d5 ee eb 7b ff f4 c2 7b 55 2b df 8c 9f ea 1c 3f 23 97 9d 5b 19 7c c1 cf b3 c8 bd a5 65 ad 87 c2 ea a2 2c 19 f4 da 3e 2e cc a1 29 a1 e8 6b f1 d2 ae 24 5b 26 20 44 5e 09 56 9b 6b d4 ce f0 dc d7 33 52 ad a7 9f dd 8a 34 8a a5 9c 70 64 5b 17 bd 7d 6f b5 52 9b b7 7a cf 51 2d 40 c5 23 e3 f7 ee dd 56 b5 06 23 0f ae 35 91 2e fa 5a de c2 bd 42 4c d5 2a db f6 f7 9b 76 73 5d e7 29 a9 37 62 05 82 c2 b8 67 21 83 33 ed 98 e5 ec 3d a1 cd e6 8b 69 cb 58 eb ef d1 c3 fc 31 73 cb a6 2a a4 c4 25 30 ac 17 7a eb be f7 f9 f8 d7 d3 de f5 2c 51 42 39 4d bd 3c d0 2b 11 96 db a0 f9 16 45 37 ef 9d ad 37 0f e0 22 70 3a 66 45 61 80 d5 ae 6a ee 3d 54 8c 8b 0c ae a3 59 5a 30 79 69 af Data Ascii: Wb{JWuCuHRweBF{{U+?#[\|e,>.)k$[& D^Vk3R4pd[}oRzQ-@#V#5.ZBLvs])7bg!3=iX1s%0z,QB9M<+E77"p:fEaj=TYZ0yi
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 90 f8 76 bf 48 36 51 32 9a ca 86 63 69 f3 cd df 75 fa 06 a1 90 09 e5 77 ed d7 01 38 3c cc 39 9f 91 7b c8 97 79 d7 7d c2 84 ce 1e 27 c4 f2 c8 d0 96 d4 77 5c d4 8a 61 7b 77 c9 b3 2c 9a bd ae dd 95 8d 3b b6 5c e3 48 8d b3 61 af 5c bd 2c f7 d9 8f 7f 70 fb d7 7f 37 37 84 34 c3 cb 0c 2c 59 da 8a af f5 9e e6 84 1f b6 be 78 bf 49 2a 5c 69 8b ee a3 79 06 55 0c a5 21 b1 4d ea 50 dc 76 63 92 ea 3c 39 de ad 06 9b 8c bc 6d 54 42 f3 71 af 44 ed b8 3f b8 05 9a 61 e6 a6 84 71 b5 2b 70 d5 82 0b b6 d6 3b 57 aa f6 d4 34 28 c1 ce 47 02 d2 c2 8f af fc 4a 19 40 b6 2f c3 1d 06 ce 1a d8 42 a4 dc a0 8e ee a8 a4 14 6d ad 8d 01 49 f3 9b 04 27 f4 58 19 d6 cf d6 6f e6 4a 9f bf 78 e3 4b 40 e0 54 4b 35 28 02 e4 dd 92 0f 6e 3a 1a 07 4f 80 8e 56 6b ca 54 89 16 66 6b bf d8 0e 35 38 2e b4 Data Ascii: vH6Q2ciuw8<9{y}'w\a{w,;\Ha\,p774,YxI*\iyU!MPvc<9mTBqD?aq+p;W4(GJ@/BmI'XoJxK@TK5(n:OVkTfk58.
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a3 49 fd af ff b1 ab ff f9 f2 80 5c da 2c 65 e6 32 b5 8c 5f d0 6c 7b 53 e2 c4 22 66 87 0e ca 2c d5 c7 7c b4 e4 5d f8 f6 40 36 1c b8 0b 8d 99 b6 2c 52 ec 81 2e 2e 55 30 ef 85 88 b1 41 42 49 d4 85 2e bb 38 a3 29 68 e8 de ba 81 c0 a3 5d 5b e3 96 8c 91 61 f7 26 dc b1 74 1f 9f 43 e3 90 c3 0f 99 19 06 97 37 9b 73 7b ed f1 73 ef 3d 7e 3f ba da 62 6c 9e 3e 5f bf 2f 07 e3 5b 4d dc 42 ba ba ad b2 a1 bc 6e a3 2d dc dd 14 2a ed 91 d3 cc 5b a2 73 b4 3d a1 9f 9b 2f 0c 46 f0 42 42 9d 9a e2 9b 88 9b 5f fe 06 ee 69 c6 da b5 1e 56 8e 0f f5 8e fd 18 90 8a 11 e5 a8 8a 43 06 44 a6 b1 ea 3b 0a 3b 6d 62 c0 dc b4 8c 64 bf fc f9 3d da 3e 63 bf da de 75 50 7a 2e f7 ed 98 5f cf fe e0 ed 5f a1 65 66 d6 08 3a cb db 21 02 78 d3 4d 61 14 b2 77 bf f2 d4 e3 17 1c fb 9a 99 0c ee 29 ed 98 Data Ascii: I\,e2_l{S"f,\|]@6,R..U0ABI.8)h][a&tC7s{s=~?bl>_/[MBn-*[s=/FBB_iVCD;;mbd=>cuPz.__ef:!xMaw)
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 00 7e 71 a3 70 63 49 5a 02 46 2f b3 c5 24 68 dd fc d0 80 99 38 66 5d 9c a6 d9 c2 76 fb fd 63 ef d6 e4 02 85 8a 07 07 44 c4 7d 09 72 73 d1 6d 95 05 9d e6 d6 e4 59 de 91 8b 9b b7 fb 6f f7 1b a6 96 44 48 3d 7f f3 a7 63 1f ec 0b 7f aa f2 bd c7 6d cf 2e ce e7 80 ef b3 5c ff ba 39 ab 09 6c 30 4b 9b 46 23 70 86 e0 f6 98 17 22 97 51 5b f6 91 fd a1 36 46 a5 6e 1a f6 0d bf 5f df bc d0 85 c1 6f 2d 8d 50 d1 d2 e7 2f 7d 2f 38 56 e3 2c 19 8a 90 c3 1b d0 b1 0c 69 b2 a5 89 da 54 ae 3c 64 d5 06 e2 16 62 13 5d 7a 4e 28 8a 29 d1 42 70 38 df d6 cd 1b 35 ca a1 e5 0a 3d 4e 31 4d 28 0e a5 e5 d2 c4 35 f5 e9 03 47 bf aa 15 11 e5 b6 c1 20 a7 4c dc cc ba e0 b0 d9 ea bd d8 18 53 53 6c 62 6f 6a 7c 2b 5b ef aa d5 fd de d7 7e 93 ea 5b c1 7f f8 9e 07 08 45 b9 74 56 72 62 39 75 6f 76 4c Data Ascii: ~qpcIZF/$h8f]vcD}rsmYoDH=cm.\9l0KF#p"Q[6Fn_o-P/}/8V,iT<db]zN()Bp85=N1M(5G LSSlboj\|+[~[EtVrb9uovL
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 2d f1 33 ee a1 b9 4a d0 34 98 c7 af b0 8d 29 6d b5 46 08 6d b4 2d 6b ee 31 50 d5 92 07 69 d3 4c c3 75 b8 e3 4a fc 45 cf e1 36 ea 98 f8 1b 19 f6 74 b8 77 e3 05 f0 54 04 66 6e d2 ab 71 9d f7 59 8c f6 5d bf 7b 77 c2 1c 00 4f d1 2e 6b 5a 5b 05 2f b7 22 63 c3 f0 bc 73 bc d0 72 bf c0 b2 7b 30 ae 44 b0 a1 b7 09 53 df 61 ec 68 3c aa d8 30 d3 c9 0b 72 6c 22 59 2e 74 f2 e1 ef fb 83 ba ec 9c d2 0c 59 3d c0 58 8f c6 6c 60 e3 2b 47 eb 21 60 df 98 be 6f b1 ad 28 14 21 14 b6 6d 6d b6 b8 1b 28 9d 21 e0 71 2a e7 c4 51 59 bd 34 2d c2 02 80 a6 4d fb 36 b3 99 d2 84 be 5d 8a 0f f0 7a fb e5 64 17 36 c1 75 ff 44 eb 5b 50 9c 2f b7 4d e1 ee 5e df ff be ad a1 f1 c7 80 58 84 61 86 c8 67 a9 c5 ba 6c 5c c2 66 62 52 6f 78 13 e8 46 9b 97 5b 1a bc f3 34 e6 36 56 68 7e 61 13 e6 9b 21 94 Data Ascii: -3J4)mFm-k1PiLuJE6twTfnqY]{wO.kZ[/"csr{0DSah<0rl"Y.tY=Xl`+G!`o(!mm(!q*QY4-M6]zd6uD[P/M^Xagl\fbRoxF[46Vh~a!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	50058	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	531	OUT	GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 24734 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4101 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	721	IN	Data Raw: 52 49 46 46 96 60 00 00 57 45 42 50 56 50 38 4c 89 60 00 00 2f 0d c2 49 00 09 49 92 24 c9 6d 64 91 59 6c a0 99 85 ff 3f 18 10 9a 8b 66 39 46 f4 7f 02 f8 af 1a ff 02 59 d0 37 ac 26 fe 26 e9 57 10 5f 6f 7f 9b 01 09 d0 d7 d8 02 1b a8 fa 0e fb 74 9c aa aa f5 59 05 b4 6d 6f 42 92 29 6f f2 42 8b 84 08 a2 dc d0 4f 4c 7c d9 13 29 33 8c 21 dd db a3 46 91 40 97 29 49 b9 23 f0 61 5b 42 bb 0a 6b a9 83 2e 3b 92 d0 b9 a5 1f a2 13 f3 aa f6 02 7b ce 85 18 08 11 24 19 02 43 f2 53 30 a0 40 04 55 80 ed 85 65 b3 ec 0b 73 f7 6d eb ca 85 6e 18 a8 a5 c2 ec ec 3b c5 14 fb 0a 12 94 6f d8 8f 31 d6 94 b3 24 45 09 5a 01 e2 1b ed 00 5a 50 74 19 b5 24 55 bd 02 a8 ba 12 8a f0 42 11 20 18 92 f0 c2 f6 69 54 5d 44 40 56 de 2f 3d ba 7b 2f 19 d8 46 01 b6 db 1f f5 dc 9e 39 6d 73 3e 1e 5b d5 Data Ascii: RIFF`WEBPVP8L`/II$mdYl?f9FY7&&W_otYmoB)oBOL\|)3!F@)I#a[Bk.;{$CS0@Uesmn;o1$EZZPt$UB iT]D@V/={/F9ms>[
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 0c 44 60 c5 4b 40 34 35 ae 60 7e 87 88 04 a2 01 1d a1 43 44 0a 32 bf fc 19 42 30 ae 00 20 8c 1a 16 08 2d c7 4d 9d b1 40 84 c2 62 92 40 82 04 91 10 5a b2 f3 26 88 04 19 02 21 84 71 15 3a e6 15 88 3b ea 87 27 f7 ec 6f 91 ba b2 58 2d 12 84 20 32 25 00 d0 23 09 06 81 48 2d 88 29 c8 3c 06 3b 22 b5 aa 75 11 69 00 04 09 41 66 f7 88 48 5f 0d e2 83 48 cb 6b 37 cb 08 2a 32 f5 ea d9 de a3 1e 28 06 0f 94 9e 9c fe b7 0f 83 96 2e 52 a5 68 40 07 b4 3c 10 39 8b 4e 5a 00 60 0d 9d 16 8a 0d 69 d9 a8 25 c8 2a 05 62 a7 ff 99 ab 16 6b 88 2a 7b db 3c c8 38 68 b5 0a d3 49 58 d8 f8 30 33 12 01 59 a9 51 03 31 8a ad 62 83 b4 40 9a 26 4d 43 09 2a d0 94 b7 00 00 08 07 cf 44 60 b5 03 68 a7 f0 42 87 34 fd b3 b3 80 90 6a 1e 60 2f 97 00 90 7b a2 f4 a4 94 ab 32 ac ba 44 92 04 df 97 12 63 Data Ascii: D`K@45`~CD2B0 -M@b@Z&!q:;'oX- 2%#H-)<;"uiAfH_Hk72(.Rh@<9NZ`i%bk{<8hIX03YQ1b@&MCD`hB4j`/{2Dc
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: f5 22 f9 d0 27 d7 2e 0e d9 bc 52 55 87 6e 02 48 44 8d 91 27 ff 3f c0 45 92 d2 8d aa 3a 33 83 72 88 90 74 cb 22 49 ab 68 c9 e3 9d 80 dc 19 90 f4 9a 4f 8c aa 39 d2 0d 73 65 c1 23 9e 42 68 e3 4e 32 05 b4 14 a2 8f 27 55 75 18 69 74 2b 94 44 c5 75 82 8a 80 09 02 cd 22 e7 23 14 ad 9a 09 02 8c 52 f3 ba c8 79 5f c1 92 89 31 61 40 9e fb 33 35 0a b2 92 09 04 c7 84 7f 06 c0 21 c8 90 9e 40 20 5e e8 7c 58 0d 04 28 26 1c 2c 72 3d 44 a2 98 90 50 d4 19 e8 13 10 bc c5 15 5a 4c 9b 80 40 37 4e 30 fe 2d 23 2c 43 58 35 01 11 23 2c cb f2 53 3e da 4f 5b c2 09 58 09 ea 53 f5 4e 14 55 50 56 2a 1b 9d cc 58 3e d3 8f ea 0c 11 00 bf 51 3e 03 9f 51 7e 31 0f f2 f0 56 ea ac 0f b1 98 d5 c3 de ad d3 bd 5e 29 dd b3 a1 ed 4b 92 1b a7 c7 d0 6d 62 1f 50 1a b2 b8 70 8e 7c cc e0 3b ec 75 8c 81 Data Ascii: "'.RUnHD'?E:3rt"IhO9se#BhN2'Uuit+Du"#Ry_1a@35!@ ^\|X(&,r=DPZL@7N0-#,CX5#,S>O[XSNUPV*X>Q>Q~1V^)KmbPp\|;u
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: b9 35 37 ff be ef 0c d6 7c dd 75 5b 3c 69 ed 39 28 3b 3d 5a d3 a3 57 39 a3 a9 a4 b2 40 00 96 d8 7f e8 e2 3f 77 d1 75 a8 4f a5 a7 07 74 a1 d6 fc ef 23 d1 dc af c7 b8 03 6a 25 0c 70 b3 11 9f 73 f5 48 46 eb ab 10 a5 72 3b 98 ff 3e 4c ad 6d 78 94 cd 95 97 db 31 ea 98 cd 4d 67 5e ca a2 95 60 d5 9c 47 45 90 54 23 8b ed a1 bf 32 8a 25 2e 3e 6f b9 e4 fc b5 10 07 5f f7 2c 63 fa 9e ce ad 3d de 30 56 19 65 3d bf bb 94 92 03 5f b6 be 42 05 78 62 29 ce 36 80 49 27 8a 72 67 ba 59 7e 73 1d f5 e6 cc 49 b5 af 37 ad ce 8a 40 f3 b2 9f a4 43 7c 9d a1 ca c9 b2 85 fc 4c 3f 74 33 b9 6c d8 fd 31 da a0 12 b9 d9 45 fe e3 2a ea 8b 5e 78 e4 9f 5b 54 ec 20 66 49 fc c2 28 18 00 d7 51 97 27 71 7c 26 9f fb 21 ce 99 f3 e4 de b3 e6 6b 50 83 43 d1 2a 62 1e 88 b0 1e ae da f6 50 35 2e cb 7d Data Ascii: 57\|u[<i9(;=ZW9@?wuOt#j%psHFr;>Lmx1Mg^`GET#2%.>o_,c=0Ve=_Bxb)6I'rgY~sI7@C\|L?t3l1E^x[T fI(Q'q\|&!kPCbP5.}
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 82 b9 d3 be b4 6f c0 52 09 2e e9 a8 f9 c5 ea 23 cc 9a 88 cc 6e 53 86 58 45 35 9a 3a 57 6f 80 73 ac 9b d3 23 35 de 9b 68 48 44 c6 72 63 35 3a 91 fd 02 4e 4a ff 0c 31 23 3c 02 ec 84 6f b5 2a ad 2a 09 4a 79 22 00 1c 24 d6 8a 57 e3 a1 c4 cb d8 2d 23 6d ea e3 b3 d9 fc 56 bc cf c9 2a c5 32 15 5c da 55 3f d1 3f 72 84 59 13 1e 5f b3 55 41 45 97 e8 b0 03 ac d4 a9 0b e8 f1 33 ab 7d 53 ce f6 8d 1d 9a 13 c0 08 58 c9 23 9d c4 22 b2 ba 9b 93 ce 57 5f 4a a5 09 5f f8 89 08 0f 57 98 aa f0 8b 00 0e 89 64 4c a7 a9 8b 2b 42 4f dc d3 9e 0e 03 5b 52 78 c2 c9 49 c2 f4 05 f0 66 e2 89 66 a9 6a 2e e3 ae de 98 09 22 bc 49 54 d0 5f de 39 bf 98 30 f2 09 ed 13 7c e3 cb bd 75 99 37 5e 96 e8 da 26 0b 24 b3 cc 20 1a c2 d2 75 0f ba 89 45 84 75 17 07 89 a2 a5 48 b7 03 89 64 80 49 04 03 41 Data Ascii: oR.#nSXE5:Wos#5hHDrc5:NJ1#<o*Jy"$W-#mV2\U??rY_UAE3}SX#"W_J_WdL+BO[RxIffj."IT_90\|u7^&$ uEuHdIA
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 58 f5 8d 3e 50 a9 b9 df 17 c9 8a 94 ed 8f 5e aa 05 a3 f0 e2 ab eb 2c 6f 1d 80 4f ba d4 9f ec 88 02 da c6 d7 fc 0d 0d e2 1b 00 7f 08 42 fa 43 01 39 24 40 2d e4 67 73 3f c7 b7 7f 0d d0 18 eb 16 3e 70 d7 0b d9 f3 42 9e 2b 94 d9 1a dd 60 11 79 dd 23 ea 48 82 57 12 00 23 32 86 cc 6e 44 00 3f 8e 7c 86 a4 54 e3 c4 9e 89 ed cf 5a 83 1c 0a 63 d9 77 7e b6 5b a3 29 01 62 a2 cb a6 58 79 d1 5a bd 60 29 47 67 e0 b7 50 3a 60 be fa b4 b1 a8 51 c3 6e 8b aa b1 42 3a 70 c5 0e c2 0d 87 3e c8 44 72 e1 96 db 81 73 8c df 0f 54 9a b1 fa d8 bb b6 1c 61 ab 3d e7 27 e8 38 8f 4f cd 3d fb 84 5c 7a ca c9 e5 b2 7d 5c 2b c5 3a b6 e0 8a b3 06 ec 71 21 8f df c7 bd ee 8c a9 57 f3 fc c5 47 79 3d a3 9e a6 5b c5 5a 32 a5 c2 ea 31 cc 7b 5d 71 35 fc d1 5c 77 cd f9 26 e3 ca 47 1a 4f 3c eb 57 b9 Data Ascii: X>P^,oOBC9$@-gs?>pB+`y#HW#2nD?\|TZcw~[)bXyZ`)GgP:`QnB:p>DrsTa='8O=\z}\+:q!WGy=[Z21{]q5\w&GO<W
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 81 7a dd 8a 4f fd f4 52 e1 38 e9 d1 e1 ff 57 07 a3 44 4c 13 71 2b 40 8c 48 70 cc 96 69 ba 94 6a f0 1b ae 96 f8 4b 7c f7 e3 b0 51 40 0a b7 e4 71 b6 7b 36 f7 c1 84 5b 56 59 a1 1b 48 3a c3 c9 46 41 4a ee 93 26 d8 2e ca e5 1c af 56 5b 6d 8d 1a a7 c1 80 4b cb 89 a2 22 3a f1 2c bd 16 d8 f2 af d9 cd 8b 2b 5e 80 a2 eb 75 99 c3 77 4b b4 84 0d 36 79 ed 01 a7 6c 82 75 42 b6 a7 28 c8 4b 41 11 82 90 b6 42 63 6e 54 f3 6c 43 d7 59 17 42 42 c2 f6 62 e2 12 7f d4 8a ad 96 8e 65 9b 72 19 ed de cf 7b df 74 a2 5f cf 14 b3 40 29 bd e6 84 15 6e f6 e3 76 20 01 58 78 64 60 78 16 d9 4c 42 d6 8d dc aa df 0f 59 4e ab cb 60 cc 4b 1a f7 67 73 2f f9 4b ba 95 af 6b 7f 3b 87 1e ac 64 44 dc 4e fd b6 be 02 85 3a 40 37 eb 3c ac bf b9 9b c2 0c 65 f8 85 52 23 71 24 4d 91 a3 04 91 d7 65 26 11 Data Ascii: zOR8WDLq+@HpijK\|Q@q{6[VYH:FAJ&.V[mK":,+^uwK6yluB(KABcnTlCYBBber{t_@)nv Xxd`xLBYN`Kgs/Kk;dDN:@7<eR#q$Me&
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 09 d7 f9 44 ea c4 74 38 a4 39 1c 0a ae 2b 28 5b e1 b4 cc 28 8e 24 60 04 14 19 a1 aa 97 50 94 01 01 a6 04 91 62 fa 2a f3 c8 a4 c2 e0 64 ad ff 9e 77 b6 1d fb f5 25 17 70 57 c7 19 81 43 11 8a 45 77 fe e4 b6 c7 fe 86 1c 1a 2b c4 57 ae 32 20 84 21 29 7f d5 dd f7 55 8a 0a d8 7a 1d 1d 1b ac 68 37 9f 91 23 09 5d 4a ad 31 f7 ee c2 5f 86 61 0f 28 06 b2 c9 fa 2b 76 58 be fd ba c4 30 4e b4 c0 ca c7 65 3f 64 a5 2e ab 92 07 6f fe d5 7f 92 43 32 5f 95 71 fe 85 8c 42 0b ac 62 68 5b c5 0b 7e 7e 22 4c 3f 06 7c 79 25 b7 5f e0 dd ec b8 dc d7 09 d3 db 24 71 ee f7 8f e5 80 ad 97 6f 23 9f ca 72 9d b2 4a 7f 18 f3 dc 6d 97 5d 52 41 b7 79 aa d1 3b ac d1 8f be 23 cf b7 b6 80 c4 e7 70 e1 54 ba 57 1e ec 7d 65 df 61 95 8d 34 ee fc ab 3f 07 2f 7a 85 91 39 fd 04 88 1e 78 a5 a9 eb 58 c1 Data Ascii: Dt89+([($`Pb*dw%pWCEw+W2 !)Uzh7#]J1_a(+vX0Ne?d.oC2_qBbh[~~"L?\|y%_$qo#rJm]RAy;#pTW}ea4?/z9xX
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: dc 1c 50 f2 02 1d f5 d1 3e 5f f2 b6 fc 19 7b 6e a1 f4 92 82 00 be b8 25 87 b2 5c ef 74 2a ed b1 1f 7e ff 13 6c 32 79 49 8a c7 1d 7f f3 ae 3a 2c aa 05 80 95 4f f5 ee b2 af 34 34 5d 13 2b c3 4d 41 9e 7b 5d dd 37 fa 98 43 7a 30 5f e4 f7 97 d6 09 7c 60 45 79 49 aa a1 81 d5 7e d8 17 aa ef 1b 2f 2d 64 e0 6d d6 ff e4 3f e5 17 70 64 9f 2f 3f fa 03 03 7e db 10 10 be 2c 5e c4 d8 6b bb 24 d7 5c 02 3c c3 13 4e bb cd 88 42 93 73 11 61 50 3f 32 4b d8 60 4d df 06 95 a7 d7 ad 30 d9 3e 29 d5 2e a6 fe 9e 4f e1 46 ab ef 9e 6c cc 65 9f a3 ba 49 08 9a fd b8 ca b7 f4 69 da 6d 63 f5 05 18 f2 c8 4d 57 ad 7b 6d 5f b2 99 3d 87 ed d9 25 c3 98 d3 26 e1 c8 8d 57 cc ce 75 b1 07 1d 19 d5 fb 1f c5 b9 e7 9d 4b 97 32 fd d4 b3 f7 21 fb 2b e5 80 30 ad 56 d5 59 7d 88 de 00 71 ca 61 dc 69 a9 Data Ascii: P>_{n%\t*~l2yI:,O44]+MA{]7Cz0_\|`EyI~/-dm?pd/?~,^k$\<NBsaP?2K`M0>).OFleIimcMW{m_=%&WuK2!+0VY}qai
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 55 cb 58 da 8b 85 38 5f 57 56 7f df 45 1b 75 a7 b2 45 ec 0c cd 04 8c 74 7a 92 18 93 cd 1e 97 d8 64 5d 6f b7 6c 69 7c 2d a2 92 ad 11 7f 50 51 7e ac 9f ce a5 6a b7 63 95 1a 3b 35 cc 58 75 d2 bc ec c2 5e bd f7 12 f3 5b 9c 81 fa f4 b1 2e f1 47 de 64 3b 37 1e 7e 98 f7 5a 2a d7 04 e5 b9 7e 9b 4d b5 c9 b6 1a f5 1f 62 6c 94 78 fa 15 c7 e5 ec ef 8f 1e 55 fa fb ff 34 89 e4 cc 7f ae 30 8f f5 37 7a bd 91 ab 9f 54 aa 45 d3 6f 8b 59 6e 2c 7c d9 0c 3b 61 3d 63 e1 86 8e 49 59 6d 60 77 2e 5b df ff 1c 22 9d 76 9b 0e 7b c4 22 6f 3c 2a 26 95 69 b5 a3 b2 f8 11 1b cb 8b e5 29 61 66 39 49 32 16 7e c3 8b bd c9 fc d5 ea f0 39 94 e5 dd 3a 96 a1 6f af bb a8 59 79 36 75 e3 45 70 50 79 a9 5d 75 b8 6b bc 1d 8b b1 af f5 86 2f b5 e9 94 15 61 c0 82 32 9e d3 32 7f f5 54 9b 95 66 50 47 39 Data Ascii: UX8_WVEuEtzd]oli\|-PQ~jc;5Xu^[.Gd;7~Z~MblxU407zTEoYn,\|;a=cIYm`w.["v{"o<&i)af9I2~9:oYy6uEpPy]uk/a22TfPG9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	50060	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	530	OUT	GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 179240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4101 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	720	IN	Data Raw: 52 49 46 46 20 bc 02 00 57 45 42 50 56 50 38 4c 14 bc 02 00 2f 0d c2 49 00 4d 40 90 80 36 6c 73 10 13 62 d8 ff 3f 6c 3b ed fa 82 88 fe 4f 80 24 25 5e 25 29 ca 59 89 7c 29 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 43 5e 39 d6 1a 9d e2 57 ab d6 44 4e 12 c9 d6 d6 9b 19 27 96 9c d5 33 d6 ba 24 da 66 dd 48 1b 25 52 94 4f 1d 27 89 16 3b 67 29 1b 27 89 95 dd ea bc 75 92 e7 51 b6 96 64 7d a0 78 91 b4 08 db e2 d8 16 18 91 1e 59 b2 ed 47 92 a2 85 49 6e 2d 92 ee 28 4b 77 e7 71 b5 04 63 29 33 91 a4 24 51 a2 44 ca 7a 92 22 49 05 df 01 63 00 84 29 69 a1 24 25 89 d6 38 ce de 56 92 48 1c 7d 37 4b b6 9c 06 ed f8 42 7d 4b 92 ed 47 15 ec ce 5d ac 28 11 38 ae 77 db d2 9e 71 68 66 76 14 04 8a a2 05 4b 1f e2 8d da 7e 01 8d 6c 07 21 5a 6e 5b 82 45 59 99 91 e4 24 b2 29 92 37 c9 31 Data Ascii: RIFF WEBPVP8L/IM@6lsb?l;O$%^%)Y\|)RC^9WDN'3$fH%RO';g)'uQd}xYGIn-(Kwqc)3$QDz"Ic)i$%8VH}7KB}KG](8wqhfvK~l!Zn[EY$)71
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: c9 a9 62 66 e6 f9 cf a0 aa f1 86 33 8a 99 21 f4 ff ef bf c2 b6 6d 1b 26 dd f3 0e 94 40 a5 34 d4 15 e6 74 da 90 38 cd 30 ac 94 ef 42 0a 4a 14 10 a0 40 90 28 a4 03 f5 42 27 43 8a 89 88 14 a9 06 f5 02 a1 84 e9 04 39 8c 81 61 38 4c a4 48 25 80 42 4c 20 48 81 88 14 11 c3 c4 70 88 18 e2 0e c0 80 01 0a 41 30 4a 1a 8a 49 d1 b3 e8 55 94 a2 2e 1d 82 00 40 09 74 14 1d 02 3a 0c 20 08 40 90 ba d4 4d 0c 29 82 88 60 10 0e 43 1a d6 30 24 52 a4 14 00 00 11 31 11 51 98 88 88 e6 20 9b b3 41 00 0a 01 0c a0 50 9a 60 98 26 1a 00 a2 8a 8e c2 21 ba 21 1d d2 21 7d ab 90 62 1d e6 30 1c 86 15 ab 17 00 b1 91 53 9c c6 00 87 94 01 d2 28 69 c0 d9 14 82 39 0c 29 52 50 ac 18 10 29 26 10 38 0c d1 45 23 00 40 01 52 50 08 2b 86 61 c0 44 dd ea 42 31 18 06 d8 51 ac ef ad 6e 1d 0a d1 05 11 11 Data Ascii: bf3!m&@4t80BJ@(B'C9a8LH%BL HpA0JIU.@t: @M)`C0$R1Q AP`&!!!}b0S(i9)RP)&8E#@RP+aDB1Qn
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: d6 81 61 0e 60 d8 08 65 03 30 8c 12 10 01 58 4a 28 9b d5 0b dd 30 a7 74 5a bd a8 7b 5e ca 33 00 86 49 51 2f 30 a7 38 1d 03 c3 fc c4 8a d5 0d eb 69 6f c0 0c 31 ac a3 40 30 11 ac 5e d4 0b 0a c4 cb 0c eb 69 f6 02 33 8c 01 85 82 42 df 1a 86 21 48 29 8a c3 cf a8 a1 18 a8 17 75 20 75 85 20 0d 03 31 80 13 2b 82 20 82 62 f8 3b 81 7a d1 61 00 02 40 37 03 28 04 43 40 65 f5 12 30 c4 18 98 4e 9c e0 f8 19 21 17 87 75 38 48 13 29 50 48 dd c4 c4 04 00 bc 8b 52 08 a6 1b 4e 33 31 27 ec 84 d3 0a 29 4c d8 e0 24 0d 9e 4a 13 cd 69 22 ca 4e c6 ce 70 b2 d7 f1 eb 38 d3 4b e9 bb e9 bc 3a cf e8 de 67 1f 34 86 63 ee 0e 9b d7 71 70 64 5f af 83 bd f6 f7 da 3f b3 7f e5 78 18 18 0c 27 7b 9d ef b5 93 e7 8e 86 3f 47 d9 eb e0 a8 43 8f 7d fa c0 6b e8 db c5 70 df af f3 cf 81 fa de b0 7b cc Data Ascii: a`e0XJ(0tZ{^3IQ/08io1@0^i3B!H)u u 1+ b;za@7(C@e0N!u8H)PHRN31')L$Ji"Np8K:g4cqpd_?x'{?GC}kp{
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 79 b3 e4 cf 23 7f 1d 1f 8c 95 d5 f3 e4 cb be 5e 29 69 d2 57 16 77 4b c6 ca b6 32 56 9e a9 e2 33 29 f9 3e be 3e ff 5f 92 f3 a7 3b d9 8a 77 be 59 a4 bc 58 52 b2 da 3a f9 f6 48 5f 39 2a 7d 3d fb e1 ab 92 55 9a ac d2 7c 5f f2 9e 0f 0a 4d 4a 94 38 f9 9c 6f 1c f3 93 5a 7f 33 1c 06 40 1a 36 04 74 ff df bc 28 da 6e 07 44 84 03 b7 6d 23 c9 1e 64 27 3d 9d 8c b1 8f 38 07 a7 12 7d 9d bf 80 67 22 ca 38 06 85 33 1f 09 02 ea be b5 3e e0 d1 56 78 25 05 2f 57 6c fa 4a d7 62 2c 6a 7b 58 0b a6 64 28 ca a8 20 0f 08 f3 cd 78 99 74 3a 31 5e 87 f6 29 1f d4 ac 90 22 72 dd 8e 9a 8c 7d 14 b4 e2 b6 9b e6 18 c0 87 b4 f8 84 e2 66 c7 f5 d6 fb 91 f7 87 e3 07 82 96 ec 95 f1 40 a4 44 52 bc 14 2b e0 a6 96 60 d7 55 e4 e2 dc ac b3 56 e5 76 1f 7d 56 74 a6 c1 97 fc c6 92 91 77 df b8 10 6b 3c Data Ascii: y#^)iWwK2V3)>>_;wYXR:H_9*}=U\|_MJ8oZ3@6t(nDm#d'=8}g"83>Vx%/WlJb,j{Xd( xt:1^)"r}f@DR+`UVv}Vtwk<
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 87 82 9f de f0 ff 57 6d a7 d9 b6 df ff 3f c6 98 73 f9 da ae d9 c4 85 24 84 10 dc 25 d0 a2 2d 3d 39 eb 7a da ed ee fa ce 5d 9e d3 ad 02 54 a8 1b 15 9c 12 20 41 12 20 46 b2 e3 db 5d 96 cd 39 c6 f8 ff 8f a3 72 3e ef ce d7 dc b0 6d 5b f6 b6 d1 75 9e d7 75 df f7 f3 bc af d8 b2 64 88 29 86 38 49 9d b4 93 32 a4 d3 59 cc cc cc cc 6b cd af c5 4c bf 98 99 66 3e 66 ea 7c 58 6e 93 4e 9b b8 71 e2 38 96 49 b2 64 99 84 ef fb 3e 37 5c 97 2f 49 92 55 db b6 6d cb cc a3 d4 d6 7a ef 63 cc b1 d6 5c 9b ce 65 66 86 14 dc cf 9b 00 4e e0 cd 0e 33 f3 dd 3c d7 a0 0e ad d6 e2 a1 86 6d 23 a5 cf 3f dd 3d 33 ac fe b0 6d 5b 9e c6 fa bf eb ba ef 27 46 42 08 12 dc ad 68 0b 15 a8 ae 4e 65 d5 3b 3e cb fd 75 77 77 97 e5 ee be d6 b8 cf b4 43 a7 d4 bd d4 70 d7 e0 90 04 48 42 e4 79 ee fb da 36 Data Ascii: Wm?s$%-=9z]T A F]9r>m[uud)8I2YkLf>f\|XnNq8Id>7\/IUmzc\efN3<m#?=3m['FBhNe;>uwwCpHBy6
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: cf 5d d6 62 e7 dd 6e 38 1f 19 82 00 b3 fd 85 c2 64 cd d1 1e 81 37 0c 27 4a f7 7e df 3f d7 13 44 cc ab 7e 93 07 05 c5 e0 e9 5a 43 06 55 2e a2 b5 28 63 b4 89 52 3b 4b bb e2 42 20 50 96 87 13 cc e2 12 0b d6 37 71 75 a7 91 4d 0d ae 1a 2e b8 e4 c0 50 d0 02 8c 6f 0a 46 42 fb 99 da 8e 2a 88 f2 9c 5a 03 0e 54 ea c5 9f 31 75 b8 f9 04 b6 fd 5e 32 ec d2 c6 8e 0c 2a 01 c6 50 b9 fd d6 de ab de 3e 58 7a 0f 79 4b 61 14 b5 d2 68 40 ca 66 24 e2 ee 67 f5 2c a4 cd b9 7f a7 45 31 86 4b ae a5 47 e7 e9 7c df 53 b7 38 de 2d ee d1 a9 d9 8d 2d 50 4d c9 3c 34 3f d7 77 b9 22 2f 09 f1 74 e6 48 96 04 15 c4 6e 34 82 5a 11 84 bc ad 5f f0 62 aa d9 50 83 b2 38 88 7b 1f 5b 48 dc 42 35 ad 46 17 b1 15 7d 6a f5 1d e1 42 ae f3 00 18 a9 d2 2d 37 dd 46 6d 30 5b 35 28 7d fb f0 ee 49 12 2a fe 9e Data Ascii: ]bn8d7'J~?D~ZCU.(cR;KB P7quM.PoFBZT1u^2P>XzyKah@f$g,E1KG\|S8--PM<4?w"/tHn4Z_bP8{[HB5F}jB-7Fm0[5(}I*
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: c7 9f 83 8c 5f e9 2f e0 6d 14 9b 79 60 50 b3 71 9a 89 20 a7 7a 30 35 14 df 5e de ee d6 78 e3 f8 ca d7 de 63 5b 53 8b b0 19 8f a2 84 34 66 0b 6c 37 28 6e cf 9d a4 1d b5 66 54 10 39 5c cf 59 6d 77 a3 35 b9 06 14 b5 8d 1f 42 09 54 93 5a 6e 6f 5e e3 ed b9 26 59 78 fa 5f 9c bc 71 73 ef bb 40 41 be cb ab 72 82 38 98 72 09 5a f4 02 7c 7a 91 5a 14 b1 10 87 2d 60 ac 09 9b 6f 7d fb 8b bf ca 6f d3 6f 42 ef 0d a1 37 d1 d1 e9 46 6e a7 3f 88 71 24 cb 82 8b e5 e7 2e 12 e8 c5 1e 0a 38 3c 0b fc ac 7a a7 d4 d4 7a a4 6c 23 e3 14 93 2c f0 74 6e 97 5a fe f1 5f 25 ee 04 f7 03 0d 6e 80 20 d7 b9 b3 8a 78 19 cb de 7e 7a a0 e7 46 be ea 6c c2 2d 55 04 20 d0 90 b8 aa c0 68 17 f6 9b 4c 37 60 b3 00 d4 fe 15 96 a7 e7 f6 d7 87 c7 28 3f 4f d2 ae ac 05 15 c3 d1 87 4b e5 ab 8e 84 0f 9a 16 Data Ascii: _/my`Pq z05^xc[S4fl7(nfT9\Ymw5BTZno^&Yx_qs@Ar8rZ\|zZ-`o}ooB7Fn?q$.8<zzl#,tnZ_%n x~zFl-U hL7`(?OK
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 32 92 a3 66 1d 30 cf fd b8 bd b0 5f 94 2e 00 7e 3c bf d1 97 0e 51 a4 86 9b 43 ee 57 9b 1b 5c 68 98 6d 3f 34 c6 ae 96 b7 7f b9 be 30 61 62 75 ab 9b 80 36 07 84 c1 60 f3 55 62 0a c2 38 f5 8c 93 66 78 fb bf d4 50 1e 35 8c d1 5b c0 4d 8d 13 46 2d 20 d6 b7 6e 13 39 95 68 70 d9 c8 11 d1 3a 0c 5c f6 2b 2d 69 bf db 01 36 8f 6d 7a a4 f6 9a d3 f9 f2 8f dd 04 4a eb 9f 28 58 56 ac 52 03 fa 2c 2f 81 dc f8 e1 1f 65 b7 99 6c bb 09 89 04 b9 ad 76 31 db 6f b7 c6 1f f2 4e b3 58 d5 2e 9f 65 4f 4f fc b8 c9 fc 3f da 8d 70 bf 54 10 6c 7e a4 6c f3 e1 90 3d d8 85 f1 9c f6 db 22 19 48 6c 46 4d 77 fd 44 74 a6 c6 ca 58 23 63 ce 58 7e 19 5f 65 f2 3e 7d 6f a0 93 b7 64 84 db b1 2b 53 dd 32 91 cb 1b 97 4f d3 78 8f ce 7c fb e4 52 a5 a1 db 89 68 1b 4b f8 bb 54 a3 32 67 37 4c ea 5b 4d 9d Data Ascii: 2f0_.~<QCW\hm?40abu6`Ub8fxP5[MF- n9hp:\+-i6mzJ(XVR,/elv1oNX.eOO?pTl~l="HlFMwDtX#cX~_e>}od+S2Ox\|RhKT2g7L[M
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: d3 09 1b ba ba 4b 90 bd ea 85 fc 82 41 5a 41 64 7a af d2 b6 54 bd 87 9b 6e ae e5 d6 61 9b 7b 7f 2f 6b 4d da c2 3d 50 8c b4 35 f4 14 2a db ef ea 8a 55 af d8 1b d6 9a 81 30 6f 5e 3f 49 df c0 81 61 51 be fa 2b 1f 1e c9 1b 53 eb d9 c2 09 3f 4e af df ff eb ef fa 6f 6f 69 6c ad 01 2b 73 96 92 6f 34 3e 50 52 36 91 95 55 7d 26 d0 20 6c 63 9e fa 4a b2 6d f4 9e b2 f6 f4 43 9b b5 86 d3 76 10 35 10 4c 09 ed 08 ce dd 42 28 61 a0 b0 cc 00 28 c7 79 78 bf d7 c4 cd 87 4e 87 06 74 6e 62 bb 9e 2d dc c4 54 eb 19 d5 b6 45 93 62 75 f0 c8 91 4d 03 3d 32 45 03 38 16 1a 9a b5 a2 22 a8 b7 8b e5 bc 1b ee c8 8b 1f 9a c7 eb 72 8b 86 61 0b 38 15 ba d1 b7 b6 0e 1e d3 4f 20 dc f3 33 d5 98 1b e7 ea bd 04 06 b2 ea 14 ac 59 38 f9 d7 ba b5 8a 6e c7 b4 fb dd fd 99 b6 29 2b a5 55 db 1a 3d 57 Data Ascii: KAZAdzTna{/kM=P5*U0o^?IaQ+S?Nooil+so4>PR6U}& lcJmCv5LB(a(yxNtnb-TEbuM=2E8"ra8O 3Y8n)+U=W
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 01 c8 ec c2 ad d7 06 c1 15 7a 71 c0 36 8e c1 ea b9 1c bc b4 27 97 fc 5a ac d8 eb 6c bb 78 ca af 77 3b d1 38 84 bf 66 73 61 13 c0 f9 1b d3 34 2a 3c c1 bc a2 24 e3 43 0f b7 a9 c0 ba b2 0d b6 2a b6 c7 2d 6d 6c 58 08 06 f1 b9 fc 42 9a 20 db 92 06 4a 69 97 ba 00 9f d5 d0 1c 32 57 7b 23 f2 d4 9b 61 73 57 52 e8 57 5b 9e be 01 54 7f b6 7f bb ea 7e 6b fa fa cd f5 7a 5a 3d ee 04 8a 15 d1 31 b8 9a a8 d7 6a 5c 4d a1 b7 e1 2a fc 02 bf f0 eb 29 8e 20 c6 58 23 5a d6 54 8f da 50 6d 58 86 04 03 0b 7d 95 4b b2 52 af 6c 63 30 5b e3 e9 42 f3 0d 8f 46 e8 e3 b0 11 3d 0a 91 87 28 b0 85 e9 83 f6 6d fe aa 75 90 aa 17 a3 4c 46 9f 35 27 b0 e1 92 2a 34 fa 94 f7 60 70 8f dc 8b a6 c9 bd c6 2d 0b 92 62 b8 85 77 95 16 df b0 47 c6 0d c2 d5 b7 50 71 2b 47 9a 6c 74 e2 5b df 7a c2 b6 59 28 Data Ascii: zq6'Zlxw;8fsa4<$C-mlXB Ji2W{#asWRW[T~kzZ=1j\M) X#ZTPmX}KRlc0[BF=(muLF5'4`p-bwGPq+Glt[zY(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	50059	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	525	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4722 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:57 GMT Expires: Sat, 20 Apr 2024 11:15:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 10254 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	721	IN	Data Raw: 52 49 46 46 6a 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 21 12 00 00 2f ff c0 3f 00 2a bc f2 ff 2d ba 2d e5 72 67 06 c6 fd 59 eb 1d d7 6d 47 b6 8d fb ec 7d dc dd dd dd dd dd dd 2d d8 fb 7d fb 79 9e 7e 9e 5e d1 d4 59 27 22 f5 4c 8f 44 93 22 d1 8b 2f 24 1a cb 4e 8d ac 2b 78 6b 73 01 16 b9 6b b4 6b 1a 97 d0 dd 89 74 57 e3 84 2e 8b ec 64 38 ec 0b c0 5f dc dd dd 75 47 5d bc b8 c3 8a 88 a6 26 c2 e5 4d b1 95 e2 d7 40 35 ce 1d 90 b9 bb fb 26 ea 93 4d 4e 4c 4d 48 dc 17 70 62 dc dd d9 d5 b8 73 e4 06 70 c2 a9 fa 4f 4a 4d 86 86 4e 3e a4 0e 1d af 3b 20 e2 02 88 1a 89 08 5d 62 aa f6 44 54 75 32 12 e2 ee 90 0d d6 35 11 16 75 46 fe 9e 89 b0 7d ea 5f 45 e6 8d 84 96 e9 aa c2 dd 9b 22 3b 17 80 13 d9 8e 1b a9 92 00 d9 b6 69 47 2b Data Ascii: RIFFjWEBPVP8XVP8L!/?*--rgYmG}-}y~^Y'"LD"/$N+xkskktW.d8_uG]&M@5&MNLMHpbspOJMN>; ]bDTu25uF}_E";iG+
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a6 d6 63 c6 2c 1a 1b 8b 88 b8 41 47 c7 fa cd cd 82 d9 18 11 b1 71 ac 6f df 52 2d 94 8e ab a9 39 be 86 c6 81 d7 ac c9 40 5c b4 6d cf d8 37 1c 68 d5 aa 31 be 7e 7d b5 6b 58 ab aa 4a 65 4b 27 25 cd ee e3 73 fc 21 2f 5d 6a 2b c4 5e c0 2f 7a b6 ed b7 91 92 1a fa da b5 19 bd bc 5a 8d 1f 5f 2d 27 a7 81 20 4d 09 54 2b 2a 66 84 e8 b6 be 2f 81 b4 ec db cf 39 d4 95 2b 33 ba b9 bd b2 3a 5e 7d fe 90 90 09 74 74 3a 4c 9f 5e 30 75 d7 a8 82 fe 51 46 08 00 88 aa 24 24 0c f7 99 40 8b d7 1a 7a 1c 8e fc ea d5 bc 41 41 bc ad 98 9b 3b b5 ad 6d e7 05 0b 3c 3f 20 10 65 84 a8 29 f6 4f fd 42 d7 f3 e7 7f 80 9f 15 b2 b3 4f f6 db 5e 99 40 46 88 9a 66 64 24 e6 48 2f 5e 2c 12 1d cd c3 da b5 b5 d3 39 3a b6 56 54 f4 dc 26 a8 99 56 52 f3 84 53 59 5a be 02 a3 a7 1c f2 ca 15 bb 1c 42 4d b6 Data Ascii: c,AGqoR-9@\m7h1~}kXJeK'%s!/]j+^/zZ_-' MT+*f/9+3:^}tt:L^0uQF$$@zAA;m<? e)OBO^@Ffd$H/^,9:VT&VRSYZBM
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 53 ba 31 77 78 69 96 98 f4 19 dd dd f9 3b c4 b1 63 29 08 31 fd 25 fe fe 5f 17 93 b7 72 41 01 77 33 d8 d8 98 20 48 f3 36 b8 fb 76 4f 48 7d ef 12 79 5f a5 b8 d8 8e 44 11 d9 ab 94 94 f0 86 77 d9 57 44 e9 a8 ef de 71 b7 ff 5e bd 08 64 84 10 26 81 fb e4 6e d4 b7 6f 53 11 e9 b3 fb fa f2 36 c6 87 0f 65 10 68 f9 09 78 fb 69 5d 44 f1 4a b9 b9 9c f5 2a 82 50 8b bd 38 bb f3 58 40 a5 14 f9 de d8 ad e5 24 08 39 a9 75 37 e6 0b d3 92 78 ac 43 ee d9 c3 59 d7 2b 57 52 e0 b2 54 9c 48 47 a7 d5 d0 a1 01 1f 90 1a 9c 3d aa 25 1e 77 12 73 73 be e6 f6 f3 8b 81 4b 02 e6 22 b1 b1 d8 a3 cb a5 4b 26 1f 10 bf 18 5f bf e8 8a 27 d9 9c ab 3e 7e 89 0b b7 f5 b8 71 5b 23 22 4e 65 64 94 2f 71 51 f2 fb 70 b5 79 22 1e 73 3b ae 0e 7e e4 c8 9e 00 78 34 87 b8 7a 15 bb bf 58 42 82 49 80 07 30 8e Data Ascii: S1wxi;c)1%_rAw3 H6vOH}y_DwWDq^d&noS6ehxi]DJ*P8X@$9u7xCY+WRTHG=%wssK"K&_'>~q[#"Ned/qQpy"s;~x4zXBI0
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a1 a0 a0 18 51 01 ff 01 29 75 39 75 ca 12 51 25 a1 d4 4a 46 26 a4 42 a0 d5 e8 d1 28 de 39 bd bd 6d 3a e1 f7 53 4a 2a 22 02 73 f1 b8 38 2a 8b c5 c5 15 80 e6 4b f8 5b 0b 08 c7 fc f8 31 a1 02 85 cb a1 f2 d8 26 08 d9 9d dc d2 92 ca e5 19 54 f2 4b 24 27 a3 90 1f 21 a5 62 5c 1e 95 c9 2d 2c 5c 31 85 6d bb 74 a1 f1 45 36 d0 2c 4c 63 6a 8a 62 fe ca c3 bf 03 0d b0 bf 88 46 db ae 5d 43 31 81 bd 5a 49 09 85 c9 4d 4d 5d 1a ee 30 b7 6f a3 a8 57 2a 2a b2 23 1a ee 40 0a 2f 69 83 a0 cb d3 3b 3b 53 78 ce be 14 08 ec 07 50 dc b3 b9 b9 c5 34 fa 3e 27 85 e3 94 45 45 a0 fd f4 e9 ca 7a 99 19 21 94 67 54 55 bd 55 4b 4b 05 86 97 e2 52 00 b3 97 b2 1f 20 20 2a b0 57 2d 2e 56 34 c2 b3 67 29 05 6f 0e 4f 4f 14 fa 7e 65 64 08 50 48 4f 4d d1 6b d9 20 6c 77 a0 22 a7 a2 2c 18 e6 ce 1d 14 Data Ascii: Q)u9uQ%JF&B(9m:SJ"s8K[1&TK$'!b\-,\1mtE6,LcjbF]C1ZIMM]0oW*#@/i;;SxP4>'EEz!gTUUKKR W-.V4g)oOO~edPHOMk lw",
2024-04-19 14:06:51 UTC	236	IN	Data Raw: 25 df 3e 9d 83 43 9b ae 5d 3d b7 5a 4e 0e 6a 80 95 d4 37 bb 9e 3b f7 a3 6b 94 97 f3 b6 58 6c ec c4 86 86 e7 eb 95 43 a8 31 46 86 6e 7f c2 98 3f 7e cc 13 18 f8 92 bc 2c 11 17 37 9d b3 f3 c1 76 ec 30 1d b7 09 6a 9a cd 69 e2 59 d7 34 b5 83 c3 8d 1c 9b c9 2b bc ff ef 8e f9 fd 7b 5b 35 35 cf 29 5b 11 d4 50 4b 56 39 29 78 e7 fb 13 a3 bd 7b 37 8d 93 d3 39 cd 17 1c fc 38 6f 74 3b 5b 7d 25 22 36 de 52 bf 6f 5f 2a 29 e9 0f ce 7e 26 4f cf 89 0c 0c 86 ba 7c b9 fd e4 c9 a9 e7 e8 69 08 35 df 66 2b 2d eb 89 63 c6 9e 67 17 6d db 8b 0b a6 9f e8 c1 9e 80 40 7d 46 88 0d fd bf a1 ff 0f 37 37 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: %>C]=ZNj7;kXlC1Fn?~,7v0jiY4+{[55)[PKV9)x{798ot;[}%"6Ro_)~&O\|i5f+-cgm@}F77EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	50063	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1166	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:06:51 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:51 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-kgTCpGGGp4n_rAf9pJ_cBw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	50066	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:51 UTC	1578	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=f961bah4qz68 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajABR0g7qZbFFvXxLIiuS-icYJuX6T4xVv4ULlkW1w9yiOimHyDQuaZ9wp8isGwIugD4sElugfyCfJpI2Q; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:06:51 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:51 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-QklUjhnSEPgaRHEdtKge1Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:51 UTC	364	IN	Data Raw: 32 62 30 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b07<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 51 6b 6c 55 6a 68 6e 53 45 50 67 61 52 48 45 64 74 4b 67 65 31 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="QklUjhnSEPgaRHEdtKge1Q" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 2d 79 65 68 62 5a 72 34 33 5f 50 61 4e 7a 33 42 75 78 4c 53 78 58 5a 79 51 4c 33 2d 54 47 5a 68 62 4e 4a 71 44 66 50 46 69 62 45 70 38 56 6b 56 56 6b 48 78 5f 4a 64 66 73 65 67 6e 43 32 56 6a 63 64 59 49 37 37 58 42 67 35 54 7a 52 6b 36 35 43 6f 71 6e 44 39 49 6d 37 38 59 73 51 47 31 56 4f 33 36 30 56 43 6b 36 58 6d 62 75 6c 79 54 71 66 6d 45 4f 54 67 36 54 55 34 70 6d 5a 37 56 64 53 36 35 5a 68 42 52 2d 4a 51 45 58 74 56 78 72 62 33 75 48 45 35 53 7a 71 67 6b 30 58 34 71 66 34 69 63 71 78 53 4e 7a 5f 38 32 4b 79 54 5a 42 66 43 6e 39 6a 2d 75 53 61 4f 66 65 55 5f 69 79 53 4d 58 74 50 63 2d 37 36 47 6a 74 71 69 6e 6b 6c 65 55 50 76 51 71 65 64 52 39 4c 62 4a 41 71 61 71 47 66 6a 42 32 73 6b 34 78 5f 71 57 36 42 71 78 4d 6d 6d 70 61 48 63 68 30 6e 73 72 37 Data Ascii: -yehbZr43_PaNz3BuxLSxXZyQL3-TGZhbNJqDfPFibEp8VkVVkHx_JdfsegnC2VjcdYI77XBg5TzRk65CoqnD9Im78YsQG1VO360VCk6XmbulyTqfmEOTg6TU4pmZ7VdS65ZhBR-JQEXtVxrb3uHE5Szqgk0X4qf4icqxSNz_82KyTZBfCn9j-uSaOfeU_iySMXtPc-76GjtqinkleUPvQqedR9LbJAqaqGfjB2sk4x_qW6BqxMmmpaHch0nsr7
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 78 66 41 51 4c 6b 32 48 4c 4f 58 66 6f 74 38 71 4a 5a 76 52 4e 66 77 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 51 6b 6c 55 6a 68 6e 53 45 50 67 61 52 48 45 64 74 4b 67 65 31 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: xfAQLk2HLOXfot8qJZvRNfw"><script type="text/javascript" nonce="QklUjhnSEPgaRHEdtKge1Q"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:06:51 UTC	619	IN	Data Raw: 59 30 65 6b 56 34 55 30 64 44 62 6e 41 34 65 48 4e 46 62 45 78 43 61 54 49 32 62 32 64 46 63 45 4e 4d 61 47 52 36 55 45 4a 58 4d 45 35 68 56 45 6c 54 53 55 39 53 63 30 78 50 64 43 39 52 4e 47 63 33 56 56 64 43 4d 58 46 47 51 32 39 36 63 6b 31 79 57 55 73 76 52 43 74 73 61 58 64 4b 5a 6a 6c 30 4e 58 5a 6c 53 6e 5a 69 63 44 45 77 56 7a 5a 6e 4f 55 46 44 56 44 46 44 65 46 67 79 56 32 6c 42 63 31 42 70 5a 6e 68 78 52 31 4e 6f 56 33 42 6e 56 6d 74 6d 4e 47 49 34 4e 31 42 59 4e 57 5a 70 64 47 4a 53 55 7a 4a 42 59 55 39 6f 5a 6d 39 69 4e 54 64 69 4e 33 5a 70 54 45 35 57 61 30 4e 56 59 6c 59 34 61 47 35 50 55 55 5a 59 63 48 5a 55 64 45 35 58 52 45 6c 44 4f 58 4d 32 52 46 6c 34 65 55 4a 78 63 69 38 7a 54 45 4a 6e 5a 79 38 35 56 54 64 77 52 44 49 34 4d 6a 52 75 4d Data Ascii: Y0ekV4U0dDbnA4eHNFbExCaTI2b2dFcENMaGR6UEJXME5hVElTSU9Sc0xPdC9RNGc3VVdCMXFGQ296ck1yWUsvRCtsaXdKZjl0NXZlSnZicDEwVzZnOUFDVDFDeFgyV2lBc1BpZnhxR1NoV3BnVmtmNGI4N1BYNWZpdGJSUzJBYU9oZm9iNTdiN3ZpTE5Wa0NVYlY4aG5PUUZYcHZUdE5XRElDOXM2RFl4eUJxci8zTEJnZy85VTdwRDI4MjRuM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	50068	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1101	OUT	GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9595 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	722	IN	Data Raw: 52 49 46 46 f0 16 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c a8 16 00 00 2f ff c0 3f 00 09 47 6e db 48 12 ec 42 50 48 d9 fd ff 07 d7 3e eb 35 a2 ff 13 80 3f b9 9c e0 12 19 11 68 11 08 a0 8d c5 25 45 14 cc 5b 66 ee d5 20 40 40 09 33 33 22 b7 68 4c 47 b1 d1 cf 48 66 6e a9 5e d3 07 f0 cc a7 f8 4a 79 a2 de a1 24 af d8 1a 72 66 ca f6 92 25 61 e5 b1 24 ad 60 e8 9c f5 3e b0 6b 2f f0 10 af f9 d6 aa cb ad 6f bb 80 23 d9 b6 6a a5 bf fb e7 44 14 e1 09 b1 f9 8f 4d b3 ab 78 ea 44 92 24 21 ca 40 21 4b 22 5b f2 ff 57 21 51 a8 8b 0b b7 91 24 bb 4a 9b 5f 20 9e 48 60 2c 6c f2 8f 8a 00 30 fa 3f 01 0a ff e3 2d 43 02 04 5d 96 19 02 60 75 95 2f b7 96 6b d4 c6 ef be 0b 8c fd b9 18 60 30 c0 48 a6 04 01 00 06 03 1c 00 d6 cc 08 20 68 93 31 Data Ascii: RIFFWEBPVP8XVP8L/?GnHBPH>5?h%E[f @@33"hLGHfn^Jy$rf%a$`>k/o#jDMxD$!@!K"[W!Q$J_ H`,l0?-C]`u/k`0H h1
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: a0 6a bc 94 7f 04 0d 7c c6 e0 f7 3a 83 45 79 4f 04 d4 3f 1e ca 2f 82 a6 6c 50 33 00 39 69 50 33 8e 1f 74 1c b4 91 e4 48 ee bd f4 4f e1 f9 a3 7b 04 79 da 41 1b 49 8e 54 dd 17 f8 93 7b 2c f9 bb 62 02 1c c0 78 ff 8f f7 ff 78 ff 8f bb e1 0d 2f bb 1f 7f ae 5f 7e bf 5f 59 fb 29 e9 e4 95 e4 55 1c 82 16 5f 81 f2 ca 8f 57 cc 3d 3a 29 32 4b 27 5f 21 ed 2d fd 80 c7 a7 e2 be ed 03 7a 17 7a 43 6c dc 45 c9 13 c5 ab e4 ab 9b fa 91 73 4e 76 9d 5d 92 9d 3c f6 c2 bf 63 f7 e7 d7 ab af 82 0d 15 74 52 41 09 4a 14 b6 31 1d b6 e9 36 36 28 41 89 d2 77 94 ed 51 f5 ae 43 50 42 11 25 14 a9 31 9f c4 6f 79 d7 6b 4e 38 e5 01 d9 24 35 1a 5d 71 8f 9a a8 ea 12 b6 b1 79 15 28 41 05 15 d4 0a 45 14 a2 44 17 a2 b0 8d 8d f1 53 21 a8 40 05 25 ba 10 85 d4 98 62 29 6c d3 8d 1a b3 bc cb ee 49 87 Data Ascii: j\|:EyO?/lP39iP3tHO{yAIT{,bxx/_~_Y)U_W=:)2K'_!-zzClEsNv]<ctRAJ166(AwQCPB%1oykN8$5]qy(AEDS!@%b)lI
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 45 2f 02 94 aa e0 9b f1 8e dd 9f 55 0a 5a 5f 11 3a 25 6c 1a 16 8d 31 03 19 c6 42 e2 2c 7b 85 22 3a 64 d7 27 25 74 b2 ae 6c d2 da 11 bf 80 4c 0b 5f 4b bb 6d fb cf eb fb 71 fd 55 3f 0a 9d 1d 14 cb 93 0d 4a 50 9e 4d c3 4b cf 22 e9 a3 a0 80 58 85 41 fb f7 b5 cb ee 52 21 15 05 74 fe d1 9e 89 35 eb f5 43 3f bc 1d 3a 3b 36 22 57 1a 76 a8 b1 a6 65 29 42 1f 75 9e 55 c2 dc 96 8d 92 73 4c e6 d9 6b 16 29 0a 28 8d 8b e9 0b 0b 3e f0 3a 4e f4 7c b4 05 81 16 5a 63 50 82 f2 ec d6 fa 70 1a 25 4c 60 67 ed 85 cc 76 93 a4 f1 eb 39 97 ee aa 8a 27 9a 30 02 b6 a0 e4 46 5a 54 ba 25 b5 14 1f 9d 25 8b 05 99 08 20 de e0 a2 b3 22 7a 1a 44 01 76 0c 92 5b 1d e4 66 25 b2 05 dc fd 64 cf f2 c7 25 ce ee 59 ee d4 de 33 0a 3f 27 02 e0 98 fe 6e 93 4e 5e a8 af 66 68 f4 52 99 97 29 ac 9f 9d 55 Data Ascii: E/UZ_:%l1B,{":d'%tlL_KmqU?JPMK"XAR!t5C?:;6"Wve)BuUsLk)(>:N\|ZcPp%L`gv9'0FZT%% "zDv[f%d%Y3?'nN^fhR)U
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 28 39 0b 34 14 36 12 db 86 84 8f c7 08 cf 4e 93 35 a1 c4 ad b5 50 b7 96 c4 79 36 c0 d6 67 cc cb ea 62 9a 03 1e 76 a3 5d 64 4f c0 a6 7b b6 50 19 2a 03 71 9e dd 60 61 c4 ff db 40 c3 40 72 34 63 01 ee 25 53 14 c9 6c ac 69 4c 83 12 f4 34 42 21 f9 29 bf 42 f2 02 4a 1d ed 42 6b 97 6b 26 24 27 0b b0 f7 50 0b 0d 54 50 82 cb 99 56 38 62 33 e3 aa 5a e8 92 38 de 86 e4 09 24 ea b0 0a d4 42 03 15 94 e0 22 39 8d 36 f0 12 a4 ee a5 18 59 0a f7 a3 61 2c a6 ba c2 da 0b 62 ba bc e1 85 e8 69 08 17 30 62 03 3a b1 03 72 34 5a 0a a2 00 44 b9 55 63 33 54 50 82 12 ea 34 e3 82 21 cf 29 46 cc ed ed 68 0d 48 e9 80 30 a5 16 ea d6 9a 2e 42 9d 68 2f c8 98 11 d9 74 8d 25 8e b7 22 4f 20 09 30 2d 54 86 0a 45 58 45 21 d9 67 41 b0 5d d7 d8 2e 3e 93 05 72 3c ab a1 7a 02 dd f8 11 15 68 42 09 Data Ascii: (946N5Py6gbv]dO{P*q`a@@r4c%SliL4B!)BJBkk&$'PTPV8b3Z8$B"96Ya,bi0b:r4ZDUc3TP4!)FhH0.Bh/t%"O 0-TEXE!gA].>r<zhB
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 5d 7b cc 11 07 53 e4 1a 06 18 56 dd 1e af 19 27 da c0 c0 67 e2 e5 35 58 9c b4 06 45 62 ba d4 5d 84 ae 7e 03 5b 7d e0 92 61 cf 36 8a 67 0a 1f 22 59 63 6f 06 24 1e f6 3e 1e f6 7e d0 1b ca 13 d4 ca fd 6a d4 73 a3 3a 01 06 eb ea 3d a8 40 03 e5 59 11 04 f0 fd 6c 61 03 12 a6 ef e4 a8 7c e6 8c 49 91 03 58 f5 c7 51 0b 2a 0e aa 4d 42 05 2a 28 59 85 a8 e1 25 6b 80 60 9a 71 b6 9c f0 53 cb b3 8a 1c 39 7d f7 4a d9 e2 46 5c 9b 0f e1 1d 1a 63 03 95 a5 08 05 be 08 b2 e1 ff fd e9 4f c7 c5 5a ac f6 e8 c3 bd d7 dc 7b 1f 77 fa 38 7c 6a 74 f7 ff 33 31 63 6d 5f 6e 7e 55 e3 9e 97 04 77 1b 7a 4f 96 ba 27 d4 3d be 00 53 de 7e 7b ca 61 fd ef 4f bc fa af 6e b2 70 ff db bb e7 fd be ff c9 73 ef 8f e4 8d 29 25 ce e5 aa 83 d2 a8 cf 1f 9b 94 e2 55 62 f4 3c bf 7e f9 d5 fc 4c 5b f4 ab c7 Data Ascii: ]{SV'g5XEb]~[}a6g"Yco$>~js:=@Yla\|IXQMB(Y%k`qS9}JF\cOZ{w8\|jt31cm_n~UwzO'=S~{aOnps)%Ub<~L[
2024-04-19 14:06:52 UTC	138	IN	Data Raw: 27 f4 2c 6d d9 06 f9 84 d9 5b 1d 45 29 8e 14 ee d6 42 9c 79 11 c0 02 58 a0 e0 a9 57 94 52 4a 04 82 cc 67 66 61 4e 83 62 f6 54 ac fc 89 fa 44 18 64 56 ca 27 0c 8f 2d 51 f4 c7 1f 7f 44 90 cc 7b a8 b7 5f 7a 0b ef 2d a8 8c 22 01 81 d5 7e 4e 3d 18 80 08 24 e8 e3 6d fd b5 ff c7 fb ff 2f d4 06 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: ',m[E)ByXWRJgfaNbTDdV'-QD{_z-"~N=$m/EXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	50067	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1101	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5890 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:54 GMT Expires: Sat, 20 Apr 2024 11:15:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 10258 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	721	IN	Data Raw: 52 49 46 46 fa 16 00 00 57 45 42 50 56 50 38 4c ed 16 00 00 2f ff c0 3f 00 09 58 92 e4 d6 6d 6a 77 01 d1 28 c0 f7 3f b0 1e 00 6d 27 df 11 fd 9f 00 fc 9b 95 3d 6b 50 37 75 c7 0e 5b fc b8 da a0 53 e2 7c bc 1e d4 83 74 f7 f0 15 e1 7e 54 8e 84 67 46 00 e1 8b e4 84 3b 60 51 b9 c3 cd 54 da 72 b0 b4 4e 55 53 45 93 7c 55 e5 90 48 93 fb 22 39 23 09 b4 d8 00 48 80 36 dc 2f b2 06 0c 00 12 67 45 60 e0 32 eb 33 20 cd e5 c5 d3 1e 77 bd ab 17 8d ff eb 02 72 6c db a6 ad d1 7c f8 d8 df 36 f3 8f e8 47 60 1b 87 9f 6d 38 8e 64 bb 56 ea 9b d0 8d 9e be b7 f3 3d fb 5f 13 31 22 44 44 6e db 48 72 24 de bd 34 b5 a7 ca 7a 7c fe 11 5d 08 67 be 04 fa 3f 01 12 fe cd f7 8d 72 fc 0a fa 68 d1 f6 41 de bf c2 e6 d4 e3 e9 d2 b0 ee 82 76 ab 4b c3 37 64 4a b6 a3 4f 84 15 2b c0 7c 20 8d 9e 75 Data Ascii: RIFFWEBPVP8L/?Xmjw(?m'=kP7u[S\|t~TgF;`QTrNUSE\|UH"9#H6/gE`23 wrl\|6G`m8dV=_1"DDnHr$4z\|]g?rhAvK7dJO+\| u
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 52 35 b6 6d db b6 6d db b6 6d db b6 6d db 6c db aa 4a a7 cb 94 43 db b6 a9 3d fb dc 8f 23 1f 7e db b6 6d b3 8b 93 2a bd ed a4 67 9b fc 55 ac ca b6 f9 db b6 6d ff df bb 27 26 60 07 de f1 ff 3b fe 7f 27 a9 41 0e da 39 60 1c b0 88 4b 38 13 9e f1 33 9c 67 ea dc 3a 33 c6 05 38 e4 d7 97 f2 fd 59 c6 bf b6 14 bf bd c3 a5 2d 93 d5 1b d9 e2 a8 67 e8 0c bd 91 f1 d7 9c b8 ff dc e2 d3 79 3f ce cd cd 38 54 01 19 3b 1a 1d 9a 7e aa ea ef 66 ad cb 5b b6 ab 69 dd be 9a c9 d9 43 46 bd e6 f9 b1 fe 7c 32 c2 e4 51 d2 45 0c cb 5f ce 5e b2 91 c1 f2 4a 9f 82 e4 20 c5 b5 a5 a0 58 16 77 9d d4 14 41 ef 2f 69 a8 2c a5 af 28 a5 ff 7a b2 b2 fc e4 09 70 b5 28 4d 4e 60 79 e0 fe 52 ac b9 0e eb af c9 aa 50 21 0e f3 f5 a5 70 d4 c8 b2 ea 14 d5 cc 66 ea ef 85 c2 1d 65 b5 c9 9e dc 6b 39 48 39 Data Ascii: R5mmmmlJC=#~m*gUm'&`;'A9`K83g:38Y-gy?8T;~f[iCF\|2QE_^J XwA/i,(zp(MN`yRP!pfek9H9
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: e2 c7 9a 3f ce c8 22 63 3b ee a8 3c a4 0b a2 9f 51 44 77 23 36 19 b3 46 c4 be b5 ea ff cf ef 70 a3 f7 fb df ed 7f d4 4e 26 7f f4 d5 d2 77 7c 38 fa 66 e9 fa 0c 08 aa 43 ed 3a a5 b3 a6 7f d8 d5 e9 e3 1e da b8 c8 f0 eb 3f 95 3f 59 fe 0f d5 ab 55 f4 2b c1 48 cc db 11 d3 81 f4 18 67 fa 75 66 7a 5b 24 9f 93 6a c1 4a 4a 38 37 d7 5b d9 5d 99 4b 8a 54 43 c0 d4 24 6c 83 87 3d 1d c6 d1 88 02 c0 cb 2b 8e 5d b4 eb 28 6d ac a2 7f 12 d3 99 35 b7 aa 17 88 49 93 33 2d 2e d6 3d ff c8 5b 17 54 f0 fa 11 0a 93 24 14 0c 98 1a d7 ac 5f 88 f8 05 da b4 a2 6e 75 93 07 fc 98 3a 2b 52 da 50 d1 3f 69 8b c4 dc fd df a5 5f cd 64 79 5a 99 98 a9 e6 a8 b7 0f 96 6f 02 8d 94 24 5e 5a 28 fd 46 18 63 04 4a 0d e3 f8 79 cc cf 09 d4 59 0b dd dd 2b 27 2a 26 e8 0e 0c ed 76 3c e9 ae db 6a f6 96 6e Data Ascii: ?"c;<QDw#6FpN&w\|8fC:??YU+Hgufz[$jJJ87[]KTC$l=+](m5I3-.=[T$_nu:+RP?i_dyZo$^Z(FcJyY+'*&v<jn
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: d2 bb fe a5 9f bf 7f 98 67 ef 2d ae 7e 27 8c e7 c9 a9 94 e8 47 5b 26 4b 1b d3 3c 1f 27 28 3f 6e 9f 66 3c b2 56 6e b4 eb 7d a5 a0 15 11 8a d8 33 94 b6 10 d4 85 e3 5c de 59 ff 69 dd d9 e3 d5 e2 7e b9 ef fd f5 8b 88 07 d9 a2 67 ff 2c c5 d1 f3 b4 88 b6 18 b0 e9 6f fa 51 c4 e4 b6 53 6f 81 f1 6d f7 74 cc 87 fd 1f 60 74 8b 53 a3 c8 60 45 28 19 e6 71 a0 08 dc e9 6f fa a9 b5 f2 c5 8a ad 72 e6 12 e4 78 f1 f2 82 6d 61 02 8d 31 41 e9 46 61 50 04 95 71 72 3f 8f 82 22 b0 e8 47 3f 54 2c 63 f8 79 c6 25 13 e3 3f 2a 61 a5 47 d8 57 c7 c0 22 aa 70 22 ba 81 40 b1 98 cb a5 c8 c0 b2 79 d2 28 e1 63 a5 6f c7 9c 5a 43 fd c6 81 3a 15 8d 2f 0f 44 09 11 c3 c9 89 50 24 94 b6 c8 c2 96 e3 3c 52 ba cb a6 9f ea 6d 6b 05 2e cb 4f 9f 4b e3 8a 03 55 aa 5e 5f 47 6e 9a cc ae 13 2a cb 4b af cc Data Ascii: g-~'G[&K<'(?nf<Vn}3\Yi~g,oQSomt`tS`E(qorxma1AFaPqr?"G?T,cy%?aGW"p"@y(coZC:/DP$<Rmk.OKU^_GnK
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 0a 51 08 65 04 a5 0d 4a b0 d9 33 f6 cf 62 cc a4 0a a1 48 33 19 8a 28 84 92 2c 6c da 50 08 9b f6 ae d7 66 22 8b d9 7c 22 a6 0b 27 82 12 dd 40 ec 19 dd a8 68 4f da e0 16 d2 6c 0b ea 76 1e ad 09 45 28 9c b4 a5 5b 44 77 21 d5 44 1b 44 7b d2 46 3f da 3a c1 c6 98 45 02 d1 9e 5e 23 da 60 d5 56 06 52 26 8b c1 a6 5d ec 79 4b 86 f6 4b 60 33 9f ff 77 09 8a d7 08 45 50 84 32 2c b6 73 a4 0d 85 28 ed 49 37 b8 35 7d 82 0d 99 4b 35 44 f7 a4 2d dd d2 96 0c 1c 4d 16 41 ec 1b fd 74 4e da 8d 0c b5 cc a3 2f 49 54 87 a8 55 5b a4 c1 c2 06 69 04 9b f6 d4 09 dc 12 6d b4 a5 5b 32 8f 3e 7b fa e1 92 47 85 13 d1 86 b2 e7 22 e5 09 cb be 81 5b d3 03 02 29 e1 3f 0c f5 79 70 ac b9 f1 b9 c3 ec b8 2f 4e da 22 f6 2c 21 65 ba 9a d2 3d f5 70 8b 74 4e 10 6d 2a 18 6f e2 f1 e7 ce a4 e5 89 d6 47 Data Ascii: QeJ3bH3(,lPf"\|"'@hOlvE([Dw!DD{F?:E^#`VR&]yKK`3wEP2,s(I75}K5D-MAtN/ITU[im[2>{G"[)?yp/N",!e=ptNm*oG
2024-04-19 14:06:52 UTC	149	IN	Data Raw: 88 f1 ee 75 0e 10 86 78 6c 2e cd d7 1b 49 9f 9b f7 43 e3 60 bf f7 4f 7e 7d a7 f0 b1 76 f1 22 fc 10 24 c6 21 1a 23 43 92 2c 0e f7 ba 93 cf ad ff 74 63 0c 07 fa c6 87 ae df cd f5 90 43 75 64 8c 71 33 32 c6 61 72 73 f3 81 5c 27 87 cb 30 6e 6e 46 de bd 19 e3 10 0d e3 83 0f 6e 86 24 0e f7 40 ae df 82 e1 30 0f 37 1f 7c f0 c1 18 0e f7 0e 1b 92 77 df 8d 71 98 0c 37 1f dc dc 8c 71 b8 24 ae af af 93 e1 70 47 e4 80 71 3c 72 f4 8e ff df f1 ff 1f 88 19 00 Data Ascii: uxl.IC`O~}v"$!#C,tcCudq32ars\'0nnFn$@07\|wq7q$pGq<r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	50071	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1101	OUT	GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 26572 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4102 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	721	IN	Data Raw: 52 49 46 46 c4 67 00 00 57 45 42 50 56 50 38 4c b7 67 00 00 2f ff c0 3f 10 09 89 6d 23 49 92 84 8c 88 c9 0a 75 af ff 0e cf b3 cf 9d 01 11 fd 9f 80 f9 ef de bf 60 3b 92 98 99 fc 88 cd 32 4f 64 92 1f 00 6c a4 99 da f3 b1 98 7d f8 de 85 53 29 65 0a 33 3b a3 57 50 60 27 d7 25 41 dd 42 3c 7a 25 9a 25 c0 2b ce 6e 59 7a de d1 d2 ab b4 af 7c d6 da 0f 56 e0 5e d7 45 a5 35 0f 8e dd 45 ef 1e b0 b4 57 2b 79 68 99 f6 9c be d1 a3 5d 2f 75 6f 9d 24 6d 6b 5b 6f dc 76 81 b6 12 2d 0f b6 2d 7d b3 0c b0 5d 2c 91 73 8e 6d cf cc 8b b9 e7 e3 fb 9e 0f 6f bf 50 d6 4d 86 a6 d5 61 77 9d 3c a6 d2 2b fa bc 2c 48 ec 7a b7 e9 e4 9d bb 14 c8 ae d4 c5 2d c0 7e bd 1a 25 cc b1 49 25 2d c6 0c 96 de 4c 96 2d c0 56 5e 9a 43 2a 7f 62 28 b6 a9 ce 8c d7 d8 fe 64 92 69 e0 9c a3 53 a6 65 bf 31 21 Data Ascii: RIFFgWEBPVP8Lg/?m#Iu`;2Odl}S)e3;WP`'%AB<z%%+nYz\|V^E5EW+yh]/uo$mk[ov--}],smoPMaw<+,Hz-~%I%-L-V^C*b(diSe1!
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 62 02 78 55 b1 4f 45 8f 9a 35 0d 06 1a e3 9c c6 18 d3 39 e6 28 41 09 47 73 0f 2e 16 e1 a1 ee 60 19 3d 8c 0d a6 30 67 f8 23 46 25 be c5 22 ed df 2b 49 76 fe e7 64 56 8f f7 de 7b 79 ef bd 5b 82 37 d7 73 79 ef bd f7 de 7b 83 bd 76 e0 dd 38 79 ef cd f5 f7 b6 af ae ca 73 64 d8 97 99 27 2f bb bf 2d c8 bb 0d 24 9d 35 34 bd 21 f6 c1 2f e2 b2 b3 85 4f 6e 03 77 0d b2 5b 48 3c 34 61 d3 0f d7 16 86 ca 52 ef 7d 6f a1 69 0b 0e 1d a4 88 a3 2d 14 99 b8 dc 62 45 a4 1c 4d aa 86 4d 9b de 10 12 fe 64 16 a0 44 13 51 48 a6 40 e2 8a b8 96 8a 7a 53 4c 71 56 a0 88 ba 34 b7 30 b4 57 70 98 bc 2b 6d 41 50 82 df 1a 8a 4a d0 1e 19 9a a0 71 af 21 e1 e0 a1 82 b9 86 a2 82 42 4d 65 12 24 4e aa 2d 1c 3a da 80 85 de 95 bc c7 bd 01 99 a2 33 4b 98 4b 0f 54 08 52 ae 6d 5b b5 ad f4 b9 ce fd 6e Data Ascii: bxUOE59(AGs.`=0g#F%"+IvdV{y[7sy{v8ysd'/-$54!/Onw[H<4aR}oi-bEMMdDQH@zSLqV40Wp+mAPJq!BMe$N-:3KKTRm[n
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: bb e2 25 d7 f0 61 f8 85 55 2e 3b ef 17 cc 98 39 ef cf 71 8b 87 c5 47 a0 53 c2 ed 61 e1 eb da d3 ed 8e 3e e2 43 e7 b7 c7 cf 9c 12 d4 f6 83 de 75 3b 60 80 3f 1e 18 ce d3 35 ea 1c 3e d3 96 fe 98 37 3b fd 92 db 5d db 97 25 bb a5 8b 2d 73 ee 00 6e b8 91 22 c2 71 75 0c d9 d1 03 56 dd c8 63 db 1b 6e 60 73 7e bb ee b7 30 d6 0a 75 12 13 85 3a 9e 3a 01 76 cc a8 55 ad 1a 34 56 7c 66 8a 4f 9c 69 40 15 76 c4 aa 55 d6 8e cc cc 29 84 b3 de eb 4b 9c 8d 85 43 d3 e6 bc a5 e1 c6 40 1b 57 b3 dd 8d af 9c 2e 7e 5e 8c bd 14 d5 a2 af 39 44 99 fa 70 f5 b8 c6 e3 b1 97 8a af 1e e7 e0 96 4e c9 87 ed c6 67 c1 61 9d cd e4 88 11 ab 96 55 cb c0 2e d2 1a 58 31 5c ab 5a 27 c8 34 c6 ee 63 54 5f af 75 f2 55 0f bd ba 77 7d b9 ef 4e a1 76 f2 89 c1 cc 78 31 7b 70 81 da 1a 0d 0f 45 a1 bb 62 56 Data Ascii: %aU.;9qGSa>Cu;`?5>7;]%-sn"quVcn`s~0u::vU4V\|fOi@vU)KC@W.~^9DpNgaU.X1\Z'4cT_uUw}Nvx1{pEbV
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: bb 7c 73 91 76 f8 68 9a 1c 9a a9 a7 2f 1f ed 23 04 78 82 93 2f 7b 2c 0d 0b 57 4d b9 5e 58 e5 46 0e 3b 9f 88 5f b0 03 d8 c1 4e 11 10 c5 fa 2b f5 7b 1b 50 14 7c 1f 3a d9 25 22 0a e9 62 c8 7c a7 b2 22 a3 2f be 75 9f 2b fc 22 78 05 3d 05 f4 e5 9b 72 fa 66 b7 f3 dd f7 51 e8 a3 73 ee de cd 0a 67 75 71 dc e6 94 57 fe cd a1 39 9d 22 58 d3 9a fe 50 d3 8f 5e 61 e9 12 21 a4 b8 11 2a 9e 72 dd fd 5c 0c 5e 9a af 2d 87 92 12 ba 63 00 cc 9d 6c 73 89 c8 4e 04 71 de 07 01 c1 8b f8 74 d3 f9 f3 27 74 1e 81 1b f7 86 f0 20 c8 c1 2b ce 15 9a 5b 72 df 16 45 af 5a 5f f4 28 c0 83 2d 3c df 74 21 88 c8 2c 51 f7 75 76 07 17 2a 45 15 d7 ad cb 5a f0 d8 fb 26 c7 d6 f5 eb be 41 ae 3e 54 4c 47 ee 66 de ca e2 19 e1 6e 71 22 78 9e 7e c7 8d 72 7b 5a bb 43 87 2b 7b d9 7c af f4 37 0b bf c1 5d Data Ascii: \|svh/#x/{,WM^XF;_N+{P\|:%"b\|"/u+"x=rfQsguqW9"XP^a!r\^-clsNqt't +[rEZ_(-<t!,QuvEZ&A>TLGfnq"x~r{ZC+{\|7]
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 3b 31 c6 f7 bf 2c bf 39 d3 7a 97 24 c4 bf ad 9f dc f2 f3 f5 b9 5e a8 7c fc ee b6 cd f1 1d 5f e9 dc d4 2c 20 d4 fe 70 a0 16 a5 3c d9 ec b0 88 2f 36 05 d7 b7 d6 ce 66 b8 fa 1a 63 90 07 5f 23 c2 a2 75 b6 5e 84 77 45 9f 75 c7 1b d8 e8 e3 98 db 89 4d 91 71 3d 26 9d fd f0 f6 49 61 fd f4 e0 ac ac 09 6b 99 86 a2 63 59 29 a5 09 ca 2b 6f c6 b5 06 0e 5b 41 50 3e 99 cc 1e f0 8b 68 0a 8b d5 4a 79 d5 9f 00 f1 fa 89 32 46 d6 97 6f 8d de bd 45 38 88 da f1 13 11 89 3b 8f ba 35 ca 2b fc f6 e8 9c 0f 49 6d c2 ec 66 f6 56 df 16 df 77 5e 85 b8 65 51 9b 3e db 50 b4 9f d3 a5 f6 67 4e c2 43 c8 8c 76 4e 19 71 d6 59 b3 4a 34 96 43 5a 26 58 2c e3 59 7b a3 be 9a 4f 0d e9 78 ec ac 3b 8c cd 6a f7 e4 c6 d8 77 59 21 3d d9 5b 4a 36 76 55 1d b9 dd ef 61 63 37 76 c3 61 7a 2d 6f bd 58 43 e2 Data Ascii: ;1,9z$^\|_, p</6fc_#u^wEuMq=&IakcY)+o[AP>hJy2FoE8;5+ImfVw^eQ>PgNCvNqYJ4CZ&X,Y{Ox;jwY!=[J6vUac7vaz-oXC
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: b3 59 71 03 57 fd 02 34 7a 6b 00 bf e8 53 42 a0 e8 b3 2b 16 b7 8a ab 3e 8e 61 51 dc 68 ad 6f ce e9 b7 64 48 df 15 3c b0 b0 3a d3 0b 22 a7 22 a7 79 ce 22 fb b0 b8 c1 80 75 10 67 5a 7f cc 6c 43 2b c0 da 38 e1 72 b1 f8 2a 84 f8 69 ac c4 ab 20 2c ae 7c 1c bc b7 57 07 23 41 89 8a c1 84 07 29 4c 70 4a ba 83 4f 7d 1c ae b0 1b 78 11 9b d2 53 58 67 9d 57 0b 77 de e7 6a 2b a9 0a 2b 73 19 42 b0 9d 3c 0a 49 1c 2e 6e e8 66 45 a1 33 f3 78 03 da 2f 42 d1 8a 36 64 21 46 6b af 8c 9d 72 be d0 f2 78 6c a6 01 5e 86 f8 ee 1c 2d 62 4c 66 78 1f 08 48 af 08 f9 7b ea 00 22 af e5 dc 82 1a a3 e5 79 2d 18 ac 03 34 e8 f4 07 4f e0 06 ac bb f7 f2 24 96 27 d9 0f 2f 76 e5 83 5b 65 2b 15 1b f3 3b eb 55 a1 32 15 5b eb fd b4 dc 05 25 24 36 cc b0 81 10 e2 b0 d5 61 f4 43 25 6b b1 3a 61 dd 6d Data Ascii: YqW4zkSB+>aQhodH<:""y"ugZlC+8r*i ,\|W#A)LpJO}xSXgWwj++sB<I.nfE3x/B6d!Fkrxl^-bLfxH{"y-4O$'/v[e+;U2[%$6aC%k:am
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: d3 2e 8e 8b 98 82 02 17 3b 44 c1 01 66 09 d4 1e 17 87 1d bb f7 97 89 70 a8 81 1f 06 e9 65 6e 3f 14 ce 14 57 18 b7 f9 b8 48 0b 68 5b 67 dd ef 42 2d b6 34 ae cd c7 ed 14 c4 cf c2 c9 a8 74 62 8d b8 60 39 2e 2d 9d 5d c7 56 d2 69 69 41 08 f9 40 16 cc f4 a1 8b 6d 6c 31 01 69 b5 0b b7 40 61 f9 a5 00 60 89 b7 f1 36 34 58 3b a7 a6 03 62 f2 a4 e6 91 3a 04 16 b5 22 56 6b 20 e6 27 fc bc 33 20 c0 2e 48 8c c0 5a f5 ac e9 80 1d 21 d9 02 5c 07 98 02 7c db 24 36 17 91 5d 00 13 c2 54 82 b5 b9 be 42 d3 1d 1f 68 d7 4f d2 d6 ba d4 59 88 83 9d c6 8e ae b4 ee 4f 4a d7 e1 e2 01 9b 88 dd 9a 07 d6 25 96 22 e9 b0 1d bb 2e 94 20 9d 83 7b e9 02 02 db d0 b3 93 d2 19 b6 88 49 9d ef bd 8d 63 07 d6 61 7f 2f a1 6c b2 96 81 a8 d4 8c 01 42 cb 6c 16 10 09 98 75 e8 64 c3 3a 03 d8 b6 50 43 0d Data Ascii: .;Dfpen?WHh[gB-4tb`9.-]ViiA@ml1i@a`64X;b:"Vk '3 .HZ!\\|$6]TBhOYOJ%". {Ica/lBlud:PC
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: eb cc 41 f2 5e 69 2b 5e 74 19 fb 85 e5 e6 90 30 8d 5b 76 8b 35 89 d2 3a cf e2 19 71 96 4b a6 ae 05 0d 98 4f 33 94 fc e2 ad c6 80 c4 36 31 b1 d0 3e b6 79 ef c8 00 53 1c d6 e6 9a 99 45 b9 c4 8b d7 4e 34 37 53 c8 7b 73 93 3f 7e c3 b5 42 b4 4d 8d 6a 7f 4e 86 31 c6 28 49 cb c3 59 ac 59 a2 38 3e ea 16 49 d7 99 2b 49 aa 77 5b 56 79 ec d0 d4 5b 33 eb ba 0f 70 61 8d 72 ba eb cc dd 9d d2 6b 9c b5 89 51 f5 f8 5a 62 9b 88 74 c6 d7 9d 55 14 dd b5 7c f8 93 d3 3f 69 cc 96 ff fd 13 5d df b9 78 26 df 7c a9 3f 88 5b 6c cc ed a6 e5 42 b2 bc 8e a5 ce 8a 5b 73 9b 85 76 26 be be 79 87 2a 0c 6c 8f 39 1f 4c 22 98 71 a6 75 ae 01 6c 4a eb e3 b2 37 d4 bd eb 8b 99 56 d9 56 93 69 6e e9 a1 77 bd 0f 66 1b f2 ce f7 7d 6e 94 77 bd 20 ce 5c ca da a5 47 6f 30 da f5 74 63 3b 7f 30 0f 48 08 Data Ascii: A^i+^t0[v5:qKO361>ySEN47S{s?~BMjN1(IYY8>I+Iw[Vy[3parkQZbtU\|?i]x&\|?[lB[sv&y*l9L"qulJ7VVinwf}nw \Go0tc;0H
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 04 7d 3c 2b e4 9d 76 38 e0 9d 98 dc d7 74 2e c1 52 60 5d 5f 5b d1 f7 19 2b 9c be e2 58 59 77 b3 2a 70 37 28 32 9b 4c bd bd b3 dd 42 84 79 2f ca 61 17 7d f4 ce 73 67 cf 62 ad 2f 1c dd c3 ce 38 e6 3e e3 d3 dc b1 b9 45 df fa 75 46 21 c6 4d 91 28 16 d5 75 31 c5 bb c7 b6 c7 6d 3b 47 e4 3c 79 87 8f 06 89 c3 90 18 93 48 f0 75 26 26 f6 bb 24 7e 52 de 7e 90 2c 93 ba c7 6f 44 44 ae b0 bb 4c f9 dd f8 62 b3 5e 17 d7 c5 ad ae 15 f5 42 a6 8b 6f dd 04 fc 93 05 84 32 5f a0 bd b9 e6 d3 64 36 a8 b1 32 4e f7 19 32 f6 a6 cd 3c 45 cb ed c3 ea f9 ea 62 d3 3e c9 6e 6a ef bc 97 1c af 37 be 0d e6 30 9f d6 e2 bd 5d 0b 2b 7d bc 3a 41 ab 9c db b2 76 b6 b3 2c 78 aa ad fa 55 76 b1 ec 77 a6 b4 11 07 e9 a6 fd 36 49 86 ef 0b be f7 fd ce 6e 4b b6 65 bf c3 5a 75 94 61 95 9b 5f f8 33 8f 87 Data Ascii: }<+v8t.R`]_[+XYw*p7(2LBy/a}sgb/8>EuF!M(u1m;G<yHu&&$~R~,oDDLb^Bo2_d62N2<Eb>nj70]+}:Av,xUvw6InKeZua_3
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: e3 af 83 89 8f e5 fd 6f 8c eb ee b7 ff 79 ce be 97 ab 6d bc e8 b1 d8 82 b4 55 9e c2 7a 95 6a 3c 71 e8 b7 4a 59 d4 c7 41 fa ed a3 54 9e 00 60 83 81 52 62 71 76 11 a2 79 1a 14 c4 c2 fd 79 08 b7 e6 d6 fb db be e8 53 13 5b 13 62 8b 2f fa 10 7b f0 69 3f 11 ac c1 98 7a a1 62 63 c6 57 ba 33 6a 1c 92 e0 bf 19 6a 65 82 ad 41 af 59 db 6b 7c 1e d7 e3 ad c0 d6 eb fa e5 3b be 61 3d be b6 ef 77 ba 7e fd 93 6d 6d 0c 5b 63 c6 d2 42 0c b1 ea 68 a7 53 53 d7 79 58 98 19 45 82 da a8 f3 9f 6f fd 6d bc 33 a1 47 9c 4d 51 a4 ea bf 14 c7 28 d6 ae 68 71 a9 75 e2 8a 98 d8 ae 9d 85 d8 e0 b0 5b b2 69 a0 0f 33 6f b7 3d c5 65 ef 0e ad 55 a0 50 f9 ac 4f db 7b fc f9 57 5b e5 ad fd 0a 5c eb e8 b1 e6 48 15 c1 33 56 14 c6 9c 63 12 3b 6f 8f cb 35 f5 ae 0e 2d c6 18 fb ed 5a ea 2b 53 53 7b 19 Data Ascii: oymUzj<qJYAT`RbqvyyS[b/{i?zbcW3jjeAYk\|;a=w~mm[cBhSSyXEom3GMQ(hqu[i3o=eUPO{W[\H3Vc;o5-Z+SS{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	50070	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1101	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9308 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 4102 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	722	IN	Data Raw: 52 49 46 46 54 24 00 00 57 45 42 50 56 50 38 4c 48 24 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 a0 72 da bd fe ff c3 33 59 fa d4 d7 88 fe 4f 00 1f 7c bd 06 31 a5 8c 98 11 95 18 a9 c7 6a 48 2d 5a e4 4e e0 ac 88 b2 13 62 aa e8 48 d6 dd b1 fd 03 2b a1 6f 37 d4 c3 76 e5 59 03 80 0b c7 31 03 9c ff d8 63 48 95 d8 26 24 25 d8 7e 09 78 5a cf d3 f9 ae 0b 38 8e 24 49 6e f2 01 04 ff ff 1c 3e 81 b6 ac d4 b5 18 34 16 8d 36 75 5f 73 90 b2 24 d3 71 24 db 4a d5 38 4b 42 38 61 90 7f 24 ac f8 ee ae 05 ab b1 6d 59 d1 d2 c0 17 fe 15 a1 80 54 10 f0 72 de 65 1e ba d3 ff 09 40 7f 6c 08 82 e0 37 82 20 10 91 60 67 2f 5d 2b 90 1e 44 82 e0 3a 7b 49 7a 20 08 02 82 bd 76 59 a3 d1 20 3e a0 7f 11 3d 10 04 91 ad d4 05 9b 4b 43 44 40 e8 f1 7c 52 1b 08 21 d9 5a 63 79 dc 90 31 00 02 02 44 0e Data Ascii: RIFFT$WEBPVP8LH$/?M8rFr3YO\|1jH-ZNbH+o7vY1cH&$%~xZ8$In>46u_s$q$J8KB8a$mYTre@l7 `g/]+D:{Iz vY >=KCD@\|R!Zcy1D
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: df f7 27 e5 f6 d8 b6 6d db b6 6d db b6 6d db b6 6d db 9e ea 4a 52 8c ff ef 7b b4 24 49 52 ed 58 11 d5 f7 5e c1 30 33 6c 65 b6 f0 76 c1 cc 7c a5 c7 bc 36 c6 2f 66 18 96 74 4e 77 06 44 db 56 ea 46 37 8f 1a 21 cd 8d 41 40 9b 99 0f f0 01 27 fc e5 a4 ff 38 e9 3f 4e fa 8f 93 79 e1 d8 3f cc f7 b3 38 da 17 ab 39 f6 17 f3 3f 7b ec 37 2b 25 cb 53 29 7f 67 df 02 f4 4d 6b df 14 87 e6 60 78 16 c7 e7 66 a8 bb 86 7a da f8 0c 8e cc ec 09 13 73 bf 6e ff f2 9f 47 7f e1 e3 53 3f 76 cc e5 5f e4 94 8f 39 70 d0 06 07 6c 54 0a ca c0 18 e3 81 89 5d 2c c0 51 7c d8 59 3c 60 65 67 66 5e 9c f0 50 ac f0 b3 df cc 3f f8 40 be ff 1a 97 f1 f2 1c e6 89 13 bc 0a c8 f8 64 25 bc 14 17 aa 8c 2a 29 e0 a3 77 e6 09 7b fb 80 05 96 83 d3 72 c2 42 69 d0 1f f9 70 fa c6 f5 f9 39 cc 43 1f 9c b3 33 56 Data Ascii: 'mmmmJR{$IRX^03lev\|6/ftNwDVF7!A@'8?Ny?89?{7+%S)gMk`xfzsnGS?v_9plT],Q\|Y<`egf^P?@d%*)w{rBip9C3V
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 43 db b9 18 20 32 90 5e ee 14 de 77 61 5b 06 7e ee 83 fc c0 9d fc d0 b5 cd 21 fb ff ef f4 61 50 77 e6 c4 72 61 00 95 6e 97 da 59 6a 5a 82 6e b7 d6 8c 7a 96 a1 16 65 44 28 4e dd 46 bc 09 ea 30 6e 56 19 32 4b f8 ea db ff 6a 0d 38 fe 3f df 71 57 be eb d8 a2 cb 9d 29 76 61 98 f4 70 8b 9d 2a df 10 d9 8b 01 a2 6e bc a4 2c c1 4e 97 d5 d9 3c 2a b1 d3 97 45 e4 12 8b 2c 61 53 1f 59 66 91 21 09 2b 59 a2 9e b1 79 5a 00 2e fc 21 5f 7d 02 3f f5 58 1d 22 b9 49 5a 81 3a b3 46 01 4c dd a8 02 a3 a2 74 99 71 1c 5c c5 96 22 dd b1 f1 b1 8b d8 c5 82 66 96 42 69 80 60 74 86 8a 89 57 9c fc df 9a c7 85 e5 a3 2b a5 dc 34 72 56 61 b8 1a 18 be 87 d4 fb ae 48 15 95 05 f0 c4 4b 45 b1 17 f2 ee a0 1e e3 30 8d 0c be 09 39 09 22 32 c0 1c 2e d4 59 db 58 2e f3 6d 37 f0 93 8f d5 fb 11 df b7 Data Ascii: C 2^wa[~!aPwranYjZnzeD(NF0nV2Kj8?qW)vapn,N<E,aSYf!+YyZ.!_}?X"IZ:FLtq\"fBi`tW+4rVaHKE09"2.YX.m7
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: fc c2 c3 8b fc f7 f8 73 52 82 7a d9 24 ee 8f 97 a0 19 9f 3b 1c a8 97 dc c2 9a 25 0e 64 0d 46 55 78 8c 69 29 90 00 c8 a4 b6 15 9d 66 99 ed b1 c1 aa 42 ee de 5c 63 d0 9d ea 61 ac 43 e9 b9 ac b9 95 51 93 93 23 ee 00 25 9c 9c 9f 17 dc 58 0f 5c a5 9a 15 8f 58 af aa 60 25 58 37 a3 fb 66 a2 f1 e4 5e 91 65 50 45 5b 3a 30 4a 0a 34 d8 b2 a2 2c 30 55 45 77 a5 26 43 26 7e f7 4c 4b 9e 40 1c 1f 51 26 70 18 3c e7 2c f3 24 f9 c0 06 aa ce 76 54 34 5e 89 22 4c ce ca 6b 5f ae a3 f3 b4 a6 c4 d8 6c f5 88 03 47 b5 82 41 b4 c5 85 47 9a 71 c8 b4 b3 97 01 06 a2 f5 50 d3 05 19 24 0a f5 76 b8 29 a6 6a d9 c6 82 3a ba 19 98 44 4c 01 54 2b 4f c4 05 38 ea 1c 05 47 1a 5f 08 3d b7 45 e0 3b 1d fc e0 96 bc e9 09 87 e3 d6 69 46 3c e3 00 97 28 2e 5f e4 58 03 a5 36 47 a2 a5 1a 4d 35 f9 04 12 Data Ascii: sRz$;%dFUxi)fB\caCQ#%X\X`%X7f^ePE[:0J4,0UEw&C&~LK@Q&p<,$vT4^"Lk_lGAGqP$v)j:DLT+O8G_=E;iF<(._X6GM5
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 19 42 4f 31 21 80 7e 36 25 36 be af a8 a3 23 9d c3 0f dd 63 ba be d2 25 4b e1 08 2b 2d 94 79 a1 6d 1e 62 6e bb 90 ca 88 4f 38 3d af 3a 6d d5 68 f8 8c 5f f9 63 de 75 d9 25 9e 30 cc b8 c7 09 5b c1 da 6f 2c 39 8a ad 30 b7 26 32 9e 53 10 53 c6 14 3a e8 11 2d b0 51 c3 48 fb 5f 69 00 ec bb 96 22 da 0a ff b8 b2 0c 91 c8 df a2 ad 86 45 2e f4 78 4e 59 18 a9 8f ec 67 78 da d6 e8 1f 1a 7f f5 f5 ec 14 f5 8a 9a 9c 50 5f 11 28 8b 18 74 f1 ad 69 86 1b 04 81 1d 62 05 e8 bd 7d d4 9c 86 31 47 f7 00 04 9a 1d 7d c5 37 98 4a 3a 43 9a c7 32 e5 ca 2e 7c 91 66 19 23 e3 7f 8b 34 1f 78 3a c3 bb 9f 1d d6 bc f9 84 d3 c6 ab 4f df 68 2c b6 dd d8 7f e5 0e ec 2e 7c b8 ef 84 e7 51 f6 2c 9a bb c1 48 47 74 cd c2 9f d8 70 6d 0a 5b a6 e3 ee 11 9c c5 3e f0 0c 1f d9 cc 8a 97 d9 c2 66 4b 98 a8 Data Ascii: BO1!~6%6#c%K+-ymbnO8=:mh_cu%0[o,90&2SS:-QH_i"E.xNYgxP_(tib}1G}7J:C2.\|f#4x:Oh,.\|Q,HGtpm[>fK
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 67 a3 b0 bb 7f bd 2b 3a 29 cb a3 a3 f9 29 dc 50 fa a8 b4 05 6a 29 8f 4b 1a a8 b2 39 b9 40 dc b0 64 6f 5f fc de 45 ac 2e fc 10 ba d9 61 68 c6 3e 7a 6f 1f 55 9f 85 d1 a4 af c4 00 74 00 91 6c 96 a8 2e b3 9e 82 62 dd 17 db 62 a8 c0 29 66 5e 1d 1b e7 f6 df 53 f4 5a ef d6 64 40 2a e8 dc 99 cb 79 2e 1a 26 50 ca c1 b1 ec 96 67 05 03 63 60 56 f5 ca cc 10 1c 8b 20 45 00 a9 6f 56 47 ad cf 46 df d1 0b 43 ee 05 ba 55 c9 5c 1d e7 ea 3c 7c 2f 78 db cf e0 14 ea af 7a 28 47 91 25 05 34 c3 df ff f3 12 2d ed a6 ab 48 37 c8 83 9a 5a 7b a4 71 2a 40 74 a4 fb d6 1f b2 ba 46 56 a6 e3 28 63 2c a3 90 ae ee 17 f7 65 8c 27 93 9e a9 91 80 38 1d e4 9d c3 91 5b 6b 9b 43 51 52 d4 ac b3 d6 28 d3 0d a3 28 8a ba 79 52 96 2e 1c 40 67 51 24 83 1a 3d bf 0b 24 51 e3 76 70 dc c3 7d 53 5f eb ae Data Ascii: g+:))Pj)K9@do_E.ah>zoUtl.bb)f^SZd@y.&Pgc`V EoVGFCU\<\|/xz(G%4-H7Z{q@tFV(c,e'8[kCQR((yR.@gQ$=$Qvp}S_
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: d3 80 4d 2b 3c d9 1e 23 b3 64 d4 d5 1e 68 65 2e 85 9b d9 67 d3 a2 16 14 9b a1 99 9e 93 a5 42 52 ad 08 54 41 78 3d c1 56 63 3b e8 87 5e 76 68 76 a8 83 4b e4 02 74 a0 34 8a 5a be ec dc cf aa ac db 31 a9 46 82 00 f2 d9 3d ef 9a 97 2f 29 5d b0 0b 00 a1 87 6a 86 31 e9 fe f6 3f 85 81 58 66 0d 37 04 8e 86 db 2e 68 c6 84 b7 2b 5a 8f 4a 55 88 93 d7 ae 30 bd 5f 07 e0 88 ad 7c 42 19 56 f5 5c 24 8a d2 41 f8 c9 43 71 ff b5 8f 7d ed b2 8e 81 86 7f a0 ff dc e3 c3 33 fd ed e7 ed 32 57 0c b8 97 8f c7 ea ae 8b 32 1a a8 ad 69 8a 55 3d 83 db ce d0 30 73 f5 ab 50 35 26 2e ab 9f 3d 55 95 44 ae f5 b1 91 4d 82 38 60 d4 01 07 97 e0 22 08 cb 5a 3e e7 f4 2f 1f 3a ff 4c 31 51 83 57 05 58 be 3b 7e c5 6b 4b 8d a3 13 e5 fd e9 be 9b 23 78 f5 3a 7f 63 9a f7 7e ee 94 6b a2 57 74 f6 3c c5 Data Ascii: M+<#dhe.gBRTAx=Vc;^vhvKt4Z1F=/)]j1?Xf7.h+ZJU0_\|BV\$ACq}32W2iU=0sP5&.=UDM8`"Z>/:L1QWX;~kK#x:c~kWt<
2024-04-19 14:06:52 UTC	1056	IN	Data Raw: 3a a9 9d 56 4a 35 6b 49 31 48 12 a5 54 0e 0b b1 a6 1e fa 78 fc d9 4f ad 39 7b f5 87 43 56 45 bb 00 c3 67 5d 43 52 d2 fd ec 96 e5 05 6d f4 f4 e6 29 78 a6 db b2 bf 76 27 a4 8b fc 9e 2e bf 8a 0f 2d d3 67 0e 64 74 81 ed 3e 1d 4f 38 27 d1 9c 6b b9 2a 6e c7 44 a4 c8 61 6d fb 6e ee a2 75 e1 c6 a7 fd 99 a9 7c 7a d2 af 2d ad 31 ad e9 cc 44 32 fe 8f c5 79 26 81 86 c8 c5 86 9b a1 90 92 c6 ed 7c fa 65 b9 0c 0f b5 8b 51 cd ca ec 14 f4 ed 5a 48 a9 de cf db 02 58 2d fc a8 67 cb a1 25 37 27 37 72 74 86 a9 90 16 f9 44 0e 54 6d 69 ea 7f 3d 49 35 7f 1e 13 29 65 b1 76 7c 27 7f c1 ee c0 cd 8f 17 9e 7e de 9f d6 e3 0f 9e 8d 6c 1f 76 1f 56 17 4c 13 6f 6a b1 4d 19 51 ae 35 9a ad 13 ff 3e 19 88 bd 4c dd 76 5c 97 d5 a6 5a 20 19 4e 41 2a ec 6b c2 c7 2a 84 55 c7 bc 2d 9f df 1b dd f7 Data Ascii: :VJ5kI1HTxO9{CVEg]CRm)xv'.-gdt>O8'knDamnu\|z-1D2y&\|eQZHX-g%7'7rtDTmi=I5)ev\|'~lvVLojMQ5>Lv\Z NAk*U-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	50069	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1100	OUT	GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5456 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 4102 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	722	IN	Data Raw: 52 49 46 46 48 15 00 00 57 45 42 50 56 50 38 4c 3b 15 00 00 2f ff c0 3f 00 2a ac d6 f6 af b6 2c e7 1a bb c3 cc 69 66 9c 7b ef 66 ee c2 03 55 7d aa aa bb 8b 99 99 99 72 8a 99 99 99 19 47 cf f9 a7 b9 f6 3c a7 5c ef 6a 17 70 d1 b9 02 86 b2 ab 5c 83 0a 33 ee 13 92 f3 90 0e 47 a6 ed b1 d3 84 e3 c8 31 e8 1e 53 b6 4a 5c c6 58 71 e4 38 92 e4 6c 47 2e ed 70 5f 40 e3 1a e3 5c 40 93 8a ca e8 4b 98 e7 06 f6 88 da 2e 2e 96 66 c0 d3 0d a0 63 d0 9c 75 54 c8 b6 cd 68 bc 81 e9 c2 91 25 c3 0d b2 c6 f4 e1 48 8e 6d f9 6f 70 e1 72 e1 73 0b 61 74 4b d6 a8 3b 38 ea a8 5c c0 0a a8 5c 40 97 0c a7 b6 9d a6 74 98 99 54 d4 0a 39 5e 61 a6 1d e6 e4 a7 c2 b0 d4 51 51 ad 82 e5 4b ce 31 5a b7 0b 27 0e 6d a6 93 00 d9 b6 69 47 7b 6c db b6 6d db 13 db b6 6d db b6 ed 7c c5 f9 88 6d db b6 29 Data Ascii: RIFFHWEBPVP8L;/?*,if{fU}rG<\jp\3G1SJ\Xq8lG.p_@\@K..fcuTh%HmoprsatK;8\\@tT9^aQQK1Z'miG{lmm\|m)
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: f2 bf c0 2f ce c6 06 68 16 4e 4d 0d 2b 2c ec 47 a7 df e7 99 d7 02 9a 0f a4 fc d2 da e1 d7 2f 40 75 25 91 34 16 2d 02 02 5c 32 b3 0b 81 20 5f 03 5b 5b 25 71 aa e9 e9 2d 9e 99 01 d9 19 94 9b 7b 2c 40 ee 26 00 27 3a 74 08 10 c3 cb ca 0a de b8 71 70 20 e6 79 b1 e0 76 cf 9e 8d aa ae 46 7f 69 ae 21 8a 7d 17 de 28 25 d3 f6 ed 63 30 b3 b7 37 42 16 59 3c 3b 4b 57 68 f7 ee e2 3f 7f 52 52 e2 ef df 13 5e bf 1e 52 0e 01 28 a7 a0 d0 35 2d ad 9e 95 55 1d 0b 8b 46 ae ae 3d b2 b3 cf bc 6c 69 89 d5 94 96 96 8b b6 4f 4a aa 63 66 b6 b5 89 bb 7b 8f b4 34 47 26 63 d6 e0 20 a2 bc 8a 4a 54 00 b0 f7 12 a9 a6 a5 85 1e b1 36 49 ea 9e 3d 1e 88 1a 9a 9b 03 00 54 d1 d2 d2 19 40 a1 7b f7 88 2d bc 55 56 4a 0a e8 6e 01 10 00 5a c4 97 82 b6 23 03 be ef 6a b1 60 7e a0 7d 6c ec b4 8e 0e aa Data Ascii: /hNM+,G/@u%4-\2 _[[%q-{,@&':tqp yvFi!}(%c07BY<;KWh?RR^R(5-UF=liOJcf{4G&c JT6I=T@{-UVJnZ#j`~}l
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: b4 b8 50 1c 58 72 59 9f 08 1b 94 e7 3b 78 50 00 78 e1 fb f7 d1 99 09 91 92 fb 1d e6 1f 03 5b 8a bc 78 21 00 74 b1 87 04 26 cb 57 56 bc 4c 0a 7b 62 7d 3d 00 40 56 ca e6 cd 9c 92 4d 71 c0 39 ff c4 64 9f 28 19 37 de 4e d4 23 23 43 d3 1e 53 f4 2b 49 ae 6c 89 c8 95 d8 74 08 0e f6 38 5d c8 3f 2b 30 a5 5d 78 b8 43 db 8d 9d 89 44 49 67 02 41 a3 76 56 1a 38 3a 12 1c 0c f8 3c 60 ca a7 0a 00 99 f3 aa 00 70 fe 48 f0 eb 45 0d 9c 9d 7d 85 f3 1b 39 3b 03 93 fd d9 de 9a be 3d 13 13 9b c5 73 73 b4 12 e3 27 d9 b9 53 b2 7c 79 99 7a 41 4e ec 82 b3 2e 0d 6c 9e 5d 23 c1 bb 23 c5 7e ff 2e fa e5 0b 7a 7d 56 b8 e8 3e 4c 16 4e 4f ab 7b 33 f6 4f 0e 04 a6 bc 20 ed 2f 49 4e 68 6c 04 00 18 5e 5a 7a 8b 00 a5 b3 d6 36 20 00 70 f6 b5 25 37 0f 04 0d 42 6e 14 78 49 74 a4 4d 80 4f 36 f4 a5 Data Ascii: PXrY;xPx[x!t&WVL{b}=@VMq9d(7N##CS+Ilt8]?+0]xCDIgAvV8:<`pHE}9;=ss'S\|yzAN.l]##~.z}V>LNO{3O /INhl^Zz6 p%7BnxItMO6
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 4f 61 9c 5b 22 10 08 d6 47 38 ca 6e e1 ee 0e 72 9c df c1 c6 20 56 31 26 26 92 08 65 57 9e 81 61 52 b9 ba b1 b1 91 49 5d 6f 36 be ae 4e a5 bd fd fc 8f 1e d1 6e fd 74 8a 89 89 a4 6c db 86 57 94 ff c9 13 5a 0b d8 25 29 29 fc 52 0a 5b 6e 50 8a 87 87 d4 a8 62 47 87 59 59 5d 1d e4 65 af 28 b6 e7 a3 7f c0 36 ee 66 1d 1a af 0f 63 df 84 dc 52 61 98 98 77 ae c7 f0 ee 5c 74 73 2a a9 ab 03 35 73 86 87 dd c7 57 94 4c 07 f7 5d 41 6c 4f 14 fe f4 09 e4 e6 b1 b1 e6 49 af a0 a2 82 eb 45 a3 69 f2 c1 5e 6a 1e 69 bd 19 7d ea 45 00 de 0c 50 33 ba ba c6 54 54 8c a9 ac 9c d6 de 8e 8d 69 66 0e 0c 20 d7 40 01 28 f0 fc 39 4b 45 7b 46 12 ca fa c2 a7 c6 d4 b3 b5 f5 d1 11 a0 7b 7e 90 9d 3b b2 b1 ff 3c 7f 6c 0c 53 4e 4c cc 22 a1 de 1a 7c d8 9e 59 59 23 8a 8b 01 49 df cc cc 18 7a bd be Data Ascii: Oa["G8nr V1&&eWaRI]o6NntlWZ%))R[nPbGYY]e(6fcRaw\ts*5sWL]AlOIEi^ji}EP3TTif @(9KE{F{~;<lSNL"\|YY#Iz
2024-04-19 14:06:52 UTC	969	IN	Data Raw: fc f1 b7 40 a0 9d c6 93 ca 0d 90 3b 29 29 2e ee 71 ee b4 8f 89 91 84 c3 36 92 9b 03 ba 90 48 48 15 e4 c2 13 96 19 0b 3e 4d 16 fe cc 5f 2d 63 63 9f 52 91 71 99 57 3c 07 a0 f9 2f 97 2b 31 02 70 0a 26 a6 80 1b 57 5d 2d 3d 1d 19 10 17 ba f5 aa da da 11 4b 6a dd 57 8b 96 2c 2d 8d 2a 2b 7b 4f 34 bf 3f b5 a3 43 92 e5 d3 ab 4e d9 b4 c9 b7 bd e6 de de 57 92 2c 9a 9a a2 36 69 2f e5 c7 d4 a6 5e 5e 48 45 e7 8a 2a d2 de 7a c0 fd b4 26 8f 87 ae 2a bd 8c 00 04 55 4f 47 ce ab 52 fc fc 40 0d b6 a6 90 fb 86 18 e2 ad d3 4c ed 80 cd 00 00 db 3d 7d 2a 00 96 21 86 d8 eb ce c3 2a da 28 00 ca 9c 82 fd e8 40 db 81 89 49 00 e4 49 ac 44 42 ba ed 1a fb 0a 60 ca 49 b6 6e 8d 73 bf 91 a3 23 00 40 f1 6f df c8 ef c2 eb 94 94 24 69 e2 e1 e1 55 94 91 61 98 d5 f0 da 46 45 49 5a 47 44 b8 8a Data Ascii: @;)).q6HH>M_-ccRqW</+1p&W]-=KjW,-+{O4?CNW,6i/^^HEz&UOGR@L=}!*(@IIDB`Ins#@o$iUaFEIZGD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	50072	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	524	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 15902 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:11:57 GMT Expires: Sat, 20 Apr 2024 10:11:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 14095 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	720	IN	Data Raw: 52 49 46 46 16 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c ce 3d 00 00 2f ff c0 3f 00 4d c0 92 64 37 6e 53 ef e1 01 02 0c ea fe 07 06 b5 64 fd 8e e8 ff 04 e0 3f 7d a0 27 00 be 63 7d 90 cd ad 5e 30 63 92 f4 63 43 e9 89 19 d9 c3 87 7b 89 4f 48 1e 24 99 d8 b9 ee 59 44 77 03 f1 19 3e 93 77 da 0c 0d 00 11 4a 92 c3 f3 0e ad 37 11 11 2a fa fc 24 1f 20 24 01 50 d5 c6 ef ac 3a 5c d3 6c 2d b1 ea 0d 4d 5b 66 26 9e 55 83 77 a8 59 c6 ad 6f b2 5e a8 8d 79 b9 7b d6 17 54 91 3c cd 1e 91 a4 c8 33 d0 dd bd 6e 21 f3 82 92 62 6d 5f d0 a0 90 f3 00 79 eb 1c 39 48 00 dd dd eb 16 8e a1 dc 6c cd ec 1e 36 ca bc b0 67 50 48 52 64 0f 7b 03 11 81 eb f5 0a 10 6b 8d b5 d6 5b 7f f4 42 92 6b db ca 16 ad 26 ce 17 5a 84 f9 0f 84 30 02 29 f7 d3 22 Data Ascii: RIFF>WEBPVP8XVP8L=/?Md7nSd?}'c}^0ccC{OH$YDw>wJ7*$ $P:\l-M[f&UwYo^y{T<3n!bm_y9Hl6gPHRd{k[Bk&Z0)"
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: e1 8d 41 de e6 e8 17 8a 47 fa ef 14 87 db b6 8d 04 49 b2 fa af fa f6 f7 2e fa 38 22 26 80 7f da e7 54 3f 72 bf f3 db dd a4 bc 75 d7 55 be f0 c5 aa 7c b9 75 dc d8 3a ec de aa ad dc b6 47 5e 77 bd 75 e2 f2 c4 a6 da cf 9b ac 01 53 d0 76 d8 05 35 60 09 60 ed e1 d5 00 9a c7 b6 d5 ae 3c f5 c0 56 cd 3b 80 95 80 3b 2a 1f 0c 01 75 ca bd 3d 36 18 e3 53 1f 0d d0 93 f7 e8 e1 e9 9c be 11 81 1a 97 f2 56 a1 f6 53 f9 50 a8 03 ca a7 3e 53 e5 9f b6 1b db b6 6b db ca fd 68 ad b5 8b 09 29 60 91 08 98 04 41 91 00 41 50 b8 b8 10 c2 37 d1 1a 32 d0 5a 73 cf 31 f6 d9 ea d5 3a fb 59 d4 eb a8 93 00 b5 6b 63 1d 0b ad bc 8e 5c 11 20 ac 1f c3 b7 96 37 22 20 84 ed a3 95 45 04 04 40 00 2a 19 3c a7 d5 b6 2d cb 8d bb d3 dc 49 d0 d8 82 21 18 81 c6 21 d1 dc 17 a0 33 01 0b 7c 99 25 a0 bb db Data Ascii: AGI.8"&T?ruU\|u:G^wuSv5``<V;;u=6SVSP>Skh)`AAP72Zs1:Ykc\ 7" E@<-I!!3\|%
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: ca 5d 30 d9 fa fe ad 0d cb 59 60 7f f1 35 bf 73 9d 5f 39 e6 db ba 7c dc 65 ce 74 35 65 d9 a4 95 9b 7b 1b e2 e6 b9 b0 62 28 2f a9 33 0d 1c 87 0b 17 af 39 78 e7 17 7d fc f3 91 4f 3f 1e 7f 79 0c 6c 57 91 35 38 91 bf 73 c3 5f 37 ed db 26 3e ee 26 ab 2b 1a 31 94 95 22 8a 2c 4e 87 08 2f 22 7e c0 cd d9 6c 11 e1 4c b6 f7 3d f8 30 a3 db 39 65 81 6f b5 cc db 57 47 11 f5 1b 27 7f e4 fe b7 f4 b6 39 df ee c5 01 ab a1 a0 86 a2 9d 4e 54 44 08 04 e2 e4 c6 20 97 fc 80 97 fc 00 03 10 b6 62 64 1e 9c 83 90 06 67 1e be b8 cd ca f9 8e 35 2e 92 72 4e 9e be 9a 1d 2f 87 db 25 ee 53 9c 6e a1 cb c9 75 d1 28 11 a7 e3 c6 f5 c4 4b 1c 25 b5 55 59 92 51 1a 52 24 06 d7 ed ac 44 ea 9c 75 c2 f9 6d 56 9e 0d ee c8 22 48 9f b7 9d 4d 77 84 db 12 3c 28 f8 2a 59 b8 c2 e5 e5 44 13 6b b9 31 c4 e9 Data Ascii: ]0Y`5s_9\|et5e{b(/39x}O?ylW58s_7&>&+1",N/"~lL=09eoWG'9NTD bdg5.rN/%Snu(K%UYQR$DumV"HMw<(*YDk1
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 62 8b 88 71 14 cd 63 bd e2 a9 f7 ee 40 4e 67 c9 bd d9 9e 03 ab 74 2a ae 4c b4 f9 d9 65 86 26 02 c9 4c 66 a8 5a a6 5b ca 11 d8 9e 75 d3 8b f5 84 b3 54 18 39 23 95 58 a6 b2 49 08 51 77 a1 50 65 2b d4 63 d5 56 05 7d 69 84 88 9b 4b b6 78 4a e4 6c 61 9a 37 d8 63 c0 1a 86 d9 f9 86 60 cf 73 d7 4e 0c 8e 38 4b 41 67 14 95 a2 0e ea 08 cf 76 27 23 8b ba 2a b9 9c 9d ac 73 55 92 10 97 c0 1a 77 3a 50 58 0b 36 8d 10 00 48 93 a4 8d ab b8 38 d5 9b 62 5e a9 9c 26 2a f3 fb 35 1a 8d f9 2a 2f db 8d 8e ce 52 4f 93 e5 04 a8 d7 61 b8 b1 ba 16 39 8b e1 c6 c8 59 d5 63 62 55 ab 9c d5 22 9f c9 70 f2 08 6c 94 77 36 f5 4c 52 49 c9 4c 14 21 00 ea da 9b 42 c2 cc 80 46 c2 6c 3e f3 12 ce 1a fe 3a 6f f8 95 54 eb c3 33 8f df 5d 2f 45 00 a8 5f 51 aa 69 22 ac 34 7e 20 27 9d 4e 54 a5 a5 21 84 Data Ascii: bqc@NgtLe&LfZ[uT9#XIQwPe+cV}iKxJla7c`sN8KAgv'#sUw:PX6H8b^&5/ROa9YcbU"plw6LRIL!BFl>:oT3]/E_Qi"4~ 'NT!
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: a3 24 69 35 99 81 dc 30 ff 9b 9f 8f 5f 7e 0c 71 54 0d b9 fd 00 28 14 b1 7c f9 9f 9f d8 8f 69 3e f0 9f db 17 e8 6f 5c 1f df 7e 7c 53 cb f1 e4 c8 96 8b aa 73 88 84 da c7 d5 6c 18 40 41 17 f7 d9 e9 61 ca f1 cd e9 21 ae e1 60 fa 0a fb b1 f1 85 c7 2c 4e f6 49 39 d8 56 df d9 c9 b5 a4 b7 00 0e 46 29 48 1b 07 99 95 02 fe 87 8d 13 4e 8e 73 75 54 96 9c 3c c7 31 c8 47 85 59 fc d5 dd bb 4f e1 cb ce ef 41 5d 75 2c ca 11 f2 d7 5b fc 8b b7 e4 cf bb 7e 9d fc e5 29 1e c6 03 7c a7 66 7b 59 cb b6 29 28 17 6a 28 30 80 11 98 01 a4 01 02 bc f9 0a 18 0e 75 d1 1c 34 d7 9a eb f2 fd af 19 3e 26 d7 1f 31 fe 98 78 aa ef e6 05 8f 5c 8c 75 94 23 08 02 b3 30 62 af 61 50 aa 8e 89 fa 33 cd ea 7a da c3 fb 2e ed dc 3d ab e9 46 2d 37 05 84 58 b7 62 a6 f3 c9 e6 e5 df f8 7c 38 c2 97 1c 43 b9 Data Ascii: $i50_~qT(\|i>o\~\|Ssl@Aa!`,NI9VF)HNsuT<1GYOA]u,[~)\|f{Y)(j(0u4>&1x\u#0baP3z.=F-7Xb\|8C
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 66 db c4 b6 55 b6 25 40 93 59 50 24 68 31 60 7c c5 d0 ce 47 7c c9 26 5d ca b6 ae 63 23 26 fb 02 36 65 56 41 c5 21 a5 50 5d 74 29 aa 39 66 27 4a ed 86 2b 45 79 39 38 9d e4 72 3d 92 73 5e 5f 93 77 47 80 67 69 ca dd 02 74 28 bd 6a 17 69 ef aa c4 0a 98 f6 3e 91 cd 80 9f e1 46 e1 0e 6b 95 66 b5 7b e6 be 55 2e 9d a6 92 ad 3b bb 5c 3a ee 7c 0b be f2 2f f0 d4 09 0b 97 83 68 33 a5 a6 98 6e d1 22 99 5d d4 91 9b a2 8d 51 4b e3 ac 48 e6 06 68 b1 c9 ac b3 80 75 31 5b 90 72 bb 68 0b ad da 92 8a 82 b2 33 c0 a5 74 94 71 bc b9 3d ec 3c bd bc cb 79 cb ad b0 a9 5a 0f 16 ab 72 20 af ad 8e 94 13 0d d0 21 4d 6b 6e b8 ce 4b 3a 00 12 04 6a 06 74 48 9e 60 1e dd 73 02 24 ca 81 bd 51 1d 9d 66 91 ac a4 76 fe d7 cb 4e 3b b8 e5 4b d7 cb 41 97 45 39 a9 16 75 eb 5b 4b eb af d9 ee 53 34 Data Ascii: fU%@YP$h1`\|G\|&]c#&6eVA!P]t)9f'J+Ey98r=s^_wGgit(ji>Fkf{U.;\:\|/h3n"]QKHhu1[rh3tq=<yZr !MknK:jtH`s$QfvN;KAE9u[KS4
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: d4 f5 76 ae 16 d5 82 98 29 6a 9c 36 9b 04 35 f8 75 2c 35 d5 70 f9 7f 54 97 74 55 2f 02 4a 59 a6 bd b4 24 05 fa c1 a8 ec 6f b1 30 d2 62 7f 6d 11 8b 39 4a 49 1a 25 1f 21 9a b9 00 2a 78 4b 14 cf 0a 64 9b 73 b9 eb 83 c3 81 08 32 43 78 0a 07 5f 9c 9d 1e d5 41 cd 5a 58 b2 72 06 13 e8 24 06 73 61 73 b9 b5 14 c5 81 42 0e c4 97 44 e3 04 0e da 1b 0d f4 bd 50 b3 f3 a2 59 48 7d d3 0b ae 4d 41 9b b0 94 fc c2 dc 0c 29 88 09 52 81 21 b9 c2 74 65 6c 95 42 d1 52 5c c5 52 83 49 7b 69 14 d5 74 e5 b4 eb 8a d3 ce da 53 d7 73 92 f2 cf cb 5a ba 35 57 1c 67 e5 d2 60 62 65 e0 b5 f1 90 6f 95 a3 67 52 8b 40 28 10 12 da 48 ba c6 06 39 8b 23 f4 32 20 0b 7a 4c ce 01 18 4e 0b 18 33 84 64 5e ae 8c d8 b8 94 73 d7 2e 7c 8f 91 0e 57 ef d5 1d be 4f 88 2a 61 b8 9f 49 58 07 07 a4 38 41 ff 4f Data Ascii: v)j65u,5pTtU/JY$o0bm9JI%!xKds2Cx_AZXr$sasBDPYH}MA)R!telBR\RI{itSsZ5Wg`beogR@(H9#2 zLN3d^s.\|WOaIX8AO
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: eb 7a 37 79 74 46 f8 01 4e ad 75 30 81 00 08 02 9f d7 69 ee d5 39 67 2f 2c 34 68 72 b8 ec 42 41 c7 b5 ac 14 2a 2e 80 27 a2 00 ea 3a 59 eb 7a 0c be 25 29 cb d0 73 da fb 0e 2b 79 ab 5e 04 c5 5f d7 ee 41 a5 11 53 db 6f 4b f5 b5 15 75 1d 6b 7d 70 19 b7 99 fe 0b 7e 6a 33 0f bd c6 f0 0e 3b 6e 1a 4c 63 89 a2 46 fe 01 35 9c 36 62 6b e4 47 86 32 28 37 39 65 2d e5 72 7c ed 93 e5 24 39 18 20 39 b4 c2 2b e9 b5 77 fa 0c a5 28 80 2c 42 b1 6c 59 0a 25 0c cc 14 07 e0 42 a3 ba 12 ad e7 9c 39 fc bf d5 50 d4 b1 c3 aa 23 f7 0e 19 b5 62 53 b3 ee 73 76 d5 fd a5 9a d7 a3 ea 9a 72 75 55 c6 28 eb 6c 9f 3e 0a 6f 07 69 ad 4b 63 76 56 af 34 28 8a a2 46 c3 10 a1 5f 44 32 51 14 19 c2 6c 8f 57 37 b9 ec ae f1 4a 6c f7 df fa 7e ad f8 2a 73 25 7b 97 5d ad 9d fe 1e 09 53 35 66 21 86 0c 50 Data Ascii: z7ytFNu0i9g/,4hrBA.':Yz%)s+y^_ASoKuk}p~j3;nLcF56bkG2(79e-r\|$9 9+w(,BlY%B9P#bSsvruU(l>oiKcvV4(F_D2QlW7Jl~s%{]S5f!P
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 0e 82 11 2c 70 68 45 18 e2 ae 77 55 0e 6a 81 3f e4 a1 90 92 1e c1 43 ad 5e db c3 7e 65 66 1c 2a 4c b4 40 8b 31 f2 19 4e ee c0 3a e4 2d f5 ee 79 13 c3 d7 dd 81 ae 2a 8b 8d da e7 c0 4e 01 90 89 7e bc dd 8f a2 6c 05 bd 62 01 c2 90 b8 e2 30 72 84 f7 e9 87 6c 0d 30 1b 92 6f e8 02 e3 40 f8 8a bd 47 2d bd 2a 50 35 c2 4a 85 17 23 17 1b 1c 92 5a 12 f6 c7 78 bf 6d b3 b5 09 58 ea 18 17 a5 0a 94 de 7d 50 7f 60 57 fa de 77 3a fd 4d 72 74 b6 2d 9e 22 58 1c 21 28 1c 48 90 b0 32 15 40 26 fa 71 86 e1 5e 57 a0 5d 05 25 25 e9 23 ec 9b 7d c6 7c 7c af 33 d9 77 46 1a b8 09 c3 40 00 0e 4f cf a0 c2 0a ee aa 3c c1 fa 5b f6 0e 05 52 d8 a3 98 2a 76 6a 9b 21 e5 32 a0 cc ec 3b f4 7c c8 7c da ba 3d 3f 67 38 50 1b a3 c2 11 2e 49 50 ac ec c7 54 24 22 f3 9d ba 75 15 ec 7d 36 2a 57 92 7d Data Ascii: ,phEwUj?C^~efL@1N:-yN~lb0rl0o@G-P5J#ZxmX}P`Ww:Mrt-"X!(H2@&q^W]%%#}\|\|3wF@O<[Rvj!2;\|\|=?g8P.IPT$"u}6*W}
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 26 4d e0 19 b9 21 40 32 9d 7e a0 10 02 f8 23 e6 51 ee 45 5c 05 11 11 a6 5d 0d 47 ac 05 a1 0f 05 30 85 df a9 7e 31 cd 55 77 06 d8 6c ee 0e bf d6 89 78 a5 df 5d b3 8c 29 b8 ba 6b c5 4b a0 f3 cb 08 90 1c 01 4a 36 bc 2b 92 9d 64 a1 81 46 4f ea a6 04 bc f7 7d 0f 09 fd b0 02 56 d6 f0 3b a4 5c 0c 19 22 a2 e9 06 74 b4 7a c8 85 96 04 00 3b 35 56 c0 77 c9 67 72 6e 18 35 aa ab 7b 31 d0 07 dc 80 6f 1a af 67 ef 77 3c 79 ef 36 64 3a 2a 95 8a d6 5a 53 c0 6c e0 a4 67 82 95 68 52 58 48 23 4d bc c0 cd 15 9b 38 ed 6b 2c b0 1c 63 9f f2 81 0e 30 86 0c 61 da 15 2e 3a f4 e8 ff 79 28 00 f0 fd 7f 9f ea ef 83 96 ff e2 f1 da 45 46 54 1a 4a 29 70 2b 3e 47 f8 e8 83 de f4 b3 69 6d d2 06 a6 7c da 4d ab 92 23 6c c9 39 89 3d 11 49 7d a8 92 e4 41 36 d9 92 2d d9 92 ef 59 b3 7d 4f 15 a8 12 Data Ascii: &M!@2~#QE\]G0~1Uwlx])kKJ6+dFO}V;\"tz;5Vwgrn5{1ogw<y6d:*ZSlghRXH#M8k,c0a.:y(EFTJ)p+>Gim\|M#l9=I}A6-Y}O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	50073	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	530	OUT	GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 187116 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4102 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	720	IN	Data Raw: 52 49 46 46 e4 da 02 00 57 45 42 50 56 50 38 4c d8 da 02 00 2f 0d c2 49 00 4d 50 10 c0 36 6c 1b 05 90 61 d8 40 ef ff 0f 16 ed e4 f6 82 88 fe 4f 80 24 25 de 25 29 ca b3 12 79 29 89 94 c4 b6 32 5a 4a 62 29 52 ec 64 cb 43 5e 39 d6 1e 3d c5 af 76 ed 89 9c 24 92 ad d1 c3 1d 27 96 9c dd 77 ac 7d 4b 34 66 1f a4 41 89 14 e5 5b c7 49 a2 cd ce b3 94 c1 49 62 65 da df 39 c9 65 65 74 12 eb 0b c5 9b a4 21 91 b7 44 7a 48 22 0d c5 b7 6d 81 4b b1 a4 33 ca e0 44 7b e2 cc e7 a0 24 e4 37 c7 6a 5b e6 8d 14 db f4 ad 48 77 ae c4 d9 2f 9b d2 70 80 7c b1 1f 07 b3 db d9 cb f6 86 77 5d 89 92 c4 ce 75 1b b4 5d 92 2c b1 5e 81 53 9c 28 21 c9 b6 65 09 16 4a 24 c9 b4 ef 38 24 b1 88 ef a9 1f 90 03 a1 d9 8e 6d c7 24 be 5d 00 0e 32 4a bc d9 bd 0c 14 36 08 02 d9 4e f9 51 24 3f 2d d9 92 03 Data Ascii: RIFFWEBPVP8L/IMP6la@O$%%)y)2ZJb)RdC^9=v$'w}K4fA[IIbe9eet!DzH"mK3D{$7j[Hw/p\|w]u],^S(!eJ$8$m$]2J6NQ$?-
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: bf 05 de fb eb 3a 4d 72 91 34 45 23 84 08 16 42 1c 78 b4 6d 5b 75 63 db b6 4a ad 7d 18 a6 c2 02 4b 43 b2 23 a1 62 32 33 e3 cf 3b ad cf 58 a9 4a 66 2f 66 f0 e8 a3 f7 9f 91 db 48 8a dc 30 b4 74 da 47 a0 18 5a f2 8e 9a cc 1c f6 de 39 f6 6e 18 56 ca 2b a4 a0 58 01 06 0a 04 89 4c 1a a8 15 1a ee 52 4c 44 a4 48 ab 53 2b 10 8a 99 86 e1 61 74 74 c3 66 22 45 5a 02 28 c4 04 82 14 88 48 11 31 4c 0c 9b 88 21 6e 00 74 e8 20 13 04 a3 78 47 31 29 7a 14 bd 16 a5 a8 49 43 10 00 28 86 46 d1 10 d0 30 80 20 00 41 6a 52 33 31 a4 08 22 82 81 d9 0c a9 5b dd 90 48 91 52 00 00 44 c4 44 44 66 22 22 76 1b de ec 0d 02 50 30 60 00 99 bc 0b 86 d9 c5 0e 80 58 45 a3 30 44 33 a4 21 0d e9 0b 99 14 6b 98 61 d8 0c 2b 56 2b 00 62 c3 87 38 8c 0e 36 29 1d a4 5e bc 03 7b 93 09 66 18 52 a4 a0 58 Data Ascii: :Mr4E#Bxm[ucJ}KC#b23;XJf/fH0tGZ9nV+XLRLDHS+attf"EZ(H1L!nt xG1)zIC(F0 AjR31"[HRDDDf""vP0`XE0D3!ka+V+b86)^{fRX
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 93 e9 86 d5 4c 28 68 6f 7a 34 3d a4 07 d2 f4 a9 e9 de ea 32 94 5a cf b5 5e aa 99 b7 f0 d2 74 6f 7a e5 35 7b 05 28 d4 3e 16 ea ca 34 4c 43 19 a7 3a 4f 94 ea 8f f5 4d fe f1 60 23 07 10 60 42 97 22 62 08 62 53 41 77 ac f9 d4 ea 34 4e f0 e3 c1 28 43 a1 de d7 ba 8e 75 a3 6e 63 dd 28 15 28 56 60 0a 2e 18 65 ac 8d 52 a7 5a e7 5a c6 c2 f4 58 57 ea dc 04 35 de e2 eb e8 db c8 94 37 b1 00 ea 00 a5 10 79 17 9b 60 c5 b5 83 52 04 60 3f d9 71 81 01 0c 0a b0 9a 20 62 3d cc 14 50 5c bb dd 5d 64 d2 30 cd 6e 32 99 50 7c b2 a0 3b 1a bc c3 3b 66 6f 32 60 29 26 48 ad c0 30 87 74 58 ad 53 2b 28 30 cc 2c 30 17 c3 10 31 31 57 60 35 c3 8a 21 18 10 2b 36 41 74 c1 a4 a8 19 e6 10 cc 6b f9 dd 79 a8 e3 9f 95 47 7d e2 0d de 0d c3 74 33 3b 14 16 2c f4 85 61 5e 0d 41 1c d6 61 18 32 01 98 Data Ascii: L(hoz4=2Z^toz5{(>4LC:OM`#`B"bbSAw4N(Cunc((V`.eRZZXW57y`R`?q b=P\]d0n2P\|;;fo2`)&H0tXS+(0,011W`5!+6AtkyG}t3;,a^Aa2
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 38 4e 04 61 f5 d7 31 b3 c8 62 bf fa eb e2 f9 52 77 0b 16 8b 90 6b a6 c9 22 e7 ca 7f 7a 1e e9 52 56 09 89 ca ea 2e a4 49 c8 ff da 32 a4 c9 63 66 91 e7 91 9a d1 91 bb 84 44 e5 2f ed 87 e7 4c 93 e6 f2 0f e3 cb e6 f3 26 4d 16 59 e5 5c 8f 7c 1f be dd 86 41 bf 45 7f 46 bf 47 7f 46 7f 66 1c b3 d7 8f fe 3b 7d b1 1a c7 7c 1c 53 fd 19 be e8 c3 df 47 12 a2 23 ab 1c 2b e9 bb 40 f8 2e 24 fd b5 92 26 95 97 21 33 cf ef d2 e4 73 27 dc ae b2 af a4 57 21 e9 32 2a 59 69 12 12 6e 3e b2 db 56 fe d6 b2 af a4 ab c5 55 54 d2 ed 98 09 59 a4 55 6e 23 63 3c be 3c 8c fa 3b e3 40 bf 66 1c 4f c6 38 d1 ef 67 63 4c f4 5b be 3b 4c ce 9a 8f 63 36 8e f9 38 e6 77 fb 90 70 1f f5 af 90 ac 34 49 09 09 49 b9 cb 2a ab 34 09 b9 cb 2a b7 71 ff 7d 72 26 51 69 f2 fd 3b c2 fd 2a 21 d7 cc 2a 21 ab 84 Data Ascii: 8Na1bRwk"zRV.I2cfD/L&MY\\|AEFGFf;}\|SG#+@.$&!3s'W!2Yin>VUTYUn#c<<;@fO8gcL[;Lc68wp4II4q}r&Qi;!*!
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: ee 19 c9 f8 39 73 ea 5a eb f7 fb 7e b7 7b 08 b4 37 d7 76 f3 b7 06 6c db 96 bd 6d a4 fb 7e 5e f8 be ff d7 2f b0 6c 99 19 e2 d8 71 e2 60 31 dc e9 b6 1d 66 da 61 66 e6 76 3b a5 c1 2e 17 96 86 b7 ed d1 85 76 78 3a 4c 4d 9a 42 92 06 9c 98 41 92 6d 99 24 8b 7e f8 be f7 7d 9f 87 b3 24 db aa 6d db 76 22 4a 6b bd 8f 31 e7 82 7d f6 39 97 1f 33 53 4e 9c 63 66 a6 9f 60 66 29 a9 5f 50 8a 59 29 66 66 78 cc ef 89 0f ef bd d6 9a 73 8e 31 7a 6f 25 1c b1 6d e3 48 9a b2 d7 2f ce 66 7b df a7 3f 6c ff cf 46 fe ff ef f6 78 24 69 da 8e 67 d6 b6 ed a7 bd 4f db b6 6d db b6 6d db 5c ef bc d6 98 dd 59 63 b0 9c 1d d6 c9 23 b9 1f af 4c 1e 69 9b 99 e9 df 7e a8 6d 3b b6 db b6 ad e3 ba df ef ff 2b da b0 6d 23 b2 3d 32 db 36 22 db 36 32 db b6 95 75 db 36 46 6d ac ae f5 ff be f7 b9 3c 47 Data Ascii: 9sZ~{7vlm~^/lq`1fafv;.vx:LMBAm$~}$mv"Jk1}93SNcf`f)_PY)ffxs1zo%mH/f{?lFx$igOmm\Yc#Li~m;+m#=26"62u6Fm<G
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: a7 96 12 46 82 db 49 9e 16 4c d9 b4 d7 01 a8 ad 2d 0f b5 39 c9 28 78 97 1a c2 c1 a2 74 02 e4 20 5d 5f 6e 0f fa 41 79 e8 b4 11 d6 2b 6d 65 40 09 68 42 dc 46 08 5f 96 04 80 f0 7d fa 4a 0c 80 29 5a 16 9d d8 d9 6f 01 d0 56 ea f9 f6 c9 37 5e 72 f1 b6 16 7e f8 0c de 63 47 76 d0 42 dd 31 30 6d 82 b6 62 9b f6 46 9f af 41 0e 64 13 95 25 76 18 b5 ae 76 88 64 1c d3 d8 2e dd 27 75 14 a4 7d 9c 63 28 68 39 b9 d3 75 df 27 af 0b 16 2a 7b 03 c3 a1 41 50 14 b8 b7 ca 01 f3 9e 03 37 22 36 9d c1 0d ad e6 66 c8 01 54 d0 3c 6b 2d 65 ad 15 45 45 c1 c3 6a 68 d2 1b 80 c5 50 35 03 e5 7e 9f 92 82 70 83 5c ca 57 4f 55 36 05 0f e2 2b 03 cf 5c 46 87 62 23 92 c5 4b 2d 24 e9 09 82 09 ac b7 6f ae 6f ee eb 4b 6f ad 21 74 c2 f2 96 5e 24 46 8d 9a 24 89 9c 35 6b bc 4b a7 dc e2 11 87 ae 2c 58 Data Ascii: FIL-9(xt ]_nAy+me@hBF_}J)ZoV7^r~cGvB10mbFAd%vvd.'u}c(h9u'*{AP7"6fT<k-eEEjhP5~p\WOU6+\Fb#K-$ooKo!t^$F$5kK,X
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: d3 c2 1c f4 87 f5 da 06 c7 0d b5 25 59 9a ed 8a 06 02 55 82 1d 6b bc 86 4d 5b 1e 6c 3c 24 54 9f 25 d6 4e 76 bd 6e 2d 1e 4c 0f 03 74 b6 2d 32 5b b8 23 17 23 83 92 5d cf de a8 a1 b8 0b b3 b6 ee a8 f5 51 eb c5 50 13 85 9e b5 3d 7e fe f7 bf 3d fc e4 ed ef f4 dc 71 6b a0 30 e2 8e 7b 99 98 07 a7 63 54 62 0e 45 74 f5 be c6 ba 77 86 f4 6c e5 65 2e 1b 21 5a 8d 36 20 90 da 59 8a 90 9a 0e de df c9 e9 a1 8e 87 ab 26 ac c3 56 e9 56 4b 0a 6e e3 87 d1 46 d9 ab 8e ac 6b 34 61 97 a2 c2 a0 7a 28 d0 ec f4 de c7 8c e2 ca 9b 69 81 4b f2 d9 3e b9 d4 b6 16 b0 38 8f c1 e3 c8 e8 a0 f0 a6 a1 70 94 ad 98 d6 64 41 0b 19 7d 3f ee de 26 34 52 34 34 01 e3 20 c2 a5 f2 76 2a 91 b4 3c 66 c9 14 47 21 ea ab ad 16 e0 f3 c2 9b 0e ba 00 c2 bb 87 df e3 d4 c5 98 50 1d 8e 38 8c d3 a0 5e 31 bf 91 Data Ascii: %YUkM[l<$T%Nvn-Lt-2[##]QP=~=qk0{cTbEtwle.!Z6 Y&VVKnFk4az(iK>8pdA}?&4R44 v*<fG!P8^1
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 13 37 38 fe 6d 61 16 dc 53 da 71 8f e9 3b 8c 34 a0 c6 9b a2 96 ec b5 9e 8f 2e 45 da 2c 6d d7 4e 9b d9 6e 9d c7 7b 51 24 13 05 6e df be df fd e5 6b b3 d7 ce 17 c2 d5 b8 8d 63 0e a0 78 69 d2 7a 6f 67 ee 0a 24 69 78 57 fd 4e 47 76 d6 fa ea f0 e1 46 ed 6a 3d bb 8e 1c e6 fa c3 1f f2 11 ef 03 bc dc 2e af 6d 4b 09 9e dc 51 81 7b df 3a 03 aa db 35 1c c7 2a a6 11 a0 ab 2a 7a bf 67 5d 95 b1 e8 b4 91 aa 60 5e dc 8d 5b 29 43 c6 2c e5 96 e5 ac 6a 85 01 03 38 75 ed c1 a6 13 ab 07 af c3 a4 d9 b6 ff e7 f6 b5 b5 b2 e0 6d 13 0b 9d 88 a5 91 49 a1 4a 76 a9 9c e9 46 82 03 7a 7d bc 84 35 1e 33 dd 84 cb b5 c3 e9 0d 6e bd 35 7b 09 dd c0 e8 96 40 06 2a 62 33 de 8c 12 8d 78 22 b0 77 df 0f 9d c8 d8 0a 55 cf 56 e5 09 da b9 f6 e6 c3 4d 22 8b f4 fa 9c 5b 9a 7d 77 b9 9e 2b 50 dc 9d fe Data Ascii: 78maSq;4.E,mNn{Q$nkcxizog$ixWNGvFj=.mKQ{:5*zg]`^[)C,j8umIJvFz}53n5{@b3x"wUVM"[}w+P
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 51 ae 9d 37 39 a9 39 0d ef 0e 4c 82 dc 8f bc df c6 6f db 54 9d 81 8c 36 c2 c5 d6 05 bc 56 b4 9b 8c 5f 84 99 e6 99 3f b8 9b 5e da dd fe 73 37 af 68 25 85 08 02 3d 13 1b b8 a3 45 9b 4f 7f c7 6c 94 38 2b 3a c5 0d 6e 69 b1 49 0e 6b e9 97 82 fb 54 98 46 34 19 32 50 1a 4d 43 39 17 32 c7 56 6e 8b df 8f bd af 7d bc 42 7a b1 9d 6a 04 5a 78 2c 12 d1 e6 3e 2e c6 e9 5f ff 5b 4f fc 08 a6 01 00 df 76 95 1e 01 78 0a 57 63 e3 d6 96 3f f6 bd 95 f2 91 b9 9e a2 a9 23 0e 7c a5 fd cc ef 72 6c ef ce 7a 2d ed c0 c4 f7 dc fa ea 5f 6e f7 27 4e 93 d3 a8 2f 9d 79 fb b0 a5 f2 c6 e6 43 c1 10 a4 95 cd 94 3c 1d 35 49 b1 1f 6e 87 78 eb 44 8f b2 24 35 68 9e de 7a a1 5c f9 56 1f aa 7d be ba dd 26 a9 10 ef 0e a6 e9 8b 81 e6 ab f3 da 4d 56 3e 7a 86 91 48 fd ff a7 21 83 70 5a be 34 e7 c4 1a Data Ascii: Q799LoT6V_?^s7h%=EOl8+:niIkTF42PMC92Vn}BzjZx,>._[OvxWc?#\|rlz-_n'N/yC<5InxD$5hz\V}&MV>zH!pZ4
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: d1 42 79 f0 2e d2 58 6a 6c 56 71 c3 12 96 cb 11 f6 eb 3b e7 4d 80 4d 32 a2 a8 b3 d6 1d 2f 98 99 08 a2 63 ed 24 6f 03 d0 88 d8 e2 49 c3 22 25 35 72 50 d1 9a 64 74 54 6a b1 ad 45 0d d9 55 7d c0 af a5 b8 e7 38 23 11 09 87 20 22 a7 92 a9 02 f3 59 f2 29 03 a7 e2 b5 4f d8 a0 6a 09 16 c4 f7 34 3d 9f af 71 49 ca 4a d4 bb de 7a 83 75 0e 47 78 09 06 5b 69 24 07 8b 6e be db 1a 88 0d 21 65 6b 59 b4 b5 c4 a5 5a b8 e9 2d d6 e8 e9 3d e9 cd a6 62 9a 4e 57 be 20 72 50 6a 7b 12 47 02 9f 8a 94 24 16 ce 4c 9c 8a 9c 73 92 33 23 bd a9 60 21 23 75 29 70 9b 29 83 21 a0 91 80 82 f1 d4 98 4f 91 c2 84 7c 48 67 08 14 67 de c9 e9 70 79 fa 2a a3 59 3e c2 6b 5d 2a cd ee 28 cc 47 1d 3d a5 23 34 d2 50 33 a3 30 62 b2 80 26 68 ba 0c 59 cc 2e 5f 78 2f e6 6f 01 4c ae 38 d6 58 48 0a 23 f4 11 Data Ascii: By.XjlVq;MM2/c$oI"%5rPdtTjEU}8# "Y)Oj4=qIJzuGx[i$n!ekYZ-=bNW rPj{G$Ls3#`!#u)p)!O\|HggpyY>k](G=#4P30b&hY._x/oL8XH#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	50074	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1101	OUT	GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8092 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:11:51 GMT Expires: Sat, 20 Apr 2024 12:11:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 6901 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	722	IN	Data Raw: 52 49 46 46 94 1f 00 00 57 45 42 50 56 50 38 4c 88 1f 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 85 02 b5 45 ce ff 1f 5c 59 51 39 fb 35 a2 ff 13 c0 7f 72 dc aa 80 cc 25 ea 13 99 0b ec 91 f9 4a 99 3e 90 d9 11 0a 0a a8 2d 62 46 46 a3 ee 5a e0 be 48 85 52 5b 44 34 ca aa 82 5c e7 24 e2 b3 9c 8c a7 f1 06 b4 dc c7 ba 2a 55 22 9e e2 6b 81 d3 6a 9d 8d b2 5c 70 36 92 7b 01 9c 0d 3b f7 64 3a ce 73 a6 fa 22 27 e8 c4 77 64 b6 5c c1 b6 6d f0 f1 19 b0 6d 4c c7 18 8b fe a6 0b 38 92 6d ab 56 1a 77 77 0d 29 e6 3f 12 42 c2 1d 11 b9 fb ff d8 3d ff a3 b1 e3 48 b6 55 a5 71 56 d4 0d e1 e5 1f 13 2b 77 b7 5b 17 29 d8 b1 6d ab 6d 76 09 e9 bf 32 83 24 af c8 8c 61 f8 73 ff 27 80 fe db fe 75 1c a4 af 50 3b 35 ef da b1 63 40 e7 c0 61 52 83 fa ed 8f 3c f8 ce 66 3b 6a 5e cf 56 cf 8f f9 Data Ascii: RIFFWEBPVP8L/?M@rHE\YQ95r%J>-bFFZHR[D4\$*U"kj\p6{;d:s"'wd\mmL8mVww)?B=HUqV+w[)mmv2$as'uP;5c@aR<f;j^V
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: a0 9f ff 3f 7a 8f db d8 b6 55 65 9f fb 3f ee 90 13 52 03 6d d0 27 25 31 a4 ee 6e ef 9d 98 00 bc d9 ff af 92 64 e7 9c 53 55 4d 33 3d b7 b7 61 98 e7 5e 31 33 33 33 33 33 4b 2e 33 33 33 33 33 33 33 2d 33 ef 30 4f f7 34 56 d5 31 aa a7 9e db dd ff aa 71 bf e6 cd e1 44 d1 62 29 86 eb 1e b3 ec 8a 40 cf 73 b2 b8 51 28 81 1a 81 4b bb 66 89 f5 73 b7 52 38 11 c8 9c 1c 94 42 bb ed b6 db 6e bb 42 97 26 02 99 72 77 12 b8 e4 8a a5 bf bb 60 ad fb 8b 42 94 85 dc eb ca dc 23 56 8d 39 a6 18 ec 72 15 c5 26 c0 ee 9a 47 ac 59 77 cc bf 58 e3 2a 06 65 71 43 d0 95 2b 73 5c 2d b9 82 4a 40 11 74 0c 25 88 a1 dc 35 65 97 a5 e7 99 f1 e4 5e a5 a0 3c a4 08 64 ae 3b 8f 7c 1c 77 5c da da b6 1d ae 98 e7 fd fe 99 49 32 59 a8 6d db 76 7b 30 76 4f 60 e1 4c ca cd ee 75 cb b6 6d db 6d 16 92 cc Data Ascii: ?zUe?Rm'%1ndSUM3=a^133333K.3333333-30O4V1qDb)@sQ(KfsR8BnB&rw`B#V9r&GYwX*eqC+s\-J@t%5e^<d;\|w\I2Ymv{0vO`Lumm
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 77 13 61 86 48 e8 ee e4 61 62 52 41 11 12 37 51 b4 70 97 9f 65 9d e3 3e 12 bc d5 34 c8 2c 4a 5c 04 7c e3 bc ef ea ab a7 f7 a2 a9 a8 b3 c1 7e b1 62 df 63 b7 5e 4a f1 08 2f 05 ba 88 77 f1 b1 be 91 28 41 31 47 9c 9b 3d f1 e7 bb 6a 35 a5 63 9e e6 80 68 28 9f 75 1c 05 5c 42 2e 84 8e 1a a7 a8 34 65 40 25 21 41 0b b4 ca 4b cd bb ef c3 f5 1a 72 3c f1 fd 89 d8 59 4d 27 ea 56 cc 41 69 c8 23 33 17 c1 9d bd 6c 1f 54 aa dd 15 88 bc 23 aa 77 fe 6d fc 5a 7f 9f fc d0 45 fd 98 78 1c b0 0f 89 01 d4 7d cc b7 4d c8 69 5b 4b a7 46 7b 29 4c 1e d9 27 e7 03 22 cd 26 14 56 67 5c 17 74 56 e9 61 21 d0 0c 4f 2f 44 20 63 01 f0 c7 0b 06 b6 19 46 45 60 ef f3 57 78 a0 ef 1a f7 6c bb 1b 54 0f 28 25 3b 85 b6 9a 80 6c 90 41 ec 01 0a 13 4e 61 1c d2 44 50 70 c6 19 a6 f1 89 e1 a4 4e 66 b4 be Data Ascii: waHabRA7Qpe>4,J\\|~bc^J/w(A1G=j5ch(u\B.4e@%!AKr<YM'VAi#3lT#wmZEx}Mi[KF{)L'"&Vg\tVa!O/D cFE`WxlT(%;lANaDPpNf
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 9e c6 b9 2c 07 96 39 11 e1 a9 5d 04 77 c6 89 6e f5 01 a0 c0 fa 51 fa a9 7f 9a d8 2d 6c 71 f5 84 3d 6c 81 a3 30 11 65 bc bd 76 68 ee 6c 01 e8 18 6c db 84 54 2f 0d 57 dd 93 65 3e fd 3d 9b 5b 67 8a 68 c3 c4 b6 1b 47 d5 53 80 f4 87 d8 44 28 5b 9c 4e 03 97 c6 f8 26 b5 75 74 5a 26 d4 4d f2 35 15 3b 97 e5 46 61 6a 37 c3 28 1e 13 4f 03 96 2c e2 e2 58 32 14 10 fb 48 8c 32 b4 b5 1e 2d f6 e5 47 4b 3b e5 a2 28 e6 11 c2 30 94 79 74 e0 df 7f d7 5b 1f 29 35 27 50 95 51 63 cc e9 a8 22 c4 87 b7 f8 67 78 b7 79 b0 97 61 ae ba e5 88 0b b1 50 3a a1 73 e2 7b d2 92 e6 25 82 89 cd b8 98 e6 21 bf 4e fe f2 27 5f e0 45 5c 2a 1e ab 00 e8 51 d6 a9 c6 1a 9b b9 c7 d8 fa 2c 65 cd 03 ad c5 ba 24 9e d5 51 3d cd e7 ad 06 5a c0 79 b0 a7 b6 8e ba 17 f2 42 9d fe 5e e5 ae 60 98 10 9b 61 60 42 Data Ascii: ,9]wnQ-lq=l0evhllT/We>=[ghGSD([N&utZ&M5;Faj7(O,X2H2-GK;(0yt[)5'PQc"gxyaP:s{%!N'_E\*Q,e$Q=ZyB^`a`B
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 7e 38 1d f2 ae 8b 9c af c9 97 36 fd 14 8e da d0 dd 7a 25 02 55 a1 5b 6e 43 58 3d 64 8d 7f 23 9a 73 e8 86 77 1b 9f 5c 75 d3 26 42 37 75 37 dd d2 4e c3 22 a6 e5 0a 50 55 39 10 ea 6a b8 e7 9f 18 96 2b 56 6c 90 2b a1 9b 98 73 73 f5 68 ea 45 b9 c5 26 2a 6e 21 21 29 92 7c 79 ee 44 18 46 ba 72 68 53 85 6e 62 b2 0e 8a 30 67 55 e8 6e fb 2d 4a 88 2a 42 9c cf c2 b0 06 24 90 61 e9 a7 1b c3 38 a0 4d 42 ff ac 7b a3 5b 84 36 f4 f7 98 14 41 d4 dd ac de 95 6a ba 21 21 da 98 d9 5b d3 30 1d 9e c6 67 fd 34 0e 26 a1 ad 12 93 42 28 51 45 29 ea 40 97 48 30 e1 49 a6 2b c7 a0 9d c6 25 98 aa f4 23 26 8a 50 16 bb 87 51 b3 a2 81 4b 12 4a 3c 8c 72 94 ae 38 85 fe 19 93 ec 95 70 70 31 51 04 c5 26 aa 4e 1a 73 84 47 10 68 bc 7c d0 2f fd 94 da 38 40 e8 6e 98 a2 b4 85 9d 29 45 2f 1c 49 11 Data Ascii: ~86z%U[nCX=d#sw\u&B7u7N"PU9j+Vl+sshE&n!!)\|yDFrhSnb0gUn-JB$a8MB{[6Aj!![0g4&B(QE)@H0I+%#&PQKJ<r8pp1Q&NsGh\|/8@n)E/I
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: a6 cf d5 98 bd 6a cd 82 d1 6b 0a 4c 15 ba 39 64 80 98 a0 04 4c 45 50 08 c8 0b 0b 49 a0 04 14 61 03 66 31 73 c7 cc 90 6e d2 cd 87 d2 0a 70 18 02 9c 34 6b 7f f0 15 32 2b b7 fc 34 10 41 c4 1d ae 3a 56 03 c1 4c 16 9d 98 b4 c0 94 a1 5b 36 52 00 72 08 8a 10 a6 42 28 6e b5 e9 8e 24 50 04 12 8a 28 9a 66 fa 7f e8 73 15 2b fb af 1a 1b 52 50 64 ab 01 57 b5 6c bc df b5 77 22 e9 7f 72 cb 5b 82 88 44 84 ba 46 af f6 fd 0f 4f f2 d9 db fb 26 42 10 d2 11 91 5e 83 fb cc 33 ac 3e 92 f4 b1 7c aa 6a 11 aa e3 40 54 b5 8b 07 75 8b 36 6c 68 82 49 11 a8 5b 6d 72 61 f1 40 a0 02 66 89 e2 01 b3 91 36 93 f1 3d 81 b9 5f 89 4d 63 44 63 a4 20 40 23 6d f5 c1 fd 45 c7 58 38 75 cb 5b 5e 44 04 51 47 29 3f e4 9f 5d ed 75 14 25 62 83 a1 5b 1f fc 83 bf 7f e7 ad 8e e2 bf fe d1 c7 1c 55 bc f6 65 Data Ascii: jkL9dLEPIaf1snp4k2+4A:VL[6RrB(n$P(fs+RPdWlw"r[DFO&B^3>\|j@Tu6lhI[mra@f6=_McDc @#mEX8u[^DQG)?]u%b[Ue
2024-04-19 14:06:52 UTC	1095	IN	Data Raw: 56 d9 64 8d 9b 04 db 00 49 44 48 3e 57 22 49 44 64 16 0c e7 dd 94 be 65 5e 6b b2 19 43 41 50 dc 96 f7 ee 56 73 8d 70 95 6e 48 50 6c f2 01 24 25 11 61 d7 f5 2b 42 af 67 71 29 fd 09 ea 08 a9 4b e3 49 6a dc 5d 2a 68 96 f3 3c 22 99 94 ac 88 a4 94 92 68 7c dc 0c 05 6a 7c 3f a5 6f c0 d5 06 4d 85 94 2e 4e 98 d8 4a ff de b5 30 2d 3d 5a f0 8c 82 b7 55 4a 29 09 c9 29 91 94 52 f6 0c 8c 8f ef da b1 de 79 a7 92 bf 37 17 3f 95 ea df 2c 8a bb 8e eb 77 65 6b ef 01 be 6e c4 f3 3c 6f ab ef 13 11 28 29 01 49 e9 fb 5d 0b 3e 77 7c 7c fc 80 e1 71 09 c9 37 68 f6 63 e8 13 35 78 d7 62 f0 7a ba 13 c9 1e 0d cd a5 88 1a de 56 cf 0b 34 7c d1 56 29 09 49 eb 2a f3 fe fe fe 3e d3 c5 8d 8b 3b f5 9b ef 34 6d 7e b8 88 b0 8a ab 21 b5 f6 0b 21 dd 3e ed fe d3 23 3d f0 cc 5d be 93 45 3b b4 02 Data Ascii: VdIDH>W"IDde^kCAPVspnHPl$%a+Bgq)KIj]h<"h\|j\|?oM.NJ0-=ZUJ))Ry7?,wekn<o()I]>w\|\|q7hc5xbzV4\|V)I>;4m~!!>#=]E;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	50077	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	524	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9974 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:00 GMT Expires: Sat, 20 Apr 2024 12:12:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 6892 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	722	IN	Data Raw: 52 49 46 46 ee 26 00 00 57 45 42 50 56 50 38 4c e1 26 00 00 2f ff c0 3f 00 09 58 92 ec c6 6d ea 3d 80 04 f8 20 dd ff c0 9b 41 67 f9 8e e8 ff 04 e0 ff 68 b0 4d 9c f0 5d 13 ce 3d 39 e7 2e 60 0f 62 d7 5a 4b 7b 80 01 c2 c0 ae 42 64 12 3c 91 d9 25 89 e0 32 83 7b 8b 6e 60 66 36 dc 3b 20 a9 00 9a d9 5a ee 0d 92 44 c0 6f 16 9b 0a 80 db 6a 9a 92 88 db 0b 3f 93 a4 ba 8b d9 35 6e 22 22 bc 49 97 b8 9e 0d 9c 03 a8 0a 32 33 e3 b4 cf 7c 8e 81 8a c8 cc c8 b4 16 a0 2a 79 3d ad 03 9e d7 cb 71 f4 c0 33 33 06 eb 68 bb 56 1d d7 0d 7f f0 02 8a 24 c9 aa ad 8c 13 13 f3 18 14 7d d2 7f ff 2b fb 12 dd 65 d4 8a db b6 8d 43 cc dd 67 59 45 92 ec a4 c9 19 de 7b 20 00 11 f8 97 83 85 fc d1 ff 09 f0 77 ac c7 64 30 04 c1 50 a0 e4 1b 84 1d 00 82 21 00 10 b0 12 0b 85 a1 82 74 fe 7b 07 02 8e Data Ascii: RIFF&WEBPVP8L&/?Xm= AghM]=9.`bZK{Bd<%2{n`f6; ZDoj?5n""I23\|*y=q33hV$}+eCgYE{ wd0P!t{
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: a0 a2 1f fd e8 4b 5f 1f 9f 93 68 08 ed 81 a1 43 87 9e 76 46 4b 7e 7a d3 47 c7 dc 3e c6 c9 0b 83 43 0b 9e 28 0b 93 85 7f 1a 78 9b 8b 8d 9b 7e 1a 7a db 22 ed a3 a3 e1 a5 43 e1 d6 b6 ad 5a 59 fb 7c c1 dd dd 5d ca a0 0b 22 fa 21 d5 2a ac 02 32 1a f8 31 ee 9e d9 b9 db 6d db 48 92 24 ee 9b 7f 9c e7 9f b9 15 13 e0 03 7c b2 ff 3f d9 ff 1f e7 d4 b3 f2 ec c9 4a 05 b9 52 6b 4f be f4 f4 51 6e f7 1f 2e bb b3 81 03 99 bf c1 de 6b 3b 37 56 50 db 90 78 59 f9 f5 c5 8f 92 1f 9e dc 88 00 7e 4f dc bc 2c da be 37 d8 c1 11 0b 64 9e 9d 72 14 2c c2 42 00 59 14 3c 53 dc 42 37 4a ee e2 11 02 d8 fc 61 07 0f 10 d7 a4 61 23 f8 10 e5 d3 b8 29 e6 6e 50 e9 11 b8 66 85 ce 9c a5 07 cf c6 47 5c 13 40 e0 04 ee 99 f3 41 78 b7 21 e5 1a b4 5c 53 3b 1e 5d 6d 16 27 0e d2 e2 d6 c1 f2 94 9b 92 d9 Data Ascii: K_hCvFK~zG>C(x~z"CZY\|]"!*21mH$\|?JRkOQn.k;7VPxY~O,7dr,BY<SB7Jaa#)nPfG\@Ax!\S;]m'
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 31 3e 4b 90 90 50 80 0c 34 8b b0 43 60 37 63 1b 63 c2 a1 ed f3 e4 fb 4e 27 bb e8 6a 6a 40 59 21 77 7a 47 12 c0 12 38 dc f5 79 f2 a7 74 fa ad 67 20 00 41 c3 c6 80 03 30 06 73 25 5d 9d fe 79 a2 7b 3b f7 86 c1 01 8e 8b 00 f3 9e 4d 52 7e 96 08 40 cc 2b 6f 3e f2 9e b9 5f 98 10 33 fc ae b0 f0 67 09 43 63 32 ce b9 91 6c e4 96 6c 90 00 9e 98 dc 72 cb 6d 5e 95 8d 11 e3 fc 79 c2 e0 98 64 5f 8a 45 38 5a f5 a5 15 e3 74 38 8d d3 38 09 28 95 d4 0f e4 e7 89 10 92 80 30 ef 74 60 4c 98 f7 97 3e 53 7a 47 02 95 c2 50 28 16 74 a8 e6 58 9d 25 28 05 d6 83 f4 d5 39 e9 82 8d c7 94 6a 64 c1 ac 95 5d b6 d6 f2 09 61 39 81 05 e2 fe 70 98 bb 06 6c 0c 10 06 f5 e0 01 57 e9 9d fd ad 41 e0 c8 d9 8c aa 6f 53 29 92 01 d7 fe 33 cb c6 63 b7 92 ba 24 10 01 e6 fe 52 2c 01 26 30 77 a5 26 7d 50 Data Ascii: 1>KP4C`7ccN'jj@Y!wzG8ytg A0s%]y{;MR~@+o>_3gCc2llrm^yd_E8Zt88(0t`L>SzGP(tX%(9jd]a9plWAoS)3c$R,&0w&}P
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 53 09 07 c0 90 4c 31 a5 84 53 51 75 42 d5 d5 37 f4 5f 9e 2f 65 11 f6 06 37 da 69 9b 7b 73 6e ce dd cd 4d d7 f2 38 f7 b9 4d fc 36 37 e9 e2 9d b7 47 6d fd 41 0e d8 9f 4a 21 80 00 2d 68 b0 79 26 09 c8 c3 9e 38 6b be 14 45 6d ab 3d fa 37 1f e4 c2 96 1a cb 22 da f5 e2 33 b2 7d b0 6d 61 2d 1b 35 e3 30 d6 b2 5b f5 e7 73 7b 98 bb d9 66 20 07 60 41 48 12 90 4e d8 84 31 36 a2 c9 a6 b2 a8 a2 66 71 1e a6 2c 66 6d d9 3e d5 77 86 45 8e f5 5c 0e 23 c0 dd 96 85 8d 8d 59 cf 32 a8 09 d1 fa 0d 7b 90 7b d2 59 bc 3a 5e 2b 0d 00 57 42 03 31 71 2a e7 60 4c 6a 22 28 ea 1a d4 a9 c6 c7 77 58 82 fe 8c 25 ac be 86 39 b6 1d 6d 3b ce 4d ce cd 73 63 6e ce 0d 9c 6f 26 37 c8 0d 83 da 7e c3 fc 20 d7 f9 21 b7 fc 67 06 73 01 20 40 3a 0d 60 6d d8 f8 40 9b 66 c5 25 aa fc c2 1f a6 2c a6 bf 6b Data Ascii: SL1SQuB7_/e7i{snM8M67GmAJ!-hy&8kEm=7"3}ma-50[s{f `AHN16fq,fm>wE\#Y2{{Y:^+WB1q*`Lj"(wX%9m;Mscno&7~ !gs @:`m@f%,k
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: a1 14 76 9f 74 a6 62 83 1b 8d 6f 2c 35 96 24 90 d0 12 0d 5d 0b ad 40 52 09 9a 70 1c f5 51 b0 f1 b7 87 30 ad 29 55 93 4d 4e 63 e6 5c 1b b8 30 40 91 80 81 65 16 84 8f a3 6f ed 7a 50 26 68 7c e3 f4 5c 20 fa 02 15 42 a5 92 8c 24 15 12 a8 08 dc 3f 0e 3a 53 9f 32 98 5a ad 36 99 c8 30 a9 e2 f4 b4 c2 a4 a9 49 71 ef c5 ae 48 c3 24 fa c6 2f 2b 3e 63 39 b1 00 07 d5 17 95 bb 6c b9 e3 2e 56 17 a2 75 c4 ea 80 56 b4 a2 ff d8 3e 12 2a dd 7d 6a 5d d5 94 68 9a c1 84 7a 9a 94 8d 59 49 56 26 30 0d 27 b3 52 0a bf d1 d2 ea 2d c1 04 37 fa de da 8b 85 6d 59 12 c8 88 6b 05 5a 0d 90 b0 24 55 7b d9 6f 73 1f 0b b3 fa 9f 3d a8 65 dc 9a db 94 a6 0d 17 88 ac 24 d7 04 af f4 c6 35 4c d9 c6 39 29 24 d8 d2 f4 66 96 09 be 3d 6f 65 4b 3b 4a b4 4d f6 12 a4 6c 49 bb 74 d9 94 dd db ea 97 5d 1f Data Ascii: vtbo,5$]@RpQ0)UMNc\0@eozP&h\|\ B$?:S2Z60IqH$/+>c9l.VuV>*}j]hzYIV&0'R-7mYkZ$U{os=e$5L9)$f=oeK;JMlIt]
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 4f 99 20 2e 6b 11 e4 ae ad 1e 8c 18 f1 30 dc fc b3 e8 1f ec ed af 17 cc b5 36 db be 98 01 f4 2d 54 ed 99 d6 91 5b 38 ac d5 ca bd dc 2c ab d3 4d 43 a5 50 ff a4 0e 7b bf 6f 37 f3 90 75 97 0b ce 58 bc dd e3 a5 53 1a 26 35 dc c3 f2 1f 13 c2 08 fd 6b e1 9f aa 7f c2 7e 45 e0 09 df 7d f9 7f b0 40 e8 c7 25 70 ff 19 a0 12 08 09 7a ab 06 68 09 6c f5 d2 f3 27 b4 b1 c6 1b 8f cf 3f df fd ff e6 c6 f1 4b bd 11 99 01 43 a9 74 1f 76 b0 59 44 bd e0 da 30 3e 53 8b 61 93 0e 87 04 84 3e 9f 5c 20 06 d8 6f d8 29 7e 4a ce 3f 89 d6 bf d0 ad 73 d3 a3 b5 ed 6f 6f 74 10 da ce 9c f7 b8 c6 97 fd 36 f7 c9 0c 5a bd cf 69 5b b2 ca fc ca 98 34 b3 7b 4a 71 2d 43 04 49 34 4e 83 03 67 4b dc 0a 0e 2e a9 cd 74 c8 22 52 50 dd 72 c9 47 86 01 d8 b6 7d 9c a1 dc 7d 85 b1 ac b2 0a b4 66 4b ec dc 5e Data Ascii: O .k06-T[8,MCP{o7uXS&5k~E}@%pzhl'?KCtvYD0>Sa>\ o)~J?soot6Zi[4{Jq-CI4NgK.t"RPrG}}fK^
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: e0 12 fa 56 73 56 03 1b d2 85 13 98 80 89 a2 01 52 49 61 75 01 a5 42 a5 d5 4a ab 01 e8 83 ba eb af 1f ba fa e6 ec 27 cf b9 30 0e 1b 1c 13 d6 e6 d9 df 5e 4e fa 49 23 94 e3 9b 2f 07 49 73 8c 83 53 7d 5e 68 49 cf 96 1d 12 90 18 c4 b9 16 95 f1 54 38 9a ef 61 84 25 ec f4 8a 32 3d 26 76 69 81 91 ba 81 d6 97 00 1c 38 1c 4b ae 46 18 f6 1b f6 7e 8f 3a f2 c2 fd a1 b3 ee 6d 8d 5f a5 9d 84 b7 6b d0 4f 70 a1 71 61 6a 42 cb 1a d6 69 9e b2 1c 5c 72 72 3c 31 96 a6 2a 11 16 9d e9 d1 a4 48 73 0b 94 91 ef 66 fd 05 8c b8 54 d1 2c 9d 89 28 32 11 97 20 80 17 0b ee e8 bf 8a 42 d5 80 30 1d 6e 1c ef 7d 56 c2 f3 47 44 df f6 58 37 1f 95 69 01 2d 58 4a bf bd 94 b2 14 e3 2f a8 c3 38 c5 70 22 9d 5b 92 17 02 2e 82 01 97 06 1b 46 ee a6 89 5d b7 e1 75 dd f1 00 56 f8 bc 67 33 3c 97 78 3e Data Ascii: VsVRIauBJ'0^NI#/IsS}^hIT8a%2=&vi8KF~:m_kOpqajBi\rr<1*HsfT,(2 B0n}VGDX7i-XJ/8p"[.F]uVg3<x>
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: bf 3c 83 49 4b 8d 3a ef 78 a0 88 72 2e 8e 2b 47 f9 6d bf d5 0f 22 d2 e3 61 eb da c7 b9 5f a9 ce 59 7f db 69 c8 80 76 5e d3 2f d7 ea 78 55 b2 b4 22 a0 41 64 22 10 f1 dd de 60 f4 ef 9a d4 78 d9 09 e9 87 e7 61 84 07 95 b7 26 72 1e 24 c6 40 a4 e0 75 64 03 0b c6 98 c4 73 59 51 d8 97 be fa ee 8d fe fd 82 4d b0 e1 1a 47 43 83 f8 22 ef f3 5c a1 8f ee ba 2f 99 37 c7 24 0f 11 ca 83 a6 32 94 21 46 21 5d 4e b7 3d 15 55 ff f1 ce ef ef 78 37 2f fe fa e7 95 1b f0 58 05 59 40 9c dc 4c c5 6a 89 6b 12 a4 b2 17 30 0a 6a 8f 5c a6 92 8b af 81 69 08 42 a2 2f 72 48 2e 1a 68 cc 52 e8 b5 fa 07 ac 5a 6e d0 a7 67 8b 80 f8 4e c7 99 fd 7c de 5e 5f 71 ee c1 cb 07 d3 fb 79 8e e4 39 0d 98 2c 65 93 58 1c 8b d8 3a 51 74 72 19 5d 8e dc 21 26 f7 75 ff 78 5d f8 70 f5 d1 ef c3 ce 00 82 d3 0d Data Ascii: <IK:xr.+Gm"a_Yiv^/xU"Ad"`xa&r$@udsYQMGC"\/7$2!F!]N=Ux7/XY@Ljk0j\iB/rH.hRZngN\|^_qy9,eX:Qtr]!&ux]p
2024-04-19 14:06:52 UTC	467	IN	Data Raw: ca 2d 8f f7 3e 57 07 01 b0 39 44 c3 14 bf 18 a3 0e 68 0e 78 5b 20 e1 4d ad d9 81 3a e9 c1 05 27 09 4e 36 82 00 71 1e 0d b4 68 94 e7 45 ab 82 60 e8 88 cd 9b cb ef e2 bb 84 9a 14 80 8e 48 99 b0 4e 2f 04 af 0b d3 0d a7 9a a5 65 36 a7 17 56 48 2b ce 74 fd 3b b7 bb e9 76 6b 07 81 71 ce 90 34 44 f0 da 4c 72 0d 05 b2 d8 a2 b0 08 63 de e4 d8 b4 31 e1 c2 a5 40 50 12 86 97 2a b5 86 e7 a5 9a 33 cb 2f 08 90 8b 97 64 f9 d6 b1 38 9f 0b 68 ac 4d 40 0b ae 84 dd 60 02 d2 07 f8 1f 3e 41 11 15 d5 5f f8 71 b0 95 5b 98 7b 26 1d 0e 1c 39 08 96 4d bd b2 cf d6 59 be 6d fc 76 95 0e 93 80 45 da 89 68 86 48 1b 42 5c ea 54 9e 60 d6 5e fd f7 9e f6 7b e7 dd e6 79 6e 30 e3 40 08 9e bc 90 96 95 bb 55 2c b1 55 6c b6 06 63 53 26 9c 12 db b1 95 47 5b 1f 0f c1 db 61 43 47 82 50 55 34 49 13 Data Ascii: ->W9Dhx[ M:'N6qhE`HN/e6VH+t;vkq4DLrc1@P*3/d8hM@`>A_q[{&9MYmvEhHB\T`^{yn0@U,UlcS&G[aCGPU4I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	50076	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	524	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10602 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:32:57 GMT Expires: Sat, 20 Apr 2024 11:32:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9235 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	721	IN	Data Raw: 52 49 46 46 62 29 00 00 57 45 42 50 56 50 38 4c 55 29 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 d9 91 b5 20 f2 ff 1f de b3 bb 67 ce 11 fd 9f 00 fe df 3a 62 03 11 e7 9e 07 ec 2d 12 80 64 43 c4 86 47 70 07 92 04 d2 84 07 6d 3c 3b e4 c9 ab bc 7e 9f 10 ae 2b b4 76 26 d5 11 95 6a cf 65 93 4d 4b cd cc 88 a9 8b cc 4c 5b 5d d4 9d b2 25 fb 17 e4 17 41 a3 03 fd 4d c1 e4 fb 36 7a 25 fb 1d f5 9f c6 ee 65 da 5e 7a 00 6c e9 35 d4 ba c6 1d 00 96 bd 2b 22 b8 80 ce de b8 2e a0 d6 7d c3 73 7f ec 02 72 64 db aa 95 46 02 20 ff a8 dc 6d d7 ab ef 8a bb 3f e1 32 fa 53 48 b2 6d ab 6a 16 10 c1 5d 5e d1 3a f3 1f 4b 9a ee ee ee 9e 82 14 49 92 23 c9 67 7a 14 8c e5 8f 64 21 c8 bb 0b 08 f7 d2 aa ff 13 80 55 73 60 f4 8c 9e f1 2f 2c e7 f5 05 00 0b 33 b0 d8 9c 46 65 14 ea 3d 43 bd 9a 43 Data Ascii: RIFFb)WEBPVP8LU)/?M@rH g:b-dCGpm<;~+v&jeMKL[]%AM6z%e^zl5+".}srdF m?2SHmj]^:KI#gzd!Us`/,3Fe=CC
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: fb f0 f8 f3 79 3c 1f fa 5f b6 8d 24 29 aa e3 4b f9 cc d7 67 f9 31 bc cb a4 98 00 4b d0 f6 2f 92 a4 64 56 96 b6 8c bb fb cc e2 ee ee ee ee ee ee ee ee 76 73 77 77 77 97 75 77 df 1d d7 96 ea aa cc 3a d4 4c 4f 55 ed d2 73 fd b0 3a e1 90 91 14 92 b8 bb fc 22 56 12 5d ef 88 c6 12 ed 13 0e 1d ff c0 7e b8 bb ac 27 2e 85 24 5a ab 13 dc dc a1 d1 53 21 cd 22 eb 7d c3 39 d1 6c 10 41 3b 92 24 45 b6 15 51 3d 7b e0 31 33 33 cb f8 ec c0 ff 13 e1 6a f0 a4 78 42 30 33 9c 73 f9 2e 4c 57 52 a2 6d eb 98 24 dd fb 3e e4 1f 11 7f 32 22 72 ad 18 b5 6d db 9a 19 33 73 d4 23 db b6 dd f3 1a f6 c8 56 d9 b6 cd 70 c4 1f f1 7f df 8b 09 c0 ec fe 9f 22 c9 76 32 eb c0 65 d3 ac cc cc 7e 04 7a 44 af ef d2 0f e2 87 f0 33 dc bd 99 67 26 73 d1 33 39 55 75 68 fb 35 2e d9 a1 bf d2 10 c6 d5 55 69 Data Ascii: y<_$)Kg1K/dVvswwwuw:LOUs:"V]~'.$ZS!"}9lA;$EQ={133jxB03s.LWRm$>2"rm3s#Vp"v2e~zD3g&s39Uuh5.Ui
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 8e 9b 7a da 3b 49 0a 7f f1 5d bf 5d 50 cb d1 49 41 58 1a 94 8d 8e ae eb a7 0c e4 3a 07 8e 2c 2c 0d c5 a0 5e e9 6c db 42 61 01 c9 fe d5 f7 fb de 69 30 9b 15 65 aa 2d a6 59 81 d5 0a ea e0 dd 4e 35 a0 23 47 63 a8 41 a7 a7 46 8a 09 96 2d 02 de fa 4b d0 29 ff ea 7e 33 69 bf fd 01 9f b7 6f bd 6b cc aa c2 42 91 ad 5a 47 6a bc 02 0e c2 0c 8d 4c 48 06 a8 62 86 4e a9 b6 50 85 86 22 46 9d b3 b5 d3 33 a9 93 b4 f0 fc 7f 9a 59 9c 13 00 71 04 df 6d d9 74 df 4c 86 f3 31 69 ce 17 25 a2 57 97 23 91 54 86 5a 15 9b 4e 6d d7 0d a2 08 db 24 68 fd 65 a4 1a 2c 20 f9 ff ff d5 bb 82 9a 4c aa 00 a2 71 93 2c cb a2 cd 58 e2 bb d8 23 e9 19 c9 8d 3e c4 1c 07 a7 03 e7 28 de c5 73 07 2c c3 48 04 63 d7 5a 4c 91 29 70 e7 6b 0a 6a 86 73 62 81 49 43 da b9 a7 0c 2f 34 31 43 f6 6a 73 72 97 61 Data Ascii: z;I]]PIAX:,,^lBai0e-YN5#GcAF-K)~3iokBZGjLHbNP"F3YqmtL1i%W#TZNm$he, Lq,X#>(s,HcZL)pkjsbIC/41Cjsra
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 6c a1 96 47 e6 70 cf bc 35 e3 4d 0c 8e 08 30 c3 21 91 00 e3 55 2a 00 27 34 3b 45 e1 19 0a 27 52 05 ad cf a8 b0 53 2a fb 84 ca 4e 09 03 f7 c2 0b d1 78 19 af 00 1b c7 d5 f0 80 97 cc 85 ab 49 c4 da ce f3 41 b1 03 51 47 8a ac ab 98 da 71 85 c0 42 f3 d9 6c 04 ca e4 83 ba ec 25 24 ac 61 10 28 a8 f6 34 48 10 20 6e 65 48 c0 88 28 00 9b 08 48 a9 b0 91 70 22 2a a2 f5 8e 00 12 95 49 00 01 09 d5 0d 02 43 00 1c 03 03 ce 71 7e 7e bd 79 c0 73 6e 28 6d 24 f6 94 82 8b 35 e0 e5 41 3a 2d 6b d7 1b 96 65 6b ad 95 48 12 90 90 ce e6 f3 2a 7a df cf 44 e2 28 21 f4 2d 05 a8 ea 94 b0 18 80 c1 64 c9 98 c7 3f bd 8a 61 77 46 1c f8 9b 9c 74 1e e6 54 36 08 68 bd cf 52 61 10 1f 95 ca 46 74 66 a4 b2 33 68 bc 02 38 47 7d 0e 45 33 c9 25 23 35 67 10 6d 49 ed 22 05 8b d2 4e fb 1c 2d 0b d9 54 Data Ascii: lGp5M0!U'4;E'RSNxIAQGqBl%$a(4H neH(Hp"ICq~~ysn(m$5A:-kekHzD(!-d?awFtT6hRaFtf3h8G}E3%#5gmI"N-T
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 39 e7 8d 75 37 f8 aa 0d e3 0d 68 f6 11 c0 ca 38 87 3d e5 42 20 84 32 59 82 49 90 18 2b 25 a6 72 47 90 78 10 c0 16 b1 20 12 0c be 09 e0 ee 2c 12 4e 89 95 84 82 d6 83 3a 97 cb 87 7d 2d de e2 81 2b e7 f0 40 4f bb 8a f5 f5 af 43 04 bc 0e 28 5b 3f fd d0 33 2b b1 6b 32 00 90 aa de d5 bb 7a 43 59 24 94 01 66 22 08 80 60 a6 a6 aa ba 56 56 92 c0 1a 98 a4 64 29 d5 ba 2e 48 04 9d 59 37 31 9a 15 23 0f d5 59 ed 4a 44 eb 00 12 fa f6 1f bc 4b 78 3f 18 1b 7a 43 12 59 dc 35 33 31 81 40 04 60 a0 e8 8d 89 09 23 6f 5b 54 ac 0b 52 45 00 dc 63 34 cb 75 c9 fc d6 45 b4 de 01 64 ab 9d 09 e6 f3 c0 40 8d 49 ef 95 de fb 17 b8 70 cf 54 53 43 30 73 dd 81 a0 7d b8 5c 78 e1 b2 18 ba 75 dd 86 75 01 55 44 eb 1d 15 18 6b dd cc 51 53 eb 24 60 b6 da 99 d0 bf e7 7f e7 a7 30 77 26 a9 ae be 3a Data Ascii: 9u7h8=B 2YI+%rGx ,N:}-+@OC([?3+k2zCY$f"`VVd).HY71#YJDKx?zCY531@`#o[TREc4uEd@IpTSC0s}\xuuUDkQS$`0w&:
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 15 c0 f4 b0 13 c1 48 be 03 db 13 90 68 5a a4 ca 56 4d 00 1b a0 cf 44 b4 71 04 76 80 13 9e de cb 21 04 39 f5 7b 8f ee 98 e5 b8 45 cc 38 14 90 b0 d1 03 12 54 e3 98 41 a3 3f 01 a9 dc a2 32 05 03 60 27 d0 67 88 36 8e 37 89 e1 c9 76 dc 13 da 43 10 6e f8 fa 7a 26 44 63 18 a7 e0 54 76 4a d8 20 ec 8c 68 f4 ce b0 70 aa ec f9 13 bb 05 e9 27 d0 3b 04 70 85 1d c0 27 a3 ec bd 59 4e 0e 01 f8 94 6d 0f 3a 93 af 0b 2f 30 54 e7 1c 2f 48 54 bd a7 a4 72 42 a3 f7 27 20 30 b0 e7 fe 37 28 95 35 8d 0d f4 3e 13 d1 c6 11 31 b4 f3 e9 3d c1 5c 57 76 9e 1e c2 f6 ac bb cf ec 2f 63 59 72 91 a8 e8 33 a8 0c 01 f4 27 20 61 27 d1 fc 09 4a 65 03 a0 09 30 13 d1 c6 f1 2a 31 74 46 10 5a 1c 8f cc 11 9f 78 ac bd 68 f5 2e fa 0c e7 b2 33 02 3e 33 54 d9 49 04 db c9 08 c7 ae c2 4d 00 d0 00 1d a0 31 Data Ascii: HhZVMDqv!9{E8TA?2`'g67vCnz&DcTvJ hp';p'YNm:/0T/HTrB' 07(5>1=\Wv/cYr3' a'Je0*1tFZxh.3>3TIM1
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: bd cf 41 43 b5 ae 4b de 6c 88 56 00 9f 32 4d 26 27 13 e8 1d a2 31 82 0a 60 83 08 b3 16 2f 7c 68 fd da 5f 2d b5 73 34 c7 c9 a1 02 ec 94 e0 62 54 bd cf 11 20 c1 82 88 d6 d2 dd e1 30 fd 63 8f c5 f0 62 86 33 11 8c 23 2a 86 db 33 a2 d9 a1 87 02 70 e0 5c 34 1b 70 05 e0 94 0a 93 2a fa 1c d1 90 6a 5d 51 41 4b 77 87 a6 3d 04 53 79 cc 79 e1 1a c0 24 d0 3b 11 6d 1c af 12 c3 8d 88 66 e7 43 1f 5a 0f c7 21 1d 0a 9a 23 ce 45 c0 89 0a 3b 25 3a d0 80 82 45 02 b7 c3 82 64 36 1c 02 64 4d ad 33 7b 3a 98 d6 4e a0 f7 39 80 f1 2a 15 d0 7b 7f 46 83 94 ea e1 38 a4 03 66 03 9b 08 d8 08 20 a5 ea 7d 8e 00 09 23 15 76 76 77 30 13 95 c3 20 f5 cd 8c fc 60 f3 c2 60 9e 52 09 f4 3e 03 ed 4f af 50 0c fb 1c 60 50 e1 38 a4 eb 39 e6 01 e7 22 98 53 2a 0c 2a fa 1c d1 90 ea 62 28 ec 3c 9f 69 5a Data Ascii: ACKlV2M&'1`/\|h_-s4bT 0cb3#3p\4pj]QAKw=Syy$;mfCZ!#E;%:Ed6dM3{:N9{F8f }#vvw0 ``R>OP`P89"S*b(<iZ
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 3a ea b7 e2 50 89 17 b0 eb 50 0a 58 7b 4a 15 9f e6 26 7a ff b5 c0 e3 38 ab 63 3e 7a a1 2c b0 d0 42 d5 b7 d1 cb ce 77 da e6 04 7e 59 7b 5d 77 80 19 c9 70 a2 86 f7 8d 46 60 ec 97 f5 b2 fc 95 d1 62 19 0e e5 b0 1e c0 cf c5 5b f5 f0 81 cc 3f 1d da d1 c7 d7 79 9b 91 3e c9 34 e8 a9 43 18 d7 88 f9 6c 56 03 79 79 2f 63 01 66 4c 63 7a 76 dd 70 6d 8d 49 f0 08 64 98 26 a2 51 f7 02 1c b4 33 6d 6d a8 e8 10 e0 9c 1c 5d 7c fb f1 c4 4e 3f a1 54 a8 87 a1 03 04 60 26 80 33 23 9c 2d 7d e6 2c 89 92 99 62 2f e8 ae 62 d7 04 69 7b e3 3d 10 01 73 6b 71 43 92 5a 98 c7 bc b9 9b ab fc 59 dc df 5e e1 cf 32 13 d4 df 9a d3 ec a8 37 63 1f ee 21 cf a7 f3 f9 34 07 33 98 94 ce f8 bb c6 ff 47 c1 9f 5d 86 03 a7 db 37 5b 18 01 13 09 6c fa b5 66 71 52 73 32 14 b9 b2 d0 cd 41 fb fe 78 1f de 83 Data Ascii: :PPX{J&z8c>z,Bw~Y{]wpF`b[?y>4ClVyy/cfLczvpmId&Q3mm]\|N?T`&3#-},b/bi{=skqCZY^27c!43G]7[lfqRs2Ax
2024-04-19 14:06:52 UTC	1096	IN	Data Raw: 0d b7 7a e3 a2 78 c6 0d 28 90 84 08 a1 44 2c 20 33 40 08 00 42 94 d7 7b 9c c5 c1 6b ad 58 a9 1c 88 57 3d 1d ba e8 7b 1f 35 ea 85 12 d5 c5 03 ca 38 23 85 7c 8e 1c bf 18 20 1a 9e 94 58 7a 96 0a 2e 96 a4 52 91 42 45 a6 30 02 11 01 58 bd e7 65 bc 40 62 4b 58 b9 02 d7 c4 0e a2 d7 e8 47 fc b8 4e 81 05 07 b7 cc 56 c5 0d 1f b5 1f 69 02 c2 8d b3 38 53 e0 32 4f 94 48 21 6a 6a cd 01 84 78 82 c4 4b 85 3c 32 85 9c 5c 04 4a 2a 25 7a d0 10 7d 9f dc 18 9e 5e f6 af 6a b4 4b 89 92 32 f3 dc bc 1c ad 24 6b 6c 8c 09 88 86 27 a0 a5 02 84 2c 45 94 86 c5 24 06 00 22 22 a1 f1 9a 62 ff b2 26 c3 13 dd 4a 34 20 89 12 54 92 cb ad 0f 51 b5 4b 89 dd c0 cc d7 d6 b4 b2 43 4d 36 36 66 32 24 16 a0 a2 4d 10 44 28 2a 8b 79 94 ae a5 86 2e 32 ba cb ae ac 59 68 a1 85 c6 12 7f 7e 6b 3e f2 45 89 Data Ascii: zx(D, 3@B{kXW={58#\| Xz.RBE0Xe@bKXGNVi8S2OH!jjxK<2\J%z}^jK2$kl',E$""b&J4 TQKCM66f2$MD(y.2Yh~k>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	50079	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1101	OUT	GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5298 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:21:03 GMT Expires: Sat, 20 Apr 2024 10:21:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 13550 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	721	IN	Data Raw: 52 49 46 46 aa 14 00 00 57 45 42 50 56 50 38 4c 9d 14 00 00 2f ff c0 3f 00 09 47 6e db 48 12 9c 2a 4f 75 60 ff ff c3 bd 24 35 db 39 a2 ff 13 80 bf 79 b8 36 0b 1e b5 28 44 94 e2 ed 7c 8a 9e 71 92 4e af e3 e8 10 cf 2b 33 b9 98 27 01 f0 33 29 49 24 e5 be 49 49 94 d4 11 a4 62 8e 0d 52 2a 62 46 6c 8a 47 2e 51 a1 b9 83 27 ec 81 32 81 b1 81 64 92 ec 9a 00 20 9c d3 2d 97 32 00 db b9 07 1e bb 6e 5b 1c 25 55 96 1f 9d 9d 85 ff 75 01 37 b6 6d 57 cd 1a 22 0f 77 88 08 7f a8 02 d4 7f 2d bf 00 b9 c8 7b 3d 73 f1 31 ec 48 b6 55 2b fd dc df 5b 4f 71 58 21 90 7f 4c fa e9 14 1c 49 b6 5d 35 8d 27 e3 e1 5f a6 91 8d ec fe 57 45 a8 4c fd 9f 00 09 57 b3 71 29 2d f3 fa b8 34 dd a6 cc d7 af f7 d7 c4 ce 44 7e 50 e2 f0 52 45 ec c7 e9 e2 b0 23 40 7d 57 f1 dc 9e 1a ed 23 dc 40 4a 29 55 Data Ascii: RIFFWEBPVP8L/?GnHOu`$59y6(D\|qN+3'3)I$IIbRbFlG.Q'2d -2n[%Uu7mW"w-{=s1HU+[OqX!LI]5'_WELWq)-4D~PRE#@}W#@J)U
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: ad cb b5 8a b2 ce 8a fd 00 c1 9d c3 7b 66 2b 92 1c 5b db d6 36 7a de 4f 92 39 cc 69 87 eb 59 ce 74 cc cc b4 02 2a c7 ed 94 b4 8a a9 e6 cc 06 98 99 d9 20 cb fe bf 4f 72 24 49 8e e4 44 66 cf f4 ec f1 3b 09 4e 14 c8 77 10 00 12 e1 c9 f4 e0 1c 18 d6 95 31 01 21 30 e8 ff 41 ff 0f 26 55 00 89 35 0f 00 17 63 02 22 9e a3 44 9c 79 a1 50 64 ce 07 62 dc 43 01 11 3f 25 97 f2 a2 15 e6 b6 c9 8b 87 4b 29 63 aa ec fa e7 da 5d 8e d0 a4 4c a9 7b a8 04 bc c8 8a a8 bb f6 ea ec 0f 72 b9 32 57 ab f4 bd 87 8b 40 59 86 76 9f e9 34 d3 d9 67 c7 f9 6c f2 cd 48 2c 89 27 0b f3 12 b7 0f 75 3b 13 51 0f fc f9 cf 0f 18 e4 d1 6c 38 6a 9d d3 2e a3 6c 16 e2 39 08 3c e8 10 0b 61 b4 70 c4 ff 22 38 68 a1 b3 ad 10 00 12 4b d2 11 ec 15 85 88 92 f0 2b e7 9f 89 f2 54 88 63 71 8f ff cf 02 41 69 18 Data Ascii: {f+[6zO9iYt* Or$IDf;Nw1!0A&U5c"DyPdbC?%K)c]L{r2W@Yv4glH,'u;Ql8j.l9<ap"8hK+TcqAi
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 79 7a bb f0 8d d3 fd 77 7d 74 50 9d ee 0f e1 9b e6 e7 ef 58 5d df c9 68 3f be f4 0d f5 e5 27 a8 ee 58 ea cf e7 d6 16 a7 c9 92 52 e7 14 cb 69 d2 7b 86 e3 8b c7 07 cb bb e9 70 c1 7b bd 97 c2 5a 4b 37 ae 4f c2 cd bf 5f d4 f1 e5 bd 52 f8 9f 3f 6d ef 23 fa e9 4d f6 aa 98 a7 ca 3c b6 4c 0d cc 26 10 8b b9 c9 5a fb c8 4f 51 95 3a 90 a5 60 60 6a df 13 19 a0 f7 88 7e e9 4f 1c 98 2e f3 fd 93 2d bb 5b bd 5b cc 51 d6 5f eb a9 54 ab 30 c6 08 57 d1 2d ab a3 bf 6b e7 eb c0 8e 3a 1f ce 36 ee 6c 82 58 59 c3 2d 67 57 dc e5 53 9f 12 31 58 a6 c5 ca 18 2b 12 dd 58 8c ad 1d b7 1c b8 64 1d 77 7f 55 5f 75 d6 ce ca 42 c5 c9 b2 de b5 b5 6b a7 c5 64 43 21 4b 81 e9 f6 a7 b8 dd 27 e6 91 75 a2 5f a1 6a 45 c1 58 1f d8 b7 52 3a eb a7 bc 0b 4f ff 85 fa a1 d1 40 bf 84 b2 ea 20 d6 07 76 db Data Ascii: yzw}tPX]h?'XRi{p{ZK7O_R?m#M<L&ZOQ:``j~O.-[[Q_T0W-k:6lXY-gWS1X+XdwU_uBkdC!K'u_jEXR:O@ v
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 5a d2 3e e8 85 d8 67 52 54 5b 64 ca 42 f7 72 d9 46 aa 98 0c fd 2c bc b2 32 51 37 04 d7 86 18 58 84 6e 74 bd 47 14 99 14 17 2b d3 5c 6c e8 69 ed a1 3f 67 d6 28 35 81 01 6b bf 74 6c bb ee 97 92 89 d1 44 f7 42 b2 91 32 31 16 a2 fb 32 fe d1 ca 2a a6 02 ac d5 66 46 27 47 71 fa 75 24 93 01 d1 cd 14 6a 1b 05 d1 8f ee 1c 38 d6 70 29 6d 28 f1 7d 27 f7 f9 47 7f 2e 5e 8a b5 73 10 65 23 1f 31 dc 32 da ac 98 2e fa 51 31 bd 63 47 39 be 2f c7 fd 20 56 0f a4 6c e6 8c a1 9b de d4 1f 2b 8e 51 4d a8 30 f1 f1 4b 7d 4a 7f a2 4d 67 22 8a c8 36 ba 1e da e8 ce 68 53 d6 06 42 89 89 d8 f9 24 97 ef 5f 3f 63 94 7e b4 d1 5e 8a 28 42 d9 d0 d1 8f ee 20 b2 84 28 c2 24 94 e9 9c ae 7d 9c df fb 13 fd 12 6d 28 f3 ba a1 fa d3 ea d4 8a 44 09 57 82 62 3b 13 aa 97 9b fd 48 71 d1 9d 1c 0a 51 5c Data Ascii: Z>gRT[dBrF,2Q7XntG+\li?g(5ktlDB212*fF'Gqu$j8p)m(}'G.^se#12.Q1cG9/ Vl+QM0K}JMg"6hSB$_?c~^(B ($}m(DWb;HqQ\
2024-04-19 14:06:53 UTC	812	IN	Data Raw: 75 fc 45 ee 2a d3 34 77 b0 3f d8 f2 1f 5f 0f 55 a1 e7 07 ba ae 8d ae f9 24 04 c4 83 b1 7b 14 ea 91 a9 7e c1 b9 c1 dd 1e 01 3c 42 56 15 57 d7 d4 14 e5 85 b2 5a 18 e5 19 35 d6 ae d9 f4 38 3f 0e cc 08 98 77 04 d2 de 21 43 23 6e 18 27 66 d8 78 78 d8 68 43 3d 1e 89 23 a3 7e 91 e4 ce da 5a 21 4c 52 1f 0a a1 6d 86 93 b5 4e 87 54 d9 d6 9d 58 c7 23 61 24 7a e6 bc bc 9b 3a 65 7a 87 96 4e b2 a1 75 74 39 a9 ab 28 0f 07 31 aa c3 3a fb 6f e8 64 2a a2 1e 07 66 04 7a 16 ce 77 83 45 65 d4 3c 39 f4 d0 2c 9b c6 7f 87 6c c0 90 b5 2e 84 d0 cb 35 cb c3 e7 d3 c7 1e 05 7a 24 3c 63 dc b5 b4 94 43 dd 33 7d 46 50 c4 7c 26 14 ff dd f2 ad 75 6d cc 0e 46 67 e4 51 40 47 e6 79 67 ee 27 19 e8 75 d6 98 8a a9 7b 8e a8 18 24 f5 b2 36 d4 5a 1f 38 1e 05 e6 cd cf f0 c1 5d 01 49 b5 a9 0c 4f b6 Data Ascii: uE4w?_U${~<BVWZ58?w!C#n'fxxhC=#~Z!LRmNTX#a$z:ezNut9(1:odfzwEe<9,l.5z$<cC3}FP\|&umFgQ@Gyg'u{$6Z8]IO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	50080	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1101	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10968 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 9596 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	721	IN	Data Raw: 52 49 46 46 d0 2a 00 00 57 45 42 50 56 50 38 4c c3 2a 00 00 2f ff c0 3f 00 09 49 6e 23 49 92 04 33 73 8f ee 08 f3 fe ff 83 63 ed 65 e6 1c d1 ff 09 c0 ff 7b dc 95 e6 dc 93 77 9e 24 ad fc 62 09 c0 06 f0 c0 06 e0 de 33 6d 65 1e b1 a6 65 6c a4 33 1e 30 f3 3b 02 60 25 e0 e5 8d 84 08 82 e5 09 c0 0d 29 04 09 32 33 6d 49 77 04 be 25 18 10 eb cc 3a 42 04 24 81 65 00 06 30 cc 33 00 35 31 a5 0f 23 c7 8b 99 fc 94 94 39 69 b7 f6 64 12 c8 a5 fb 05 0b 40 55 ef 03 ad bd f1 42 7d 8c d1 da 18 8f 80 c5 18 ad a5 75 c3 c5 a9 79 f1 55 37 55 37 0f bf ef 7f 71 01 b7 91 24 47 52 de d3 41 1d 2b f1 f9 97 15 ef bf 49 67 c0 6b 33 d3 ad 9d ec 34 92 6d a9 6a 76 14 75 e4 93 47 92 7f 54 fc 25 04 84 e3 48 92 1c 25 ef 0e cd e9 17 2f a2 ac c0 7f 93 30 a1 ff 13 40 82 3b fa c4 09 30 26 4c 01 Data Ascii: RIFFWEBPVP8L/?In#I3sce{w$b3meel30;`%)23mIw%:B$e0351#9id@UB}uyU7U7q$GRA+Igk34mjvuGT%H%/0@;0&L
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 5e 01 5d 3d 59 2c 13 3d 66 66 66 66 66 69 98 a1 a1 78 29 b2 3b b2 15 11 6e ff 2e 50 fe c2 0d 06 52 17 c8 0b b4 af 03 30 fe 7d bd f4 f7 04 62 69 c9 2d 91 5b ef c9 64 8b 71 d1 0d 7f 9f 5c 79 cc dc 3a 40 88 ae 20 d9 cc 52 9f 60 5c 3d 1d 82 4d bd 3d 81 dc 71 f5 fa 02 7b 00 5d 82 5d b9 58 ae 04 48 92 4c db aa 83 6b 7c db b6 6d db b6 6d db b6 6d db b6 6d f3 e2 d9 f6 7b 07 ef ca ad 6d 5b d5 96 b5 ce 7d 1f 99 3b 14 41 11 ee 12 d1 91 35 42 ce a0 06 77 77 22 77 d7 8f fb ee 39 31 01 7a ad fd 57 65 eb 56 6a d4 5c df 76 77 39 b8 bb 44 ee 0e 11 b7 c4 f5 91 11 bb fb f1 73 3e 9b 35 82 b9 36 ba 17 f1 8b a4 3b c3 21 de f2 0f fe c8 48 ff 58 b8 2f 61 e0 cc a0 92 8e 8c b0 1a 29 19 79 25 85 33 83 91 ac f0 ac 10 5f 8d 4c 57 80 3b 3f 24 a3 9d 94 cc 9d 9e 74 5c fb 55 e0 85 7b 05 Data Ascii: ^]=Y,=fffffix);n.PR0}bi-[dq\y:@ R`\=M=q{]]XHLk\|mmmm{m[};A5Bww"w91zWeVj\vw9Ds>56;!HX/a)y%3_LW;?$t\U{
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: e5 43 95 28 29 d4 0c 06 f4 bf f2 9a 67 d7 ab d0 6a 90 36 5d 49 cc 90 89 9b 10 66 88 19 2c c1 e2 fc 1a ce 50 0b ee 0c 51 0b a9 f3 60 a9 33 be fd ed 4e 97 92 c9 27 a8 50 f4 11 aa 93 a2 44 81 51 97 83 a1 8c 8f 32 85 4c 6e 84 30 23 a6 90 29 cc 88 e9 40 94 85 83 e0 85 28 61 95 20 47 46 06 58 14 54 14 29 8a 28 58 c5 7e 1c ae 0c bd b6 90 c9 4d 70 33 45 26 61 11 16 ac 1c 88 5a 48 11 1e 43 8a b0 ca 36 85 8d 01 26 05 07 4a 8a 12 45 55 30 58 e8 8d 32 b0 42 26 84 1b 53 04 61 11 99 44 66 21 2c a4 08 2f 84 12 56 09 29 56 d9 82 21 0a 0e 8a 14 25 8a 0a 18 1c 3c 93 22 c4 a3 b0 10 b1 9d 21 66 10 21 93 30 6f 48 59 48 11 6a 91 12 56 11 52 ac 69 60 02 43 85 12 45 71 a0 c2 00 0e dc 40 09 85 b7 24 07 41 01 84 0b e4 51 40 8e a0 00 c2 05 37 e2 b6 29 82 45 5c 9f 62 d9 55 45 41 0c Data Ascii: C()gj6]If,PQ`3N'PDQ2Ln0#)@(a GFXT)(X~Mp3E&aZHC6&JEU0X2B&SaDf!,/V)V!%<"!f!0oHYHjVRi`CEq@$AQ@7)E\bUEA
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: b2 94 5c 3b bb c8 d3 29 5a 87 03 9f 17 0e c2 0b 52 c2 aa aa c2 41 89 a2 70 50 14 45 0c 60 40 ca 95 1f 79 bf 37 bb c3 cd cf ad e1 c0 91 9b 17 0e 84 17 a2 82 55 86 07 25 85 c2 41 51 94 28 30 cc 8a cb ae 94 ca a4 20 26 07 33 3d 8a 8e 58 0a 19 96 75 2c c9 94 8d c6 6c b6 e6 27 53 c8 d6 c2 f4 8e d5 d7 e3 fd f5 f5 dc 8f 8b d6 8f e0 09 38 10 8f 21 2a 58 25 38 50 52 28 0e 94 42 45 81 61 96 6e 6e c4 15 84 bd 60 4a 00 8f 7c 5b f7 3d e1 63 6e 45 27 54 06 74 00 84 44 67 b6 c2 0a b3 6a 95 ce b1 58 cd b0 cd f8 37 1f cc d7 d3 3c da 91 53 0c 29 6e fc 56 84 c7 90 12 bc 10 39 0e 4a 0a 85 83 a2 28 51 30 8c a6 54 c4 15 06 be 8d f8 c8 1d 76 70 ff e3 76 a0 05 36 12 c1 d3 44 45 b4 88 85 a8 4d 4f b0 7a 97 f0 2d 5e ba 92 7a 76 4a 3b 82 b4 90 20 8a f0 18 52 c2 2a 41 a1 a4 50 dc 19 Data Ascii: \;)ZRApPE`@y7U%AQ(0 &3=Xu,l'S8!X%8PR(BEann`J\|[=cnE'TtDgjX7<S)nV9J(Q0Tvpv6DEMOz-^zvJ; RAP
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 4c 68 b9 9c 31 e2 7d d9 c8 aa 2c 33 16 0f be d8 08 fa 59 d5 89 ff c9 a7 c0 a5 c3 5e c0 8a d2 80 60 17 11 98 10 66 10 f2 e1 2c 29 d7 57 a0 28 52 cc 23 02 b9 b6 47 90 05 b0 e7 2c 50 99 87 5b bc 19 1e 94 65 74 25 24 17 06 44 29 94 28 29 52 9c 3a 9c c6 b1 dd 11 98 9f 4a 8a ca a0 28 9c ae 7e c1 97 45 be 08 41 52 e9 8c af b9 c4 fa 4d 6b 41 1e 6e 78 11 0d 0b 45 2a 97 02 9f 9d e2 2b 28 72 98 43 89 88 9d 6c 86 d3 38 54 a5 a8 78 f0 89 b3 7f ed f9 f5 cb 56 57 57 48 b9 e4 53 a9 81 69 2c 6c cc 0a bf 94 39 c0 a6 5a 51 91 cf ec 29 da cd 09 11 41 44 4a 34 b9 b0 0d cc 1c 29 2a b0 36 a1 04 27 85 8a f2 7a cc af 3e de 7f d5 e4 76 ad 63 ad 23 59 a9 64 53 38 8e 05 72 ad f2 73 4d 12 0b 51 49 97 4f 46 4e a5 14 79 69 c9 c3 61 47 bb 36 64 42 51 51 ee 5d 02 b1 bd fd 44 b3 f8 d3 7c Data Ascii: Lh1},3Y^`f,)W(R#G,P[et%$D)()R:J(~EARMkAnxE+(rCl8TxVWWHSi,l9ZQ)ADJ4)6'z>vc#YdS8rsMQIOFNyiaG6dBQQ]D\|
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 60 1e 94 c9 c0 26 0c da 9b 21 91 09 0c e5 93 d6 b2 fd 0d 32 9d e0 61 1a 92 87 fe 9b 7f 0e cc 6b 4f 38 13 59 fc 43 0e db f1 48 82 a7 05 a3 5e 9a 8d d7 87 b2 28 3f 72 45 7f 24 f7 3a 74 20 89 ea 44 b0 10 82 19 79 ca 59 52 78 a1 38 00 9b 30 16 76 65 61 0b 59 18 db a3 c7 21 1d a4 63 be a3 a0 3d ca c8 8b 86 31 01 42 a2 93 e1 4d 5d 2e 72 89 82 7f 3a a7 b7 3c 59 c5 8c 12 89 05 c6 82 24 76 9b 10 2c c4 60 11 6f e0 0b 7c 6d bf 90 29 e6 c1 b7 ce 14 8c 49 b5 1f 57 03 76 5a f7 34 0c 92 09 25 d6 21 c5 dc e9 9d 05 33 2c ec c6 43 9a 98 82 25 01 3f 37 8f f3 fd 8f ba f0 9e d6 8e 74 8c 34 13 f3 1d ba 83 29 73 9f 82 70 97 25 ac 3f d0 7d 7f 24 16 0e 1e 83 a8 c0 6b 7c c0 73 c7 81 2d 19 98 7d 2d 32 49 99 b6 2d 25 fb 1d 06 cd b9 68 86 bf df 1e aa d6 3f 7f d7 4a 39 85 af 6f 7f ca Data Ascii: `&!2akO8YCH^(?rE$:t DyYRx80veaY!c=1BM].r:<Y$v,`o\|m)IWvZ4%!3,C%?7t4)sp%?}$k\|s-}-2I-%h?J9o
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 48 88 2d 01 a6 84 a1 34 7b 3e 26 6d 30 c7 dd 30 21 de 18 1b 31 9d c0 d6 36 4d d3 dd bb 2f 60 3e 2a f9 98 f4 d9 f9 b4 4e 83 ed e0 ff f2 55 ce cf 5e d1 3a 4c 75 9a 86 61 02 58 b7 be 06 c9 24 46 87 7d e4 41 5b 1c 1f d2 72 00 6c 65 6d 55 8b a7 37 42 71 89 23 0b 69 88 e9 cd 1b ff b9 de bd 37 3d 7c b8 5e 94 0e d3 2f 7c 19 7e 9c f2 91 69 ef fc 25 77 90 75 ef 45 e6 3b 3e af 7e a5 6f 32 d4 c1 cb 30 4d b7 93 b6 b4 9a db 56 60 48 a9 11 39 c2 b1 58 db 3b 61 22 9b 56 d4 41 8b 26 97 c0 45 b2 d6 1a b3 d9 63 9d 22 ca c6 33 d1 7f 11 b3 ba 24 87 1c 06 99 a2 e1 9c 3e 96 1f 9d a7 9f 91 97 9f 35 3f db 9c de 6a 97 c2 57 7a c7 b7 fb 50 5d bd 64 cf bd 57 b0 85 20 16 75 27 d6 4e 44 f2 ce d9 1f 0d 6b 00 b9 81 0e 25 41 a2 0f 1f 3f 2c d0 d0 3a 78 23 7c f5 89 75 b7 5d ed c2 c9 c7 1c Data Ascii: H-4{>&m00!16M/`>*NU^:LuaX$F}A[rlemU7Bq#i7=\|^/\|~i%wuE;>~o20MV`H9X;a"VA&Ec"3$>5?jWzP]dW u'NDk%A?,:x#\|u]
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 46 13 76 b9 2d eb eb 0c ba 2f ec d2 a2 73 7f ad ff e5 43 4a 65 ae 0e 78 42 b2 8a 63 48 ee b8 fd 71 cf 94 f4 d0 c1 a6 24 63 a9 7f e0 29 fd 6d eb eb 31 c0 00 13 08 d6 5e a2 80 90 eb 40 27 41 8e 5b 2e 77 ac 38 75 9d 76 f6 8a d3 cf 95 12 7b b1 2d 32 e4 29 6b 97 4f 07 79 3a d0 db 85 76 5b a8 4b 58 d5 63 34 b7 9a 23 12 56 b1 47 c6 9e 6a ec b1 ef 69 15 4b 93 1b 93 c1 f0 41 7f e0 89 f2 8c 25 6a 78 08 cc 83 ac b3 83 30 50 72 fb bc d1 0a 6c 2e 4f f3 1d 0b 3d e6 c9 be 53 b2 1a 2c 2a 32 37 81 15 c8 4e 18 ae f5 d1 17 db 85 c1 af d5 91 5f da 32 ed 3a 76 16 29 6c f3 70 1e 0b 7b ef 41 82 02 c3 ef 6e 19 8c 0a 6c 6f 21 4f dc 39 27 1c 60 2c 20 e5 21 39 10 45 8c 42 28 09 37 49 c2 c9 85 7e 67 cd cb f3 49 b7 fe 52 2d a5 6e e5 b0 67 54 60 25 65 79 8c d5 19 89 7e b9 69 ee d5 52 Data Ascii: Fv-/sCJexBcHq$c)m1^@'A[.w8uv{-2)kOy:v[KXc4#VGjiKA%jx0Prl.O=S,*27N_2:v)lp{Anlo!O9'`, !9EB(7I~gIR-ngT`%ey~iR
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 8e 64 49 3c b8 39 ce 72 42 87 e3 33 54 d4 c6 a4 94 33 ba 28 95 b6 e3 e4 a8 02 07 30 f8 03 3f e4 c9 f8 25 95 5a 7d ce b9 27 a4 15 45 a7 cc 9d fb 9f f3 e6 07 03 b6 ab 06 7e 50 1a d1 83 7d 6f 1f 14 d2 81 f2 a0 74 b8 d7 ac 79 0c 53 4a 19 6c d8 6b 8e ec b3 cf 7b 71 a4 ca d1 62 3f e0 0c e5 d8 50 93 42 9f 27 62 06 87 c6 68 67 64 a9 df f9 19 66 91 f0 d9 26 69 f3 ac a7 7f 6e 40 cb ea c6 12 de 7c 56 0f bd 58 72 99 92 0c 2c 0a 79 eb 20 83 1c 25 ad fd e0 29 8c 9a 82 31 60 ae 9a 85 a3 6c 9b ca a7 b3 08 45 28 98 0e a8 a8 d3 a1 ac a6 3a 62 56 eb 83 af ae 77 bd bd 26 9a 64 47 5d b1 cf b9 e2 dc b1 5f 83 da dd 5c 94 05 39 a6 fb d5 aa b3 c6 23 ef 74 70 cc e1 80 39 b2 19 99 66 0f c6 60 ac 41 4e a6 9c ad 21 95 38 51 0e f2 5a 84 b4 28 42 5a 52 52 f2 6d d5 68 e3 01 b0 ca 83 ff Data Ascii: dI<9rB3T3(0?%Z}'E~P}otySJlk{qb?PB'bhgdf&in@\|VXr,y %)1`lE(:bVw&dG]_\9#tp9f`AN!8QZ(BZRRmh
2024-04-19 14:06:53 UTC	207	IN	Data Raw: 68 b4 67 19 be b3 78 ee e7 e7 ce b3 6f a6 e3 72 c7 cf 6a c7 7d 5b 7c 03 77 0c a3 3b 1d f1 f4 14 ef ee ee 7e ee e7 16 91 0e 3a 3a d2 a4 75 e8 f4 d3 b3 a7 de b4 74 36 1d d2 d2 3a 8d 48 37 d2 4f cf d9 b4 e8 a4 e9 6c 3a a3 8e 6d ba 3d e9 90 6f 3e e5 5d 46 f2 cd 7c f3 e9 49 10 1d 5a 74 b4 74 3a 8d b8 d8 82 86 18 b7 6d e8 e8 68 c3 74 34 82 de 18 35 69 a1 d3 3c f7 73 9e e2 5d 9f 8b 3a 36 1d 5a 3a a4 0d 5b 3a 3a 74 c8 73 5a 3f d1 b1 6d 41 0b 3a 9b 86 74 90 e7 f4 53 eb 0b 74 3a 2d 1a dd fd d4 f2 ae 23 22 1d 3a 3a 3a 9d 0e 3a ee dd d1 b1 ed 6c 3a 1d c3 16 1d 0f d8 71 b9 49 c7 b8 a3 d3 2d f4 bb ef af f8 bf cf ff 7d ad 04 00 Data Ascii: hgxorj}[\|w;~::ut6:H7Ol:m=o>]F\|IZtt:mht45i<s]:6Z:[::tsZ?mA:tSt:-#"::::l:qI-}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	50081	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1102	OUT	GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 41480 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:37 GMT Expires: Sat, 20 Apr 2024 12:46:37 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	721	IN	Data Raw: 52 49 46 46 00 a2 00 00 57 45 42 50 56 50 38 4c f3 a1 00 00 2f ff c0 3f 00 09 88 91 e4 86 6d 06 80 f1 87 07 ad fe 0b a6 9c b4 10 d1 ff 09 88 93 11 fb 99 01 06 92 99 91 b2 33 9b 4c 38 e7 44 64 26 33 33 cc 6c 8e 21 7b f2 86 ca 43 be ec 4c 66 6e 4e 42 66 fc 48 07 a8 93 99 19 c3 5b 4f 66 e6 31 38 06 98 ac 31 6d b4 3d c0 c9 cc 99 f1 e0 2e c0 16 b8 0d d2 b0 63 32 3b f3 b4 f6 03 7b ec dd b5 1b 90 66 a6 39 e9 cc 44 0a 0d 70 b5 b9 3b 27 ba cf e4 35 46 12 38 76 eb 01 81 ed 47 ea ee 04 a6 17 4c fb 91 bc 00 5d d9 20 a9 79 f1 de 06 a4 45 ed 32 b0 3c 99 09 cc de fe f1 d0 76 bf d8 4e 4a e3 dd b5 1b a0 1d 4f 7c 1e ee af 6d 03 11 11 6d ef 2e b8 fc 3c e8 c5 75 fe f0 3c 62 77 ed 63 00 09 9e f2 49 c3 e7 42 62 b5 b6 9f 8b 07 6c 7b ed 3d 11 b1 e8 76 f9 e1 76 45 d4 d7 9f 9d 19 Data Ascii: RIFFWEBPVP8L/?m3L8Dd&33l!{CLfnNBfH[Of181m=.c2;{f9Dp;'5F8vGL] yE2<vNJO\|mm.<u<bwcIBbl{=vvE
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 38 6f 6a 22 bc 34 6b b1 16 21 44 01 61 b4 c0 57 1e 78 e0 27 f9 eb 1f 3f 09 8d 7d 06 53 03 97 f7 87 3b 35 a9 36 65 a5 7f 5e ff 6c 3e f0 c6 03 2c 09 21 04 84 13 8d e4 dc 3c c0 c3 9d 4c ea 8e 72 e1 fb ca b1 43 6c a0 20 00 05 73 07 9f 06 44 96 ec 97 76 4c 79 c8 ae cb 6a ca 92 1b dc 71 47 b9 2c 00 01 81 c2 7e 86 ff fc a4 d1 08 a1 17 91 18 c6 f0 4e ff 7e f3 ca 96 46 e3 a2 ea b5 59 3a a4 50 4a a0 28 14 1c e0 40 08 0f 34 c2 d6 a0 4d 7a 76 91 59 9b d5 9c 71 3f b3 fe 3c f1 13 73 e6 cb 00 28 90 02 00 a5 ef e0 fa 33 e1 85 17 42 d8 ce ae 5e be b6 07 8d 46 9b 75 31 6e b3 b8 59 3c c4 cf b3 c7 f3 b1 05 0c 03 86 f3 0c 3b 7e f2 70 b4 fc 68 cb 9a 07 1a 2d ba e8 fa 3e 58 4d be 1a 2e f6 ab 0b 0b 25 1d 21 20 a0 14 14 00 9e ef 11 7b 12 61 cf 9e d0 da 2e 4a 2d 8f e6 c7 00 c0 05 Data Ascii: 8oj"4k!DaWx'?}S;56e^l>,!<LrCl sDvLyjqG,~N~FY:PJ(@4MzvYq?<s(3B^Fu1nY<;~ph->XM.%! {a.J-
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 68 d2 d8 70 d2 49 4b ac 07 6d 28 5c 57 20 78 68 d0 25 96 41 a7 60 c0 9d 54 b0 e6 2d c8 d2 84 07 17 5d 70 d3 58 74 c1 3f dd 87 1d ac 0d 45 75 03 c7 9f 93 34 17 4c 1a cf 23 b4 03 2a e5 27 3d d7 20 53 54 de d0 6c 98 74 27 6c b1 1c 74 6d 28 98 4b 5e a2 de 1b e8 4d d3 12 0c 9a 30 e4 95 83 1e 0b fc d6 b6 ed da 95 6d 5b a5 d4 36 00 ac 88 d8 9c 33 89 6f 07 b6 01 5b dd 56 70 af b6 0b db 9f ad 6e 89 13 69 11 60 8e de aa df da b6 55 db b6 6d 2b a5 5c 27 e3 66 26 07 18 9c 40 7f d0 b1 ed 08 4b 5b da 2a 9d 33 69 8d 9a 62 02 fe 83 be bc 80 67 30 ff 64 00 cf ee 62 a4 08 17 f1 4c 9e 54 7a e2 97 df 80 27 67 31 af 12 3c 85 9e 26 4f 75 59 cc af cf f1 34 56 a6 62 85 1f f0 9c df 41 cf aa b5 95 a0 98 56 2b e0 12 3c ef 29 80 7a ea 2e 43 c0 63 45 ef 6f aa dc bf d3 00 7e 10 f0 00 Data Ascii: hpIKm(\W xh%A`T-]pXt?Eu4L#'= STlt'ltm(K^M0m[63o[Vpni`Um+\'f&@K[3ibg0dbLTz'g1<&OuY4VbAV+<)z.CcEo~
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 71 02 4e 90 81 df 67 02 c9 ce ac 1b b3 cd 43 e0 6e 48 0f 01 cc 34 e0 97 17 a0 77 90 04 18 2f 14 c2 13 3a cf 36 43 bc ef e7 1c e9 98 06 21 17 50 3c 5e 98 5f 69 9a d3 07 16 80 27 98 6b 9d 82 1d a8 3c 1f 7d 1d cc 6b 93 58 ee d5 5f 34 01 19 90 9f 2d 13 63 ae 0c 17 24 42 55 98 1e 00 51 00 1a 33 aa 19 3d 84 38 1d 63 07 84 c0 93 0a 60 e6 cd 34 68 81 06 02 7a 4f 67 79 80 e7 54 2c 16 c0 cb 83 fb e4 22 d8 8c 26 7d dd 27 68 a1 2f b1 1d 00 b7 e7 15 60 f2 b4 76 a6 2b 5a b8 fa 85 a9 4b 13 68 0b 86 fb 70 bb 37 ab b0 58 6b 02 99 78 b4 09 9e a9 02 01 ca 09 81 0d cb 36 10 40 cf 03 e8 00 9a ac 2c 16 9b 99 b5 bb f1 8c 06 d4 dc 0b cb 09 c0 cb bf 32 26 b3 69 13 8a 00 02 88 a8 5a 30 62 3a ee af 45 48 d2 19 c0 1b f8 8a 5a 6a 70 c3 0f b7 0e 88 6d 81 46 72 74 db a8 4b f4 6e c0 d0 Data Ascii: qNgCnH4w/:6C!P<^_i'k<}kX_4-c$BUQ3=8c`4hzOgyT,"&}'h/`v+ZKhp7Xkx6@,2&iZ0b:EHZjpmFrtKn
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: b7 5c 53 33 05 5e 00 cc 6c f3 84 3f 79 8e 39 6b 65 70 22 b9 b0 00 65 b2 35 48 e0 40 94 54 25 50 35 de 05 07 85 80 48 20 a6 1d 30 57 0a 39 62 b6 07 3f 1b 03 e0 02 8b 69 6e 80 d3 6a 42 05 15 40 a0 04 af ba 4f ce 67 73 f0 64 bd 00 40 9a a4 d8 16 0c 61 fa ba 50 81 c1 34 87 16 6a 21 41 13 91 b9 95 79 a5 06 90 bf f5 ef 11 02 4f d4 6c c8 8d 83 12 48 4c bf 50 7f e3 46 bf 8b a4 0a f4 00 4f a6 32 90 89 c0 62 b1 3a 78 30 0d 0f 4f 08 c0 d8 98 5a 10 4f 28 64 10 b3 2b 4b 7d 9b 5c 5b 73 40 cd c0 2b 77 c2 18 63 30 2b b1 fc c5 cc 6e b6 41 f6 9c 68 e7 24 bc 10 3e 43 43 f7 9a 48 13 56 21 76 6f aa ff 95 e7 7f e6 d1 3f a5 fd 21 09 15 43 55 01 14 a8 b2 11 40 ef c0 57 01 05 d8 42 c6 73 1d 1e 9a a3 59 9a 14 df df 3e c4 9b 32 91 37 33 5b c1 f0 b8 4f be 03 2c 2c be 4c 2a 90 25 67 Data Ascii: \S3^l?y9kep"e5H@T%P5H 0W9b?injB@Ogsd@aP4j!AyOlHLPFO2b:x0OZO(d+K}\[s@+wc0+nAh$>CCHV!vo?!CU@WBsY>273[O,,L*%g
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 90 09 54 ad 0e 20 94 23 b1 96 84 77 a6 27 b3 15 3d 73 c6 40 9f 41 3f df ad 49 dd fb 73 7c fe 13 b3 59 d5 cc 84 04 90 be 32 7d 03 fd 86 02 c5 00 78 58 50 cc 0b 75 e6 3e 75 91 7f 22 99 69 c5 02 70 77 9f 01 6a ae 60 44 05 cf 8e b2 a1 07 b0 8c 82 c8 6c b9 d5 9d 37 af 5e 5e ef 74 b9 5d 8a 9b 53 9a 87 f1 a9 d4 c9 66 33 d1 ae 1f f5 cd 0a 8d 39 e2 92 56 7d d9 22 fa da c5 86 6f 1a 14 d3 cc 73 25 94 94 fd cc 7f f9 5b c9 df cd 0a 96 9f 69 77 e6 bb 59 f4 5d 2c bf 55 cd ac 7a 32 9b 16 3e a9 c1 90 8c 13 f0 83 69 26 12 6c 40 ff 31 9c 7a 11 33 89 04 63 50 66 5e 63 d3 64 55 a8 f1 be 1d 2d 45 62 33 9f 0d 30 aa 6f fb f0 da aa 7a 29 ac 7e 3c d1 ed 22 d5 55 0a 73 bb 4b fd 28 86 4e 78 ed 46 6f 17 a4 68 d0 c6 8d 94 cb b6 35 f4 bc 8f fb 85 b0 1d c8 5d 96 92 50 fd 7a 54 93 b4 7d Data Ascii: T #w'=s@A?Is\|Y2}xXPu>u"ipwj`Dl7^^t]Sf39V}"os%[iwY],Uz2>i&l@1z3cPf^cdU-Eb30oz)~<"UsK(NxFoh5]PzT}
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 1e 8d 62 d9 14 30 98 06 04 d4 e0 3b 30 27 63 04 3c 93 9a f1 dc 56 93 d9 0d f6 60 0b a8 30 40 28 e4 a3 24 ae ae 9e 42 08 06 f0 6c 2c 6a 5c c0 7c ba a8 b1 af e0 7d f4 83 69 c7 20 a4 2a 02 45 f3 45 d5 d9 6e 7c 49 52 25 5b d2 07 d4 85 6e 9e 83 67 96 0c ad c0 65 19 41 f6 b1 49 dd 4a b0 be 58 21 74 ca 84 14 18 3f dd 27 dc 19 7d 36 1e 30 0e 3c ce 1b fb bd 5c 1d ec 4a af 81 20 20 01 76 5a 03 0a a8 d5 f0 8e 65 40 62 fe 84 7c 99 21 18 4f c2 6c f1 3a 11 68 a1 00 e4 c7 04 0c 60 66 eb ba 8f ec 74 f1 b0 00 ec 7a 79 9d 4b ff 10 e9 73 e5 96 8c e3 04 34 76 24 7a 83 38 e8 35 c1 26 6f b0 b1 4f f7 83 ad d9 95 e9 f6 c6 61 d7 88 ce 7a b4 3a 80 87 2d a3 b3 69 65 6a 3f a9 69 b2 67 98 2c ed 76 5d 7c bc 9b 91 99 99 ea cb 50 c4 c1 d8 c7 78 fd 7e 2a dc dc 3f fc f5 63 3d 78 3a 99 42 Data Ascii: b0;0'c<V`0@($Bl,j\\|}i EEn\|IR%[ngeAIJX!t?'}60<\J vZe@b\|!Ol:h`ftzyKs4v$z85&oOaz:-iej?ig,v]\|Px~?c=x:B
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 0d 62 81 19 83 31 66 c6 18 c0 60 58 70 48 62 b9 cc 72 27 1d 76 fb c4 90 c6 36 09 fb 14 6a 12 b8 86 9f fe 92 41 6c a5 15 8b 8e ee 5a 48 0b a7 67 af 6b bf 05 bc 8e db d2 5b b6 4d 32 c1 2f 7d a3 b5 ad 4e db e4 dd 53 97 7d c6 0a 9f 57 c9 2c 55 41 b6 71 99 d5 21 ec 02 7f 0b b7 f8 07 7a a3 98 88 fe 5e 74 64 60 cc 75 da 85 7a 0d bc 04 9f 02 c7 c3 2a e6 6f 0d 7b 6c 8c 81 d9 70 c1 fa 68 40 d5 49 ff 3f 7e 01 09 0a d8 0a 7a 67 d6 14 d3 15 8a 2c 4d c5 b4 53 33 d3 5f f7 2d 00 32 4f 01 63 8a de c7 00 b4 e9 78 53 e7 4a 89 53 73 4d a2 c1 0f 5a d7 f7 55 ad 4a 80 88 01 21 55 1d cd b9 3d b9 76 1e 2f 7b 21 5e bd a7 87 15 e7 32 e6 a2 2e 82 0e 8f 48 64 bd db cc 0b ee 08 38 a7 14 82 52 87 51 0e 7d 86 b1 3b f7 d1 9b 2e e1 04 95 28 ee 3c eb b1 5a 32 c1 ae 75 95 a9 b7 d3 ed f6 a6 Data Ascii: b1f`XpHbr'v6jAlZHgk[M2/}NS}W,UAq!z^td`uz*o{lph@I?~zg,MS3_-2OcxSJSsMZUJ!U=v/{!^2.Hd8RQ};.(<Z2u
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 6b cd 7e 1c 22 3a da ec 24 b7 f7 f7 f7 74 85 44 96 83 b5 b7 5d 67 d5 37 47 12 c0 fb a6 db ec 6f 8e 7d 21 03 23 b4 da 98 e2 ae ba 07 5d ce 35 39 41 80 c2 fe d6 50 c6 c0 1d 56 5e c0 26 bf c9 3d f0 cb 32 a1 90 14 8c e1 b4 86 14 78 c4 56 87 de 13 99 8f 6c 6c 21 a1 1c 98 14 15 b6 af c0 31 02 c4 84 4f bf 76 59 e2 5a a7 13 51 95 17 5d 7f a2 11 58 e4 10 7c 6b fb 60 68 6f 04 58 aa 4b 05 2b c6 31 3b f5 3f 5d 2b 5a 05 ad 98 4f 07 30 d8 cd e2 d6 bf b5 14 51 2c 22 06 6c 4b 66 50 c6 72 5a e9 0c dd 8b 7e f3 70 63 4c 5f a9 45 3a 8c 32 75 0a 2a f8 58 6d e2 00 68 88 84 2c 67 ba 78 54 47 56 7a 1b bc fc 5e 71 cc 9a fc c2 54 d6 50 16 cd 66 63 2e 85 78 30 bd b0 b0 20 45 20 af fa 35 14 c5 44 6f e9 24 0c bb 54 ae f5 c2 b4 f9 2f 36 ff ff c9 1a d0 6b 63 b8 81 e5 f4 02 5b d0 a1 03 Data Ascii: k~":$tD]g7Go}!#]59APV^&=2xVll!1OvYZQ]X\|k`hoXK+1;?]+ZO0Q,"lKfPrZ~pcL_E:2u*Xmh,gxTGVz^qTPfc.x0 E 5Do$T/6kc[
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: ae 73 cd ab c7 db ff 66 b9 0b 65 11 59 a9 ee 5c b7 14 08 10 4a 96 9e f2 29 00 9f 27 60 cb 0d 9e b9 76 c0 9e 74 e0 2b 08 f0 c7 fc 88 a5 87 dd 23 c6 3e dc 7c af 0b fc f7 f3 f9 17 bf 31 c3 77 6d d8 7b bf 6b 8b 8e 63 cb e1 7a ef d1 92 74 44 1c 5d e3 c4 5b da e2 58 19 1d a5 a2 59 4a 4d d9 f0 13 75 bc ad f5 f2 93 20 ca a3 56 1d fe 4c 71 f3 35 61 91 87 08 3a c2 69 21 06 27 30 b6 14 43 d4 cc 73 4c 1e 65 1a b2 a8 55 83 0e c7 80 04 6b 29 d2 bd 7a 86 63 8a 05 b3 fa ba 2f 2d 09 a3 f7 b6 50 40 00 90 c0 17 25 d8 b5 7d 3b 5a 8d ff 7e 31 47 2e b4 43 06 7c dc 6b 05 1b 53 c1 ee 57 fb 90 ba 78 fc ec be fd c0 2f 14 d3 ad 2d ff ac e2 38 2b af cd 2f f0 77 2f d4 a3 20 ed 77 95 0e 94 12 80 11 e6 de 6f 19 f8 42 a6 72 80 2d 84 f9 b2 81 01 d5 ff 89 7f 12 15 04 7a 08 93 d1 21 04 20 Data Ascii: sfeY\J)'`vt+#>\|1wm{kcztD][XYJMu VLq5a:i!'0CsLeUk)zc/-P@%};Z~1G.C\|kSWx/-8+/w/ woBr-z!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	50082	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1101	OUT	GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3812 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4103 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	722	IN	Data Raw: 52 49 46 46 dc 0e 00 00 57 45 42 50 56 50 38 4c d0 0e 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 e0 96 66 9f ff 7f b8 dd b5 9c fa 1a d1 ff 09 c8 4d 3f 36 81 6e 01 d5 0d 60 5d 06 f6 63 82 e8 09 ec 4c 70 32 01 3b 30 04 24 2a d8 59 12 c5 ce cc df 02 76 a6 5e 4a 02 76 e6 a2 06 ec ac 88 ca bb b1 26 5e b3 2a 17 ac 4b 61 47 54 f6 c4 ec ba a7 0b a8 b1 6d cb 8a 76 fe 31 02 bd 04 b3 7a 01 b4 fb e3 53 58 24 6e db c8 68 2a ec ff 5f 37 3c 7c f0 80 e3 48 92 a4 a6 f0 00 ff ad 4b de e7 bc 01 29 fa 3f 01 e9 47 7f 5b 67 dd b9 33 98 13 00 a6 04 7f 30 40 4c 00 80 00 7a 1d 18 7a 8f b7 6d 8d 40 00 10 ff 9e ae 03 29 c5 d0 02 77 61 c9 20 9d 39 94 12 ee c2 6a a4 fd e3 87 15 7a 8a b0 24 a4 c3 6f ad e0 ab 3b b1 42 c7 d6 c1 4d 00 21 a1 76 52 14 00 03 30 91 ce ad ca 9e 00 80 80 74 56 80 Data Ascii: RIFFWEBPVP8L/?M8rFfM?6n`]cLp2;0$Yv^Jv&^KaGTmv1zSX$nh*_7<\|HK)?G[g30@Lzzm@)wa 9jz$o;BM!vR0tV
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 34 07 85 9a ec a9 fd d3 73 c7 65 a6 b4 43 a2 28 04 c2 3e fb 69 8f f3 f9 40 69 96 69 c0 c5 e6 dc 22 f6 8f 88 de c5 48 2e 48 52 60 dc 48 b5 57 0a 42 4e 8c 3d e3 be fa 39 7a 0f ef e7 85 d4 ac c9 9e b9 5c 59 f7 73 45 9c 3b 71 a0 50 a1 8c c4 35 69 b5 e7 32 30 3a b1 47 dc 48 8e 7f 74 76 79 a7 2c 15 9e 6b 54 89 ad ca c6 08 98 f7 84 fb 4f e3 dd b2 90 96 32 26 c9 98 0c 0c 69 9c 36 9c 49 0b 21 b9 16 e2 ca 78 d3 37 fb c1 ab 38 76 cd 24 b4 43 33 3d cf 19 8a 72 e3 fa bc 72 f3 3e 70 43 ce 1c b3 71 25 2a 51 13 cc b6 4d 9c 71 41 60 98 d6 93 07 7f fb 6b 7f 1f 38 f6 de 8f 36 ce 9a a3 34 33 54 23 e0 95 66 91 da 37 bf fc e5 db c3 79 f7 bb 72 5b 74 54 c3 52 86 6b 90 5c 2c 0c 04 46 61 60 c5 40 48 6e 5c 7f eb 26 73 ed 7a 37 26 aa 0e 37 a4 43 4d a6 01 c5 8a 82 a1 a3 34 93 b4 40 Data Ascii: 4seC(>i@ii"H.HR`HWBN=9z\YsE;qP5i20:GHtvy,kTO2&i6I!x78v$C3=rr>pCq%*QMqA`k8643T#f7yr[tTRk\,Fa`@Hn\&sz7&7CM4@
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: a5 bb f7 e7 7d f8 7b 4f d3 ad 9f cd f7 a7 83 66 c1 d0 ce 62 9e 04 06 63 54 79 e6 d2 8f b1 4e 94 bb f9 67 ce 5c 3d f9 d9 db 36 bf 3c 14 51 07 2e da cb 06 95 2c 30 34 43 e6 16 89 24 a3 1f bb 74 57 d7 e3 cf d8 ba be b1 6e d9 db 01 fe e4 dd 3c a8 c3 3c df 57 b2 b6 72 a6 26 cd 8b ad e3 b4 a1 10 54 10 cc a4 bc 93 5c 31 df 76 2e bf d8 77 bd dc a6 2f 08 ee 6f bd f6 b5 db ff 3f 2b d2 af 1c eb e7 36 41 b7 e8 b6 ac c8 14 49 e0 46 bb 95 ff 81 44 3a 1c 66 f3 41 1d e9 94 aa bb a8 f2 f0 43 22 5f 3f db 9d d7 c6 6d f2 56 ac 77 52 47 7f 33 ab 9e eb 35 51 5c 89 42 69 56 48 a4 fb 85 42 a9 53 a8 c3 7a d4 4e 77 70 e5 43 ff a9 e5 2f 7f f8 ab 6f 45 b8 4d 73 e8 da c9 d8 90 30 10 18 d9 90 c3 b4 8c 59 b3 1c 4e f7 84 57 24 ea 2e ca f2 44 c7 4f 08 f3 b5 47 fd 02 7f b7 e9 46 5a 81 98 Data Ascii: }{OfbcTyNg\=6<Q.,04C$tWn<<Wr&T\1v.w/o?+6AIFD:fAC"_?mVwRG35Q\BiVHBSzNwpC/oEMs0YNW$.DOGFZ
2024-04-19 14:06:53 UTC	580	IN	Data Raw: 4d ab ec f6 d7 9a 2f a0 e5 15 6a 22 0e ad e2 51 48 51 44 9a ad 18 4a 30 0f d4 61 7c d4 d8 e9 2f 98 df f2 36 6f b3 e2 4a 91 c2 62 5a 36 0e 65 3a e0 a2 3d d4 a2 c4 1a 36 d6 ee d6 ec ef fa 2f 9d 6e 3a 9c 78 49 b6 4e a6 03 4a 3b 4c 53 1c 22 6c 4c bb 7a a2 10 66 0c cd b4 39 35 53 33 5b 54 44 9d e6 58 6f 4c ec 93 43 27 1a 6a 93 e2 11 d5 50 ad 58 6b 8d 3a ad f6 c3 42 c2 b2 68 96 90 8d 55 f3 64 cb c4 aa 22 6a 8d 2b ab f6 84 66 c1 bd cb 04 43 51 5c 90 10 1b a2 a0 6a 8d ba b1 5e da 43 4f 2b 03 c2 b6 a5 5d 81 91 58 55 7c 63 e5 9e 91 93 ff f1 06 81 b0 ed aa f9 78 43 49 d3 28 d6 b5 be db e6 da 17 da f7 95 ac 43 22 67 db 9e 1e 87 4a 18 cc eb 77 db 37 13 65 7a 42 9a 46 2d 12 eb 04 81 81 30 7f 66 dd 94 fb c2 d6 2f 87 f6 18 66 c8 24 61 d4 1a b5 56 54 9f ed a9 39 b1 f4 96 Data Ascii: M/j"QHQDJ0a\|/6oJbZ6e:=6/n:xINJ;LS"lLzf95S3[TDXoLC'jPXk:BhUd"j+fCQ\j^CO+]XU\|cxCI(C"gJw7ezBF-0f/f$aVT9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50083	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	525	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13280 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:05 GMT Expires: Sat, 20 Apr 2024 10:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 14088 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	720	IN	Data Raw: 52 49 46 46 d8 33 00 00 57 45 42 50 56 50 38 4c cc 33 00 00 2f ff c0 3f 00 09 48 92 24 c7 6d a2 30 0b d0 43 e8 ff 0f 06 24 c0 eb 39 a2 ff 13 c0 7f d4 af 99 ed f0 4b b6 6b e0 7e cd e6 04 77 77 dd 78 16 b3 5d bb d1 5a 9b 73 ce c5 ec ca c3 e7 7e 64 c6 5b 6d f0 83 16 80 64 00 de 53 40 fb ec 61 bb 13 eb 41 cb 54 8f 57 2d b4 84 cc 13 d6 87 ed c3 fa 1c 0c c8 de 23 17 09 06 ed 42 76 5f ec 8e 24 65 67 9b 43 d2 98 9f d1 24 69 97 49 97 9a 9d 00 d8 e2 e4 00 e6 89 1b 65 aa ec 5d bd bb e2 65 27 38 d1 15 99 11 55 78 d8 05 57 65 64 45 64 65 da 05 dc ab 36 11 61 57 70 af aa b1 d8 25 f0 a8 aa 08 bb b7 9f 5f f6 d7 2e 24 b9 b6 d5 48 d2 29 87 10 42 e8 2b 55 be dd 6f df fb 5f 59 ef 01 94 30 aa b1 db 48 92 14 29 8f 47 1c f1 9e df 7f ab 5e 64 66 0c 37 8a 24 39 52 1c ac 96 b5 d2 Data Ascii: RIFF3WEBPVP8L3/?H$m0C$9Kk~wwx]Zs~d[mdS@aATW-#Bv_$egC$iIe]e'8UxWedEde6aWp%_.$H)B+Uo_Y0H)G^df7$9R
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 2c a7 46 a2 80 6d db f1 36 bb ee 37 5f ea f6 b0 91 ee b7 6d 7b e6 6f db b6 6d db b6 6d 5b b3 bd d5 6e b7 22 69 d3 e4 fb be c7 8f 6d db ae 5d 49 b6 d5 da 98 6b 6d 60 03 67 03 c6 39 e7 39 e0 a6 7a f1 8c b8 e6 2e bb 44 93 60 ee b9 f1 54 b8 e8 e6 b2 8b c6 c1 d7 9a 73 f6 98 00 3d ae b6 bd b6 6d 2b 6b ee 7d bd f7 3e c3 7b 13 11 79 93 13 52 13 ca 40 4a 19 48 49 09 6d 4e 08 d9 f5 de 7b b3 cd 9a c1 18 73 ae 73 70 f1 83 ad c0 d5 a7 57 3d f9 4a d0 31 53 43 9f 34 83 53 82 29 0d dc 5f 03 bc 37 5f 1d 50 d7 8f ed 25 18 d8 a5 af 0c 44 1d d7 33 6c 8a f4 e3 a1 04 9e 9e c0 8e 64 5b b5 32 6b df f3 70 77 f7 3c 48 81 18 88 80 64 f8 25 8f 17 0a ee ee 0e a7 de 39 0b 5a 6d db aa 96 b5 ee 7b b8 3b 3f e9 42 36 08 a5 09 18 84 a0 80 c3 d3 7b 77 4c 80 05 38 dd ff a7 fb df d6 53 09 7b Data Ascii: ,Fm67_m{omm[n"im]Ikm`g99z.D`Ts=m+k}>{yR@JHImN{sspW=J1SC4S)_7_P%D3ld[2kpw<Hd%9Zm{;?B6{wL8S{
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 66 80 61 dd 52 7c 01 95 ab 3b be f8 99 5a 41 39 9b eb fe f6 c3 0c 06 72 1c 92 69 c8 a4 c0 30 ef da 70 1f 63 e6 0a 71 fa 75 7e 1d ce e6 45 27 fd dc 52 4b 8e 94 4e be 10 c3 7e 7d 4b 6f 61 e6 6a 52 55 7f 99 c3 bb a3 59 b6 f8 6e 0b fd 0e 39 9a 0e 0b e7 dc 61 04 2e 99 ff 70 eb 1c 85 b3 58 ce b2 6a 35 4e e6 3a 3f fd 34 09 90 db 16 ea f8 d9 b7 18 89 ec 6a 4f cf b7 cf 0d 26 d3 af f1 dd 74 32 af 72 e5 fd f4 58 cf 4d bc 61 be e6 73 24 e3 19 11 58 d3 b4 ad a4 ee 90 9b fa d8 78 f9 4b 9b 83 e9 58 72 a7 31 ce cb 89 9a c9 3c 71 ce 2d 46 e8 15 3e fc 65 3e 7b 6e ce 0b d3 97 2c d0 b9 5c ff cf 5f 9a 01 39 9d 52 ca ab 5e f1 1f 8c 54 2d e4 e5 af ed 0d 31 72 82 46 e6 a2 f9 dd b9 bc d9 85 77 75 b5 e4 a6 a3 cf d7 fe f3 cf 23 06 d7 fe a9 37 b0 9d 97 93 fa 1a de f0 ac cd b1 6c e9 Data Ascii: faR\|;ZA9ri0pcqu~E'RKN~}KoajRUYn9a.pXj5N:?4jO&t2rXMas$XxKXr1<q-F>e>{n,\_9R^T-1rFwu#7l
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 9b f0 57 ed 0e fa 44 20 95 e4 95 6c 3d 7c b9 53 9c 4e eb b4 de 7a ac 44 6f a9 58 f6 90 d3 23 6d 0f 94 b4 1e 6b 63 bd be 1d 6b 4b ab 58 9b 48 cb 4c 79 a7 f5 58 a3 db 91 6a bd 75 5a 5e 97 43 d9 7a 4b d1 c8 e8 e1 bd ad d7 b7 e3 ed f7 9b 4f a1 fb 25 e7 d7 76 b7 a1 99 13 bf 58 3f 05 fe 50 c6 8a c4 e3 23 79 53 2b ce ca 39 8d e4 91 b1 72 ba 52 05 90 7c 44 23 01 ae 2b 6f 1c 1f 56 be 03 96 cf 79 b2 b7 95 f3 c8 42 98 f0 8a 24 4a 21 5c 8e 1c e1 20 70 b1 cf 0f 01 2e 97 53 f3 09 2e 97 0b 5c 80 0b 5c 48 20 74 e2 e8 81 0c 70 b9 c0 e5 c8 95 01 8e 1c e1 72 99 bf 66 cd 93 9d 75 f7 aa 93 cf 24 d0 0a 02 32 c8 80 0c 32 20 23 83 0c c8 20 23 83 47 97 91 41 36 ca 80 b2 95 f1 96 35 11 67 93 20 c7 42 9c 2b cb c8 80 de 48 22 19 46 12 6b b0 22 0f f5 f1 eb 57 ec f6 65 fa e8 48 65 95 Data Ascii: WD l=\|SNzDoX#mkckKXHLyXjuZ^CzKO%vX?P#yS+9rR\|D#+oVyB$J!\ p.S.\\H tprfu$22 # #GA65g B+H"Fk"WeHe
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 82 38 c9 e0 34 e3 cc 9b fa 30 45 4a 4e 94 d5 b6 55 49 da f0 99 5d b8 70 e1 c2 ca d8 99 29 db 05 b8 00 db e7 2a eb d1 6c 25 a7 cc 19 b6 b1 78 ee 1e 25 4a 14 40 4e 6f 72 ce cb 01 6e 07 e7 7b 03 e4 3c 3a 82 9b c2 0a 03 7c 3c 36 e3 5c 06 24 91 81 0b 10 a0 96 15 9b 12 e8 2e 0c d8 aa 36 ce ca e5 00 bd 65 70 da 1b c8 e9 4d ce 79 42 1d 1c ff db 66 1b d7 79 69 8f 13 e1 8b c8 70 65 53 b6 1e 19 19 24 41 46 12 19 09 0d 65 a3 13 19 90 01 14 16 eb 46 97 dd 18 9c e1 82 0c 1e 9b 01 19 19 9c f5 e1 f7 69 26 a3 86 9c 7a 62 12 28 03 32 c8 c8 a6 8c 0c 9c 1e 19 19 19 ae 6c ca d6 23 23 03 22 26 2e 77 0d b6 71 dd 37 68 8a 04 12 0f 8e 85 eb 0a f0 8a 38 94 45 02 72 e4 40 cd 2e e7 74 dc f6 5b f6 45 dd a6 59 0b 06 91 c1 d9 8c 33 19 3c 36 03 01 02 e8 78 0a 7b 3c 14 c4 34 4d 80 1c c6 Data Ascii: 840EJNUI]p)*l%x%J@Norn{<:\|<6\$.6epMyBfyipeS$AFeFi&zb(2l##"&.wq7h8Er@.t[EY3<6x{<4M
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 8f 04 5c c5 f1 26 61 02 a8 e2 b6 82 da 4e 0a 2b 43 0e 9b 5b 69 87 2a 28 ed 94 76 29 45 f2 a3 e2 d9 da c3 24 62 f9 c2 2b 43 19 60 05 2e 00 2b 96 61 bb 96 43 cb b0 c2 95 01 60 15 fa 07 e2 1f f6 ef a6 d9 5d cf b1 67 ab 79 37 a8 48 66 2f ab db 3b 72 61 bb 00 c5 ec 6c 17 b6 4b 45 42 41 d6 2c 57 de 3f 50 15 ab 85 01 b0 5e 01 2b 96 81 95 2b 03 ac c0 05 60 04 59 a6 ef b5 87 06 28 7a 01 69 cc 75 3e 32 32 a0 3b 41 46 ce d5 72 de d5 12 22 e1 ea bd 75 8f 04 5c 42 f0 51 3f fb 2c 7b 1e 58 39 7a 3b 90 0b 9f 0b ac 5c cb 21 9f 77 b9 d6 ab 73 af d8 21 57 0e fc f2 af 53 e5 c3 38 e4 a0 c6 ed e0 b6 13 19 dd 23 ff d8 f3 95 75 3e 32 32 a0 3b 41 86 f4 14 0c 2a 9e a3 3d c4 aa 23 02 92 92 8f b4 8b 37 74 62 15 e0 8e bc 38 3d 53 58 3c 47 12 19 09 44 32 96 61 39 0c 26 ec a5 92 30 aa Data Ascii: \&aN+C[i(v)E$b+C`.+aC`]gy7Hf/;ralKEBA,W?P^++`Y(ziu>22;AFr"u\BQ?,{X9z;\!ws!WS8#u>22;A=#7tb8=SX<GD2a9&0
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 3d c6 f0 ad f3 73 f7 7e 99 33 5c 0e a9 63 de 8d 1e ec dd e3 a9 41 6f ca c6 3d ed 57 be bf 7c 5a 00 a2 4a 85 48 01 88 b3 eb 35 83 87 95 74 f1 a0 80 e5 db 0a d1 5c ec a2 bd a6 fd 89 00 7a 76 22 42 d0 7a a3 d3 fa b1 44 6f 29 f0 ab f7 70 52 ae d6 5b 46 6f f4 a6 d1 56 6a cd 68 c4 d1 1d 2b 22 5f e1 2d 6c 82 6c 4a 5a 8f a4 89 65 b8 c0 9f 82 3c 7a 90 1f 47 ff eb ff de be 35 ff 68 aa 3c c8 0d c8 0d 25 bd ab 07 19 64 24 ae d6 69 f4 ec 44 84 a0 f5 46 c7 17 66 8a b9 75 81 5d b6 15 ae ff 0d 21 a0 a2 3f 75 ce 96 c1 58 20 9e 2e 50 50 40 0d a0 a0 60 64 51 36 5d 2c 37 5a 29 c3 ca c2 bd e2 82 4d e4 4b f7 7a 99 46 06 45 c6 12 09 57 28 5b af 25 69 5a 95 6e 31 0b 92 0a e9 29 81 a2 10 54 41 19 94 51 56 56 06 50 d1 9f 3a 67 cb 10 21 99 86 c3 ce 8b 6d 4c 8b ad 29 54 50 a5 d2 a6 Data Ascii: =s~3\cAo=W\|ZJH5t\zv"BzDo)pR[FoVjh+"_-llJZe<zG5h<%d$iDFfu]!?uX .PP@`dQ6],7Z)MKzFEW([%iZn1)TAQVVP:g!mL)TP
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 56 db 56 64 a8 23 76 c3 56 70 7f 67 f2 9e a5 2a 6c e1 ac 15 d4 46 9d a5 aa 36 8a aa 2a a8 85 41 95 15 56 56 86 fa 9d bc 02 83 82 28 7f b5 49 7e d0 04 e1 69 aa ef df a3 ab 74 f0 35 ca 07 53 38 4d 83 02 a8 a2 aa 0a 19 55 90 55 b5 15 55 05 55 aa c2 16 28 c0 a0 87 76 ec 36 da cb 85 8e 59 fe 82 0e 35 54 4f f4 dc ea 69 da a8 52 d2 c9 95 5c 6b 3a a0 df 61 5e 77 c6 d6 9e 68 95 6a dd 83 ee cb 3c f6 f9 d2 17 77 e3 04 79 37 94 c7 2a c4 2a 1e f6 f1 bc 84 2f fd db 41 06 bd d1 63 dd c2 e9 90 9a aa d3 c7 e8 64 af 49 4c 55 9d 0e 35 54 4f d5 53 f5 f4 e1 57 0e a6 6b c5 d8 cb 21 3b 9e 7a e8 d0 7b 1f 05 04 09 64 ef 20 80 2b 88 b3 91 60 05 cc 05 91 9c cf ef c3 e0 bb 49 00 77 93 00 90 97 d8 d1 79 87 20 05 14 a7 5d a0 12 1d 04 02 a9 03 f4 de 47 01 01 c9 f7 e7 fa a8 ef 3c c1 5e Data Ascii: VVd#vVpglF6AVV(I~it5S8MUUUU(v6Y5TOiR\k:a^whj<wy7**/AcdILU5TOSWk!;z{d +`Iwy ]G<^
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 47 ef bb ee b3 02 a1 ca 60 65 14 06 05 60 65 50 60 85 41 41 4a 51 56 18 aa fb 31 0f f0 0f ff f2 63 3c 36 83 37 cc 78 e8 f4 5e 04 10 96 6d a6 ee f5 0e 3b c4 1d e7 11 60 87 02 0a 2b ce da 09 65 65 14 1c de d9 8f fb f0 2b 36 15 f2 78 ec 47 b7 64 1c 17 c5 01 ac 57 1c d9 b3 c2 a6 00 ac 1c 04 53 b8 c8 b3 5c fa 8d 63 34 f7 f7 d7 7f f8 07 ce 4f 71 42 62 03 32 1e 78 38 cf 30 05 80 45 65 0b ac f3 d2 ab 8a 28 15 aa aa fe e3 5e d9 84 8b 0c d6 ab 0b fc 36 20 db ad 8a d2 36 ea 21 0f 7f d1 a6 f0 90 27 9f af 67 f5 a9 7c 29 82 24 32 92 07 6d 64 64 30 11 13 a8 ff 6e 70 1c e2 af 31 bc 0d c0 14 27 1f d5 84 35 4e a6 e0 ac 9b 30 b3 11 4e b6 35 ea b2 df 47 01 8c 67 ce 5b 05 19 49 64 64 64 d0 ad b0 54 ff 50 9e f7 c5 57 60 d7 8d 25 3c f8 51 5b 6a 40 81 37 f4 57 c4 85 0b 97 23 ce Data Ascii: G`e`eP`AAJQV1c<67x^m;`+ee+6xGdWS\c4OqBb2x80Ee(^6 6!'g\|)$2mdd0np1'5N0N5Gg[IdddTPW`%<Q[j@7W#
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 1e d0 51 63 d9 7a ee 4e 5a 32 59 5e f2 8f 4d e1 fe c4 31 af 2d 83 b5 a5 0f f3 0c 47 be 8e 3d 69 d9 f0 bc ae f2 ee b8 e7 de f0 35 12 4f b6 cb 35 9b 90 13 a7 42 cc 51 71 5d 9a d6 c8 6b 92 08 e5 b0 89 fd a4 bf 1f 9c c2 a9 ab f6 0e d0 0b 14 12 5a e7 7c 56 39 22 b2 4f a6 2c ac 59 19 c6 3e 9b 99 d1 54 1c 59 60 97 58 c0 01 ca e7 3d 0c 8e d9 1c b8 b0 1b 87 95 95 63 ec 46 5b 0a 6f 56 56 b4 1b 25 38 0f 5b 16 19 31 22 f0 48 6a a7 ae f6 f1 af 70 8c 57 7a ef 6e 1a 43 95 dd 9c ba 94 55 a8 66 3a 8e d4 62 52 d8 57 2f 39 dc 96 22 c9 8b a5 a5 a7 05 66 90 b4 99 b2 32 8c 35 f6 25 7c 79 21 83 65 2c 4b 18 80 e5 b1 44 71 76 19 0b 31 d1 18 8a 5f d2 89 1d ac 61 20 2f 10 e5 48 14 e5 d5 1f 7d 4a 0e e3 1c b4 90 4b de 36 eb b3 a7 97 8c 0c de 86 da b5 4d ed be 44 04 25 de 8a 69 bc f1 Data Ascii: QczNZ2Y^M1-G=i5O5BQq]kZ\|V9"O,Y>TY`X=cF[oVV%8[1"HjpWznCUf:bRW/9"f25%\|y!e,KDqv1_a /H}JK6MD%i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50085	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	524	OUT	GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6354 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:12:05 GMT Expires: Sat, 20 Apr 2024 13:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 3288 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	722	IN	Data Raw: 52 49 46 46 ca 18 00 00 57 45 42 50 56 50 38 4c bd 18 00 00 2f ff c0 3f 00 09 47 92 e4 b6 4d 61 21 88 de 5a e8 ff 0f 66 02 9d ce 11 fd 9f 00 fb 9b bd e0 da 78 7c 0f 1b c0 16 de 2e 0f 78 27 eb ef d7 42 2e 28 22 c8 e8 5b 66 09 4d 94 e8 f2 06 96 04 44 19 94 6a 40 11 98 80 c4 03 bd 14 2d b3 02 d1 06 28 53 04 80 36 00 aa 4c 0d 62 a8 cc 4c b4 23 73 65 56 5c a6 de cc 8c 2c 19 2a 3b 27 0f 99 7b 9d 06 ab 7b 38 f5 e4 1e 37 fe d7 05 1c d9 b6 db 36 a7 c0 60 fe 50 e9 3b 67 1b 8b f2 fe 6b 97 2a dd 33 00 8e b5 e3 b6 91 1c 89 68 ac b7 b5 77 17 c0 e4 1f df f9 97 e3 48 92 1c 25 4f 01 6f e2 fe 57 68 e9 bf 3d 67 4a ff 27 40 c2 bf f9 52 97 f4 34 ff 9e c7 6f 9f a0 37 74 fb af e3 51 d4 45 1e 75 7c bd 58 68 8c d9 53 01 a0 cb 00 49 92 1c ad f7 d6 31 80 10 42 34 1a 09 90 6c 50 98 Data Ascii: RIFFWEBPVP8L/?GMa!Zfx\|.x'B.("[fMDj@-(S6LbL#seV\,;'{{876`P;gk3hwH%OoWh=gJ'@R4o7tQEu\|XhSI1B4lP
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 0a 41 96 4a a6 ac f3 7f 75 ee 5e 1c 82 16 da aa 5f 3e 07 e3 6f 14 97 c6 84 22 4b fe b9 aa 59 65 81 31 b0 e4 d0 a2 6d db 94 24 ad 40 da 81 17 51 b6 6d db b6 6d db b6 6d eb cf b6 6d 75 87 1d 91 b6 8d 17 41 c7 b6 ed 36 76 74 ee 03 c1 47 56 ad 6f 22 e5 1a 88 4f 35 4e c5 9a 92 f7 5e ea 26 01 12 c0 8b 09 70 80 09 ff 4f f8 7f 22 a9 41 f6 da 16 e8 7b 2c e2 02 9b b0 91 da d0 de aa 65 53 2c fd 0c f6 f9 ed 45 d8 a4 b6 a9 1f fd 67 f1 9e a9 5d 94 b3 b7 b6 c5 6b fa 57 19 0e bf b4 8b 9d b6 2d dd f5 7d 65 40 27 0b ea 79 97 5e bf a6 e1 a7 6b 46 c5 f5 b3 b9 61 ae ec 6f 4f 29 e9 78 9c 16 5b c3 84 52 1b 35 3b e2 e4 c3 64 2f 19 f6 31 98 b1 df 3e ab 2e 6c 7c 17 6c 68 81 ca 04 2a f2 e9 3d 06 1e 51 a9 1f 36 6f c1 ef 67 b4 24 40 8e fd bc cf 91 e0 f7 b3 0c f8 a2 a4 79 db 9f 4d b3 Data Ascii: AJu^_>o"KYe1m$@QmmmmuA6vtGVo"O5N^&pO"A{,eS,Eg]kW-}e@'y^kFaoO)x[R5;d/1>.l\|lh*=Q6og$@yM
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 20 54 5b 8d af 26 03 6d 64 34 8a 40 2b c9 58 0c eb 78 fa bc 20 66 f1 9b f0 a1 f7 db f7 2b 28 7c b9 63 cb b3 91 70 5c 4c ae de f9 81 c7 32 12 a7 2f a6 37 9c 32 12 f8 c0 c7 e5 fb 4c 6c a8 ea 27 7c 1a ef fa 34 a0 2a 46 7b fe eb a6 e7 99 88 aa 39 13 19 3c c0 87 df 6f bf ed cd 77 df ea 7a 1e 6f 82 85 57 b7 b5 ef 70 3c 9b 63 a7 db 91 e3 4b d3 ab b7 7d c8 77 7e fc e0 f5 9d fa 0f 03 ce 07 be cf 3d bd ff 23 4e c6 bb 22 df fe d6 d3 6f 7a 6d fb f8 3f 0a df e5 dd b3 ef 78 fb c9 3b 3f 0d e5 92 69 29 d5 4f a7 4d c5 ac e9 31 6d 7d a8 f9 5b 5e 59 23 d6 d4 e1 fe fb ef 07 38 6e 3e 97 9e 26 58 3e 98 36 90 2d 61 19 54 34 15 f2 40 0a 03 0c a3 b5 c2 6a c0 8e a2 6f ce ce 83 05 dc f8 f3 7f 0b 56 38 3a ee 84 4d e5 5e 11 73 f6 16 6f 8e 11 28 c7 b9 d7 ae c8 c7 0e b6 38 41 fe a9 34 Data Ascii: T[&md4@+Xx f+(\|cp\L2/72Ll'\|4*F{9<owzoWp<cK}w~=#N"ozm?x;?i)OM1m}[^Y#8n>&X>6-aT4@joV8:M^so(8A4
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: d5 4d 9c 12 80 b5 f0 8f 35 e5 51 b5 1a 2c 4a 68 fd 85 ce 98 22 94 54 59 13 00 18 3e 5b 5e d7 85 3f 5d 14 dd 6b 04 98 ae 40 4b 9f 47 93 dd b8 35 8f 5c 7e 6f 48 ab 2b 2c 5f b7 b8 ae c7 1b 53 65 0d 51 6d 4f 64 bf 83 6c 14 9d 77 b5 0b d5 4d 7c 90 04 06 a6 56 6a 5c b8 4d 77 cc 07 8d 0c 4a d0 f8 cc 97 73 ea 84 e6 82 d5 84 04 6d 3e 65 52 49 4d 1f 41 b8 e8 b1 74 1a 3b 18 ea cb ee d8 01 08 6a d8 74 1b e1 9b a7 34 57 3a 1d 03 76 14 5b 5d 2b 0b 5d 71 e5 00 16 b5 21 68 b0 f6 cc a7 18 b7 46 83 57 c6 f7 bb 63 11 e6 2a b4 14 39 a5 68 cd 68 99 4e 5f 34 09 1b cf 79 48 0d 78 25 3c de 69 e9 2a 9e b4 7a 8a 97 09 cb 58 0e 75 95 85 78 ce c5 88 81 45 2d 44 bb 67 85 97 bf f9 7f 6d 4b 65 d9 4a fa e9 6a e9 cb 15 13 68 48 19 fd d8 3f 3a a3 77 81 53 e6 46 2a 4d 58 fb 40 69 75 57 f5 Data Ascii: M5Q,Jh"TY>[^?]k@KG5\~oH+,_SeQmOdlwM\|Vj\MwJsm>eRIMAt;jt4W:v[]+]q!hFWc9hhN_4yHx%<izXuxE-DgmKeJjhH?:wSF*MX@iuW
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 61 8c 1f 47 b4 09 29 62 fd 4e c6 b1 2d 71 8f 60 06 28 41 e3 57 b0 d5 1a 8e a8 fc 3a e3 ce 47 73 5c b6 09 ac e6 74 89 f1 a3 51 63 f1 f9 69 1b 31 90 4a 7e 97 de 67 12 34 42 63 65 21 fd 8f f9 5d f1 82 ed 5c a9 22 68 31 ac 98 d3 65 f2 e8 b2 76 1e d1 66 2f f9 bd e1 94 2f 50 9c 1a 0c cd 0a 66 db a3 b7 fc 5e b5 e7 e6 7c 0b 24 86 5b 18 ae 86 6b cd a4 35 53 a3 81 b5 96 d9 5b fe 2b 79 3d d8 4b f5 ca c3 00 cd e4 67 36 9e 3c f3 1a 48 51 3b 6c 07 02 ad c5 70 35 ba 6a 33 29 86 c7 b1 18 d7 3a 12 aa f5 0b fe e6 d5 ee ae f3 30 03 dc c9 3a f6 f7 d7 be 19 79 b5 3a da 22 7a 47 73 f9 15 2d 33 69 d8 8c 6f 09 a1 68 7e f4 97 fe 5d 5f be fa f3 6d e2 95 2d fa de 1b a7 bf 90 46 0c 13 de f1 95 ef 74 f7 c3 d7 38 b5 ba e8 4c 9c 8f fa 9e 1b 7c 49 cd f0 34 92 91 95 46 cd a6 16 e3 2b 31 Data Ascii: aG)bN-q`(AW:Gs\tQci1J~g4Bce!]\"h1evf//Pf^\|$[k5S[+y=Kg6<HQ;lp5j3):0:y:"zGs-3ioh~]_m-Ft8L\|I4F+1
2024-04-19 14:06:53 UTC	612	IN	Data Raw: 87 fe ff 6f 17 75 38 38 2c 87 65 b1 5c 17 7e f6 d3 3b 78 be 9c 0e cb 96 0f b7 9e f7 c5 b2 3c a0 e3 c5 f5 e0 6f 9e 53 3d bd 1d 1e 7c d2 cf fe dc 9b 2d df dd 3e 3c f7 fc f0 e2 e0 b0 2c d8 e1 7a f0 5f ce 93 e5 a9 ad 96 c5 19 2d b6 fc 96 33 be cd 61 81 42 73 2d ac 57 e9 11 3c ed 6e b1 0b ed f0 72 87 2d cb 72 d8 c6 0b ca 70 87 eb 81 d7 f1 d1 a8 9e 96 be e8 72 58 fa ad 9b e5 80 05 e5 da f8 ba fc df e5 29 2d 70 aa c3 d2 1f 6c 99 e5 60 72 87 eb c2 ab 78 14 ef e4 29 d1 69 0f 7d 59 0f 8b be 2c 8b 65 ec da f8 5f 2f 64 4b 4f 6d 58 96 7e 3a b0 38 b8 6e 9e e3 02 de a8 8b 9e be c0 72 bd 38 2c eb 1b e3 40 2d 58 6a c1 e1 7a b1 2d bd 31 58 8a 05 0e ae 97 f7 87 2d bf 51 46 77 e8 ae 9d 7d f1 d3 f7 ed 87 eb de 75 bf ef c2 c3 57 79 bf 9b 2d a3 50 30 67 45 df 47 ee da b7 39 fb Data Ascii: ou88,e\~;x<oS=\|-><,z_-3aBs-W<nr-rprX)-pl`rx)i}Y,e_/dKOmX~:8nr8,@-Xjz-1X-QFw}uWy-P0gEG9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50084	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	525	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8966 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:34 GMT Expires: Sat, 20 Apr 2024 11:12:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 10459 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	721	IN	Data Raw: 52 49 46 46 fe 22 00 00 57 45 42 50 56 50 38 4c f1 22 00 00 2f ff c0 3f 00 09 48 92 e4 b6 91 a2 1a 20 c6 a0 f7 ff 0f 96 01 d7 5f 23 fa 3f 01 fc 23 7b a2 9f c7 07 1f 7c e8 59 1f b4 47 27 47 59 9f a7 4d 61 48 21 bb f7 38 82 3c 48 ba f0 40 01 ba 11 01 d2 2d 49 77 a2 0f 3d c9 8c 10 b2 81 ee 1e 91 09 11 48 07 d3 31 3a 9e 2c 56 f4 5a cf d4 06 40 32 b0 46 a7 06 ec 97 aa 32 33 9f f9 dc e4 57 51 95 b9 d6 1e 1c 0b a8 aa cc 4d 37 6b c3 c7 00 78 4d ca 13 c7 e4 cf ba 80 23 db 76 23 e5 e0 7f fd 9a 81 8f f7 a0 fd af 8e 90 5c 6a a9 23 48 1d 47 b2 ad 2a 8d 7f e7 20 6b ea e6 1f 13 16 82 b3 a4 dc 48 92 e4 28 89 3e 7d 83 d6 d0 ff 7f 1d 1e 6e ff 27 40 82 ff e3 4f e3 fa 6e ee eb 4e ac b5 07 cc b7 bb 76 b6 36 24 5b 28 76 72 42 b6 98 66 2e e7 06 e7 00 68 bf dd 47 34 b5 41 30 6b Data Ascii: RIFF"WEBPVP8L"/?H _#?#{\|YG'GYMaH!8<H@-Iw=H1:,VZ@2F23WQM7kxM#v#\j#HG* kH(>}n'@OnNv6$[(vrBf.hG4A0k
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 33 33 33 6f b4 66 76 44 31 33 33 43 c4 cc be cc cc 34 2c ee ee 73 8c 67 8e 34 dd 7d cd fe 4d 37 da ec 96 aa dd 06 99 99 3d d5 5b aa b2 cc 8e 5c b5 28 e3 52 b6 91 8c c7 cc ec 29 19 bb ca 21 d3 2d 99 f3 8d cc cc 8c 32 ca 90 31 4f 42 8d b6 ad 43 92 74 ee fb 22 a3 18 15 3d b6 6d db b6 6d db b6 e7 9f 6d db b6 6d db b6 23 57 46 32 e2 7b 74 6c db 56 6d 2b 63 ac bd f7 39 17 77 77 77 0b 89 88 dd 33 c8 28 80 c5 1e 52 03 ea e0 ee ee 96 ba bb c3 f3 f7 fe 95 b3 57 4c 40 03 7c 94 ff 6f ed ff 5b fb ff 66 58 b1 4f dd df 7a 2b 50 2e 50 94 a0 22 a8 10 0c 72 9b 41 3e 9d 41 06 83 dc 66 90 4f 67 90 c1 20 9f 0b 07 42 c3 29 e7 39 be 62 9a a3 b4 87 5c af 2e 7a e5 07 17 dc ff 9e 12 b4 83 19 bb 51 06 99 13 6d 21 83 01 e4 36 83 cc 89 b6 90 c1 00 72 9b 41 e6 44 5b c8 60 0b d9 16 62 Data Ascii: 333ofvD133C4,sg4}M7=[\(R)!-21OBCt"=mmmm#WF2{tlVm+c9www3(RWL@\|o[fXOz+P.P"rA>AfOg B)9b\.zQm!6rAD[`b
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: f6 8e 02 20 8d 77 f9 f6 d1 e5 7f 18 6f c8 1c 8f 8f 4b 53 19 4d 8c 77 6b 6a 3c 9a 9c 52 df cd 70 54 3c 7d 6a 99 b7 df 7d 43 8a d4 d5 4e 23 13 4f c6 91 b7 e5 9b c6 ed bb 9a 19 af 36 e5 29 a9 81 95 2e 30 96 1f 8e a8 dc 44 26 fe 62 59 0c 92 66 ea c7 7c 43 fb 28 11 a1 3a 68 95 6b fb 13 51 8f 42 64 2e f8 a8 34 54 11 44 98 6e 76 67 dc 7f 31 f9 12 2b 87 74 24 b8 86 80 60 cf 37 04 ba d9 ef d1 ec 75 21 23 c1 0d 2f 11 26 c8 84 0d eb fa cd 78 b5 09 46 cc 2e 76 52 a1 87 68 4b ae 7a cb 34 cf 92 d1 6e 6e 81 18 f5 ec fd 16 57 bd a2 5d fd e6 31 9f 1e 0d 97 37 63 b3 f6 bf ae fa 4d df 79 1e 7a 2e f2 72 41 2d b1 e0 96 7d f3 33 71 cc 13 40 51 2c bd ec 8d fa 88 50 d3 30 e9 f3 c7 55 a5 16 e9 d8 4c 31 ab 4d b8 9c 53 cd d8 45 2d 40 cc b8 7c df e3 fa 04 da cb ec 32 5b fe 44 3c 80 Data Ascii: woKSMwkj<RpT<}j}CN#O6).0D&bYf\|C(:hkQBd.4TDnvg1+t$`7u!#/&xF.vRhKz4nnW]17cMyz.rA-}3q@Q,P0UL1MSE-@\|2[D<
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: ad dc 5e 82 da 62 b2 23 8d 30 23 46 85 13 45 02 91 44 92 2c 09 52 8b 37 e2 78 c0 24 e6 fb cf 2e 0c 27 db fa 91 d5 b2 93 b8 1f 4b 70 00 72 90 92 31 a5 03 01 c6 7d 13 04 33 1f 8f 14 a5 f6 bd e9 37 81 a0 a6 d5 79 a0 01 8b 90 86 38 59 24 10 49 20 48 22 a9 d0 3e e1 e1 2d bf ee db 9c ef bd e5 61 9b 4c 71 66 c9 77 33 c9 7a 50 d8 2c 25 f2 cf 08 40 f1 3f 50 f5 3b 04 33 ad 5d de 4d 4d c2 ca 99 2b c1 e0 57 f9 31 95 c8 34 4e d9 48 02 48 40 41 55 13 a5 00 25 12 91 26 98 3c ee ee 9c 82 4b ee f5 e9 74 3f 1f 2e c5 ee 73 aa 9a 33 67 23 b3 b2 2b a9 63 60 8a c7 93 d5 ff 42 30 dd fc 83 1f a8 05 71 da c5 1a 41 97 cb 11 52 9a 8a 38 b9 63 0d 02 91 d0 0a 4a 41 14 cb ab 20 55 8a 4f b0 af c8 e7 0b 65 11 0d c4 a9 a6 35 f3 75 87 6c 16 87 94 3c 0f 66 a0 f8 4e b8 fa 29 49 50 30 15 a7 Data Ascii: ^b#0#FED,R7x$.'Kpr1}37y8Y$I H">-aLqfw3zP,%@?P;3]MM+W14NHH@AU%&<Kt?.s3g#+c`B0qAR8cJA UOe5ul<fN)IP0
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 29 83 d1 89 bc 67 99 72 43 1c d5 f5 e9 0c 47 dd ef d9 f5 b4 74 00 84 55 e6 da b6 e4 aa 6d df cd 16 08 0c 34 60 92 d1 9b 34 d8 20 7c 5b a3 f5 43 7f 30 63 88 64 e9 86 1e 53 0c 0f 7b c7 d6 5e f1 97 7a d7 53 07 64 01 98 41 05 a1 65 02 5c 42 01 79 8d b3 e2 17 be e6 bc 50 df eb 3e b6 1c 5a c5 e3 21 ac 55 89 77 de c1 1e 6f 59 f4 f7 88 5a 85 81 06 0c c9 34 d8 d6 06 0d f4 5e 42 f8 e5 96 a5 59 32 50 81 fb 6d a3 05 0e 9c 71 aa fd 65 e5 33 eb 63 20 d7 8e 99 a7 e9 48 46 19 a3 82 58 b2 2e f2 17 bc b9 ff c4 6b df fc fc e7 9c 47 e0 3f af fe 50 3f f7 2e ed 61 fc 84 10 ee 9a 03 e3 e9 53 8d 33 96 91 dd 38 fa 04 32 61 92 a9 21 d3 30 30 f4 1a 86 32 65 ea da 1f 8d 31 b1 a6 be eb ea 73 ec bf e0 74 07 db 2c c5 48 83 47 28 ca 05 c1 80 56 44 e4 0c 23 c7 18 05 ab 86 65 03 c8 05 2f Data Ascii: )grCGtUm4`4 \|[C0cdS{^zSdAe\ByP>Z!UwoYZ4^BY2Pmqe3c HFX.kG?P?.aS382a!002e1st,HG(VD#e/
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 8d 99 d9 b5 02 3a 60 84 58 2b 52 0e 98 b2 34 22 12 2a a4 64 86 8d 2b ac ac 40 bc d5 da e8 51 a5 9a 87 4c a6 72 1a 45 8f 99 b1 df 88 0a 21 2c 3b 0a 87 95 7e ff 2c 4f ff e1 3c c8 aa 20 90 8c 31 90 84 cf 98 a6 6e cb e9 88 32 9a ac f4 5b f8 35 98 76 65 0c b2 60 02 19 e8 20 20 c8 21 c8 a2 07 44 a5 1d 4c a2 cb 85 9d 4a 19 36 a5 31 de 72 05 b6 6d 7d 94 c9 8e cd f3 ad 7f 6b 86 be e7 98 41 87 8c 89 3c ee ab bb d2 2e 08 5e 71 ed df f7 9d ff 8b ac 63 ee 22 0f 45 8a b9 aa 71 66 0e 9a 92 fd 91 a6 90 e9 b5 68 ce 02 87 66 ab 89 cd 54 79 d2 10 d1 00 9d 8d 74 59 d3 13 1b c9 44 ea 04 38 ac a1 64 28 fe 9e 4c ec 87 54 de 72 e6 3e 14 a9 ab 22 61 c8 b3 06 77 b6 ff 98 75 66 7a 79 59 d7 3e 71 66 33 0a 70 d1 5f db 1d 9b 52 f4 0a ce a4 3b 1b fd 49 a8 8e d1 ff b5 e1 ff 5b 90 fa 82 Data Ascii: :`X+R4"*d+@QLrE!,;~,O< 1n2[5ve` !DLJ61rm}kA<.^qc"EqfhfTytYD8d(LTr>"awufzyY>qf3p_R;I[
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 39 20 3b be f2 ff a0 65 f6 0c b7 2f f1 86 ce 8b 43 ac aa c2 75 55 63 ef 0d 9b f3 d3 31 35 f2 c1 5d 13 fc 31 5c 83 ae 87 61 10 e7 fb 15 dd e4 cf e2 5d bd 83 33 f0 63 ef 10 d0 1f 76 40 64 88 4c 64 0f 94 89 28 8e 21 56 8c c7 66 13 4b dc 6e 71 ff 7c da 5d 0b 89 68 71 e4 99 c8 91 6c f0 c7 fd 93 c1 65 30 87 b4 b9 66 c8 62 5e a4 b4 2f 2d 53 99 10 89 1d 99 c6 80 8c 88 1b f8 1b 5e c7 8f fe fc 9e 0e 18 21 09 49 81 36 a0 b5 88 35 89 43 92 0a 8b ef ce 37 2c 33 3d cb 6d a6 6a 5b 0c 12 10 24 20 52 2f af ac 80 6f bd 5c 67 a5 0f 5e eb d8 b1 7b e7 28 61 65 50 0c 80 cb 01 01 0e 5d ce 39 77 c0 88 3d 03 5f f2 2a 1e 69 bd 26 70 0b 56 c9 81 80 11 05 49 d9 81 02 e2 3f 68 89 71 8b 5b 95 f9 1c b0 13 44 0f 18 ed b9 1f ca a3 a7 63 f9 2a 1b fd c9 70 28 55 a7 72 37 a3 8d d3 58 05 95 Data Ascii: 9 ;e/CuUc15]1\a]3cv@dLd(!VfKnq\|]hqle0fb^/-S^!I65C7,3=mj[$ R/o\g^{(aeP]9w=_i&pVI?hq[Dcp(Ur7X
2024-04-19 14:06:53 UTC	715	IN	Data Raw: 1b 7c 3c 5a 66 51 e7 52 cb e0 ab cd 96 90 c1 e5 2c 16 e0 08 0c b4 3b 22 11 b8 9c c5 02 1c 81 81 76 47 24 02 97 b3 58 80 23 30 d0 ee 88 44 e0 72 16 47 e0 08 e8 93 3f 63 64 ec 11 64 b1 19 9e 3d 4e cb ab 65 ea cd 19 70 55 f0 53 f2 60 d5 08 c8 c5 4e 3d 20 bc c5 18 01 c7 d4 03 72 b1 53 0f 08 6f 31 46 c0 31 f5 80 5c ec d4 03 c2 5b 8c 11 70 4c 3d 20 57 67 5d 0f 74 5b 8d dd 1f 9d 89 01 5e b4 72 1e bf 70 82 54 3b 4b 8a 25 64 22 30 f5 e7 fe 67 6e b7 4d fe 6f 26 05 30 c6 c7 63 34 42 0f 08 03 22 1d 81 a6 71 4c 01 94 a8 0b 46 47 0f 08 03 22 1d 81 3d c7 14 40 89 4b 8c 8e 1e 10 06 44 3a 02 7b 8e 29 80 12 97 18 1d 3d 20 6c 62 7b 97 65 ff 34 f5 ec fe 31 5b c5 e8 f7 ae 44 c3 5b 47 27 98 3a 41 e2 7b 93 8f ff 75 8d 9f 2e 2b e9 1d 88 ad b3 b8 61 47 bb 70 ce 53 38 ed c2 39 4f Data Ascii: \|<ZfQR,;"vG$X#0DrG?cdd=NepUS`N= rSo1F1\[pL= Wg]t[^rpT;K%d"0gnMo&0c4B"qLFG"=@KD:{)= lb{e41[D[G':A{u.+aGpS89O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	50086	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	526	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9990 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:46 GMT Expires: Sat, 20 Apr 2024 11:15:46 GMT Cache-Control: public, max-age=86400, no-transform Age: 10267 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	721	IN	Data Raw: 52 49 46 46 fe 26 00 00 57 45 42 50 56 50 38 4c f2 26 00 00 2f ff c0 3f 10 09 58 92 e4 d6 6d 6a b1 02 f8 58 dd ff c2 02 21 d2 76 f2 1d d1 ff 09 c0 bf 98 99 94 e9 95 31 17 73 31 87 fd 1c 77 f7 13 90 62 f6 71 80 74 c4 d5 c7 a6 31 1e ee dd b7 e8 99 b5 5b 12 96 2b 52 6d 65 46 31 2f b5 66 99 c6 b6 46 92 ee 1c 63 53 c4 35 e7 74 3e 85 65 85 11 11 00 0e 90 02 00 1f 83 14 f3 37 29 e2 ea 7d 83 d1 17 64 5c 5d c8 b5 e8 80 0a 44 f1 1e 19 70 b3 5c a8 5a cd ec 14 76 e8 98 a1 be e3 e5 ed a7 7e ed c2 6d 24 c9 ae d2 01 a0 b5 e6 8a fc 83 c3 c4 e7 bf e3 1e ca 46 10 49 4a 36 01 43 00 50 03 d8 3f 97 01 1c 86 6d 24 49 4e fa b5 44 58 e4 1f 1b 51 50 58 fd 9f 00 fc d3 f4 27 29 c3 78 e9 e7 8f 98 31 43 e8 32 73 71 01 58 78 3a cc 5c 18 5c b9 cb c2 37 73 0e e1 f2 38 8a 10 76 e3 02 70 Data Ascii: RIFF&WEBPVP8L&/?XmjX!v1s1wbqt1[+RmeF1/fFcS5t>e7)}d\]Dp\Zv~m$FIJ6CP?m$INDXQPX')x1C2sqXx:\\7s8vp
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: db b6 bc 52 ee e7 fd be e4 cf fe e3 99 19 dc dd 1d 4a a7 72 3a 7a 4a 2a ab a8 1c 8e 80 e3 70 ab ac f3 03 70 77 87 2d 91 5f be 47 0a 2c 00 04 e8 bc 6f db b6 6d 24 0d d1 5e b5 bd c6 ee c5 dd 9a 6d 7b c9 b6 d1 6c db a1 6c 2b 71 f3 cc f2 74 42 51 5c 02 a6 5f 70 42 c0 ef fa ff 7e df ff e3 41 fe e3 81 24 43 0c ca af 3a bc e9 dc fd b5 2f 17 1a ef fc bf 67 27 c6 3d 98 23 81 53 41 90 c5 91 9e 3b a0 33 e0 6a fc 70 44 0f 72 74 8e ec b5 de ca 1f 3a 05 80 f5 3a 28 9c 0f 86 f5 33 0a 77 e1 14 2b 7d e2 3e 28 8e 54 76 fd 5f 9c e2 c9 99 72 ab 28 dc 36 5e 57 1c 4b 41 18 9f 0b 97 d2 b9 0f 01 36 45 8e f6 55 13 27 76 1e f1 5d 2d 11 f0 a2 af e0 8a fc bd 60 37 de 1d 59 e3 38 0a c8 19 95 ef 8e a3 f5 66 c8 57 a6 93 2a dd 94 01 aa 2a 20 e9 55 b3 51 8c d9 14 65 ef cd 71 25 80 40 60 Data Ascii: RJr:zJppw-_G,om$^m{ll+qtBQ\_pB~A$C:/g'=#SA;3jpDrt::(3w+}>(Tv_r(6^WKA6EU'v]-`7Y8fW* UQeq%@`
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 8b 95 75 aa 7d 77 3d 29 d7 da 4e 58 47 f1 31 c7 ee 1a 2a 0a b2 9b 41 6b 22 80 63 e2 95 22 05 03 9a 80 b7 fb c4 9c 02 21 5d a6 05 a9 b7 e4 da 8a 12 ca 6c dd 5d 4f b1 d2 ea 54 1b a4 c9 aa 50 99 54 ee 61 1c 33 90 12 d2 74 a5 76 8d b0 34 65 8d 62 1a 26 7a 3a 80 47 69 0f 18 a3 a2 bc d8 6e 08 48 59 4a 4e b0 6a 98 9f 2b 69 9d 0b 42 69 8a 51 ec 52 12 a7 20 87 a0 ed c0 0a fc 90 fa 7d 68 c5 44 45 38 09 7c 24 8f 88 1e 9c cf b1 28 a4 29 d7 16 10 d7 c9 75 59 a1 c6 5c 8b 67 75 95 7a 18 91 06 ad 64 27 02 b6 63 16 96 42 42 43 20 31 19 14 0c 06 17 33 8f a1 f7 1d 46 65 35 d7 56 55 64 f6 79 8b 6c c7 ca 51 cb 35 2e 51 64 93 f0 87 52 0e 72 d9 a7 32 5c d1 6c 2d e9 da 90 9d d2 49 d1 f6 8f 59 18 a0 43 53 08 25 d3 4c 58 7c b7 1f 4c 02 19 63 30 ce 17 9c af 20 42 a3 11 02 b0 0b 35 Data Ascii: u}w=)NXG1*Ak"c"!]l]OTPTa3tv4eb&z:GinHYJNj+iBiQR }hDE8\|$()uY\guzd'cBBC 13Fe5VUdylQ5.QdRr2\l-IYCS%LX\|Lc0 B5
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: b2 68 66 5e ab 59 2b 41 08 35 8c 93 5b cf 62 03 5e 09 31 2d 07 61 5d 67 1d 62 e2 c4 fc 7e 7b 50 13 14 86 b5 cb 2c 1b d3 09 f9 94 78 b9 16 ce 8c 8b 85 74 13 2c d9 b5 4b 11 a9 74 a4 1a 90 ce 62 45 b2 eb d7 b1 95 90 ea 04 1b 8b 40 fc 56 ad a1 b5 11 c2 6b 9e 0a 04 28 23 ee d9 b0 11 7b 86 90 e4 75 b2 11 14 11 b8 97 a3 b1 d3 8d 15 04 43 a1 6d 85 57 ad 6a 12 f3 13 d6 fc 6f 60 1f 6c a4 c4 29 01 c0 53 1c 72 fb ae 15 42 3b 64 35 67 15 92 e6 d8 12 99 d7 83 31 00 75 41 b3 1b 53 0c 43 79 9d ec 20 46 b1 02 ed 2a 72 d1 c5 40 ac 23 e6 52 d6 91 e6 5a a5 19 bc e4 0d 7b 9e 5b 5f c2 1f 34 f4 e8 98 63 77 3d 0d 22 62 55 d9 c6 cd 64 37 5e 02 a4 89 19 9a 94 6a c6 4e e2 42 96 a0 5a 20 5d 21 c7 11 75 82 b3 15 91 84 2e 92 e0 12 92 fa dd c0 9e 3f fd 25 53 13 32 4c 42 0e d9 21 dc 49 Data Ascii: hf^Y+A5[b^1-a]gb~{P,xt,KtbE@Vk(#{uCmWjo`l)SrB;d5g1uASCy F*r@#RZ{[_4cw="bUd7^jNBZ ]!u.?%S2LB!I
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: c6 91 ad 6d 99 09 58 93 ef 6e d4 46 26 be ba ee 3b cd b9 36 9d 5c 5b 81 d4 95 56 a8 48 a1 e2 2a d3 4f 55 a0 95 46 bf 1a d4 ed bb 6b e7 93 f7 12 82 cc 0b 4a 2c 7b 2e 5f 38 6c f8 6f 79 27 0c ec 91 59 83 5c 4f 25 92 17 5b 31 4f ae f5 83 71 67 f1 b3 11 82 5c 0f 92 30 fa df 2c 8e 40 43 ef a8 71 77 8d 90 52 ee 33 89 44 a5 42 82 4f ed 2a fe 19 7a 22 cd 15 29 d5 c6 fb a5 9b 6b 5d 88 aa 90 68 81 50 b4 c6 4a 2e 6e 52 b7 03 0e 92 08 75 e2 ce fe 47 24 68 3b 60 f5 b6 dd b5 c5 12 62 74 48 07 52 0c 03 b1 48 f8 f5 d8 5f da b4 92 b7 83 27 df 0a c1 d1 08 c9 0a 84 66 48 31 30 eb 52 78 57 14 59 42 23 a4 b7 dc a2 b5 be c3 91 66 af 14 d9 11 ba 78 10 2e 9d 72 3b 0e 76 05 72 f5 01 72 e9 fc e0 3f 50 8e 07 95 bc 94 af 4c 50 67 8f a9 10 3f bd fc 0e 50 a9 aa 2f d2 eb 5b 84 70 7a 3a Data Ascii: mXnF&;6\[VHOUFkJ,{._8loy'Y\O%[1Oqg\0,@CqwR3DBOz")k]hPJ.nRuG$h;`btHRH_'fH10RxWYB#fx.r;vrr?PLPg?P/[pz:
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 0f 7a 9d 2d 77 7c ae dd d3 79 b0 34 af 55 a9 b4 32 45 c3 bc 10 4a dd 12 21 a2 0a 7d 7e 2f 2a 0b 66 d1 e0 98 ad 41 29 97 b3 50 83 10 5c 74 26 41 9a 86 e6 fc 6b 8e 7f ca 10 dc 4d e0 80 06 23 ed 1d a8 a1 35 89 f9 20 45 3f 57 ad 44 ae 0c e2 a9 0d 64 60 7f 90 c5 60 14 48 45 d1 2b e7 97 ca 92 f5 a7 26 8f f1 15 a1 9b c8 2d b2 13 63 a5 04 36 08 36 b6 67 3e d3 c2 11 93 c4 15 5d f7 94 21 21 06 c9 91 2d 0a de a4 ff 19 f2 fc 56 4a e7 c7 15 ee bf d2 8e b1 71 21 93 ac 50 04 a0 bc f2 4e f9 c8 0d 79 5b 0d 59 83 53 4a 16 f2 38 d9 3e a4 a3 3b 92 31 db 3f 3f ba 6b 3e 30 99 9a 49 e8 fd fd 52 e3 00 f7 9b a9 5a 1e c5 36 37 c8 f3 f9 8e 6c 44 19 47 df b1 ce 5e 48 78 2a af d8 b5 15 57 30 c8 77 56 f0 43 05 52 b3 c2 2e 15 67 13 32 a3 28 2a a3 2c 14 bc 65 3f 7f 76 dd fa 92 fb f0 a9 Data Ascii: z-w\|y4U2EJ!}~/fA)P\t&AkM#5 E?WDd``HE+&-c66g>]!!-VJq!PNy[YSJ8>;1??k>0IRZ67lDG^HxW0wVCR.g2(*,e?v
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 0b 61 2a 44 ec 6b b6 72 3a 21 d2 74 41 81 0a fd 16 36 27 b6 1b 38 ef 21 3b 75 4e b1 3d 4b d3 40 8e 60 23 43 2a 21 96 00 97 00 f7 57 36 47 81 83 20 10 c8 1a 83 70 e5 97 9e 75 f5 e7 9e 76 b6 58 13 76 93 dd 4a 17 c5 c7 71 56 2f 40 b7 bc f4 e4 cd 1b 91 b7 ac 2a e4 d5 dd ad 90 50 93 15 8e 95 f6 35 7e ea 2c 67 79 3c 94 20 15 6e 0d 2a 50 47 b0 4b 64 c7 9a 5d f9 e9 b9 8e 78 e6 24 53 b1 87 ff df 06 ae fa b1 04 07 0c 24 e0 c0 bd c9 a2 11 41 da ca b4 22 47 71 cf e5 18 ba da 0b 4f 39 45 64 df 92 ec de 2a bf fe 6f bb 64 af 52 16 d5 47 b6 94 61 ba 38 d1 e8 29 4a 48 5b a5 e1 a9 f5 fc dd 59 83 55 7a 81 c1 7e 6e cd 01 85 b6 d8 5d c0 85 ce cc 9c ed f2 99 76 18 63 56 12 8b 60 0b 19 01 9a 22 d9 23 95 87 25 bd 58 44 91 5e a6 a6 9b 9d d8 91 ab bc f4 82 f3 ad e4 4b 96 7d 5f fd Data Ascii: aDkr:!tA6'8!;uN=K@`#C!W6G puvXvJqV/@P5~,gy< nPGKd]x$S$A"GqO9Ed*odRGa8)JH[YUz~n]vcV`"#%XD^K}_
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: d2 8a 5e 2a 3a db c0 5f 38 37 04 3d df 29 c1 a5 e4 f5 1b d0 91 9b 46 34 58 4d 85 b8 56 46 c4 41 56 36 71 f6 fa cb 51 cf 17 10 2d e0 eb ab 85 bf 5e 9d f0 13 f0 77 b5 80 90 eb e7 f1 c9 77 38 f3 e4 f0 fa 9c 38 9e 63 f3 c3 20 3c 6e db 49 f2 78 9c 4a 36 38 38 b6 5f fa fb f8 f2 fd 94 09 dc 9e c6 21 a4 24 5c 08 52 10 43 4a 4b 83 30 63 fb c7 96 e0 c7 78 dc 8e 83 ed e5 b6 6d 0f 5e 7d 14 d9 36 7b 43 e9 29 a5 07 89 2c 94 6d 75 14 b9 7d b4 8d c3 f7 5b 70 d3 a9 8b a3 35 02 1e 08 88 10 f0 6d f5 5f 2d fd ed 84 40 40 d8 f0 1b c6 05 04 ae 3e c0 ce 13 f0 ab f9 55 37 35 0f b6 2d 06 09 0f 52 f8 1b 4e e4 38 b1 8c c9 74 27 43 76 fc 54 57 05 84 f6 a1 30 e1 84 fc fb 9c 67 27 cc 4f 98 4e b8 3f bf 7a 5e dc fd 91 f1 e1 f1 e5 02 82 df 0f df ff e7 8f ce 1e fb db 26 31 35 13 c4 86 44 Data Ascii: ^*:_87=)F4XMVFAV6qQ-^ww88c <nIxJ688_!$\RCJK0cxm^}6{C),mu}[p5m_-@@>U75-RN8t'CvTW0g'ON?z^&15D
2024-04-19 14:06:53 UTC	484	IN	Data Raw: d6 ad d4 db d3 2b 8c be 9a dd 75 01 81 e4 ec ab 2c 24 41 c5 b6 e5 6d ea c2 8b d6 b3 bb 2e e6 af 17 bd 0d 8b b3 37 65 14 5a cf ee ba 92 6b 2d a4 98 a6 ea 26 63 7b 13 42 23 56 b5 bb 76 21 24 e5 12 de cf 4a 6f 53 07 97 e4 81 f9 c3 24 e1 94 99 59 cb b5 51 2b b2 a5 bd 4c 5d c5 ee da 19 b5 9e ee 48 72 c0 90 1e 75 94 c0 09 69 32 83 5b 66 56 8b ec c2 2f ba 20 46 c7 0b cd 40 d1 6a e5 46 28 4a ec 5a 88 3d ea 92 24 c8 06 ab 8b fb 77 53 62 a7 da 91 da 2b 56 97 a6 22 3b 24 d7 aa 87 25 f0 26 f4 33 95 ac 52 14 45 b6 46 34 59 f9 90 e1 ab ec 67 88 ba 09 2d 37 58 d9 df 0e 15 b0 92 12 26 d2 42 50 e0 59 b5 42 e8 c3 44 63 56 ac a6 42 c8 dd 5b de 04 93 fc 58 24 1c 18 25 84 07 41 05 c4 b1 5a 02 52 02 90 c0 37 88 c7 9e 84 f1 da 39 9a 98 4d cb 40 52 57 8d 70 ff 60 52 2d 90 18 0b Data Ascii: +u,$Am.7eZk-&c{B#Vv!$JoS$YQ+L]Hrui2[fV/ F@jF(JZ=$wSb+V";$%&3REF4Yg-7X&BPYBDcVB[X$%AZR79M@RWp`R-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	50088	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	530	OUT	GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:54 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 185044 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4104 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:54 UTC	720	IN	Data Raw: 52 49 46 46 cc d2 02 00 57 45 42 50 56 50 38 4c bf d2 02 00 2f 0d c2 49 00 4d 40 0c 80 36 6c 33 70 08 09 74 ff 1f 6c 3b cd 76 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 6f 1d 27 89 26 3b 7b 29 0b 27 89 95 d5 fc cc 49 2e 2b 4b 29 b1 f4 4c f1 24 69 91 c8 53 22 4d 52 92 48 96 a5 e2 db b6 c0 95 58 d2 19 65 e1 44 73 e2 ac cf 85 72 8b fc e6 18 6d cb 47 52 6c d3 b7 22 dd b9 12 67 be 6c 4a 11 c9 05 37 6b 66 b6 33 8b 2d 60 b7 66 53 24 89 9d eb 36 68 9b c4 c0 d1 92 6f c4 89 56 2d 47 c9 12 64 59 10 26 7c c7 21 89 57 e9 95 57 64 49 b6 2c 49 b6 2c 71 3b b6 9d 93 ed 1b 25 23 c9 4e 64 93 30 66 1b d3 5d b4 80 d7 22 41 b6 20 5a 74 Data Ascii: RIFFWEBPVP8L/IM@6l3ptl;vAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%Ro'&;{)'I.+K)L$iS"MRHXeDsrmGRl"glJ7kf3-`fS$6hoV-GdY&\|!WWdI,I,q;%#Nd0f]"A Zt
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 76 64 ce b9 64 fa 44 7a 6b ad ff 0a db b6 6d 98 74 cf 3b 50 4c 9a 76 91 aa 2d f4 b8 0c 4e 5c 82 20 4a 79 85 14 14 2b 90 09 05 86 c5 66 35 a9 16 aa 7c 5a 09 31 b1 62 cd 41 b5 c0 28 16 aa 4c 6e c1 c0 19 c4 42 ac 58 d3 10 0a 09 11 91 14 98 58 31 09 42 82 98 49 60 0e 41 18 30 c0 66 18 41 71 91 12 52 f4 2a 7a 2f 4a 51 b5 9a 61 08 42 31 a9 15 35 43 6a 81 60 18 82 61 55 ab 86 04 56 0c 13 23 90 c5 02 eb 8c ce c0 62 c5 4a 81 20 88 98 84 98 d8 42 4c 4c 89 c9 5b bc 89 08 52 64 42 20 d8 ec 62 04 a1 98 22 08 66 16 b5 42 33 35 b0 9a d5 ac ff d8 ac 44 2d b4 20 16 44 89 6a 81 60 36 b9 9b 1e 0c 88 59 19 60 9d c5 45 88 37 9b 11 5a 60 c5 8a 94 28 81 88 95 10 11 d1 02 53 4d 91 09 82 14 c1 8a 14 59 94 20 08 c4 90 6a 54 8d 52 c4 19 08 5b 4a f4 bf a8 46 cd 66 aa 61 62 62 25 88 Data Ascii: vddDzkmt;PLv-N\ Jy+f5\|Z1bA(LnBXX1BI`A0fAqR*z/JQaB15Cj`aUV#bJ BLL[RdB b"fB35D- Dj`6Y`E7Z`(SMY jTR[JFfabb%
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: fa bd e9 bd eb 63 d6 5d fc cb ae 0f 9c d2 87 74 97 9a 68 d2 87 44 3b 06 06 06 ec f6 cb ed 76 ee f5 05 86 18 e1 b4 0d 9c 81 61 b8 c8 e4 9b 5c 7a 1d 75 12 bf 9e 4d 65 ae 5d f5 5d ad 7b ab 7b 2b ad 0e 95 a6 67 d7 d3 90 05 29 32 bd 94 3a d5 ba d6 d2 8a a6 a7 a9 d6 2e ff e1 be de fe a5 35 4e 29 b3 ee b3 5e 8f 6a 3f 73 4a b1 aa be ae e2 8b ee 52 5e 8e b5 19 17 76 c8 46 65 4d ad 3e aa 87 bd d9 64 d2 29 48 29 c4 66 36 23 88 4f a1 14 43 88 6f 76 e2 6f 44 37 3d 8c d4 26 8b aa 61 62 84 d3 90 92 2a 71 51 b1 59 2d 24 55 5c c5 66 88 a6 df 7f de bf fd 63 67 2a 96 f4 a5 ca ec f1 a8 fd 5f 75 29 52 d5 ac ff 7e 59 9f f4 e7 2e da 17 3b 06 76 08 65 6d aa 4d 0c 9b 10 29 66 6f 56 35 35 08 dd ea 51 1d 54 0b 82 20 8c 82 70 0b 5b 60 7a e8 e1 2e 44 d5 88 12 98 2d 0c 31 a2 11 13 02 Data Ascii: c]thD;va\zuMe]]{{+g)2:.5N)^j?sJR^vFeM>d)H)f6#OCovoD7=&abqQY-$U\fcg_u)R~Y.;vemM)foV55QT p[`z.D-1
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 03 e9 b7 0a 0d 95 31 30 73 96 8b 86 40 c3 ab 5a 31 43 fa 3a 90 7e 8a c5 e7 1f c2 db 77 ae b7 c9 ef 95 ea a4 69 31 c5 a2 9b ae 41 60 c1 39 b8 c3 9b 1e d6 81 f0 5b ac fb 40 2e 16 24 e8 04 12 0f ac 58 d1 10 78 60 c5 d7 8d 3f 3b 77 88 45 43 e2 db ce 8a 15 e1 66 45 e0 1c ac 68 58 11 f8 fa a4 ad eb 86 97 31 79 86 37 05 85 cd b6 58 f1 c0 36 89 c5 39 2e 7f 3c 09 04 1a 02 01 fa 07 81 c0 62 0c 84 fb 40 a3 c0 af 8d 40 e0 1e cc 0e 1d 85 f0 d1 47 ce ce 49 e0 eb fe 71 60 f5 c1 c7 d8 cc 41 c3 c7 b8 0b 34 8c 39 06 de dd a2 be 59 f0 fb f9 ed 8a d5 db 73 dc e6 3a 0f cc 90 8b c5 9f 81 40 20 17 0d 0d 7d 71 0d fa a2 f9 64 a5 f0 49 b8 88 45 2e 62 7d fb 7d 67 9f 04 ee f0 40 58 f7 c5 8a 66 7a 20 10 68 68 f0 f8 31 17 b9 ee de d4 d7 14 8b 80 c2 0c 1f e3 93 7d bc 11 eb 9e 21 b1 6d Data Ascii: 10s@Z1C:~wi1A`9[@.$Xx`?;wECfEhX1y7X69.<b@@GIq`A49Ys:@ }qdIE.b}}g@Xfz hh1}!m
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 66 86 70 3a 1d 3b cc 66 3b 31 c8 96 31 b6 98 59 97 19 0e ee bd ab 7e bf f5 2a 4e 3a 33 6b 45 7f 73 c0 f6 df b9 dc b4 da ef f7 5f e5 5d bb 4c 93 34 92 46 bd cb 2a ee 25 14 57 82 9d e0 d0 12 3a a4 51 72 20 3d d4 1c 0e 3d b4 24 90 f6 39 5f 62 48 c1 a1 86 03 27 f4 de c1 05 6c 63 35 cb b6 a4 51 d7 8c da 8c 34 75 ef b7 ac b5 fe bc 6d db 56 6d 47 b2 d4 5a 1f 73 ed bd 0f 48 32 99 39 bb 07 73 c4 4d 66 66 66 fc 85 5b f2 89 99 99 99 f9 07 18 df 98 39 f3 32 53 b8 07 ba 87 87 99 74 a4 73 36 ac 39 47 b8 82 24 2b 6a 06 30 77 f2 46 f0 36 f8 ef 8b d6 b6 65 73 5b db ba ef e7 fd 7e 2c 66 52 81 b0 c4 92 85 96 31 30 92 c1 bc 36 33 33 1e 31 33 33 33 33 8f d0 48 e2 38 46 d9 b2 18 4a 52 95 8a 54 a0 62 fc f1 fb de e7 6e 4b ce 58 87 e3 98 02 ff ff 8f 46 e4 f3 bf bb e7 ee 7f 67 24 Data Ascii: fp:;f;11Y~N:3kEs_]L4F%W:Qr ==$9_bH'lc5Q4umVmGZsH29sMfff[92Sts69G$+j0wF6es[~,fR1063313333H8FJRTbnKXFg$
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 96 64 14 bc 4b 0d e1 60 51 16 1a 91 bd 74 3d 1a 37 fa 51 79 e8 f4 11 b6 2b 6d 65 40 09 68 42 dc 66 08 5f 2e 24 21 e3 ef d9 17 02 48 9c 51 e3 a2 d3 36 f7 c1 08 cc 2b f5 7c fb e4 9b 2f b9 78 db 0a 3f 72 82 07 d2 08 19 6a 4b 1b e3 88 68 13 b4 15 db 55 1b 7d be 05 3b a0 9b 89 99 82 e3 69 e8 c6 3e 53 a8 38 c6 75 ab ef c7 e9 c4 38 4c 2f 4e 4b 3a 3c fd c3 fd de d7 5f 17 11 47 76 43 e1 49 83 a0 28 70 6f 93 03 e6 3d 07 6e 44 6c 3a 93 9b 5a cb dd 90 03 a8 a0 79 b6 5a cb 5a 2f 8a 8a 82 87 d5 d1 a4 37 00 8b a1 ea 06 0a bd 57 e9 13 c9 01 79 28 5f 23 4d d9 14 3c 88 af 9c f8 e4 e7 28 24 83 42 0e 5e 6a 21 c9 48 10 2c 60 9d 3f 54 7d 77 4f 59 7a e4 40 d2 09 cb 5b 7a 91 18 35 6a 92 24 72 d6 ac f1 2e 9d 72 8b 47 1c ba b2 60 d5 1d 37 08 9f 34 2b 05 82 5d 0d f2 27 b1 22 17 8b Data Ascii: dK`Qt=7Qy+me@hBf_.$!HQ6+\|/x?rjKhU};i>S8u8L/NK:<_GvCI(po=nDl:ZyZZ/7Wy(_#M<($B^j!H,`?T}wOYz@[z5j$r.rG`74+]'"
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: d0 98 e8 82 57 33 b4 e5 c1 c6 43 42 8d 59 63 ed 64 d7 eb de e2 c1 8c 30 10 57 d7 6a ce 88 6f a4 34 e5 44 c9 56 32 05 05 8a 9b c1 da b6 a3 36 46 6d 14 43 4d 69 92 31 32 c0 9b de bb 1f fd dc 73 ee f2 f4 b8 75 50 18 71 c7 bd 4c cc f3 87 b3 ac c1 1d 92 e2 ee 7b 0d ba ef 6a d8 d3 c6 e5 2e 83 32 a1 4e 5b 10 40 c3 d5 2c c4 68 76 f0 7d e7 0f 2f 78 76 f2 a8 33 1e 87 ad 31 ac 95 14 dc e6 0f a3 8d 52 ab 8d ac 6b 34 61 97 a2 c2 a0 46 28 d0 ec 8c de c7 cc e2 ca 9b 69 85 4b f2 d9 3e b9 d4 f6 16 b0 38 b7 89 67 a5 4c 9d 28 3c 34 29 1c 65 2f a6 37 59 d0 e2 1c ed af ea 87 81 20 26 20 04 8c 83 08 97 ca db a9 44 12 61 3a 78 28 2b 95 44 7b f5 d5 03 7c 5e 78 d3 41 17 40 78 f7 e5 f7 71 da 62 4c a8 01 47 1c c6 e9 50 17 51 0f 42 2d 5c c5 d1 23 1c 95 1c bc 82 39 43 7d b3 6e 7c f3 Data Ascii: W3CBYcd0Wjo4DV26FmCMi12suPqL{j.2N[@,hv}/xv31Rk4aF(iK>8gL(<4)e/7Y & Da:x(+D{\|^xA@xqbLGPQB-\#9C}n\|
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 29 6a c9 b6 75 7f ea 52 4a 0c d2 38 36 6d 66 d5 06 4f f7 a2 48 26 0a dc fe f2 7e 8f 97 af dd de 3a 5f 98 7e 8c d7 78 ea 23 44 7a b5 e9 d7 3b ec 79 52 20 c9 cc da 9a df e9 c8 ce da 58 03 3e dc 44 b2 52 4e ad e3 86 e2 ea f3 53 7d a6 ec 01 5e 6f 97 d7 be a5 04 cf ee a8 d8 7d 81 0e 10 f5 ba 4f df 31 0b 6c 4a a2 2a 0b bf d8 9c 2a 15 49 b6 88 95 70 be 7f 1b af 32 34 14 2e f2 ca f4 68 da 60 c0 00 4e 5b 35 d8 74 62 8d e0 75 98 34 fb f6 bf df be b5 5e 16 bc ed 62 a1 13 b1 34 32 29 54 c9 2e 95 b3 dc 48 70 40 6f 8f 97 30 65 4d 07 1d c2 c3 95 c8 39 1a dc 46 eb f6 1a ba 81 d1 6d 49 02 b0 90 a1 6e ce 32 35 e2 89 c0 de 7f 3f 74 22 63 2e d4 72 ce 15 1f 8d f9 3c 76 b7 c3 4d 22 8b f4 f6 9c 5b 9a ba bb 5c 2f 15 28 ee 4e 7f 72 a1 a0 dd a2 ab af 3f 67 5a ec dc 28 30 b9 b8 ea Data Ascii: )juRJ86mfOH&~:_~x#Dz;yR X>DRNS}^o}O1lJ**Ip24.h`N[5tbu4^b42)T.Hp@o0eM9FmIn25?t"c.r<vM"[\/(Nr?gZ(0
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 33 3f 8c ae 0a 1b 06 6a 10 5d 6c 43 c0 5b 45 bb cb fc 45 74 d0 bc e7 97 b6 ee fc b6 f9 b6 bb 57 b4 92 42 04 81 9e 89 01 b6 82 c5 70 96 67 cc 99 25 ce 86 4e 71 93 5b 5b 6c 92 c3 5a fb a5 e0 3e 15 a6 93 20 27 01 b8 9c 36 9b c8 f3 c0 c0 55 c4 63 f4 be ea 9e 78 78 85 f4 62 3b d5 0c b4 f0 58 42 05 ac ed c8 20 71 ea f7 fd a7 13 1e 85 cb 00 80 6f 55 a5 47 00 21 e2 6b 83 f1 6a 47 78 3c 6c 1b e6 c7 dc f5 91 60 a2 0e ac ac bf f5 d7 f8 3a e8 6a 6b 63 9f 1c fc 9e 3f 7e fa 2f b6 ff 93 9e 93 6c 9a 2d 4f de 7e dd 52 79 63 f3 a1 60 08 d2 c6 6e 4a 9e 81 9a a4 d8 8f b7 43 bc 0d a2 47 59 93 1a 34 cf 68 a3 50 ae 7c 6b 0f 55 9d df dc ee 93 54 b0 67 3d 34 cb 62 42 d4 55 f8 d6 2d 56 3e 7a a6 91 48 fd 5f a7 09 cd f8 b0 fe b2 79 4e d0 b8 8a 29 cd 92 69 80 bc 8a de be c0 b2 60 32 Data Ascii: 3?j]lC[EEtWBpg%Nq[[lZ> '6Ucxxb;XB qoUG!kjGx<l`:jkc?~/l-O~Ryc`nJCGY4hP\|kUTg=4bBU-V>zH_yN)i`2
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 3a 30 53 20 1a 15 73 f4 da 90 cc 1c 2f 98 1b 11 44 c7 da 49 de 26 a0 11 b1 c5 93 86 45 4a ea e4 a0 a2 75 c9 e8 a8 d4 62 db 8a 1a d6 dd f8 ba af 35 79 f3 9d 52 48 c4 93 52 48 32 ca 59 09 e6 b3 e6 53 26 4e c5 ab 4e d8 a4 66 09 16 c4 f7 34 23 9f af 79 49 ca 4a b4 bb d1 4a c0 da 27 a7 f0 21 31 31 4a 23 39 58 74 f3 dd de 40 0c 24 29 20 e7 a8 39 3c 2f d5 c3 4d 6f b1 66 4f ef 49 6f 86 91 63 7a b8 b3 48 12 8c b0 4b 13 11 e0 02 a2 21 88 4f 3a 3d 0b bd 3c e5 c9 48 6f 2a 58 c8 4c 5b 0a dc 6e 94 c1 10 d0 48 40 c9 f1 a1 41 98 85 96 3a c9 90 c1 14 28 ce 6d 27 67 c0 e5 19 ab 8c 66 fd 08 6f 75 a9 34 d5 51 98 8f 3a 7a ca 40 e8 a4 a1 66 46 61 c4 64 01 5d d0 74 19 b2 98 2a 5f 78 2f e6 b7 00 26 3f 78 3a 30 31 2c 95 68 54 18 38 fe c4 40 de 5f 4c 17 52 87 03 c7 d2 bc 19 54 8b Data Ascii: :0S s/DI&EJub5yRHRH2YS&NNf4#yIJJ'!11J#9Xt@$) 9</MofOIoczHK!O:=<HoXL[nH@A:(m'gfou4Q:z@fFad]t_x/&?x:01,hT8@_LRT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	50087	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1648	OUT	POST /_/PlayStoreUi/browserinfo?f.sid=-3106867419827377814&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=158010&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535610.0.0.0; _ga=GA1.1.702310893.1713535574
2024-04-19 14:06:53 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 32 25 32 43 32 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C2%2C2%5D%5D&
2024-04-19 14:06:54 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:54 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:54 UTC	15	IN	Data Raw: 35 64 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 Data Ascii: 5d)]}'[[["f
2024-04-19 14:06:54 UTC	84	IN	Data Raw: 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 32 35 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 34 2c 22 2d 32 38 37 32 30 33 31 36 37 31 39 34 35 31 35 39 33 39 33 22 2c 31 30 34 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 33 5d 5d 5d 0d 0a Data Ascii: .mt"],["di",25],["af.httprm",24,"-2872031671945159393",104],["e",4,null,null,93]]]
2024-04-19 14:06:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	50091	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:54 UTC	526	OUT	GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:54 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13528 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4104 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:54 UTC	721	IN	Data Raw: 52 49 46 46 d0 34 00 00 57 45 42 50 56 50 38 4c c3 34 00 00 2f ff c0 3f 00 09 46 6e db 46 82 e3 b4 45 e1 f4 ff 0f de e0 39 cd 35 a2 ff 13 80 3f 1a 9f 21 2d e3 22 b2 40 43 e8 42 92 08 83 70 9d 24 89 f4 a9 aa 70 cc b7 b8 55 d5 38 21 9e f4 b4 c6 18 dd a6 2d 47 ef 1d d0 4b 3c 48 fa 6c ad be 03 e5 10 f9 20 da ba e3 5e 64 8c 4b 19 b4 47 3f c2 91 9c ad b5 4b 2f 03 c8 39 67 bf 92 86 20 1f 68 49 14 85 23 3d 3f 75 01 47 b2 6d 55 55 17 72 0a f8 ee ee 32 ff c1 69 a4 f7 dc c3 cd 48 1d 47 b2 ad 2a fd ff c7 dd 1d a2 60 49 fe 71 b8 bb eb c2 8d 24 49 8e 2a 2a 99 3d 2d 17 4f c3 9a 04 96 86 fe 4f 80 52 c1 66 49 01 b0 9b aa 47 4d 68 40 c1 fe b7 8b 84 49 ca 24 65 c8 cc 8c 7c 57 35 11 c0 c4 4e ca 80 20 00 94 40 a9 00 8b 5e 00 98 10 0c 58 b0 00 b9 56 02 c8 08 55 b8 ad 75 cc 36 Data Ascii: RIFF4WEBPVP8L4/?FnFE95?!-"@CBp$pU8!-GK<Hl ^dKG?K/9g hI#=?uGmUUr2iHG`Iq$I*=-OORfIGMh@I$e\|W5N @^XVUu6
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: de 5f cd ad 0e db b6 6d 7b 04 a7 1d 33 43 66 cc 36 43 b6 6d 5b dd b6 dd 6b af ad fe f5 ff bf ef 89 09 e0 9a ed bf 6c db b6 9b 31 a7 6a 21 89 d5 12 96 5c 04 e6 70 1c 97 53 a8 50 5d d7 f5 1e 60 ad a3 18 be 4c 1c 87 73 d8 b4 c1 3f ee d4 f0 9f 92 69 a7 c2 03 76 fa c7 33 85 95 92 e9 a0 9d 2e ba 68 a3 8a e1 64 b2 62 38 74 d2 49 37 35 fd c7 25 7a a1 17 ed b4 c3 e3 18 7a 4a 87 4e b8 f1 a5 0b fe a8 73 38 29 38 14 a5 d0 a8 2f 35 6c d4 e1 38 08 a7 d1 a8 eb 82 de a8 9c c0 48 61 53 f7 18 e4 d6 b6 ed 5a cd 5a 07 0f a1 4d 7d 17 d4 45 15 54 01 35 10 51 02 55 90 ca 46 5e 7a 77 41 8e 24 49 92 12 91 0b 7f 44 40 7f 71 78 23 c5 7d ed 74 c4 04 18 80 95 fe 5f e9 ff 95 fe 7f 8b aa 63 03 34 f5 a2 17 c4 eb 98 21 4e e2 12 17 b9 d4 05 2f a4 54 41 98 93 cf 48 1a 2c a1 58 86 db 84 0e Data Ascii: _m{3Cf6Cm[kl1j!\pSP]`Ls?iv3.hdb8tI75%zzJNs8)8/5l8HaSZZM}ET5QUF^zwA$ID@qx#}t_c4!N/TAH,X
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 6b 9d 82 8e 60 8b 56 92 20 d9 eb 0e d4 7d 61 fc 50 41 8e 9f 98 22 0b 96 35 57 df 9f 52 9b 66 48 80 48 64 4a 36 0e f7 3c c4 7b b7 da 07 38 42 04 e3 75 7f d6 4f fd b2 4e bd da 40 c0 1d b7 ab e9 5f 6e b0 d9 82 95 99 f7 43 de f5 b4 14 9d 51 9e 9d 67 6c 40 6c 63 c3 0e ab db 20 ef a9 62 da 80 60 af 7b 71 cd 3d bf 1e e6 2b 24 1f cd 99 a4 ee e6 62 57 4d d7 d2 a7 f9 b0 40 21 46 17 df cc df 43 6e 07 b9 5d 8f e3 ae 7d 4c 4d 7a 92 85 79 cd 35 7b ad 11 b5 4a de cb 68 1b 6c 10 09 ef 67 c9 b1 19 7d 8e 8c 2c da c6 06 c4 3e b2 be bb b9 65 51 11 c4 7b 9d 28 99 12 e8 78 27 44 2e 80 83 0f 15 09 51 39 b5 57 e6 5e ee 6e 97 bb 46 25 58 b6 6e 84 19 1f 63 5d 0e b8 cd 8d 60 b4 10 cf 26 03 7a f8 f8 86 c5 44 71 cc c1 d2 d7 24 8c 2c b8 75 16 f3 9b b3 66 94 84 48 54 2c f3 f9 d4 44 55 Data Ascii: k`V }aPA"5WRfHHdJ6<{8BuON@_nCQgl@lc b`{q=+$bWM@!FCn]}LMzy5{Jhlg},>eQ{(x'D.Q9W^nF%Xnc]`&zDq$,ufHT,DU
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 63 1f d0 b0 c8 b5 cf 69 03 58 a7 35 59 05 8d fb ae b1 07 d0 8a a1 31 83 29 df fe bd fa 37 a4 1e d4 45 98 6d 6b 21 f7 b2 67 f2 71 07 77 bc c6 eb db bd b8 6e 17 c8 18 0b 2d e9 99 7b c3 4a 4c 7d 2a 55 91 54 4b 0c 8e 1b 76 19 cd 62 1b 17 79 0f 99 8a 11 6d ba ef 21 1a a5 d5 ab 19 01 ad c4 2d 92 68 18 58 6d 7b 40 ae b2 b7 7f f2 ef 79 19 27 ea 62 bb ac be 6c ef fb 74 c3 5a 26 88 30 08 88 a8 b1 d4 fa 9c a0 b5 c4 29 3e ac 4a d7 ef 5b 07 25 31 e9 7c 55 77 7a 9d bd aa d7 c2 04 2b 4d 25 57 d4 28 63 7b 68 27 f6 73 66 55 5a 35 9a 8a 5d d0 1a 01 f6 b9 ac e4 a3 ef 0e 20 6d 76 de a1 31 ef 18 a2 55 5a 63 98 88 65 fb 9d 92 92 91 7c 2d 7a 45 19 fb d2 5e d7 6a 48 f3 70 cf 71 cf 59 bb d7 fb fe 7a af f7 5a c3 ef 11 ff f1 77 8a f7 fe c9 a3 17 90 55 38 ec 4d 22 f4 6a 48 94 26 2f Data Ascii: ciX5Y1)7Emk!gqwn-{JL}*UTKvbym!-hXm{@y'bltZ&0)>J[%1\|Uwz+M%W(c{h'sfUZ5] mv1UZce\|-zE^jHpqYzZwU8M"jH&/
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 19 f5 63 a9 73 bd 76 df 71 56 92 c5 f1 5f 6c 88 12 ff a9 5e 31 2e d6 59 f7 a2 b1 47 69 22 4a e3 16 40 2b 6b 32 6e 71 29 a1 bb a5 49 77 4c 36 0a 39 1a 06 a6 73 75 ac 2a 34 f1 4a 7f 94 f5 a3 57 c3 f4 e7 9c d2 22 f4 7f 2c 7f af 7c 29 cb cb fd 78 6a 2f 65 f1 25 7d 59 f8 ed cb 13 96 4f 4b f1 dd fd 27 f7 d2 ed fb 59 48 ab 96 4e be 21 1c 89 f9 f0 74 33 3b 59 1c 76 c5 b2 f0 dc 3c cd 51 80 21 be 2a 5b 50 d4 4a ec a8 55 9b 85 e6 ba 37 95 30 da 28 39 2c 87 c1 fc b9 ac 29 56 90 a9 74 aa 2a 68 c5 87 fd cb bd 74 1d 4c df ab ee d7 c6 35 ce 97 85 cb 1a cb f2 25 fd 4b 59 96 85 4f d7 58 7c 29 ee 3f 7d 3a 22 3f cd 9f 96 db ab b3 00 78 69 3e 8b 71 c6 d9 2a 71 4c a0 1e 92 43 eb 70 bb e0 9d 6d a1 16 a6 20 ef 22 32 a6 27 83 59 a8 58 dc 08 0c f1 d8 42 fb 30 8a 34 b3 4e 3c 0a ad Data Ascii: csvqV_l^1.YGi"J@+k2nq)IwL69su4JW",\|)xj/e%}YOK'YHN!t3;Yv<Q![PJU70(9,)VthtL5%KYOX\|)?}:"?xi>qqLCpm "2'YXB04N<
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 40 46 ed 9e c3 d0 0c 83 1b 31 f3 d9 30 18 79 6f a6 42 2b df e6 8c fd 6c 18 65 4c 33 16 02 93 e9 35 79 f0 c3 1f c6 1f 76 01 4c 9f 95 d3 09 a4 4a 89 5c 80 4a 85 48 fa 10 7d 34 c9 63 0f 6f c0 89 8f 5e ca a7 02 5e 8a e7 69 9e 77 6d c3 f0 8b c7 57 c9 08 6e f4 2e d1 cd f3 1c 99 39 a9 f4 6b 8c 20 c8 98 07 62 16 eb b4 b2 dd 7f 53 d0 3c 78 0f 41 33 8a c6 7b ec f1 b9 80 a9 dd 99 be 4a 58 bc 0f 50 91 fe e3 4f 6c b4 ed b5 e6 1d 52 8c d4 10 4f e4 a0 01 38 13 b7 1a 54 e3 a3 d2 d0 30 97 8b ba de 9e d8 b6 e0 b3 3b 2c e6 56 84 d3 b0 3e fb a7 87 a4 26 ef 12 dd f1 2f 2d 7b aa 1a 7a 64 e4 b8 c2 ba c9 9e f5 dd bc 8d b2 33 4c 58 91 be a6 9d 36 7d 05 3b 5b 49 1b c2 ca c8 47 d9 4f a3 81 11 08 b6 56 fa 59 7d a8 1a b7 da 55 e6 bd 42 8d ad 95 db 54 12 72 94 68 0e 0c 62 22 e8 ab a8 Data Ascii: @F10yoB+leL35yvLJ\JH}4co^^iwmWn.9k bS<xA3{JXPOlRO8T0;,V>&/-{zd3LX6};[IGOVY}UBTrhb"
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: e6 26 e3 bc 61 75 1f bb 82 e6 26 eb 46 c3 1b 32 ec 0f 3b 89 a5 23 d1 83 9a ce 36 ef f5 43 31 a1 6c 7f b0 27 35 87 a8 66 18 93 06 72 9d 0f 06 a6 c0 86 23 68 67 f8 e7 57 d9 43 3f b5 45 3e bb 55 76 37 47 56 14 a5 56 e3 42 46 62 5b f8 11 5a 9b be de 2f 31 ea 74 4d 7b 35 c9 10 34 ac 9b ac a6 22 07 cd 1b ad f4 06 26 6c 24 5a a7 d5 1b 32 b7 b1 4b 40 f7 d1 b8 b9 9f 01 d3 8f 62 12 51 17 c0 f9 c0 45 43 26 7d e5 81 4c 36 52 a5 a3 72 aa 22 a9 9b da 43 f1 99 f1 4b 5f d6 63 76 60 7d 99 85 5b d0 1c bd 95 94 d8 ea 3e 9b 84 bb 17 25 93 80 cf 4d d6 0d f1 48 43 21 f3 06 32 24 63 4d 31 f2 91 8f a5 d1 dc 64 1d 93 a1 a0 e5 30 cc 6b 7d 43 87 c7 b6 dd 6c de e1 f9 58 b5 58 47 2f d3 e0 34 68 c8 4c a9 7b 33 b7 b3 32 a0 23 a4 b0 36 42 c6 e7 16 bf cb 28 53 6c fd ee ec 91 63 2f d5 6f Data Ascii: &au&F2;#6C1l'5fr#hgWC?E>Uv7GVVBFb[Z/1tM{54"&l$Z2K@bQEC&}L6Rr"CK_cv`}[>%MHC!2$cM1d0k}ClXXG/4hL{32#6B(Slc/o
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: af 21 59 17 df 5c d5 54 bf 8e bd f5 e2 56 df 9f d8 0e 37 4d 39 d2 8d a8 19 89 3d a6 3d 6a 94 1a 32 dd 8c 6e 34 84 d1 63 d7 7a 85 d3 64 b8 09 eb 46 f3 56 64 74 8b 1b 75 1f 32 a0 69 f1 59 c9 96 cc 57 3c ed f7 c6 75 30 3d f7 6a cc 6c a3 36 cd 5d 10 31 85 db a8 e9 78 af 38 02 06 b4 a0 0b d5 11 32 4c b2 de 40 a3 b8 6d f1 12 07 31 83 70 4a a2 45 ba 19 29 c1 b5 d8 5a 25 4a 89 b6 e8 f9 00 73 99 cc 4d 46 37 43 de e6 6e de 14 76 d8 c8 87 1b b2 6e 98 9c 86 79 83 49 ce 7c b7 a8 e7 ad 47 7c fd 45 f3 a6 ba 99 6e 15 88 95 3a 81 5a 77 8e e1 d5 11 54 4e 04 a3 76 9a cb 24 1f 75 74 bb eb ef d2 d4 16 d3 82 63 36 1e 9b fd 9b 5f 68 88 5c 3e 54 09 2e 1e 77 b4 9f 21 37 1a 02 43 08 73 ad f9 38 e2 c6 c3 4d a5 d1 0d eb 26 cc 69 6d 69 be de 42 9b 02 29 19 20 61 68 ef d2 c1 ff 99 b7 Data Ascii: !Y\TV7M9==j2n4czdFVdtu2iYW<u0=jl6]1x82L@m1pJE)Z%JsMF7CnvnyI\|G\|En:ZwTNv$utc6_h\>T.w!7Cs8M&imiB) ah
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 3e cd bc dd 8d 0a 92 4e 1a 90 0e 40 45 f0 33 d3 09 5c f7 1e 4e 40 65 14 ce 80 38 1b ad 5f 48 8f f8 6c f9 d3 83 f1 50 7c 17 8b e1 cc 96 7f b7 39 b3 89 0f 23 79 83 11 37 3d f9 cc 69 d0 dc 1a 20 61 6e 42 18 2d 8e 47 86 09 19 72 33 04 6a 45 20 4c c6 03 18 3a 38 88 3a ec c7 9b b6 1c ea e4 61 8e e7 90 94 03 9c 70 1c aa 43 e0 c3 a1 86 43 0d 9d 85 1a b0 4a 83 a6 c6 4f 8f d0 63 0a bd d7 ac 85 89 e1 5f 6e 54 4c 21 09 2e e6 6f 53 fc 96 70 38 87 01 3e 67 d2 9c 06 8d 98 2c a6 50 69 20 43 20 73 99 d5 a9 d5 2b 87 3a ad dc 02 61 fd df 84 2c 8e d6 27 61 fa 61 74 d5 64 0d 87 e3 84 e0 c4 f1 01 d4 38 02 a2 e2 44 25 3c a4 a0 06 be 22 c9 9b 75 fd a2 6f b3 17 7d 57 bc ab 04 ea 2d 6e 42 24 03 ec 16 14 d2 e9 5c 52 ae 0c 76 85 91 d1 50 51 03 68 5a 1a 23 b1 56 ed 2a c8 a8 d6 5c 86 Data Ascii: >N@E3\N@e8_HlP\|9#y7=i anB-Gr3jE L:8:apCCJOc_nTL!.oSp8>g,Pi C s+:a,'aatd8D%<"uo}W-nB$\RvPQhZ#V*\
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 99 f4 e5 ed 8a f3 af 98 ef d4 4b c5 4a a8 8d 18 d7 a5 4c a1 cc 0a d4 3c b3 22 3c f0 f0 18 1e 40 75 ab 54 4e a2 ee 41 85 b7 d3 e2 1c b3 8f 0d 4f 92 f0 c0 05 f1 df 9f 60 0d 2c 60 9c 6e 11 1b e7 b3 f2 30 3e 1b 63 14 e6 78 95 42 e8 58 b8 3a c4 71 3e 9f d2 51 2a 9f 4a c5 49 6d 4c fe 32 c6 ee 18 59 27 f1 0b 78 9c 7c c1 05 5c a7 8f 31 49 c5 99 c4 22 f1 c0 17 c6 8d 9f fe fd 8f d0 bd 54 d2 20 92 4e a8 28 07 d7 c8 77 c5 33 f1 12 05 a8 4f 57 8c 6e b3 ad 90 9d 6e 55 99 0b e2 80 87 8f 2b 86 83 23 9e d0 09 c2 83 71 21 29 22 20 aa 05 6f 84 86 ef 0b 90 c9 99 2b 38 ea e1 be d5 53 ad c0 89 67 f1 cf 03 79 77 23 7b ff 55 08 1d 0b 37 9f 3a cd 8d a3 fc c7 e4 c3 50 49 5d c5 a0 86 8b e3 38 cf 8b 29 ee a6 0c 72 8a bb a9 ce a7 e8 e6 b8 9c 8a bb 62 38 ee e8 99 1f 88 27 60 0b a4 e3 Data Ascii: KJL<"<@uTNAO`,`n0>cxBX:q>Q*JImL2Y'x\|\1I"T N(w3OWnnU+#q!)" o+8Sgyw#{U7:PI]8)rb8'`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	50090	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:54 UTC	1572	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7872 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=f961bah4qz68 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajABR0g7qZbFFvXxLIiuS-icYJuX6T4xVv4ULlkW1w9yiOimHyDQuaZ9wp8isGwIugD4sElugfyCfJpI2Q; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:06:54 UTC	7872	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 34 6f 63 6d 4c 2d 37 6c 78 49 6c 53 77 70 31 62 71 6b 73 2d 43 31 4a 58 68 4d 71 43 41 73 4f 4a 37 6d 74 4e 5f 68 69 61 65 74 36 48 42 71 64 42 6c 4c 48 2d 53 64 47 50 6f 30 44 6c 77 6b 46 2d 2d 68 76 37 68 2d 4e 72 6c 6b 52 45 30 2d 75 31 5a 30 77 4f 46 46 42 59 4a 56 49 62 54 6d 64 5f 42 32 52 4b 76 64 61 56 57 4c 4d 31 31 64 37 6c 63 30 35 6d 50 61 6c 4a 76 35 34 73 39 6d 4d 73 78 68 44 4a 63 69 43 32 70 55 6b 77 5f 45 4b 57 59 47 34 35 77 5f 4b 44 39 43 56 67 56 64 31 4b 78 6b 78 32 77 50 6b 70 66 51 71 55 67 4f 79 4e 57 65 33 64 74 51 4c 70 71 42 69 57 66 71 63 63 38 41 65 69 55 4d 61 76 77 41 44 4f 67 76 5f 49 48 4c 58 45 2d 62 59 39 39 36 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA4ocmL-7lxIlSwp1bqks-C1JXhMqCAsOJ7mtN_hiaet6HBqdBlLH-SdGPo0DlwkF--hv7h-NrlkRE0-u1Z0wOFFBYJVIbTmd_B2RKvdaVWLM11d7lc05mPalJv54s9mMsxhDJciC2pUkw_EKWYG45w_KD9CVgVd1Kxkx2wPkpfQqUgOyNWe3dtQLpqBiWfqcc8AeiUMavwADOgv_IHLXE-bY996
2024-04-19 14:06:54 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:06:54 GMT Expires: Fri, 19 Apr 2024 14:06:54 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOahQjhgtqGjilS4ufRwoRKvfYBGNt9kD399GwGFmwPnaNTM7QZnKPtVvsqIG8ITSC3HfL-7686rnNg2vGfg;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:06:54 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:54 UTC	559	IN	Data Raw: 61 36 36 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 71 39 66 66 47 43 37 55 6e 33 43 64 33 47 5a 51 66 62 63 53 55 5f 72 44 4c 37 55 30 73 45 6a 55 52 57 78 6d 58 50 35 66 6c 71 67 36 41 35 43 4d 4a 6d 6d 68 38 53 2d 51 4d 74 47 65 70 4c 68 58 75 52 4b 79 32 5f 45 42 74 38 46 5f 6c 4e 6a 6c 79 58 34 61 35 79 77 73 66 6f 59 38 70 71 5f 36 2d 6f 50 6a 76 55 37 36 52 77 68 4a 64 59 67 62 48 37 6c 63 57 54 76 51 31 4a 49 63 35 6a 7a 5a 72 33 62 64 71 68 6b 47 77 77 70 75 53 69 79 78 67 73 62 66 79 35 4d 4c 78 4c 63 4a 59 57 6a 67 73 64 57 54 61 6d 71 75 74 76 4e 69 64 72 66 63 53 38 48 47 55 52 4d 36 46 34 74 69 65 2d 4d 78 2d 57 59 72 4a 38 4d 42 41 2d 38 52 78 39 6d 2d 78 52 36 51 37 30 4d 67 4e 39 59 33 4a 50 30 75 61 41 Data Ascii: a66)]}'["rresp","03AFcWeA6q9ffGC7Un3Cd3GZQfbcSU_rDL7U0sEjURWxmXP5flqg6A5CMJmmh8S-QMtGepLhXuRKy2_EBt8F_lNjlyX4a5ywsfoY8pq_6-oPjvU76RwhJdYgbH7lcWTvQ1JIc5jzZr3bdqhkGwwpuSiyxgsbfy5MLxLcJYWjgsdWTamqutvNidrfcS8HGURM6F4tie-Mx-WYrJ8MBA-8Rx9m-xR6Q70MgN9Y3JP0uaA
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 6e 30 42 6f 55 65 69 47 59 4f 37 72 4c 33 56 44 66 45 61 6f 61 31 52 31 2d 38 47 49 59 37 56 53 74 50 75 71 72 72 6d 32 5f 35 78 6d 74 2d 49 61 58 32 64 42 2d 6f 59 51 78 5f 55 79 37 43 74 66 46 71 50 6c 47 53 44 64 70 58 45 56 49 35 75 44 36 45 48 48 63 44 30 61 47 4b 59 43 51 32 6c 69 56 68 44 54 52 6f 7a 43 5f 76 4c 53 53 71 73 67 67 41 32 75 51 58 51 45 77 6d 78 5a 35 41 5f 75 6b 35 37 67 57 4f 35 4e 37 49 55 73 50 36 68 78 38 39 34 6b 30 6f 62 73 36 5a 31 4b 6d 34 69 53 64 58 58 50 72 41 6c 46 72 77 64 68 76 68 77 57 64 4b 79 61 34 32 5f 74 4b 74 61 76 7a 49 4e 6e 32 5a 47 66 44 7a 63 51 4a 39 72 4a 4a 65 58 61 32 76 52 65 37 33 51 43 6a 52 44 45 47 41 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: n0BoUeiGYO7rL3VDfEaoa1R1-8GIY7VStPuqrrm2_5xmt-IaX2dB-oYQx_Uy7CtfFqPlGSDdpXEVI5uD6EHHcD0aGKYCQ2liVhDTRozC_vLSSqsggA2uQXQEwmxZ5A_uk57gWO5N7IUsP6hx894k0obs6Z1Km4iSdXXPrAlFrwdhvhwWdKya42_tKtavzINn2ZGfDzcQJ9rJJeXa2vRe73QCjRDEGA",null,120,null,null,null,["bgdat
2024-04-19 14:06:54 UTC	855	IN	Data Raw: 70 70 52 54 42 48 4d 31 6c 4f 52 48 41 35 65 6e 4e 78 56 58 70 4f 51 56 42 7a 54 6d 4e 30 54 44 4a 54 4e 58 52 6b 64 33 5a 74 52 7a 6c 6d 4e 32 38 31 54 32 5a 4d 52 7a 4a 79 64 6a 56 56 65 45 31 57 64 47 6c 4f 4f 47 46 74 56 45 56 75 64 30 78 4f 54 45 5a 4b 56 6b 74 79 55 6a 52 57 62 6c 52 68 52 47 39 49 5a 6b 35 55 56 7a 4a 49 59 6a 5a 30 55 6a 52 31 57 48 46 77 65 48 6f 34 54 6b 74 43 55 57 5a 4f 56 46 70 4f 55 6a 4e 71 65 6d 68 46 5a 58 6c 52 56 54 49 34 4d 6c 5a 46 62 6c 4e 51 57 6b 74 5a 61 45 4a 6e 54 48 64 57 51 30 4a 78 55 33 4e 58 56 6b 31 4f 52 46 52 31 63 56 46 48 5a 45 64 43 61 30 70 72 4e 6d 4a 52 64 54 4e 49 64 6b 64 79 4e 45 68 6f 57 46 6c 30 63 46 49 33 4d 33 4e 59 54 56 56 43 5a 57 52 6b 5a 54 45 33 4d 54 6c 57 5a 6a 4e 76 54 32 63 72 64 Data Ascii: ppRTBHM1lORHA5enNxVXpOQVBzTmN0TDJTNXRkd3ZtRzlmN281T2ZMRzJydjVVeE1WdGlOOGFtVEVud0xOTEZKVktyUjRWblRhRG9IZk5UVzJIYjZ0UjR1WHFweHo4TktCUWZOVFpOUjNqemhFZXlRVTI4MlZFblNQWktZaEJnTHdWQ0JxU3NXVk1ORFR1cVFHZEdCa0prNmJRdTNIdkdyNEhoWFl0cFI3M3NYTVVCZWRkZTE3MTlWZjNvT2crd
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 31 36 37 32 0d 0a 71 63 33 68 44 55 57 4a 6f 5a 56 6f 32 59 6d 35 4f 62 33 52 54 4e 55 68 78 52 6e 6c 48 63 6d 70 55 4d 6d 64 75 65 58 64 4c 52 31 67 34 64 55 70 5a 52 6a 52 34 51 6b 31 30 54 45 35 47 57 6e 5a 42 64 46 46 54 52 57 64 55 63 45 35 4f 52 55 67 35 53 47 68 4c 62 7a 41 31 65 6c 63 76 53 54 52 56 4c 32 78 78 56 6d 52 50 64 57 4a 32 4d 30 30 7a 4e 33 56 6b 5a 58 6c 4d 55 47 35 70 4d 32 31 61 4d 55 63 79 61 45 59 78 52 54 42 58 5a 55 68 34 4d 79 38 35 54 7a 4e 48 61 46 42 36 59 69 74 76 65 54 64 4d 52 47 78 73 54 6c 4a 69 65 6d 46 49 63 57 55 7a 5a 33 68 55 53 55 68 76 65 54 46 32 55 54 5a 33 56 7a 52 72 65 44 5a 75 4d 55 63 31 55 33 46 4e 56 46 56 72 63 6b 39 4e 59 58 59 79 4f 57 5a 36 65 6d 34 79 54 45 46 6f 51 7a 5a 68 63 48 5a 57 55 6b 49 72 Data Ascii: 1672qc3hDUWJoZVo2Ym5Ob3RTNUhxRnlHcmpUMmdueXdLR1g4dUpZRjR4Qk10TE5GWnZBdFFTRWdUcE5ORUg5SGhLbzA1elcvSTRVL2xxVmRPdWJ2M00zN3VkZXlMUG5pM21aMUcyaEYxRTBXZUh4My85TzNHaFB6YitveTdMRGxsTlJiemFIcWUzZ3hUSUhveTF2UTZ3VzRreDZuMUc1U3FNVFVrck9NYXYyOWZ6em4yTEFoQzZhcHZWUkIr
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 4d 32 59 33 63 47 78 52 52 6d 70 4e 56 6a 4e 51 54 45 70 55 65 48 5a 45 4d 33 63 77 51 54 42 54 4d 6b 52 72 65 6b 35 5a 54 6a 52 33 54 30 73 78 4f 45 46 4c 61 30 78 35 56 32 6b 77 65 46 56 42 59 6d 4e 4c 64 30 68 5a 53 55 4e 34 52 45 68 76 4d 44 67 76 65 48 52 69 4e 48 70 48 63 6d 46 45 54 48 49 79 5a 6e 70 59 4e 57 46 5a 51 57 5a 42 63 6b 68 69 63 56 52 79 62 54 46 4a 64 46 46 71 5a 6a 6c 4f 5a 7a 52 6d 63 57 46 45 53 45 73 72 62 31 64 43 57 55 35 49 63 58 6c 6d 61 79 74 46 54 6d 78 7a 56 7a 59 7a 4f 45 45 79 4d 46 6c 4d 63 32 46 51 64 47 30 34 5a 45 4a 47 5a 32 5a 57 4e 48 49 79 59 55 5a 72 64 6b 4e 4f 4d 56 67 32 61 46 52 47 61 7a 68 73 64 30 78 71 4e 30 39 55 59 30 70 59 4c 33 4d 77 51 57 35 57 4d 44 5a 6d 4f 47 78 47 4d 6c 4a 6f 53 6d 74 4a 65 58 56 Data Ascii: M2Y3cGxRRmpNVjNQTEpUeHZEM3cwQTBTMkRrek5ZTjR3T0sxOEFLa0x5V2kweFVBYmNLd0hZSUN4REhvMDgveHRiNHpHcmFETHIyZnpYNWFZQWZBckhicVRybTFJdFFqZjlOZzRmcWFESEsrb1dCWU5IcXlmaytFTmxzVzYzOEEyMFlMc2FQdG04ZEJGZ2ZWNHIyYUZrdkNOMVg2aFRGazhsd0xqN09UY0pYL3MwQW5WMDZmOGxGMlJoSmtJeXV
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 5a 52 58 4a 73 61 6a 4a 32 57 57 6c 59 53 33 6c 45 56 47 52 5a 4f 58 4a 4f 61 33 46 6b 57 45 46 70 51 6e 6f 35 4e 69 74 6e 54 45 4a 50 51 6e 64 53 5a 56 45 31 57 47 56 47 63 33 70 34 52 6b 68 6f 4e 56 68 4d 53 44 42 6f 52 57 46 5a 4d 32 78 4b 63 56 49 30 55 54 56 6e 5a 6b 5a 74 64 47 78 31 4d 6e 5a 53 4f 54 42 44 57 6d 39 5a 61 55 4a 36 4c 30 46 50 59 57 4e 4f 53 30 70 73 51 57 52 35 64 57 31 58 4d 47 4a 4f 62 45 74 4c 55 6b 34 7a 55 56 42 79 4e 6c 6c 49 4d 30 6c 7a 65 6e 4d 76 4c 33 4e 4a 65 47 63 76 53 6d 31 6d 4d 6a 46 4c 51 33 46 71 4f 46 4e 45 64 7a 4d 34 4e 6c 52 31 63 31 46 44 64 6c 59 30 52 6e 45 31 4e 47 46 31 63 48 4a 4c 61 33 70 70 52 6a 64 35 63 32 68 4b 63 32 6c 4c 62 6e 46 4e 64 48 42 61 51 58 68 76 62 7a 51 77 62 6a 6c 44 56 45 52 55 4c 7a Data Ascii: ZRXJsajJ2WWlYS3lEVGRZOXJOa3FkWEFpQno5NitnTEJPQndSZVE1WGVGc3p4RkhoNVhMSDBoRWFZM2xKcVI0UTVnZkZtdGx1MnZSOTBDWm9ZaUJ6L0FPYWNOS0psQWR5dW1XMGJObEtLUk4zUVByNllIM0lzenMvL3NJeGcvSm1mMjFLQ3FqOFNEdzM4NlR1c1FDdlY0RnE1NGF1cHJLa3ppRjd5c2hKc2lLbnFNdHBaQXhvbzQwbjlDVERULz
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 63 33 4e 7a 5a 53 64 6d 74 50 63 58 70 44 57 6a 4a 59 53 44 4e 4d 56 45 64 59 65 46 56 6b 59 31 4d 7a 5a 45 78 68 4e 56 55 34 52 55 68 57 57 54 68 4f 57 46 42 59 57 56 52 6a 52 56 5a 79 64 33 6c 58 56 56 5a 5a 54 7a 64 5a 4b 33 56 71 61 58 6c 36 61 57 46 6b 4b 30 52 59 51 55 35 36 64 47 68 4d 55 79 39 76 52 57 4d 33 62 6e 52 4a 65 45 35 4a 55 6d 38 35 63 48 52 6f 64 31 49 7a 51 55 56 69 5a 33 56 79 4e 32 5a 46 4b 32 4e 56 52 47 68 4b 65 46 5a 6b 54 55 6c 73 65 6b 39 55 65 55 74 51 57 47 56 6a 59 6a 42 4d 63 53 39 4c 4f 58 56 6e 51 56 5a 50 64 47 46 70 57 6b 64 51 59 58 64 50 64 47 78 4a 5a 32 77 78 4e 6a 41 79 64 31 68 48 57 58 42 36 59 33 59 34 62 6d 46 76 4d 31 6c 54 52 79 39 6e 51 32 52 77 64 6d 52 4f 55 55 46 77 51 31 70 4a 53 32 68 72 52 32 64 4c 61 Data Ascii: c3NzZSdmtPcXpDWjJYSDNMVEdYeFVkY1MzZExhNVU4RUhWWThOWFBYWVRjRVZyd3lXVVZZTzdZK3VqaXl6aWFkK0RYQU56dGhMUy9vRWM3bnRJeE5JUm85cHRod1IzQUViZ3VyN2ZFK2NVRGhKeFZkTUlsek9UeUtQWGVjYjBMcS9LOXVnQVZPdGFpWkdQYXdPdGxJZ2wxNjAyd1hHWXB6Y3Y4bmFvM1lTRy9nQ2RwdmROUUFwQ1pJS2hrR2dLa
2024-04-19 14:06:54 UTC	734	IN	Data Raw: 30 39 4c 54 33 42 72 53 44 56 30 4d 56 6f 76 56 54 42 6b 4f 57 64 76 56 6d 5a 75 52 56 51 35 55 6d 39 33 64 6d 35 47 61 6d 34 33 54 45 34 79 4e 30 6b 35 62 47 59 78 56 6b 59 7a 53 6d 52 4e 59 56 56 6c 56 33 6c 7a 59 57 45 31 54 30 59 78 62 31 68 45 55 45 52 4d 65 46 4a 30 56 56 52 79 55 54 6c 59 61 45 56 54 52 58 56 55 59 6e 70 50 4e 32 51 78 4e 33 68 33 53 57 39 42 51 32 5a 48 4e 33 45 7a 54 6c 64 73 52 58 6c 33 55 57 5a 57 53 45 78 31 65 44 55 79 61 46 4e 46 4f 55 4a 71 53 56 4e 59 65 55 56 45 4f 46 5a 74 57 54 56 76 4b 30 4a 42 62 55 70 76 5a 47 46 44 56 48 68 45 59 6a 4e 36 59 57 68 4c 63 47 68 48 52 54 68 5a 4b 33 56 6a 64 6b 39 34 61 48 68 54 63 6d 70 35 55 6d 78 75 55 7a 51 30 4d 57 6c 4b 4d 6e 6f 35 54 32 74 46 61 7a 6c 58 4e 7a 52 73 53 6d 46 4a Data Ascii: 09LT3BrSDV0MVovVTBkOWdvVmZuRVQ5Um93dm5Gam43TE4yN0k5bGYxVkYzSmRNYVVlV3lzYWE1T0Yxb1hEUERMeFJ0VVRyUTlYaEVTRXVUYnpPN2QxN3h3SW9BQ2ZHN3EzTldsRXl3UWZWSEx1eDUyaFNFOUJqSVNYeUVEOFZtWTVvK0JBbUpvZGFDVHhEYjN6YWhLcGhHRThZK3Vjdk94aHhTcmp5UmxuUzQ0MWlKMno5T2tFazlXNzRsSmFJ
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 65 64 33 0d 0a 45 35 72 4d 6d 56 53 63 56 68 69 64 6a 55 31 64 33 70 71 65 55 4a 44 62 32 68 7a 53 55 74 61 51 56 52 61 53 7a 68 79 62 44 45 77 56 33 4a 59 65 56 64 61 4c 33 5a 56 57 48 56 51 54 6d 5a 4c 4d 32 56 58 56 79 73 35 65 58 42 74 54 6b 4a 48 51 6d 39 55 59 6c 4a 6f 61 6d 6c 32 59 6d 78 46 63 47 5a 56 61 47 5a 71 61 6b 39 6c 56 47 4a 44 52 6d 52 68 53 57 68 53 51 55 52 33 4d 6d 5a 4c 62 45 78 4d 64 30 67 33 5a 6c 68 35 52 6e 4a 42 5a 55 35 5a 55 6d 6c 6b 55 7a 5a 6a 4d 46 52 53 54 46 6b 76 61 55 64 4a 52 6e 56 61 4d 6d 52 6b 65 44 56 77 54 32 35 76 53 6d 45 77 64 6b 4d 78 4d 6d 74 46 54 56 6c 42 65 56 42 31 62 58 4a 71 4d 54 68 77 4e 6e 42 52 51 6b 46 6c 51 6c 68 61 4e 6c 4e 33 64 45 35 70 65 57 4e 73 63 43 39 5a 5a 31 6f 76 57 56 6c 6b 57 57 6c Data Ascii: ed3E5rMmVScVhidjU1d3pqeUJDb2hzSUtaQVRaSzhybDEwV3JYeVdaL3ZVWHVQTmZLM2VXVys5eXBtTkJHQm9UYlJoaml2YmxFcGZVaGZqak9lVGJDRmRhSWhSQUR3MmZLbExMd0g3Zlh5RnJBZU5ZUmlkUzZjMFRSTFkvaUdJRnVaMmRkeDVwT25vSmEwdkMxMmtFTVlBeVB1bXJqMThwNnBRQkFlQlhaNlN3dE5peWNscC9ZZ1ovWVlkWWl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	50092	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:54 UTC	526	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:54 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 14592 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9597 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:54 UTC	721	IN	Data Raw: 52 49 46 46 f8 38 00 00 57 45 42 50 56 50 38 4c ec 38 00 00 2f ff c0 3f 00 4d 40 72 1b c9 91 84 c8 8c 34 e5 fe ff e0 ac ee aa 99 35 e7 88 fe 4f 00 fe d7 32 06 c0 8f 98 89 08 79 49 87 98 98 88 35 90 37 cc 58 cc 5a 6b 0d e4 81 aa 59 a6 d8 b6 35 55 90 07 46 3e b5 a6 55 de b5 ec 4f ed 61 c8 1b 91 ac 22 63 8c d1 b4 e2 84 9e 11 63 16 a8 02 38 72 32 29 5b 0c ef 37 dc c1 f9 54 4f 7a 77 77 79 c5 83 b1 19 3b d9 f0 08 0b 60 d1 28 ee 07 06 2c 33 80 1a c1 cd 7a 05 b1 aa 3a 11 11 24 e9 be f4 95 9b 99 ce a9 da d3 d2 49 d2 f5 00 a6 35 33 3d a2 e8 c1 56 7b 66 a6 45 26 b5 9e e5 36 22 d7 9a 77 e0 1a 22 21 6b ce 5b 00 56 ac 59 ef fd 43 17 72 1c 49 72 24 c9 e5 e5 ec ff 6f f3 65 85 44 62 48 1c 6f 9c 3a bd d5 2d ad 0c 4b 92 64 55 55 e2 0e 8d 3b 9c fd 2f 8c 2f e7 b9 06 1c c9 b6 Data Ascii: RIFF8WEBPVP8L8/?M@r45O2yI57XZkY5UF>UOa"cc8r2)[7TOzwwy;`(,3z:$I53=V{fE&6"w"!k[VYCrIr$oeDbHo:-KdUU;//
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: c8 f9 92 33 db fb b6 c0 3d d9 1e e8 06 77 54 70 0b db 56 ce aa a9 1b 52 5b 97 d4 b2 4b 60 33 b4 98 1c 36 42 4d 1e 51 41 6a 8e dc 59 0e 29 b7 96 73 71 77 43 f1 60 c5 af 8d 37 ff bf 55 92 ec 1c a8 6a 9a c6 e1 59 66 66 14 33 33 33 33 33 33 33 59 97 99 19 97 99 99 69 96 79 77 b0 7b 66 67 ba a7 ab bb aa ce 31 16 b4 db 73 aa da bb fb 73 37 01 85 42 39 d4 f3 c8 7a 2d 3d 47 2c 55 0a 6f 04 72 ef 4d 43 6e 2b 01 6c 71 b9 7f 57 95 80 28 8a cd 43 ee c8 6c 77 2c 81 fb 8a d5 22 97 3a 05 d9 74 29 02 b9 eb 8e db 62 ad 7b a2 10 43 0e 98 c0 35 77 dc 71 5b ac 1c 4e 5c d7 14 43 bb 6d be 79 a8 43 50 2a 9b c2 d8 62 a6 d7 dd 04 84 31 c8 65 d6 d8 4a e1 b8 77 12 10 8c 2b 53 16 4b 31 c8 be ee a4 20 86 d7 bc e3 52 a0 6d db b4 1c ed 7d 1e ea ab 2a b6 ed b6 6d db b6 6d 77 ff 42 46 db Data Ascii: 3=wTpVR[K`36BMQAjY)sqwC`7UjYff3333333Yiyw{fg1ss7B9z-=G,UorMCn+lqW(Clw,":t)b{C5wq[N\CmyCPb1eJw+SK1 Rm}mmwBF
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: b0 73 62 86 f1 ec d2 1b 05 08 f0 cf 06 2a e9 6c d3 fa 1c fc 87 4d d5 66 7f e1 96 ca f6 ae 55 6a 4c 03 d8 d2 8e 5f 9a 94 53 fd 08 01 81 c5 24 3f dc c3 2f cd a7 15 25 27 42 e1 d9 b6 c6 41 00 11 04 91 b0 5c 4b 87 d5 a9 a3 73 e4 24 1c 35 cb 3b 70 8b 37 99 67 4c 2d 05 05 14 4c c9 f4 5a c6 fe 73 c6 c7 40 ca 90 5c ea 37 6f 68 3d 34 b7 61 b6 3c 70 55 e9 d1 87 ab a5 7d 00 1c 20 11 71 41 14 8b 53 7a 3c 47 6c cc 49 ed c9 e6 c6 d5 7a 8d a9 4c cf a4 dc 0f a1 80 82 c5 1c 34 66 74 4d 38 0a 85 a8 5b 80 68 42 b9 4f f6 d0 26 aa b5 e7 f9 dc d1 f4 81 11 04 22 80 0b 9a 45 91 e6 22 ee 61 74 e2 d0 20 13 e3 64 6b 33 2c b7 ac 59 1d 10 f4 5a 50 21 02 1c 30 1d eb b7 d9 52 8d 29 4c 66 8d c6 cb 0c 60 13 85 44 50 d9 17 eb f7 fe 4a f4 d1 74 93 3e 12 62 e6 f2 bd ab de b6 5e 16 84 6b 6c Data Ascii: sb*lMfUjL_S$?/%'BA\Ks$5;p7gL-LZs@\7oh=4a<pU} qASz<GlIzL4ftM8[hBO&"E"at dk3,YZP!0R)Lf`DPJt>b^kl
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 5e 84 49 c3 ca 48 04 01 22 4e 64 17 e9 08 27 fd e7 d4 dd 95 0d 7c e3 cd d1 0f f0 97 35 5a 39 a8 08 00 c3 39 4a 16 25 66 8e 3e 38 ba a5 42 c1 07 73 3c 0b c1 33 4a 81 f6 4c 90 94 03 68 bd 5b fa 77 08 08 18 1c 80 35 f6 58 6f cb db eb d2 bd aa ed 41 b6 b0 d7 8d 20 40 10 20 22 0b c6 3b 3b 6d a6 27 cf a4 b5 c9 8c f7 3d ca 7f 9a fe cb f8 8f 62 ef 55 9f cf 46 2e a8 b5 00 30 83 82 cc cf 7a 0e 06 81 fa 16 2b 72 32 40 5f 94 e0 69 23 7b 59 57 94 a0 36 42 00 71 46 2f 0a 88 b1 4d bf b5 b7 ee 6d e3 f6 e2 9b ad ed f3 3a ff 78 f9 c7 d3 29 eb 2b b3 fd c4 e1 3b e4 f6 31 d6 fe af 7f d0 99 65 7d ae 53 4a 86 b1 e0 ee ac 41 8e 49 6d e7 3b a1 c2 17 cd ef 41 69 6e 00 1e 42 82 6a 4d f1 c7 de 68 41 52 60 e1 12 2d 44 68 84 63 ad d6 bd d4 57 58 71 5c 3b a8 d6 f6 79 b5 fb 73 da 8f d6 Data Ascii: ^IH"Nd'\|5Z99J%f>8Bs<3JLh[w5XoA @ ";;m'=bUF.0z+r2@_i#{YW6BqF/Mm:x)+;1e}SJAIm;AinBjMhAR`-DhcWXq\;ys
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: b1 a8 ef 30 e3 9c d9 51 10 a9 97 01 c1 2e 88 5c 75 f1 0a 03 6d 4b ac 48 d8 2e c3 9c 14 36 6a 0f d1 6a 93 10 e5 b4 9e 3f fe 28 0a 24 22 d4 47 1f d7 fa 6b e4 bc 38 fc ee ae 9d a6 38 08 5f 7f da 03 c9 08 9f b6 fe 0a 34 24 24 97 51 73 65 88 cb 17 66 d4 77 83 c5 6a 8e 9f 7b d3 51 32 67 df 22 e8 03 44 27 d8 4c f2 8c c1 dc a3 85 01 8e 28 84 51 00 53 46 6b ad c5 fd e2 77 8e 3b ad 75 b5 ee bd 7a 4e ed b2 35 00 82 db de 29 db a9 1b a4 f7 7d 7c cf af 7f 4f 4d 29 25 71 b5 ae fc ce d6 bc f9 4d 75 82 5a be da 6b fa be bd 37 dd 8d 0a d6 98 4e f7 c2 ab 07 17 77 f3 f9 e8 e1 88 53 65 93 22 90 01 30 0a 05 2d c8 26 b3 1d 38 1a af 36 8e d2 36 1c 08 74 53 0e 20 70 fa fa 49 f3 80 f7 7f 9e dc 7f 92 7e 48 b5 84 84 6f 2e cb 0c e6 da 8c 52 6b c5 30 b3 71 38 86 72 a1 2a 97 4d 50 fc Data Ascii: 0Q.\umKH.6jj?($"Gk88_4$$Qsefwj{Q2g"D'L(QSFkw;uzN5)}\|OM)%qMuZk7NwSe"0-&866tS pI~Ho.Rk0q8r*MP
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 6f 5b 9a b4 86 86 c6 a6 e9 f2 73 da be 97 de bb ba 7b df 8d e9 d2 b0 6f 3b ff 7c 34 5d cc eb 78 92 c8 e5 cd 96 24 ee d5 df af 24 b8 5f a9 fb c5 17 8e 3a e2 f8 4a fb e7 3b 9e 39 d2 2f 7d b7 9f f9 da 6f f6 ea eb 46 b1 e0 82 1d 39 40 7c b1 87 75 ef fd 03 68 67 68 2b 53 07 76 f4 f1 ab 7b d7 1b dd ba 4f 45 f7 74 69 5a 35 8d d6 55 ad bc 6e bb 45 2e 91 1b 7a f5 5e fb 6e c8 60 6d ca e5 d0 63 7d 1f 63 64 5a 17 ba 84 42 42 22 cf c9 75 bc 58 8f fb 9f e0 a8 b3 24 2e 78 c3 70 e4 3f fd 98 07 89 8f d2 4e d8 47 80 00 e1 ec 9d 29 6d d7 5d 5a 57 b7 b1 6f d5 b4 1d 9a 7d 2b d5 4e f2 ba 44 f2 88 24 31 62 ca 17 6d d9 27 91 44 14 c5 5c 0c a7 eb 58 64 4c 02 a0 14 ea a4 bd 3e fe 29 87 5e 9c cf 4a a3 15 b4 c9 e6 6a 0e ff 9a 71 1f 59 7a 88 b6 2b 40 1c c4 69 d5 fc 81 ea b6 b7 56 e7 Data Ascii: o[s{o;\|4]x$$_:J;9/}oF9@\|uhgh+Sv{OEtiZ5UnE.z^n`mc}cdZBB"uX$.xp?NG)m]ZWo}+ND$1bm'D\XdL>)^JjqYz+@iV
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 49 56 d6 79 20 a2 65 2b 7d e0 91 0f 59 8d 69 0f 9c 3c 2c 7d 64 75 9e 5c c5 2c d4 1a a4 b5 29 21 4d 1a 9d 7f da da 2a c4 53 b1 e3 67 dd 7f f1 cf e4 75 db 7b 1e c9 bf 38 6a ed ae 0f 82 65 0c 77 b8 c3 3d dc 6e 49 00 7d 9c 70 86 77 47 43 2f 40 cb 9a 4b f4 e3 3d 6b b1 be 7d 69 5b 3d bd bf b6 9c d4 e7 50 d2 64 32 5a 8b cb 35 ef 47 3c aa fe 3f 1d da d1 7c af f3 2a 89 f7 d7 9a 36 57 18 c3 48 05 87 3b dc 91 ab 02 5c 3d 4e be a2 76 14 87 68 ef 44 01 d0 03 9c 97 a0 e2 64 8b b2 b6 59 9a 95 38 ba d2 a0 b5 e8 d7 16 95 24 e3 29 35 5a a0 f6 ad b6 bd 9a 7b 5e 1e be 22 49 2c 55 f5 79 31 22 2e d7 86 70 5c c1 fd 8a dc e4 10 8f 93 3c 35 50 61 05 c2 a5 f6 b9 54 00 ca 51 67 a2 4d 2c 39 bc 59 c9 49 43 19 47 02 1d e5 23 9e d3 26 66 11 11 ae ef be d7 25 79 bc e6 3d 47 55 9c 75 7e Data Ascii: IVy e+}Yi<,}du\,)!MSgu{8jew=nI}pwGC/@K=k}i[=Pd2Z5G<?\|6WH;\=NvhDdY8$)5Z{^"I,Uy1".p\<5PaTQgM,9YICG#&f%y=GUu~
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 4c 37 ae 0c 19 c7 e0 24 07 70 f8 ee 01 e0 f9 8f 87 ed df cd 9f 84 95 c8 48 ea 96 24 43 ee b7 32 3c c4 83 60 18 24 98 19 d6 be 10 33 e5 de d9 fd da b0 4c 47 93 e9 37 a8 08 54 a1 0c 5c 21 8c 9c fb f8 7e 08 08 15 d2 dc c4 4d 9d 47 bd eb 4c b1 1e 09 bb 75 ba ec 09 5c f8 2e de 77 cf 7a 6c 7f ae 2d 22 94 44 c8 3d 49 c4 52 5b 92 48 ea cf 54 a4 11 c1 2e 2b d3 ba 75 f5 82 c9 99 e1 85 c3 69 98 e5 9e 91 b6 90 4e d4 37 ea b1 01 78 51 8d aa 57 33 cd b7 4e c2 60 d3 ec f1 7e 55 b5 a7 86 b8 a8 81 3c 8c 5e 1a 05 c8 00 7f e6 26 6e 91 4c 92 e0 8a eb f1 c5 12 c9 83 78 48 7a 17 fe 7f b1 a3 35 ea 7b 19 31 13 6e 91 d9 b7 4c d9 24 9f 37 e0 5c ea d6 d5 15 bc 12 05 19 a4 b8 60 43 1b 7d 50 e1 7c d4 ad d0 d5 95 88 8e e5 78 bf e6 d2 df c0 bb 04 5e 97 24 be 9d 71 f5 22 15 12 41 12 93 Data Ascii: L7$pH$C2<`$3LG7T\!~MGLu\.wzl-"D=IR[HT.+uiN7xQW3N`~U<^&nLxHz5{1nL$7\`C}P\|x^$q"A
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 71 1c 97 b1 8e e3 38 ae 47 94 f4 11 cb f2 ea 72 3d 76 8b 72 5b 97 34 8e e9 5c 96 b2 5f ca 3e dd ea b8 90 87 bd a5 3f c1 83 07 ca 92 9e 6f 33 c0 8d c3 7e 65 d6 97 7f 14 71 38 7c 14 b4 fe a2 a9 69 75 b2 ac 57 bb 92 c1 20 e6 7e 34 6f e5 3d 55 eb 97 2f c5 e9 d4 60 64 b3 bb 06 c6 f3 1e b9 32 21 82 90 91 71 1c cb 07 eb b8 dc a6 69 91 7a 5b 5e 5f 1f 96 61 ac 69 7c ef 1b e3 a1 a4 43 49 e7 6e dc 95 f5 39 04 7d 89 7a 27 f9 3c 4d da 87 bb f2 e0 f9 b4 ab e9 2f 2e d4 2b d5 d6 08 c0 e8 53 4c 1b 39 30 4c 9d 66 d7 55 7b 95 c3 cd dd 75 e4 4a a5 52 39 bf 9e d3 e6 a7 af 3c f7 58 91 b7 77 78 1a 81 d7 d5 7f 11 32 0f 42 c4 65 e4 36 d5 0f d6 f9 30 f6 7a bb 3c d3 71 44 92 94 ae a5 07 39 dc ee eb 52 d2 94 4a 59 3f 5c 97 d2 d7 17 cc 9b de 6a f7 f3 7d bf bd de d1 db e7 c3 d1 96 97 Data Ascii: q8Gr=vr[4\_>?o3~eq8\|iuW ~4o=U/`d2!qiz[^_ai\|CIn9}z'<M/.+SL90LfU{uJR9<Xwx2Be60z<qD9RJY?\j}
2024-04-19 14:06:54 UTC	1255	IN	Data Raw: 1a b9 4c 05 63 1f 5e 5e e6 32 a4 21 e7 9c cb cb cb 8b b2 db 1f 0f d4 cc bb d4 d2 94 8b 37 fe a1 6a 07 92 ca 71 c5 92 81 00 45 8e 02 58 7e a6 d5 26 10 6e 13 2c 27 8e db bb 77 8e da 0e 07 c5 50 c7 60 9f a5 04 05 0d 3e 6a 4e 9e 42 09 15 89 29 fe f8 18 dc f6 3e 7d 3f 83 49 05 32 f4 f6 86 f9 e3 fd f9 fa b8 3f ca 98 ee 52 4e d8 a7 eb fd 1e 09 a5 22 15 0c c9 73 7a f7 be 94 32 94 8b 72 f1 30 ec f7 25 a3 bc 3c 5e 88 ae 07 e4 77 7e fe 77 ee d6 1d 5d cb 9d 61 2a d4 31 b5 64 c9 3c 47 43 61 f4 2d 3f 08 48 e6 27 79 10 1f 57 ba 03 92 5b 7d b9 fd 95 43 36 7a d3 98 8d f2 e9 93 c5 1d e2 12 04 96 b3 18 3f 28 78 c4 5b 1c 1f 21 10 19 70 73 35 51 2d eb 0d 07 2e fb 77 f7 fa 97 e3 fe 23 d7 29 61 87 e5 d5 f5 1a 5a 50 90 d2 a1 60 a8 d3 52 86 8b 21 fb f1 98 9f e7 9c 33 f6 65 bf 1f Data Ascii: Lc^^2!7jqEX~&n,'wP`>jNB)>}?I2?RN"sz2r0%<^w~w]a*1d<GCa-?H'yW[}C6z?(x[!ps5Q-.w#)aZP`R!3e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	50095	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:54 UTC	525	OUT	GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9598 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	722	IN	Data Raw: 52 49 46 46 f0 16 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c a8 16 00 00 2f ff c0 3f 00 09 47 6e db 48 12 ec 42 50 48 d9 fd ff 07 d7 3e eb 35 a2 ff 13 80 3f b9 9c e0 12 19 11 68 11 08 a0 8d c5 25 45 14 cc 5b 66 ee d5 20 40 40 09 33 33 22 b7 68 4c 47 b1 d1 cf 48 66 6e a9 5e d3 07 f0 cc a7 f8 4a 79 a2 de a1 24 af d8 1a 72 66 ca f6 92 25 61 e5 b1 24 ad 60 e8 9c f5 3e b0 6b 2f f0 10 af f9 d6 aa cb ad 6f bb 80 23 d9 b6 6a a5 bf fb e7 44 14 e1 09 b1 f9 8f 4d b3 ab 78 ea 44 92 24 21 ca 40 21 4b 22 5b f2 ff 57 21 51 a8 8b 0b b7 91 24 bb 4a 9b 5f 20 9e 48 60 2c 6c f2 8f 8a 00 30 fa 3f 01 0a ff e3 2d 43 02 04 5d 96 19 02 60 75 95 2f b7 96 6b d4 c6 ef be 0b 8c fd b9 18 60 30 c0 48 a6 04 01 00 06 03 1c 00 d6 cc 08 20 68 93 31 Data Ascii: RIFFWEBPVP8XVP8L/?GnHBPH>5?h%E[f @@33"hLGHfn^Jy$rf%a$`>k/o#jDMxD$!@!K"[W!Q$J_ H`,l0?-C]`u/k`0H h1
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: a0 6a bc 94 7f 04 0d 7c c6 e0 f7 3a 83 45 79 4f 04 d4 3f 1e ca 2f 82 a6 6c 50 33 00 39 69 50 33 8e 1f 74 1c b4 91 e4 48 ee bd f4 4f e1 f9 a3 7b 04 79 da 41 1b 49 8e 54 dd 17 f8 93 7b 2c f9 bb 62 02 1c c0 78 ff 8f f7 ff 78 ff 8f bb e1 0d 2f bb 1f 7f ae 5f 7e bf 5f 59 fb 29 e9 e4 95 e4 55 1c 82 16 5f 81 f2 ca 8f 57 cc 3d 3a 29 32 4b 27 5f 21 ed 2d fd 80 c7 a7 e2 be ed 03 7a 17 7a 43 6c dc 45 c9 13 c5 ab e4 ab 9b fa 91 73 4e 76 9d 5d 92 9d 3c f6 c2 bf 63 f7 e7 d7 ab af 82 0d 15 74 52 41 09 4a 14 b6 31 1d b6 e9 36 36 28 41 89 d2 77 94 ed 51 f5 ae 43 50 42 11 25 14 a9 31 9f c4 6f 79 d7 6b 4e 38 e5 01 d9 24 35 1a 5d 71 8f 9a a8 ea 12 b6 b1 79 15 28 41 05 15 d4 0a 45 14 a2 44 17 a2 b0 8d 8d f1 53 21 a8 40 05 25 ba 10 85 d4 98 62 29 6c d3 8d 1a b3 bc cb ee 49 87 Data Ascii: j\|:EyO?/lP39iP3tHO{yAIT{,bxx/_~_Y)U_W=:)2K'_!-zzClEsNv]<ctRAJ166(AwQCPB%1oykN8$5]qy(AEDS!@%b)lI
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 45 2f 02 94 aa e0 9b f1 8e dd 9f 55 0a 5a 5f 11 3a 25 6c 1a 16 8d 31 03 19 c6 42 e2 2c 7b 85 22 3a 64 d7 27 25 74 b2 ae 6c d2 da 11 bf 80 4c 0b 5f 4b bb 6d fb cf eb fb 71 fd 55 3f 0a 9d 1d 14 cb 93 0d 4a 50 9e 4d c3 4b cf 22 e9 a3 a0 80 58 85 41 fb f7 b5 cb ee 52 21 15 05 74 fe d1 9e 89 35 eb f5 43 3f bc 1d 3a 3b 36 22 57 1a 76 a8 b1 a6 65 29 42 1f 75 9e 55 c2 dc 96 8d 92 73 4c e6 d9 6b 16 29 0a 28 8d 8b e9 0b 0b 3e f0 3a 4e f4 7c b4 05 81 16 5a 63 50 82 f2 ec d6 fa 70 1a 25 4c 60 67 ed 85 cc 76 93 a4 f1 eb 39 97 ee aa 8a 27 9a 30 02 b6 a0 e4 46 5a 54 ba 25 b5 14 1f 9d 25 8b 05 99 08 20 de e0 a2 b3 22 7a 1a 44 01 76 0c 92 5b 1d e4 66 25 b2 05 dc fd 64 cf f2 c7 25 ce ee 59 ee d4 de 33 0a 3f 27 02 e0 98 fe 6e 93 4e 5e a8 af 66 68 f4 52 99 97 29 ac 9f 9d 55 Data Ascii: E/UZ_:%l1B,{":d'%tlL_KmqU?JPMK"XAR!t5C?:;6"Wve)BuUsLk)(>:N\|ZcPp%L`gv9'0FZT%% "zDv[f%d%Y3?'nN^fhR)U
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 28 39 0b 34 14 36 12 db 86 84 8f c7 08 cf 4e 93 35 a1 c4 ad b5 50 b7 96 c4 79 36 c0 d6 67 cc cb ea 62 9a 03 1e 76 a3 5d 64 4f c0 a6 7b b6 50 19 2a 03 71 9e dd 60 61 c4 ff db 40 c3 40 72 34 63 01 ee 25 53 14 c9 6c ac 69 4c 83 12 f4 34 42 21 f9 29 bf 42 f2 02 4a 1d ed 42 6b 97 6b 26 24 27 0b b0 f7 50 0b 0d 54 50 82 cb 99 56 38 62 33 e3 aa 5a e8 92 38 de 86 e4 09 24 ea b0 0a d4 42 03 15 94 e0 22 39 8d 36 f0 12 a4 ee a5 18 59 0a f7 a3 61 2c a6 ba c2 da 0b 62 ba bc e1 85 e8 69 08 17 30 62 03 3a b1 03 72 34 5a 0a a2 00 44 b9 55 63 33 54 50 82 12 ea 34 e3 82 21 cf 29 46 cc ed ed 68 0d 48 e9 80 30 a5 16 ea d6 9a 2e 42 9d 68 2f c8 98 11 d9 74 8d 25 8e b7 22 4f 20 09 30 2d 54 86 0a 45 58 45 21 d9 67 41 b0 5d d7 d8 2e 3e 93 05 72 3c ab a1 7a 02 dd f8 11 15 68 42 09 Data Ascii: (946N5Py6gbv]dO{P*q`a@@r4c%SliL4B!)BJBkk&$'PTPV8b3Z8$B"96Ya,bi0b:r4ZDUc3TP4!)FhH0.Bh/t%"O 0-TEXE!gA].>r<zhB
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 5d 7b cc 11 07 53 e4 1a 06 18 56 dd 1e af 19 27 da c0 c0 67 e2 e5 35 58 9c b4 06 45 62 ba d4 5d 84 ae 7e 03 5b 7d e0 92 61 cf 36 8a 67 0a 1f 22 59 63 6f 06 24 1e f6 3e 1e f6 7e d0 1b ca 13 d4 ca fd 6a d4 73 a3 3a 01 06 eb ea 3d a8 40 03 e5 59 11 04 f0 fd 6c 61 03 12 a6 ef e4 a8 7c e6 8c 49 91 03 58 f5 c7 51 0b 2a 0e aa 4d 42 05 2a 28 59 85 a8 e1 25 6b 80 60 9a 71 b6 9c f0 53 cb b3 8a 1c 39 7d f7 4a d9 e2 46 5c 9b 0f e1 1d 1a 63 03 95 a5 08 05 be 08 b2 e1 ff fd e9 4f c7 c5 5a ac f6 e8 c3 bd d7 dc 7b 1f 77 fa 38 7c 6a 74 f7 ff 33 31 63 6d 5f 6e 7e 55 e3 9e 97 04 77 1b 7a 4f 96 ba 27 d4 3d be 00 53 de 7e 7b ca 61 fd ef 4f bc fa af 6e b2 70 ff db bb e7 fd be ff c9 73 ef 8f e4 8d 29 25 ce e5 aa 83 d2 a8 cf 1f 9b 94 e2 55 62 f4 3c bf 7e f9 d5 fc 4c 5b f4 ab c7 Data Ascii: ]{SV'g5XEb]~[}a6g"Yco$>~js:=@Yla\|IXQMB(Y%k`qS9}JF\cOZ{w8\|jt31cm_n~UwzO'=S~{aOnps)%Ub<~L[
2024-04-19 14:06:55 UTC	138	IN	Data Raw: 27 f4 2c 6d d9 06 f9 84 d9 5b 1d 45 29 8e 14 ee d6 42 9c 79 11 c0 02 58 a0 e0 a9 57 94 52 4a 04 82 cc 67 66 61 4e 83 62 f6 54 ac fc 89 fa 44 18 64 56 ca 27 0c 8f 2d 51 f4 c7 1f 7f 44 90 cc 7b a8 b7 5f 7a 0b ef 2d a8 8c 22 01 81 d5 7e 4e 3d 18 80 08 24 e8 e3 6d fd b5 ff c7 fb ff 2f d4 06 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: ',m[E)ByXWRJgfaNbTDdV'-QD{_z-"~N=$m/EXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	50096	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:54 UTC	525	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5890 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:54 GMT Expires: Sat, 20 Apr 2024 11:15:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 10261 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 fa 16 00 00 57 45 42 50 56 50 38 4c ed 16 00 00 2f ff c0 3f 00 09 58 92 e4 d6 6d 6a 77 01 d1 28 c0 f7 3f b0 1e 00 6d 27 df 11 fd 9f 00 fc 9b 95 3d 6b 50 37 75 c7 0e 5b fc b8 da a0 53 e2 7c bc 1e d4 83 74 f7 f0 15 e1 7e 54 8e 84 67 46 00 e1 8b e4 84 3b 60 51 b9 c3 cd 54 da 72 b0 b4 4e 55 53 45 93 7c 55 e5 90 48 93 fb 22 39 23 09 b4 d8 00 48 80 36 dc 2f b2 06 0c 00 12 67 45 60 e0 32 eb 33 20 cd e5 c5 d3 1e 77 bd ab 17 8d ff eb 02 72 6c db a6 ad d1 7c f8 d8 df 36 f3 8f e8 47 60 1b 87 9f 6d 38 8e 64 bb 56 ea 9b d0 8d 9e be b7 f3 3d fb 5f 13 31 22 44 44 6e db 48 72 24 de bd 34 b5 a7 ca 7a 7c fe 11 5d 08 67 be 04 fa 3f 01 12 fe cd f7 8d 72 fc 0a fa 68 d1 f6 41 de bf c2 e6 d4 e3 e9 d2 b0 ee 82 76 ab 4b c3 37 64 4a b6 a3 4f 84 15 2b c0 7c 20 8d 9e 75 Data Ascii: RIFFWEBPVP8L/?Xmjw(?m'=kP7u[S\|t~TgF;`QTrNUSE\|UH"9#H6/gE`23 wrl\|6G`m8dV=_1"DDnHr$4z\|]g?rhAvK7dJO+\| u
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 52 35 b6 6d db b6 6d db b6 6d db b6 6d db 6c db aa 4a a7 cb 94 43 db b6 a9 3d fb dc 8f 23 1f 7e db b6 6d b3 8b 93 2a bd ed a4 67 9b fc 55 ac ca b6 f9 db b6 6d ff df bb 27 26 60 07 de f1 ff 3b fe 7f 27 a9 41 0e da 39 60 1c b0 88 4b 38 13 9e f1 33 9c 67 ea dc 3a 33 c6 05 38 e4 d7 97 f2 fd 59 c6 bf b6 14 bf bd c3 a5 2d 93 d5 1b d9 e2 a8 67 e8 0c bd 91 f1 d7 9c b8 ff dc e2 d3 79 3f ce cd cd 38 54 01 19 3b 1a 1d 9a 7e aa ea ef 66 ad cb 5b b6 ab 69 dd be 9a c9 d9 43 46 bd e6 f9 b1 fe 7c 32 c2 e4 51 d2 45 0c cb 5f ce 5e b2 91 c1 f2 4a 9f 82 e4 20 c5 b5 a5 a0 58 16 77 9d d4 14 41 ef 2f 69 a8 2c a5 af 28 a5 ff 7a b2 b2 fc e4 09 70 b5 28 4d 4e 60 79 e0 fe 52 ac b9 0e eb af c9 aa 50 21 0e f3 f5 a5 70 d4 c8 b2 ea 14 d5 cc 66 ea ef 85 c2 1d 65 b5 c9 9e dc 6b 39 48 39 Data Ascii: R5mmmmlJC=#~m*gUm'&`;'A9`K83g:38Y-gy?8T;~f[iCF\|2QE_^J XwA/i,(zp(MN`yRP!pfek9H9
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: e2 c7 9a 3f ce c8 22 63 3b ee a8 3c a4 0b a2 9f 51 44 77 23 36 19 b3 46 c4 be b5 ea ff cf ef 70 a3 f7 fb df ed 7f d4 4e 26 7f f4 d5 d2 77 7c 38 fa 66 e9 fa 0c 08 aa 43 ed 3a a5 b3 a6 7f d8 d5 e9 e3 1e da b8 c8 f0 eb 3f 95 3f 59 fe 0f d5 ab 55 f4 2b c1 48 cc db 11 d3 81 f4 18 67 fa 75 66 7a 5b 24 9f 93 6a c1 4a 4a 38 37 d7 5b d9 5d 99 4b 8a 54 43 c0 d4 24 6c 83 87 3d 1d c6 d1 88 02 c0 cb 2b 8e 5d b4 eb 28 6d ac a2 7f 12 d3 99 35 b7 aa 17 88 49 93 33 2d 2e d6 3d ff c8 5b 17 54 f0 fa 11 0a 93 24 14 0c 98 1a d7 ac 5f 88 f8 05 da b4 a2 6e 75 93 07 fc 98 3a 2b 52 da 50 d1 3f 69 8b c4 dc fd df a5 5f cd 64 79 5a 99 98 a9 e6 a8 b7 0f 96 6f 02 8d 94 24 5e 5a 28 fd 46 18 63 04 4a 0d e3 f8 79 cc cf 09 d4 59 0b dd dd 2b 27 2a 26 e8 0e 0c ed 76 3c e9 ae db 6a f6 96 6e Data Ascii: ?"c;<QDw#6FpN&w\|8fC:??YU+Hgufz[$jJJ87[]KTC$l=+](m5I3-.=[T$_nu:+RP?i_dyZo$^Z(FcJyY+'*&v<jn
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: d2 bb fe a5 9f bf 7f 98 67 ef 2d ae 7e 27 8c e7 c9 a9 94 e8 47 5b 26 4b 1b d3 3c 1f 27 28 3f 6e 9f 66 3c b2 56 6e b4 eb 7d a5 a0 15 11 8a d8 33 94 b6 10 d4 85 e3 5c de 59 ff 69 dd d9 e3 d5 e2 7e b9 ef fd f5 8b 88 07 d9 a2 67 ff 2c c5 d1 f3 b4 88 b6 18 b0 e9 6f fa 51 c4 e4 b6 53 6f 81 f1 6d f7 74 cc 87 fd 1f 60 74 8b 53 a3 c8 60 45 28 19 e6 71 a0 08 dc e9 6f fa a9 b5 f2 c5 8a ad 72 e6 12 e4 78 f1 f2 82 6d 61 02 8d 31 41 e9 46 61 50 04 95 71 72 3f 8f 82 22 b0 e8 47 3f 54 2c 63 f8 79 c6 25 13 e3 3f 2a 61 a5 47 d8 57 c7 c0 22 aa 70 22 ba 81 40 b1 98 cb a5 c8 c0 b2 79 d2 28 e1 63 a5 6f c7 9c 5a 43 fd c6 81 3a 15 8d 2f 0f 44 09 11 c3 c9 89 50 24 94 b6 c8 c2 96 e3 3c 52 ba cb a6 9f ea 6d 6b 05 2e cb 4f 9f 4b e3 8a 03 55 aa 5e 5f 47 6e 9a cc ae 13 2a cb 4b af cc Data Ascii: g-~'G[&K<'(?nf<Vn}3\Yi~g,oQSomt`tS`E(qorxma1AFaPqr?"G?T,cy%?aGW"p"@y(coZC:/DP$<Rmk.OKU^_GnK
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 0a 51 08 65 04 a5 0d 4a b0 d9 33 f6 cf 62 cc a4 0a a1 48 33 19 8a 28 84 92 2c 6c da 50 08 9b f6 ae d7 66 22 8b d9 7c 22 a6 0b 27 82 12 dd 40 ec 19 dd a8 68 4f da e0 16 d2 6c 0b ea 76 1e ad 09 45 28 9c b4 a5 5b 44 77 21 d5 44 1b 44 7b d2 46 3f da 3a c1 c6 98 45 02 d1 9e 5e 23 da 60 d5 56 06 52 26 8b c1 a6 5d ec 79 4b 86 f6 4b 60 33 9f ff 77 09 8a d7 08 45 50 84 32 2c b6 73 a4 0d 85 28 ed 49 37 b8 35 7d 82 0d 99 4b 35 44 f7 a4 2d dd d2 96 0c 1c 4d 16 41 ec 1b fd 74 4e da 8d 0c b5 cc a3 2f 49 54 87 a8 55 5b a4 c1 c2 06 69 04 9b f6 d4 09 dc 12 6d b4 a5 5b 32 8f 3e 7b fa e1 92 47 85 13 d1 86 b2 e7 22 e5 09 cb be 81 5b d3 03 02 29 e1 3f 0c f5 79 70 ac b9 f1 b9 c3 ec b8 2f 4e da 22 f6 2c 21 65 ba 9a d2 3d f5 70 8b 74 4e 10 6d 2a 18 6f e2 f1 e7 ce a4 e5 89 d6 47 Data Ascii: QeJ3bH3(,lPf"\|"'@hOlvE([Dw!DD{F?:E^#`VR&]yKK`3wEP2,s(I75}K5D-MAtN/ITU[im[2>{G"[)?yp/N",!e=ptNm*oG
2024-04-19 14:06:55 UTC	149	IN	Data Raw: 88 f1 ee 75 0e 10 86 78 6c 2e cd d7 1b 49 9f 9b f7 43 e3 60 bf f7 4f 7e 7d a7 f0 b1 76 f1 22 fc 10 24 c6 21 1a 23 43 92 2c 0e f7 ba 93 cf ad ff 74 63 0c 07 fa c6 87 ae df cd f5 90 43 75 64 8c 71 33 32 c6 61 72 73 f3 81 5c 27 87 cb 30 6e 6e 46 de bd 19 e3 10 0d e3 83 0f 6e 86 24 0e f7 40 ae df 82 e1 30 0f 37 1f 7c f0 c1 18 0e f7 0e 1b 92 77 df 8d 71 98 0c 37 1f dc dc 8c 71 b8 24 ae af af 93 e1 70 47 e4 80 71 3c 72 f4 8e ff df f1 ff 1f 88 19 00 Data Ascii: uxl.IC`O~}v"$!#C,tcCudq32ars\'0nnFn$@07\|wq7q$pGq<r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50098	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:54 UTC	525	OUT	GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 26572 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4105 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 c4 67 00 00 57 45 42 50 56 50 38 4c b7 67 00 00 2f ff c0 3f 10 09 89 6d 23 49 92 84 8c 88 c9 0a 75 af ff 0e cf b3 cf 9d 01 11 fd 9f 80 f9 ef de bf 60 3b 92 98 99 fc 88 cd 32 4f 64 92 1f 00 6c a4 99 da f3 b1 98 7d f8 de 85 53 29 65 0a 33 3b a3 57 50 60 27 d7 25 41 dd 42 3c 7a 25 9a 25 c0 2b ce 6e 59 7a de d1 d2 ab b4 af 7c d6 da 0f 56 e0 5e d7 45 a5 35 0f 8e dd 45 ef 1e b0 b4 57 2b 79 68 99 f6 9c be d1 a3 5d 2f 75 6f 9d 24 6d 6b 5b 6f dc 76 81 b6 12 2d 0f b6 2d 7d b3 0c b0 5d 2c 91 73 8e 6d cf cc 8b b9 e7 e3 fb 9e 0f 6f bf 50 d6 4d 86 a6 d5 61 77 9d 3c a6 d2 2b fa bc 2c 48 ec 7a b7 e9 e4 9d bb 14 c8 ae d4 c5 2d c0 7e bd 1a 25 cc b1 49 25 2d c6 0c 96 de 4c 96 2d c0 56 5e 9a 43 2a 7f 62 28 b6 a9 ce 8c d7 d8 fe 64 92 69 e0 9c a3 53 a6 65 bf 31 21 Data Ascii: RIFFgWEBPVP8Lg/?m#Iu`;2Odl}S)e3;WP`'%AB<z%%+nYz\|V^E5EW+yh]/uo$mk[ov--}],smoPMaw<+,Hz-~%I%-L-V^C*b(diSe1!
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 62 02 78 55 b1 4f 45 8f 9a 35 0d 06 1a e3 9c c6 18 d3 39 e6 28 41 09 47 73 0f 2e 16 e1 a1 ee 60 19 3d 8c 0d a6 30 67 f8 23 46 25 be c5 22 ed df 2b 49 76 fe e7 64 56 8f f7 de 7b 79 ef bd 5b 82 37 d7 73 79 ef bd f7 de 7b 83 bd 76 e0 dd 38 79 ef cd f5 f7 b6 af ae ca 73 64 d8 97 99 27 2f bb bf 2d c8 bb 0d 24 9d 35 34 bd 21 f6 c1 2f e2 b2 b3 85 4f 6e 03 77 0d b2 5b 48 3c 34 61 d3 0f d7 16 86 ca 52 ef 7d 6f a1 69 0b 0e 1d a4 88 a3 2d 14 99 b8 dc 62 45 a4 1c 4d aa 86 4d 9b de 10 12 fe 64 16 a0 44 13 51 48 a6 40 e2 8a b8 96 8a 7a 53 4c 71 56 a0 88 ba 34 b7 30 b4 57 70 98 bc 2b 6d 41 50 82 df 1a 8a 4a d0 1e 19 9a a0 71 af 21 e1 e0 a1 82 b9 86 a2 82 42 4d 65 12 24 4e aa 2d 1c 3a da 80 85 de 95 bc c7 bd 01 99 a2 33 4b 98 4b 0f 54 08 52 ae 6d 5b b5 ad f4 b9 ce fd 6e Data Ascii: bxUOE59(AGs.`=0g#F%"+IvdV{y[7sy{v8ysd'/-$54!/Onw[H<4aR}oi-bEMMdDQH@zSLqV40Wp+mAPJq!BMe$N-:3KKTRm[n
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: bb e2 25 d7 f0 61 f8 85 55 2e 3b ef 17 cc 98 39 ef cf 71 8b 87 c5 47 a0 53 c2 ed 61 e1 eb da d3 ed 8e 3e e2 43 e7 b7 c7 cf 9c 12 d4 f6 83 de 75 3b 60 80 3f 1e 18 ce d3 35 ea 1c 3e d3 96 fe 98 37 3b fd 92 db 5d db 97 25 bb a5 8b 2d 73 ee 00 6e b8 91 22 c2 71 75 0c d9 d1 03 56 dd c8 63 db 1b 6e 60 73 7e bb ee b7 30 d6 0a 75 12 13 85 3a 9e 3a 01 76 cc a8 55 ad 1a 34 56 7c 66 8a 4f 9c 69 40 15 76 c4 aa 55 d6 8e cc cc 29 84 b3 de eb 4b 9c 8d 85 43 d3 e6 bc a5 e1 c6 40 1b 57 b3 dd 8d af 9c 2e 7e 5e 8c bd 14 d5 a2 af 39 44 99 fa 70 f5 b8 c6 e3 b1 97 8a af 1e e7 e0 96 4e c9 87 ed c6 67 c1 61 9d cd e4 88 11 ab 96 55 cb c0 2e d2 1a 58 31 5c ab 5a 27 c8 34 c6 ee 63 54 5f af 75 f2 55 0f bd ba 77 7d b9 ef 4e a1 76 f2 89 c1 cc 78 31 7b 70 81 da 1a 0d 0f 45 a1 bb 62 56 Data Ascii: %aU.;9qGSa>Cu;`?5>7;]%-sn"quVcn`s~0u::vU4V\|fOi@vU)KC@W.~^9DpNgaU.X1\Z'4cT_uUw}Nvx1{pEbV
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: bb 7c 73 91 76 f8 68 9a 1c 9a a9 a7 2f 1f ed 23 04 78 82 93 2f 7b 2c 0d 0b 57 4d b9 5e 58 e5 46 0e 3b 9f 88 5f b0 03 d8 c1 4e 11 10 c5 fa 2b f5 7b 1b 50 14 7c 1f 3a d9 25 22 0a e9 62 c8 7c a7 b2 22 a3 2f be 75 9f 2b fc 22 78 05 3d 05 f4 e5 9b 72 fa 66 b7 f3 dd f7 51 e8 a3 73 ee de cd 0a 67 75 71 dc e6 94 57 fe cd a1 39 9d 22 58 d3 9a fe 50 d3 8f 5e 61 e9 12 21 a4 b8 11 2a 9e 72 dd fd 5c 0c 5e 9a af 2d 87 92 12 ba 63 00 cc 9d 6c 73 89 c8 4e 04 71 de 07 01 c1 8b f8 74 d3 f9 f3 27 74 1e 81 1b f7 86 f0 20 c8 c1 2b ce 15 9a 5b 72 df 16 45 af 5a 5f f4 28 c0 83 2d 3c df 74 21 88 c8 2c 51 f7 75 76 07 17 2a 45 15 d7 ad cb 5a f0 d8 fb 26 c7 d6 f5 eb be 41 ae 3e 54 4c 47 ee 66 de ca e2 19 e1 6e 71 22 78 9e 7e c7 8d 72 7b 5a bb 43 87 2b 7b d9 7c af f4 37 0b bf c1 5d Data Ascii: \|svh/#x/{,WM^XF;_N+{P\|:%"b\|"/u+"x=rfQsguqW9"XP^a!r\^-clsNqt't +[rEZ_(-<t!,QuvEZ&A>TLGfnq"x~r{ZC+{\|7]
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 3b 31 c6 f7 bf 2c bf 39 d3 7a 97 24 c4 bf ad 9f dc f2 f3 f5 b9 5e a8 7c fc ee b6 cd f1 1d 5f e9 dc d4 2c 20 d4 fe 70 a0 16 a5 3c d9 ec b0 88 2f 36 05 d7 b7 d6 ce 66 b8 fa 1a 63 90 07 5f 23 c2 a2 75 b6 5e 84 77 45 9f 75 c7 1b d8 e8 e3 98 db 89 4d 91 71 3d 26 9d fd f0 f6 49 61 fd f4 e0 ac ac 09 6b 99 86 a2 63 59 29 a5 09 ca 2b 6f c6 b5 06 0e 5b 41 50 3e 99 cc 1e f0 8b 68 0a 8b d5 4a 79 d5 9f 00 f1 fa 89 32 46 d6 97 6f 8d de bd 45 38 88 da f1 13 11 89 3b 8f ba 35 ca 2b fc f6 e8 9c 0f 49 6d c2 ec 66 f6 56 df 16 df 77 5e 85 b8 65 51 9b 3e db 50 b4 9f d3 a5 f6 67 4e c2 43 c8 8c 76 4e 19 71 d6 59 b3 4a 34 96 43 5a 26 58 2c e3 59 7b a3 be 9a 4f 0d e9 78 ec ac 3b 8c cd 6a f7 e4 c6 d8 77 59 21 3d d9 5b 4a 36 76 55 1d b9 dd ef 61 63 37 76 c3 61 7a 2d 6f bd 58 43 e2 Data Ascii: ;1,9z$^\|_, p</6fc_#u^wEuMq=&IakcY)+o[AP>hJy2FoE8;5+ImfVw^eQ>PgNCvNqYJ4CZ&X,Y{Ox;jwY!=[J6vUac7vaz-oXC
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: b3 59 71 03 57 fd 02 34 7a 6b 00 bf e8 53 42 a0 e8 b3 2b 16 b7 8a ab 3e 8e 61 51 dc 68 ad 6f ce e9 b7 64 48 df 15 3c b0 b0 3a d3 0b 22 a7 22 a7 79 ce 22 fb b0 b8 c1 80 75 10 67 5a 7f cc 6c 43 2b c0 da 38 e1 72 b1 f8 2a 84 f8 69 ac c4 ab 20 2c ae 7c 1c bc b7 57 07 23 41 89 8a c1 84 07 29 4c 70 4a ba 83 4f 7d 1c ae b0 1b 78 11 9b d2 53 58 67 9d 57 0b 77 de e7 6a 2b a9 0a 2b 73 19 42 b0 9d 3c 0a 49 1c 2e 6e e8 66 45 a1 33 f3 78 03 da 2f 42 d1 8a 36 64 21 46 6b af 8c 9d 72 be d0 f2 78 6c a6 01 5e 86 f8 ee 1c 2d 62 4c 66 78 1f 08 48 af 08 f9 7b ea 00 22 af e5 dc 82 1a a3 e5 79 2d 18 ac 03 34 e8 f4 07 4f e0 06 ac bb f7 f2 24 96 27 d9 0f 2f 76 e5 83 5b 65 2b 15 1b f3 3b eb 55 a1 32 15 5b eb fd b4 dc 05 25 24 36 cc b0 81 10 e2 b0 d5 61 f4 43 25 6b b1 3a 61 dd 6d Data Ascii: YqW4zkSB+>aQhodH<:""y"ugZlC+8r*i ,\|W#A)LpJO}xSXgWwj++sB<I.nfE3x/B6d!Fkrxl^-bLfxH{"y-4O$'/v[e+;U2[%$6aC%k:am
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: d3 2e 8e 8b 98 82 02 17 3b 44 c1 01 66 09 d4 1e 17 87 1d bb f7 97 89 70 a8 81 1f 06 e9 65 6e 3f 14 ce 14 57 18 b7 f9 b8 48 0b 68 5b 67 dd ef 42 2d b6 34 ae cd c7 ed 14 c4 cf c2 c9 a8 74 62 8d b8 60 39 2e 2d 9d 5d c7 56 d2 69 69 41 08 f9 40 16 cc f4 a1 8b 6d 6c 31 01 69 b5 0b b7 40 61 f9 a5 00 60 89 b7 f1 36 34 58 3b a7 a6 03 62 f2 a4 e6 91 3a 04 16 b5 22 56 6b 20 e6 27 fc bc 33 20 c0 2e 48 8c c0 5a f5 ac e9 80 1d 21 d9 02 5c 07 98 02 7c db 24 36 17 91 5d 00 13 c2 54 82 b5 b9 be 42 d3 1d 1f 68 d7 4f d2 d6 ba d4 59 88 83 9d c6 8e ae b4 ee 4f 4a d7 e1 e2 01 9b 88 dd 9a 07 d6 25 96 22 e9 b0 1d bb 2e 94 20 9d 83 7b e9 02 02 db d0 b3 93 d2 19 b6 88 49 9d ef bd 8d 63 07 d6 61 7f 2f a1 6c b2 96 81 a8 d4 8c 01 42 cb 6c 16 10 09 98 75 e8 64 c3 3a 03 d8 b6 50 43 0d Data Ascii: .;Dfpen?WHh[gB-4tb`9.-]ViiA@ml1i@a`64X;b:"Vk '3 .HZ!\\|$6]TBhOYOJ%". {Ica/lBlud:PC
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: eb cc 41 f2 5e 69 2b 5e 74 19 fb 85 e5 e6 90 30 8d 5b 76 8b 35 89 d2 3a cf e2 19 71 96 4b a6 ae 05 0d 98 4f 33 94 fc e2 ad c6 80 c4 36 31 b1 d0 3e b6 79 ef c8 00 53 1c d6 e6 9a 99 45 b9 c4 8b d7 4e 34 37 53 c8 7b 73 93 3f 7e c3 b5 42 b4 4d 8d 6a 7f 4e 86 31 c6 28 49 cb c3 59 ac 59 a2 38 3e ea 16 49 d7 99 2b 49 aa 77 5b 56 79 ec d0 d4 5b 33 eb ba 0f 70 61 8d 72 ba eb cc dd 9d d2 6b 9c b5 89 51 f5 f8 5a 62 9b 88 74 c6 d7 9d 55 14 dd b5 7c f8 93 d3 3f 69 cc 96 ff fd 13 5d df b9 78 26 df 7c a9 3f 88 5b 6c cc ed a6 e5 42 b2 bc 8e a5 ce 8a 5b 73 9b 85 76 26 be be 79 87 2a 0c 6c 8f 39 1f 4c 22 98 71 a6 75 ae 01 6c 4a eb e3 b2 37 d4 bd eb 8b 99 56 d9 56 93 69 6e e9 a1 77 bd 0f 66 1b f2 ce f7 7d 6e 94 77 bd 20 ce 5c ca da a5 47 6f 30 da f5 74 63 3b 7f 30 0f 48 08 Data Ascii: A^i+^t0[v5:qKO361>ySEN47S{s?~BMjN1(IYY8>I+Iw[Vy[3parkQZbtU\|?i]x&\|?[lB[sv&y*l9L"qulJ7VVinwf}nw \Go0tc;0H
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 04 7d 3c 2b e4 9d 76 38 e0 9d 98 dc d7 74 2e c1 52 60 5d 5f 5b d1 f7 19 2b 9c be e2 58 59 77 b3 2a 70 37 28 32 9b 4c bd bd b3 dd 42 84 79 2f ca 61 17 7d f4 ce 73 67 cf 62 ad 2f 1c dd c3 ce 38 e6 3e e3 d3 dc b1 b9 45 df fa 75 46 21 c6 4d 91 28 16 d5 75 31 c5 bb c7 b6 c7 6d 3b 47 e4 3c 79 87 8f 06 89 c3 90 18 93 48 f0 75 26 26 f6 bb 24 7e 52 de 7e 90 2c 93 ba c7 6f 44 44 ae b0 bb 4c f9 dd f8 62 b3 5e 17 d7 c5 ad ae 15 f5 42 a6 8b 6f dd 04 fc 93 05 84 32 5f a0 bd b9 e6 d3 64 36 a8 b1 32 4e f7 19 32 f6 a6 cd 3c 45 cb ed c3 ea f9 ea 62 d3 3e c9 6e 6a ef bc 97 1c af 37 be 0d e6 30 9f d6 e2 bd 5d 0b 2b 7d bc 3a 41 ab 9c db b2 76 b6 b3 2c 78 aa ad fa 55 76 b1 ec 77 a6 b4 11 07 e9 a6 fd 36 49 86 ef 0b be f7 fd ce 6e 4b b6 65 bf c3 5a 75 94 61 95 9b 5f f8 33 8f 87 Data Ascii: }<+v8t.R`]_[+XYw*p7(2LBy/a}sgb/8>EuF!M(u1m;G<yHu&&$~R~,oDDLb^Bo2_d62N2<Eb>nj70]+}:Av,xUvw6InKeZua_3
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: e3 af 83 89 8f e5 fd 6f 8c eb ee b7 ff 79 ce be 97 ab 6d bc e8 b1 d8 82 b4 55 9e c2 7a 95 6a 3c 71 e8 b7 4a 59 d4 c7 41 fa ed a3 54 9e 00 60 83 81 52 62 71 76 11 a2 79 1a 14 c4 c2 fd 79 08 b7 e6 d6 fb db be e8 53 13 5b 13 62 8b 2f fa 10 7b f0 69 3f 11 ac c1 98 7a a1 62 63 c6 57 ba 33 6a 1c 92 e0 bf 19 6a 65 82 ad 41 af 59 db 6b 7c 1e d7 e3 ad c0 d6 eb fa e5 3b be 61 3d be b6 ef 77 ba 7e fd 93 6d 6d 0c 5b 63 c6 d2 42 0c b1 ea 68 a7 53 53 d7 79 58 98 19 45 82 da a8 f3 9f 6f fd 6d bc 33 a1 47 9c 4d 51 a4 ea bf 14 c7 28 d6 ae 68 71 a9 75 e2 8a 98 d8 ae 9d 85 d8 e0 b0 5b b2 69 a0 0f 33 6f b7 3d c5 65 ef 0e ad 55 a0 50 f9 ac 4f db 7b fc f9 57 5b e5 ad fd 0a 5c eb e8 b1 e6 48 15 c1 33 56 14 c6 9c 63 12 3b 6f 8f cb 35 f5 ae 0e 2d c6 18 fb ed 5a ea 2b 53 53 7b 19 Data Ascii: oymUzj<qJYAT`RbqvyyS[b/{i?zbcW3jjeAYk\|;a=w~mm[cBhSSyXEom3GMQ(hqu[i3o=eUPO{W[\H3Vc;o5-Z+SS{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50097	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:54 UTC	525	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9308 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 4105 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	722	IN	Data Raw: 52 49 46 46 54 24 00 00 57 45 42 50 56 50 38 4c 48 24 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 a0 72 da bd fe ff c3 33 59 fa d4 d7 88 fe 4f 00 1f 7c bd 06 31 a5 8c 98 11 95 18 a9 c7 6a 48 2d 5a e4 4e e0 ac 88 b2 13 62 aa e8 48 d6 dd b1 fd 03 2b a1 6f 37 d4 c3 76 e5 59 03 80 0b c7 31 03 9c ff d8 63 48 95 d8 26 24 25 d8 7e 09 78 5a cf d3 f9 ae 0b 38 8e 24 49 6e f2 01 04 ff ff 1c 3e 81 b6 ac d4 b5 18 34 16 8d 36 75 5f 73 90 b2 24 d3 71 24 db 4a d5 38 4b 42 38 61 90 7f 24 ac f8 ee ae 05 ab b1 6d 59 d1 d2 c0 17 fe 15 a1 80 54 10 f0 72 de 65 1e ba d3 ff 09 40 7f 6c 08 82 e0 37 82 20 10 91 60 67 2f 5d 2b 90 1e 44 82 e0 3a 7b 49 7a 20 08 02 82 bd 76 59 a3 d1 20 3e a0 7f 11 3d 10 04 91 ad d4 05 9b 4b 43 44 40 e8 f1 7c 52 1b 08 21 d9 5a 63 79 dc 90 31 00 02 02 44 0e Data Ascii: RIFFT$WEBPVP8LH$/?M8rFr3YO\|1jH-ZNbH+o7vY1cH&$%~xZ8$In>46u_s$q$J8KB8a$mYTre@l7 `g/]+D:{Iz vY >=KCD@\|R!Zcy1D
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: df f7 27 e5 f6 d8 b6 6d db b6 6d db b6 6d db b6 6d db 9e ea 4a 52 8c ff ef 7b b4 24 49 52 ed 58 11 d5 f7 5e c1 30 33 6c 65 b6 f0 76 c1 cc 7c a5 c7 bc 36 c6 2f 66 18 96 74 4e 77 06 44 db 56 ea 46 37 8f 1a 21 cd 8d 41 40 9b 99 0f f0 01 27 fc e5 a4 ff 38 e9 3f 4e fa 8f 93 79 e1 d8 3f cc f7 b3 38 da 17 ab 39 f6 17 f3 3f 7b ec 37 2b 25 cb 53 29 7f 67 df 02 f4 4d 6b df 14 87 e6 60 78 16 c7 e7 66 a8 bb 86 7a da f8 0c 8e cc ec 09 13 73 bf 6e ff f2 9f 47 7f e1 e3 53 3f 76 cc e5 5f e4 94 8f 39 70 d0 06 07 6c 54 0a ca c0 18 e3 81 89 5d 2c c0 51 7c d8 59 3c 60 65 67 66 5e 9c f0 50 ac f0 b3 df cc 3f f8 40 be ff 1a 97 f1 f2 1c e6 89 13 bc 0a c8 f8 64 25 bc 14 17 aa 8c 2a 29 e0 a3 77 e6 09 7b fb 80 05 96 83 d3 72 c2 42 69 d0 1f f9 70 fa c6 f5 f9 39 cc 43 1f 9c b3 33 56 Data Ascii: 'mmmmJR{$IRX^03lev\|6/ftNwDVF7!A@'8?Ny?89?{7+%S)gMk`xfzsnGS?v_9plT],Q\|Y<`egf^P?@d%*)w{rBip9C3V
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 43 db b9 18 20 32 90 5e ee 14 de 77 61 5b 06 7e ee 83 fc c0 9d fc d0 b5 cd 21 fb ff ef f4 61 50 77 e6 c4 72 61 00 95 6e 97 da 59 6a 5a 82 6e b7 d6 8c 7a 96 a1 16 65 44 28 4e dd 46 bc 09 ea 30 6e 56 19 32 4b f8 ea db ff 6a 0d 38 fe 3f df 71 57 be eb d8 a2 cb 9d 29 76 61 98 f4 70 8b 9d 2a df 10 d9 8b 01 a2 6e bc a4 2c c1 4e 97 d5 d9 3c 2a b1 d3 97 45 e4 12 8b 2c 61 53 1f 59 66 91 21 09 2b 59 a2 9e b1 79 5a 00 2e fc 21 5f 7d 02 3f f5 58 1d 22 b9 49 5a 81 3a b3 46 01 4c dd a8 02 a3 a2 74 99 71 1c 5c c5 96 22 dd b1 f1 b1 8b d8 c5 82 66 96 42 69 80 60 74 86 8a 89 57 9c fc df 9a c7 85 e5 a3 2b a5 dc 34 72 56 61 b8 1a 18 be 87 d4 fb ae 48 15 95 05 f0 c4 4b 45 b1 17 f2 ee a0 1e e3 30 8d 0c be 09 39 09 22 32 c0 1c 2e d4 59 db 58 2e f3 6d 37 f0 93 8f d5 fb 11 df b7 Data Ascii: C 2^wa[~!aPwranYjZnzeD(NF0nV2Kj8?qW)vapn,N<E,aSYf!+YyZ.!_}?X"IZ:FLtq\"fBi`tW+4rVaHKE09"2.YX.m7
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: fc c2 c3 8b fc f7 f8 73 52 82 7a d9 24 ee 8f 97 a0 19 9f 3b 1c a8 97 dc c2 9a 25 0e 64 0d 46 55 78 8c 69 29 90 00 c8 a4 b6 15 9d 66 99 ed b1 c1 aa 42 ee de 5c 63 d0 9d ea 61 ac 43 e9 b9 ac b9 95 51 93 93 23 ee 00 25 9c 9c 9f 17 dc 58 0f 5c a5 9a 15 8f 58 af aa 60 25 58 37 a3 fb 66 a2 f1 e4 5e 91 65 50 45 5b 3a 30 4a 0a 34 d8 b2 a2 2c 30 55 45 77 a5 26 43 26 7e f7 4c 4b 9e 40 1c 1f 51 26 70 18 3c e7 2c f3 24 f9 c0 06 aa ce 76 54 34 5e 89 22 4c ce ca 6b 5f ae a3 f3 b4 a6 c4 d8 6c f5 88 03 47 b5 82 41 b4 c5 85 47 9a 71 c8 b4 b3 97 01 06 a2 f5 50 d3 05 19 24 0a f5 76 b8 29 a6 6a d9 c6 82 3a ba 19 98 44 4c 01 54 2b 4f c4 05 38 ea 1c 05 47 1a 5f 08 3d b7 45 e0 3b 1d fc e0 96 bc e9 09 87 e3 d6 69 46 3c e3 00 97 28 2e 5f e4 58 03 a5 36 47 a2 a5 1a 4d 35 f9 04 12 Data Ascii: sRz$;%dFUxi)fB\caCQ#%X\X`%X7f^ePE[:0J4,0UEw&C&~LK@Q&p<,$vT4^"Lk_lGAGqP$v)j:DLT+O8G_=E;iF<(._X6GM5
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 19 42 4f 31 21 80 7e 36 25 36 be af a8 a3 23 9d c3 0f dd 63 ba be d2 25 4b e1 08 2b 2d 94 79 a1 6d 1e 62 6e bb 90 ca 88 4f 38 3d af 3a 6d d5 68 f8 8c 5f f9 63 de 75 d9 25 9e 30 cc b8 c7 09 5b c1 da 6f 2c 39 8a ad 30 b7 26 32 9e 53 10 53 c6 14 3a e8 11 2d b0 51 c3 48 fb 5f 69 00 ec bb 96 22 da 0a ff b8 b2 0c 91 c8 df a2 ad 86 45 2e f4 78 4e 59 18 a9 8f ec 67 78 da d6 e8 1f 1a 7f f5 f5 ec 14 f5 8a 9a 9c 50 5f 11 28 8b 18 74 f1 ad 69 86 1b 04 81 1d 62 05 e8 bd 7d d4 9c 86 31 47 f7 00 04 9a 1d 7d c5 37 98 4a 3a 43 9a c7 32 e5 ca 2e 7c 91 66 19 23 e3 7f 8b 34 1f 78 3a c3 bb 9f 1d d6 bc f9 84 d3 c6 ab 4f df 68 2c b6 dd d8 7f e5 0e ec 2e 7c b8 ef 84 e7 51 f6 2c 9a bb c1 48 47 74 cd c2 9f d8 70 6d 0a 5b a6 e3 ee 11 9c c5 3e f0 0c 1f d9 cc 8a 97 d9 c2 66 4b 98 a8 Data Ascii: BO1!~6%6#c%K+-ymbnO8=:mh_cu%0[o,90&2SS:-QH_i"E.xNYgxP_(tib}1G}7J:C2.\|f#4x:Oh,.\|Q,HGtpm[>fK
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 67 a3 b0 bb 7f bd 2b 3a 29 cb a3 a3 f9 29 dc 50 fa a8 b4 05 6a 29 8f 4b 1a a8 b2 39 b9 40 dc b0 64 6f 5f fc de 45 ac 2e fc 10 ba d9 61 68 c6 3e 7a 6f 1f 55 9f 85 d1 a4 af c4 00 74 00 91 6c 96 a8 2e b3 9e 82 62 dd 17 db 62 a8 c0 29 66 5e 1d 1b e7 f6 df 53 f4 5a ef d6 64 40 2a e8 dc 99 cb 79 2e 1a 26 50 ca c1 b1 ec 96 67 05 03 63 60 56 f5 ca cc 10 1c 8b 20 45 00 a9 6f 56 47 ad cf 46 df d1 0b 43 ee 05 ba 55 c9 5c 1d e7 ea 3c 7c 2f 78 db cf e0 14 ea af 7a 28 47 91 25 05 34 c3 df ff f3 12 2d ed a6 ab 48 37 c8 83 9a 5a 7b a4 71 2a 40 74 a4 fb d6 1f b2 ba 46 56 a6 e3 28 63 2c a3 90 ae ee 17 f7 65 8c 27 93 9e a9 91 80 38 1d e4 9d c3 91 5b 6b 9b 43 51 52 d4 ac b3 d6 28 d3 0d a3 28 8a ba 79 52 96 2e 1c 40 67 51 24 83 1a 3d bf 0b 24 51 e3 76 70 dc c3 7d 53 5f eb ae Data Ascii: g+:))Pj)K9@do_E.ah>zoUtl.bb)f^SZd@y.&Pgc`V EoVGFCU\<\|/xz(G%4-H7Z{q@tFV(c,e'8[kCQR((yR.@gQ$=$Qvp}S_
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: d3 80 4d 2b 3c d9 1e 23 b3 64 d4 d5 1e 68 65 2e 85 9b d9 67 d3 a2 16 14 9b a1 99 9e 93 a5 42 52 ad 08 54 41 78 3d c1 56 63 3b e8 87 5e 76 68 76 a8 83 4b e4 02 74 a0 34 8a 5a be ec dc cf aa ac db 31 a9 46 82 00 f2 d9 3d ef 9a 97 2f 29 5d b0 0b 00 a1 87 6a 86 31 e9 fe f6 3f 85 81 58 66 0d 37 04 8e 86 db 2e 68 c6 84 b7 2b 5a 8f 4a 55 88 93 d7 ae 30 bd 5f 07 e0 88 ad 7c 42 19 56 f5 5c 24 8a d2 41 f8 c9 43 71 ff b5 8f 7d ed b2 8e 81 86 7f a0 ff dc e3 c3 33 fd ed e7 ed 32 57 0c b8 97 8f c7 ea ae 8b 32 1a a8 ad 69 8a 55 3d 83 db ce d0 30 73 f5 ab 50 35 26 2e ab 9f 3d 55 95 44 ae f5 b1 91 4d 82 38 60 d4 01 07 97 e0 22 08 cb 5a 3e e7 f4 2f 1f 3a ff 4c 31 51 83 57 05 58 be 3b 7e c5 6b 4b 8d a3 13 e5 fd e9 be 9b 23 78 f5 3a 7f 63 9a f7 7e ee 94 6b a2 57 74 f6 3c c5 Data Ascii: M+<#dhe.gBRTAx=Vc;^vhvKt4Z1F=/)]j1?Xf7.h+ZJU0_\|BV\$ACq}32W2iU=0sP5&.=UDM8`"Z>/:L1QWX;~kK#x:c~kWt<
2024-04-19 14:06:55 UTC	1056	IN	Data Raw: 3a a9 9d 56 4a 35 6b 49 31 48 12 a5 54 0e 0b b1 a6 1e fa 78 fc d9 4f ad 39 7b f5 87 43 56 45 bb 00 c3 67 5d 43 52 d2 fd ec 96 e5 05 6d f4 f4 e6 29 78 a6 db b2 bf 76 27 a4 8b fc 9e 2e bf 8a 0f 2d d3 67 0e 64 74 81 ed 3e 1d 4f 38 27 d1 9c 6b b9 2a 6e c7 44 a4 c8 61 6d fb 6e ee a2 75 e1 c6 a7 fd 99 a9 7c 7a d2 af 2d ad 31 ad e9 cc 44 32 fe 8f c5 79 26 81 86 c8 c5 86 9b a1 90 92 c6 ed 7c fa 65 b9 0c 0f b5 8b 51 cd ca ec 14 f4 ed 5a 48 a9 de cf db 02 58 2d fc a8 67 cb a1 25 37 27 37 72 74 86 a9 90 16 f9 44 0e 54 6d 69 ea 7f 3d 49 35 7f 1e 13 29 65 b1 76 7c 27 7f c1 ee c0 cd 8f 17 9e 7e de 9f d6 e3 0f 9e 8d 6c 1f 76 1f 56 17 4c 13 6f 6a b1 4d 19 51 ae 35 9a ad 13 ff 3e 19 88 bd 4c dd 76 5c 97 d5 a6 5a 20 19 4e 41 2a ec 6b c2 c7 2a 84 55 c7 bc 2d 9f df 1b dd f7 Data Ascii: :VJ5kI1HTxO9{CVEg]CRm)xv'.-gdt>O8'knDamnu\|z-1D2y&\|eQZHX-g%7'7rtDTmi=I5)ev\|'~lvVLojMQ5>Lv\Z NAk*U-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50100	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	524	OUT	GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5456 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 4105 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	722	IN	Data Raw: 52 49 46 46 48 15 00 00 57 45 42 50 56 50 38 4c 3b 15 00 00 2f ff c0 3f 00 2a ac d6 f6 af b6 2c e7 1a bb c3 cc 69 66 9c 7b ef 66 ee c2 03 55 7d aa aa bb 8b 99 99 99 72 8a 99 99 99 19 47 cf f9 a7 b9 f6 3c a7 5c ef 6a 17 70 d1 b9 02 86 b2 ab 5c 83 0a 33 ee 13 92 f3 90 0e 47 a6 ed b1 d3 84 e3 c8 31 e8 1e 53 b6 4a 5c c6 58 71 e4 38 92 e4 6c 47 2e ed 70 5f 40 e3 1a e3 5c 40 93 8a ca e8 4b 98 e7 06 f6 88 da 2e 2e 96 66 c0 d3 0d a0 63 d0 9c 75 54 c8 b6 cd 68 bc 81 e9 c2 91 25 c3 0d b2 c6 f4 e1 48 8e 6d f9 6f 70 e1 72 e1 73 0b 61 74 4b d6 a8 3b 38 ea a8 5c c0 0a a8 5c 40 97 0c a7 b6 9d a6 74 98 99 54 d4 0a 39 5e 61 a6 1d e6 e4 a7 c2 b0 d4 51 51 ad 82 e5 4b ce 31 5a b7 0b 27 0e 6d a6 93 00 d9 b6 69 47 7b 6c db b6 6d db 13 db b6 6d db b6 ed 7c c5 f9 88 6d db b6 29 Data Ascii: RIFFHWEBPVP8L;/?*,if{fU}rG<\jp\3G1SJ\Xq8lG.p_@\@K..fcuTh%HmoprsatK;8\\@tT9^aQQK1Z'miG{lmm\|m)
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: f2 bf c0 2f ce c6 06 68 16 4e 4d 0d 2b 2c ec 47 a7 df e7 99 d7 02 9a 0f a4 fc d2 da e1 d7 2f 40 75 25 91 34 16 2d 02 02 5c 32 b3 0b 81 20 5f 03 5b 5b 25 71 aa e9 e9 2d 9e 99 01 d9 19 94 9b 7b 2c 40 ee 26 00 27 3a 74 08 10 c3 cb ca 0a de b8 71 70 20 e6 79 b1 e0 76 cf 9e 8d aa ae 46 7f 69 ae 21 8a 7d 17 de 28 25 d3 f6 ed 63 30 b3 b7 37 42 16 59 3c 3b 4b 57 68 f7 ee e2 3f 7f 52 52 e2 ef df 13 5e bf 1e 52 0e 01 28 a7 a0 d0 35 2d ad 9e 95 55 1d 0b 8b 46 ae ae 3d b2 b3 cf bc 6c 69 89 d5 94 96 96 8b b6 4f 4a aa 63 66 b6 b5 89 bb 7b 8f b4 34 47 26 63 d6 e0 20 a2 bc 8a 4a 54 00 b0 f7 12 a9 a6 a5 85 1e b1 36 49 ea 9e 3d 1e 88 1a 9a 9b 03 00 54 d1 d2 d2 19 40 a1 7b f7 88 2d bc 55 56 4a 0a e8 6e 01 10 00 5a c4 97 82 b6 23 03 be ef 6a b1 60 7e a0 7d 6c ec b4 8e 0e aa Data Ascii: /hNM+,G/@u%4-\2 _[[%q-{,@&':tqp yvFi!}(%c07BY<;KWh?RR^R(5-UF=liOJcf{4G&c JT6I=T@{-UVJnZ#j`~}l
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: b4 b8 50 1c 58 72 59 9f 08 1b 94 e7 3b 78 50 00 78 e1 fb f7 d1 99 09 91 92 fb 1d e6 1f 03 5b 8a bc 78 21 00 74 b1 87 04 26 cb 57 56 bc 4c 0a 7b 62 7d 3d 00 40 56 ca e6 cd 9c 92 4d 71 c0 39 ff c4 64 9f 28 19 37 de 4e d4 23 23 43 d3 1e 53 f4 2b 49 ae 6c 89 c8 95 d8 74 08 0e f6 38 5d c8 3f 2b 30 a5 5d 78 b8 43 db 8d 9d 89 44 49 67 02 41 a3 76 56 1a 38 3a 12 1c 0c f8 3c 60 ca a7 0a 00 99 f3 aa 00 70 fe 48 f0 eb 45 0d 9c 9d 7d 85 f3 1b 39 3b 03 93 fd d9 de 9a be 3d 13 13 9b c5 73 73 b4 12 e3 27 d9 b9 53 b2 7c 79 99 7a 41 4e ec 82 b3 2e 0d 6c 9e 5d 23 c1 bb 23 c5 7e ff 2e fa e5 0b 7a 7d 56 b8 e8 3e 4c 16 4e 4f ab 7b 33 f6 4f 0e 04 a6 bc 20 ed 2f 49 4e 68 6c 04 00 18 5e 5a 7a 8b 00 a5 b3 d6 36 20 00 70 f6 b5 25 37 0f 04 0d 42 6e 14 78 49 74 a4 4d 80 4f 36 f4 a5 Data Ascii: PXrY;xPx[x!t&WVL{b}=@VMq9d(7N##CS+Ilt8]?+0]xCDIgAvV8:<`pHE}9;=ss'S\|yzAN.l]##~.z}V>LNO{3O /INhl^Zz6 p%7BnxItMO6
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 4f 61 9c 5b 22 10 08 d6 47 38 ca 6e e1 ee 0e 72 9c df c1 c6 20 56 31 26 26 92 08 65 57 9e 81 61 52 b9 ba b1 b1 91 49 5d 6f 36 be ae 4e a5 bd fd fc 8f 1e d1 6e fd 74 8a 89 89 a4 6c db 86 57 94 ff c9 13 5a 0b d8 25 29 29 fc 52 0a 5b 6e 50 8a 87 87 d4 a8 62 47 87 59 59 5d 1d e4 65 af 28 b6 e7 a3 7f c0 36 ee 66 1d 1a af 0f 63 df 84 dc 52 61 98 98 77 ae c7 f0 ee 5c 74 73 2a a9 ab 03 35 73 86 87 dd c7 57 94 4c 07 f7 5d 41 6c 4f 14 fe f4 09 e4 e6 b1 b1 e6 49 af a0 a2 82 eb 45 a3 69 f2 c1 5e 6a 1e 69 bd 19 7d ea 45 00 de 0c 50 33 ba ba c6 54 54 8c a9 ac 9c d6 de 8e 8d 69 66 0e 0c 20 d7 40 01 28 f0 fc 39 4b 45 7b 46 12 ca fa c2 a7 c6 d4 b3 b5 f5 d1 11 a0 7b 7e 90 9d 3b b2 b1 ff 3c 7f 6c 0c 53 4e 4c cc 22 a1 de 1a 7c d8 9e 59 59 23 8a 8b 01 49 df cc cc 18 7a bd be Data Ascii: Oa["G8nr V1&&eWaRI]o6NntlWZ%))R[nPbGYY]e(6fcRaw\ts*5sWL]AlOIEi^ji}EP3TTif @(9KE{F{~;<lSNL"\|YY#Iz
2024-04-19 14:06:55 UTC	969	IN	Data Raw: fc f1 b7 40 a0 9d c6 93 ca 0d 90 3b 29 29 2e ee 71 ee b4 8f 89 91 84 c3 36 92 9b 03 ba 90 48 48 15 e4 c2 13 96 19 0b 3e 4d 16 fe cc 5f 2d 63 63 9f 52 91 71 99 57 3c 07 a0 f9 2f 97 2b 31 02 70 0a 26 a6 80 1b 57 5d 2d 3d 1d 19 10 17 ba f5 aa da da 11 4b 6a dd 57 8b 96 2c 2d 8d 2a 2b 7b 4f 34 bf 3f b5 a3 43 92 e5 d3 ab 4e d9 b4 c9 b7 bd e6 de de 57 92 2c 9a 9a a2 36 69 2f e5 c7 d4 a6 5e 5e 48 45 e7 8a 2a d2 de 7a c0 fd b4 26 8f 87 ae 2a bd 8c 00 04 55 4f 47 ce ab 52 fc fc 40 0d b6 a6 90 fb 86 18 e2 ad d3 4c ed 80 cd 00 00 db 3d 7d 2a 00 96 21 86 d8 eb ce c3 2a da 28 00 ca 9c 82 fd e8 40 db 81 89 49 00 e4 49 ac 44 42 ba ed 1a fb 0a 60 ca 49 b6 6e 8d 73 bf 91 a3 23 00 40 f1 6f df c8 ef c2 eb 94 94 24 69 e2 e1 e1 55 94 91 61 98 d5 f0 da 46 45 49 5a 47 44 b8 8a Data Ascii: @;)).q6HH>M_-ccRqW</+1p&W]-=KjW,-+{O4?CNW,6i/^^HEz&UOGR@L=}!*(@IIDB`Ins#@o$iUaFEIZGD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50101	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	525	OUT	GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8092 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:11:51 GMT Expires: Sat, 20 Apr 2024 12:11:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 6904 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	722	IN	Data Raw: 52 49 46 46 94 1f 00 00 57 45 42 50 56 50 38 4c 88 1f 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 85 02 b5 45 ce ff 1f 5c 59 51 39 fb 35 a2 ff 13 c0 7f 72 dc aa 80 cc 25 ea 13 99 0b ec 91 f9 4a 99 3e 90 d9 11 0a 0a a8 2d 62 46 46 a3 ee 5a e0 be 48 85 52 5b 44 34 ca aa 82 5c e7 24 e2 b3 9c 8c a7 f1 06 b4 dc c7 ba 2a 55 22 9e e2 6b 81 d3 6a 9d 8d b2 5c 70 36 92 7b 01 9c 0d 3b f7 64 3a ce 73 a6 fa 22 27 e8 c4 77 64 b6 5c c1 b6 6d f0 f1 19 b0 6d 4c c7 18 8b fe a6 0b 38 92 6d ab 56 1a 77 77 0d 29 e6 3f 12 42 c2 1d 11 b9 fb ff d8 3d ff a3 b1 e3 48 b6 55 a5 71 56 d4 0d e1 e5 1f 13 2b 77 b7 5b 17 29 d8 b1 6d ab 6d 76 09 e9 bf 32 83 24 af c8 8c 61 f8 73 ff 27 80 fe db fe 75 1c a4 af 50 3b 35 ef da b1 63 40 e7 c0 61 52 83 fa ed 8f 3c f8 ce 66 3b 6a 5e cf 56 cf 8f f9 Data Ascii: RIFFWEBPVP8L/?M@rHE\YQ95r%J>-bFFZHR[D4\$*U"kj\p6{;d:s"'wd\mmL8mVww)?B=HUqV+w[)mmv2$as'uP;5c@aR<f;j^V
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: a0 9f ff 3f 7a 8f db d8 b6 55 65 9f fb 3f ee 90 13 52 03 6d d0 27 25 31 a4 ee 6e ef 9d 98 00 bc d9 ff af 92 64 e7 9c 53 55 4d 33 3d b7 b7 61 98 e7 5e 31 33 33 33 33 33 4b 2e 33 33 33 33 33 33 33 2d 33 ef 30 4f f7 34 56 d5 31 aa a7 9e db dd ff aa 71 bf e6 cd e1 44 d1 62 29 86 eb 1e b3 ec 8a 40 cf 73 b2 b8 51 28 81 1a 81 4b bb 66 89 f5 73 b7 52 38 11 c8 9c 1c 94 42 bb ed b6 db 6e bb 42 97 26 02 99 72 77 12 b8 e4 8a a5 bf bb 60 ad fb 8b 42 94 85 dc eb ca dc 23 56 8d 39 a6 18 ec 72 15 c5 26 c0 ee 9a 47 ac 59 77 cc bf 58 e3 2a 06 65 71 43 d0 95 2b 73 5c 2d b9 82 4a 40 11 74 0c 25 88 a1 dc 35 65 97 a5 e7 99 f1 e4 5e a5 a0 3c a4 08 64 ae 3b 8f 7c 1c 77 5c da da b6 1d ae 98 e7 fd fe 99 49 32 59 a8 6d db 76 7b 30 76 4f 60 e1 4c ca cd ee 75 cb b6 6d db 6d 16 92 cc Data Ascii: ?zUe?Rm'%1ndSUM3=a^133333K.3333333-30O4V1qDb)@sQ(KfsR8BnB&rw`B#V9r&GYwX*eqC+s\-J@t%5e^<d;\|w\I2Ymv{0vO`Lumm
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 77 13 61 86 48 e8 ee e4 61 62 52 41 11 12 37 51 b4 70 97 9f 65 9d e3 3e 12 bc d5 34 c8 2c 4a 5c 04 7c e3 bc ef ea ab a7 f7 a2 a9 a8 b3 c1 7e b1 62 df 63 b7 5e 4a f1 08 2f 05 ba 88 77 f1 b1 be 91 28 41 31 47 9c 9b 3d f1 e7 bb 6a 35 a5 63 9e e6 80 68 28 9f 75 1c 05 5c 42 2e 84 8e 1a a7 a8 34 65 40 25 21 41 0b b4 ca 4b cd bb ef c3 f5 1a 72 3c f1 fd 89 d8 59 4d 27 ea 56 cc 41 69 c8 23 33 17 c1 9d bd 6c 1f 54 aa dd 15 88 bc 23 aa 77 fe 6d fc 5a 7f 9f fc d0 45 fd 98 78 1c b0 0f 89 01 d4 7d cc b7 4d c8 69 5b 4b a7 46 7b 29 4c 1e d9 27 e7 03 22 cd 26 14 56 67 5c 17 74 56 e9 61 21 d0 0c 4f 2f 44 20 63 01 f0 c7 0b 06 b6 19 46 45 60 ef f3 57 78 a0 ef 1a f7 6c bb 1b 54 0f 28 25 3b 85 b6 9a 80 6c 90 41 ec 01 0a 13 4e 61 1c d2 44 50 70 c6 19 a6 f1 89 e1 a4 4e 66 b4 be Data Ascii: waHabRA7Qpe>4,J\\|~bc^J/w(A1G=j5ch(u\B.4e@%!AKr<YM'VAi#3lT#wmZEx}Mi[KF{)L'"&Vg\tVa!O/D cFE`WxlT(%;lANaDPpNf
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 9e c6 b9 2c 07 96 39 11 e1 a9 5d 04 77 c6 89 6e f5 01 a0 c0 fa 51 fa a9 7f 9a d8 2d 6c 71 f5 84 3d 6c 81 a3 30 11 65 bc bd 76 68 ee 6c 01 e8 18 6c db 84 54 2f 0d 57 dd 93 65 3e fd 3d 9b 5b 67 8a 68 c3 c4 b6 1b 47 d5 53 80 f4 87 d8 44 28 5b 9c 4e 03 97 c6 f8 26 b5 75 74 5a 26 d4 4d f2 35 15 3b 97 e5 46 61 6a 37 c3 28 1e 13 4f 03 96 2c e2 e2 58 32 14 10 fb 48 8c 32 b4 b5 1e 2d f6 e5 47 4b 3b e5 a2 28 e6 11 c2 30 94 79 74 e0 df 7f d7 5b 1f 29 35 27 50 95 51 63 cc e9 a8 22 c4 87 b7 f8 67 78 b7 79 b0 97 61 ae ba e5 88 0b b1 50 3a a1 73 e2 7b d2 92 e6 25 82 89 cd b8 98 e6 21 bf 4e fe f2 27 5f e0 45 5c 2a 1e ab 00 e8 51 d6 a9 c6 1a 9b b9 c7 d8 fa 2c 65 cd 03 ad c5 ba 24 9e d5 51 3d cd e7 ad 06 5a c0 79 b0 a7 b6 8e ba 17 f2 42 9d fe 5e e5 ae 60 98 10 9b 61 60 42 Data Ascii: ,9]wnQ-lq=l0evhllT/We>=[ghGSD([N&utZ&M5;Faj7(O,X2H2-GK;(0yt[)5'PQc"gxyaP:s{%!N'_E\*Q,e$Q=ZyB^`a`B
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 7e 38 1d f2 ae 8b 9c af c9 97 36 fd 14 8e da d0 dd 7a 25 02 55 a1 5b 6e 43 58 3d 64 8d 7f 23 9a 73 e8 86 77 1b 9f 5c 75 d3 26 42 37 75 37 dd d2 4e c3 22 a6 e5 0a 50 55 39 10 ea 6a b8 e7 9f 18 96 2b 56 6c 90 2b a1 9b 98 73 73 f5 68 ea 45 b9 c5 26 2a 6e 21 21 29 92 7c 79 ee 44 18 46 ba 72 68 53 85 6e 62 b2 0e 8a 30 67 55 e8 6e fb 2d 4a 88 2a 42 9c cf c2 b0 06 24 90 61 e9 a7 1b c3 38 a0 4d 42 ff ac 7b a3 5b 84 36 f4 f7 98 14 41 d4 dd ac de 95 6a ba 21 21 da 98 d9 5b d3 30 1d 9e c6 67 fd 34 0e 26 a1 ad 12 93 42 28 51 45 29 ea 40 97 48 30 e1 49 a6 2b c7 a0 9d c6 25 98 aa f4 23 26 8a 50 16 bb 87 51 b3 a2 81 4b 12 4a 3c 8c 72 94 ae 38 85 fe 19 93 ec 95 70 70 31 51 04 c5 26 aa 4e 1a 73 84 47 10 68 bc 7c d0 2f fd 94 da 38 40 e8 6e 98 a2 b4 85 9d 29 45 2f 1c 49 11 Data Ascii: ~86z%U[nCX=d#sw\u&B7u7N"PU9j+Vl+sshE&n!!)\|yDFrhSnb0gUn-JB$a8MB{[6Aj!![0g4&B(QE)@H0I+%#&PQKJ<r8pp1Q&NsGh\|/8@n)E/I
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: a6 cf d5 98 bd 6a cd 82 d1 6b 0a 4c 15 ba 39 64 80 98 a0 04 4c 45 50 08 c8 0b 0b 49 a0 04 14 61 03 66 31 73 c7 cc 90 6e d2 cd 87 d2 0a 70 18 02 9c 34 6b 7f f0 15 32 2b b7 fc 34 10 41 c4 1d ae 3a 56 03 c1 4c 16 9d 98 b4 c0 94 a1 5b 36 52 00 72 08 8a 10 a6 42 28 6e b5 e9 8e 24 50 04 12 8a 28 9a 66 fa 7f e8 73 15 2b fb af 1a 1b 52 50 64 ab 01 57 b5 6c bc df b5 77 22 e9 7f 72 cb 5b 82 88 44 84 ba 46 af f6 fd 0f 4f f2 d9 db fb 26 42 10 d2 11 91 5e 83 fb cc 33 ac 3e 92 f4 b1 7c aa 6a 11 aa e3 40 54 b5 8b 07 75 8b 36 6c 68 82 49 11 a8 5b 6d 72 61 f1 40 a0 02 66 89 e2 01 b3 91 36 93 f1 3d 81 b9 5f 89 4d 63 44 63 a4 20 40 23 6d f5 c1 fd 45 c7 58 38 75 cb 5b 5e 44 04 51 47 29 3f e4 9f 5d ed 75 14 25 62 83 a1 5b 1f fc 83 bf 7f e7 ad 8e e2 bf fe d1 c7 1c 55 bc f6 65 Data Ascii: jkL9dLEPIaf1snp4k2+4A:VL[6RrB(n$P(fs+RPdWlw"r[DFO&B^3>\|j@Tu6lhI[mra@f6=_McDc @#mEX8u[^DQG)?]u%b[Ue
2024-04-19 14:06:55 UTC	1095	IN	Data Raw: 56 d9 64 8d 9b 04 db 00 49 44 48 3e 57 22 49 44 64 16 0c e7 dd 94 be 65 5e 6b b2 19 43 41 50 dc 96 f7 ee 56 73 8d 70 95 6e 48 50 6c f2 01 24 25 11 61 d7 f5 2b 42 af 67 71 29 fd 09 ea 08 a9 4b e3 49 6a dc 5d 2a 68 96 f3 3c 22 99 94 ac 88 a4 94 92 68 7c dc 0c 05 6a 7c 3f a5 6f c0 d5 06 4d 85 94 2e 4e 98 d8 4a ff de b5 30 2d 3d 5a f0 8c 82 b7 55 4a 29 09 c9 29 91 94 52 f6 0c 8c 8f ef da b1 de 79 a7 92 bf 37 17 3f 95 ea df 2c 8a bb 8e eb 77 65 6b ef 01 be 6e c4 f3 3c 6f ab ef 13 11 28 29 01 49 e9 fb 5d 0b 3e 77 7c 7c fc 80 e1 71 09 c9 37 68 f6 63 e8 13 35 78 d7 62 f0 7a ba 13 c9 1e 0d cd a5 88 1a de 56 cf 0b 34 7c d1 56 29 09 49 eb 2a f3 fe fe fe 3e d3 c5 8d 8b 3b f5 9b ef 34 6d 7e b8 88 b0 8a ab 21 b5 f6 0b 21 dd 3e ed fe d3 23 3d f0 cc 5d be 93 45 3b b4 02 Data Ascii: VdIDH>W"IDde^kCAPVspnHPl$%a+Bgq)KIj]h<"h\|j\|?oM.NJ0-=ZUJ))Ry7?,wekn<o()I]>w\|\|q7hc5xbzV4\|V)I>;4m~!!>#=]E;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	50102	74.125.136.104	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahQjhgtqGjilS4ufRwoRKvfYBGNt9kD399GwGFmwPnaNTM7QZnKPtVvsqIG8ITSC3HfL-7686rnNg2vGfg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:06:55 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:06:55 GMT Expires: Fri, 19 Apr 2024 14:06:55 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:55 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:06:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50103	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	525	OUT	GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5298 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:21:03 GMT Expires: Sat, 20 Apr 2024 10:21:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 13552 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 aa 14 00 00 57 45 42 50 56 50 38 4c 9d 14 00 00 2f ff c0 3f 00 09 47 6e db 48 12 9c 2a 4f 75 60 ff ff c3 bd 24 35 db 39 a2 ff 13 80 bf 79 b8 36 0b 1e b5 28 44 94 e2 ed 7c 8a 9e 71 92 4e af e3 e8 10 cf 2b 33 b9 98 27 01 f0 33 29 49 24 e5 be 49 49 94 d4 11 a4 62 8e 0d 52 2a 62 46 6c 8a 47 2e 51 a1 b9 83 27 ec 81 32 81 b1 81 64 92 ec 9a 00 20 9c d3 2d 97 32 00 db b9 07 1e bb 6e 5b 1c 25 55 96 1f 9d 9d 85 ff 75 01 37 b6 6d 57 cd 1a 22 0f 77 88 08 7f a8 02 d4 7f 2d bf 00 b9 c8 7b 3d 73 f1 31 ec 48 b6 55 2b fd dc df 5b 4f 71 58 21 90 7f 4c fa e9 14 1c 49 b6 5d 35 8d 27 e3 e1 5f a6 91 8d ec fe 57 45 a8 4c fd 9f 00 09 57 b3 71 29 2d f3 fa b8 34 dd a6 cc d7 af f7 d7 c4 ce 44 7e 50 e2 f0 52 45 ec c7 e9 e2 b0 23 40 7d 57 f1 dc 9e 1a ed 23 dc 40 4a 29 55 Data Ascii: RIFFWEBPVP8L/?GnHOu`$59y6(D\|qN+3'3)I$IIbRbFlG.Q'2d -2n[%Uu7mW"w-{=s1HU+[OqX!LI]5'_WELWq)-4D~PRE#@}W#@J)U
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: ad cb b5 8a b2 ce 8a fd 00 c1 9d c3 7b 66 2b 92 1c 5b db d6 36 7a de 4f 92 39 cc 69 87 eb 59 ce 74 cc cc b4 02 2a c7 ed 94 b4 8a a9 e6 cc 06 98 99 d9 20 cb fe bf 4f 72 24 49 8e e4 44 66 cf f4 ec f1 3b 09 4e 14 c8 77 10 00 12 e1 c9 f4 e0 1c 18 d6 95 31 01 21 30 e8 ff 41 ff 0f 26 55 00 89 35 0f 00 17 63 02 22 9e a3 44 9c 79 a1 50 64 ce 07 62 dc 43 01 11 3f 25 97 f2 a2 15 e6 b6 c9 8b 87 4b 29 63 aa ec fa e7 da 5d 8e d0 a4 4c a9 7b a8 04 bc c8 8a a8 bb f6 ea ec 0f 72 b9 32 57 ab f4 bd 87 8b 40 59 86 76 9f e9 34 d3 d9 67 c7 f9 6c f2 cd 48 2c 89 27 0b f3 12 b7 0f 75 3b 13 51 0f fc f9 cf 0f 18 e4 d1 6c 38 6a 9d d3 2e a3 6c 16 e2 39 08 3c e8 10 0b 61 b4 70 c4 ff 22 38 68 a1 b3 ad 10 00 12 4b d2 11 ec 15 85 88 92 f0 2b e7 9f 89 f2 54 88 63 71 8f ff cf 02 41 69 18 Data Ascii: {f+[6zO9iYt* Or$IDf;Nw1!0A&U5c"DyPdbC?%K)c]L{r2W@Yv4glH,'u;Ql8j.l9<ap"8hK+TcqAi
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 79 7a bb f0 8d d3 fd 77 7d 74 50 9d ee 0f e1 9b e6 e7 ef 58 5d df c9 68 3f be f4 0d f5 e5 27 a8 ee 58 ea cf e7 d6 16 a7 c9 92 52 e7 14 cb 69 d2 7b 86 e3 8b c7 07 cb bb e9 70 c1 7b bd 97 c2 5a 4b 37 ae 4f c2 cd bf 5f d4 f1 e5 bd 52 f8 9f 3f 6d ef 23 fa e9 4d f6 aa 98 a7 ca 3c b6 4c 0d cc 26 10 8b b9 c9 5a fb c8 4f 51 95 3a 90 a5 60 60 6a df 13 19 a0 f7 88 7e e9 4f 1c 98 2e f3 fd 93 2d bb 5b bd 5b cc 51 d6 5f eb a9 54 ab 30 c6 08 57 d1 2d ab a3 bf 6b e7 eb c0 8e 3a 1f ce 36 ee 6c 82 58 59 c3 2d 67 57 dc e5 53 9f 12 31 58 a6 c5 ca 18 2b 12 dd 58 8c ad 1d b7 1c b8 64 1d 77 7f 55 5f 75 d6 ce ca 42 c5 c9 b2 de b5 b5 6b a7 c5 64 43 21 4b 81 e9 f6 a7 b8 dd 27 e6 91 75 a2 5f a1 6a 45 c1 58 1f d8 b7 52 3a eb a7 bc 0b 4f ff 85 fa a1 d1 40 bf 84 b2 ea 20 d6 07 76 db Data Ascii: yzw}tPX]h?'XRi{p{ZK7O_R?m#M<L&ZOQ:``j~O.-[[Q_T0W-k:6lXY-gWS1X+XdwU_uBkdC!K'u_jEXR:O@ v
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 5a d2 3e e8 85 d8 67 52 54 5b 64 ca 42 f7 72 d9 46 aa 98 0c fd 2c bc b2 32 51 37 04 d7 86 18 58 84 6e 74 bd 47 14 99 14 17 2b d3 5c 6c e8 69 ed a1 3f 67 d6 28 35 81 01 6b bf 74 6c bb ee 97 92 89 d1 44 f7 42 b2 91 32 31 16 a2 fb 32 fe d1 ca 2a a6 02 ac d5 66 46 27 47 71 fa 75 24 93 01 d1 cd 14 6a 1b 05 d1 8f ee 1c 38 d6 70 29 6d 28 f1 7d 27 f7 f9 47 7f 2e 5e 8a b5 73 10 65 23 1f 31 dc 32 da ac 98 2e fa 51 31 bd 63 47 39 be 2f c7 fd 20 56 0f a4 6c e6 8c a1 9b de d4 1f 2b 8e 51 4d a8 30 f1 f1 4b 7d 4a 7f a2 4d 67 22 8a c8 36 ba 1e da e8 ce 68 53 d6 06 42 89 89 d8 f9 24 97 ef 5f 3f 63 94 7e b4 d1 5e 8a 28 42 d9 d0 d1 8f ee 20 b2 84 28 c2 24 94 e9 9c ae 7d 9c df fb 13 fd 12 6d 28 f3 ba a1 fa d3 ea d4 8a 44 09 57 82 62 3b 13 aa 97 9b fd 48 71 d1 9d 1c 0a 51 5c Data Ascii: Z>gRT[dBrF,2Q7XntG+\li?g(5ktlDB212*fF'Gqu$j8p)m(}'G.^se#12.Q1cG9/ Vl+QM0K}JMg"6hSB$_?c~^(B ($}m(DWb;HqQ\
2024-04-19 14:06:55 UTC	812	IN	Data Raw: 75 fc 45 ee 2a d3 34 77 b0 3f d8 f2 1f 5f 0f 55 a1 e7 07 ba ae 8d ae f9 24 04 c4 83 b1 7b 14 ea 91 a9 7e c1 b9 c1 dd 1e 01 3c 42 56 15 57 d7 d4 14 e5 85 b2 5a 18 e5 19 35 d6 ae d9 f4 38 3f 0e cc 08 98 77 04 d2 de 21 43 23 6e 18 27 66 d8 78 78 d8 68 43 3d 1e 89 23 a3 7e 91 e4 ce da 5a 21 4c 52 1f 0a a1 6d 86 93 b5 4e 87 54 d9 d6 9d 58 c7 23 61 24 7a e6 bc bc 9b 3a 65 7a 87 96 4e b2 a1 75 74 39 a9 ab 28 0f 07 31 aa c3 3a fb 6f e8 64 2a a2 1e 07 66 04 7a 16 ce 77 83 45 65 d4 3c 39 f4 d0 2c 9b c6 7f 87 6c c0 90 b5 2e 84 d0 cb 35 cb c3 e7 d3 c7 1e 05 7a 24 3c 63 dc b5 b4 94 43 dd 33 7d 46 50 c4 7c 26 14 ff dd f2 ad 75 6d cc 0e 46 67 e4 51 40 47 e6 79 67 ee 27 19 e8 75 d6 98 8a a9 7b 8e a8 18 24 f5 b2 36 d4 5a 1f 38 1e 05 e6 cd cf f0 c1 5d 01 49 b5 a9 0c 4f b6 Data Ascii: uE4w?_U${~<BVWZ58?w!C#n'fxxhC=#~Z!LRmNTX#a$z:ezNut9(1:odfzwEe<9,l.5z$<cC3}FP\|&umFgQ@Gyg'u{$6Z8]IO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50104	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	526	OUT	GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 41480 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:37 GMT Expires: Sat, 20 Apr 2024 12:46:37 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4818 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 00 a2 00 00 57 45 42 50 56 50 38 4c f3 a1 00 00 2f ff c0 3f 00 09 88 91 e4 86 6d 06 80 f1 87 07 ad fe 0b a6 9c b4 10 d1 ff 09 88 93 11 fb 99 01 06 92 99 91 b2 33 9b 4c 38 e7 44 64 26 33 33 cc 6c 8e 21 7b f2 86 ca 43 be ec 4c 66 6e 4e 42 66 fc 48 07 a8 93 99 19 c3 5b 4f 66 e6 31 38 06 98 ac 31 6d b4 3d c0 c9 cc 99 f1 e0 2e c0 16 b8 0d d2 b0 63 32 3b f3 b4 f6 03 7b ec dd b5 1b 90 66 a6 39 e9 cc 44 0a 0d 70 b5 b9 3b 27 ba cf e4 35 46 12 38 76 eb 01 81 ed 47 ea ee 04 a6 17 4c fb 91 bc 00 5d d9 20 a9 79 f1 de 06 a4 45 ed 32 b0 3c 99 09 cc de fe f1 d0 76 bf d8 4e 4a e3 dd b5 1b a0 1d 4f 7c 1e ee af 6d 03 11 11 6d ef 2e b8 fc 3c e8 c5 75 fe f0 3c 62 77 ed 63 00 09 9e f2 49 c3 e7 42 62 b5 b6 9f 8b 07 6c 7b ed 3d 11 b1 e8 76 f9 e1 76 45 d4 d7 9f 9d 19 Data Ascii: RIFFWEBPVP8L/?m3L8Dd&33l!{CLfnNBfH[Of181m=.c2;{f9Dp;'5F8vGL] yE2<vNJO\|mm.<u<bwcIBbl{=vvE
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 38 6f 6a 22 bc 34 6b b1 16 21 44 01 61 b4 c0 57 1e 78 e0 27 f9 eb 1f 3f 09 8d 7d 06 53 03 97 f7 87 3b 35 a9 36 65 a5 7f 5e ff 6c 3e f0 c6 03 2c 09 21 04 84 13 8d e4 dc 3c c0 c3 9d 4c ea 8e 72 e1 fb ca b1 43 6c a0 20 00 05 73 07 9f 06 44 96 ec 97 76 4c 79 c8 ae cb 6a ca 92 1b dc 71 47 b9 2c 00 01 81 c2 7e 86 ff fc a4 d1 08 a1 17 91 18 c6 f0 4e ff 7e f3 ca 96 46 e3 a2 ea b5 59 3a a4 50 4a a0 28 14 1c e0 40 08 0f 34 c2 d6 a0 4d 7a 76 91 59 9b d5 9c 71 3f b3 fe 3c f1 13 73 e6 cb 00 28 90 02 00 a5 ef e0 fa 33 e1 85 17 42 d8 ce ae 5e be b6 07 8d 46 9b 75 31 6e b3 b8 59 3c c4 cf b3 c7 f3 b1 05 0c 03 86 f3 0c 3b 7e f2 70 b4 fc 68 cb 9a 07 1a 2d ba e8 fa 3e 58 4d be 1a 2e f6 ab 0b 0b 25 1d 21 20 a0 14 14 00 9e ef 11 7b 12 61 cf 9e d0 da 2e 4a 2d 8f e6 c7 00 c0 05 Data Ascii: 8oj"4k!DaWx'?}S;56e^l>,!<LrCl sDvLyjqG,~N~FY:PJ(@4MzvYq?<s(3B^Fu1nY<;~ph->XM.%! {a.J-
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 68 d2 d8 70 d2 49 4b ac 07 6d 28 5c 57 20 78 68 d0 25 96 41 a7 60 c0 9d 54 b0 e6 2d c8 d2 84 07 17 5d 70 d3 58 74 c1 3f dd 87 1d ac 0d 45 75 03 c7 9f 93 34 17 4c 1a cf 23 b4 03 2a e5 27 3d d7 20 53 54 de d0 6c 98 74 27 6c b1 1c 74 6d 28 98 4b 5e a2 de 1b e8 4d d3 12 0c 9a 30 e4 95 83 1e 0b fc d6 b6 ed da 95 6d 5b a5 d4 36 00 ac 88 d8 9c 33 89 6f 07 b6 01 5b dd 56 70 af b6 0b db 9f ad 6e 89 13 69 11 60 8e de aa df da b6 55 db b6 6d 2b a5 5c 27 e3 66 26 07 18 9c 40 7f d0 b1 ed 08 4b 5b da 2a 9d 33 69 8d 9a 62 02 fe 83 be bc 80 67 30 ff 64 00 cf ee 62 a4 08 17 f1 4c 9e 54 7a e2 97 df 80 27 67 31 af 12 3c 85 9e 26 4f 75 59 cc af cf f1 34 56 a6 62 85 1f f0 9c df 41 cf aa b5 95 a0 98 56 2b e0 12 3c ef 29 80 7a ea 2e 43 c0 63 45 ef 6f aa dc bf d3 00 7e 10 f0 00 Data Ascii: hpIKm(\W xh%A`T-]pXt?Eu4L#'= STlt'ltm(K^M0m[63o[Vpni`Um+\'f&@K[3ibg0dbLTz'g1<&OuY4VbAV+<)z.CcEo~
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 71 02 4e 90 81 df 67 02 c9 ce ac 1b b3 cd 43 e0 6e 48 0f 01 cc 34 e0 97 17 a0 77 90 04 18 2f 14 c2 13 3a cf 36 43 bc ef e7 1c e9 98 06 21 17 50 3c 5e 98 5f 69 9a d3 07 16 80 27 98 6b 9d 82 1d a8 3c 1f 7d 1d cc 6b 93 58 ee d5 5f 34 01 19 90 9f 2d 13 63 ae 0c 17 24 42 55 98 1e 00 51 00 1a 33 aa 19 3d 84 38 1d 63 07 84 c0 93 0a 60 e6 cd 34 68 81 06 02 7a 4f 67 79 80 e7 54 2c 16 c0 cb 83 fb e4 22 d8 8c 26 7d dd 27 68 a1 2f b1 1d 00 b7 e7 15 60 f2 b4 76 a6 2b 5a b8 fa 85 a9 4b 13 68 0b 86 fb 70 bb 37 ab b0 58 6b 02 99 78 b4 09 9e a9 02 01 ca 09 81 0d cb 36 10 40 cf 03 e8 00 9a ac 2c 16 9b 99 b5 bb f1 8c 06 d4 dc 0b cb 09 c0 cb bf 32 26 b3 69 13 8a 00 02 88 a8 5a 30 62 3a ee af 45 48 d2 19 c0 1b f8 8a 5a 6a 70 c3 0f b7 0e 88 6d 81 46 72 74 db a8 4b f4 6e c0 d0 Data Ascii: qNgCnH4w/:6C!P<^_i'k<}kX_4-c$BUQ3=8c`4hzOgyT,"&}'h/`v+ZKhp7Xkx6@,2&iZ0b:EHZjpmFrtKn
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: b7 5c 53 33 05 5e 00 cc 6c f3 84 3f 79 8e 39 6b 65 70 22 b9 b0 00 65 b2 35 48 e0 40 94 54 25 50 35 de 05 07 85 80 48 20 a6 1d 30 57 0a 39 62 b6 07 3f 1b 03 e0 02 8b 69 6e 80 d3 6a 42 05 15 40 a0 04 af ba 4f ce 67 73 f0 64 bd 00 40 9a a4 d8 16 0c 61 fa ba 50 81 c1 34 87 16 6a 21 41 13 91 b9 95 79 a5 06 90 bf f5 ef 11 02 4f d4 6c c8 8d 83 12 48 4c bf 50 7f e3 46 bf 8b a4 0a f4 00 4f a6 32 90 89 c0 62 b1 3a 78 30 0d 0f 4f 08 c0 d8 98 5a 10 4f 28 64 10 b3 2b 4b 7d 9b 5c 5b 73 40 cd c0 2b 77 c2 18 63 30 2b b1 fc c5 cc 6e b6 41 f6 9c 68 e7 24 bc 10 3e 43 43 f7 9a 48 13 56 21 76 6f aa ff 95 e7 7f e6 d1 3f a5 fd 21 09 15 43 55 01 14 a8 b2 11 40 ef c0 57 01 05 d8 42 c6 73 1d 1e 9a a3 59 9a 14 df df 3e c4 9b 32 91 37 33 5b c1 f0 b8 4f be 03 2c 2c be 4c 2a 90 25 67 Data Ascii: \S3^l?y9kep"e5H@T%P5H 0W9b?injB@Ogsd@aP4j!AyOlHLPFO2b:x0OZO(d+K}\[s@+wc0+nAh$>CCHV!vo?!CU@WBsY>273[O,,L*%g
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 90 09 54 ad 0e 20 94 23 b1 96 84 77 a6 27 b3 15 3d 73 c6 40 9f 41 3f df ad 49 dd fb 73 7c fe 13 b3 59 d5 cc 84 04 90 be 32 7d 03 fd 86 02 c5 00 78 58 50 cc 0b 75 e6 3e 75 91 7f 22 99 69 c5 02 70 77 9f 01 6a ae 60 44 05 cf 8e b2 a1 07 b0 8c 82 c8 6c b9 d5 9d 37 af 5e 5e ef 74 b9 5d 8a 9b 53 9a 87 f1 a9 d4 c9 66 33 d1 ae 1f f5 cd 0a 8d 39 e2 92 56 7d d9 22 fa da c5 86 6f 1a 14 d3 cc 73 25 94 94 fd cc 7f f9 5b c9 df cd 0a 96 9f 69 77 e6 bb 59 f4 5d 2c bf 55 cd ac 7a 32 9b 16 3e a9 c1 90 8c 13 f0 83 69 26 12 6c 40 ff 31 9c 7a 11 33 89 04 63 50 66 5e 63 d3 64 55 a8 f1 be 1d 2d 45 62 33 9f 0d 30 aa 6f fb f0 da aa 7a 29 ac 7e 3c d1 ed 22 d5 55 0a 73 bb 4b fd 28 86 4e 78 ed 46 6f 17 a4 68 d0 c6 8d 94 cb b6 35 f4 bc 8f fb 85 b0 1d c8 5d 96 92 50 fd 7a 54 93 b4 7d Data Ascii: T #w'=s@A?Is\|Y2}xXPu>u"ipwj`Dl7^^t]Sf39V}"os%[iwY],Uz2>i&l@1z3cPf^cdU-Eb30oz)~<"UsK(NxFoh5]PzT}
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 1e 8d 62 d9 14 30 98 06 04 d4 e0 3b 30 27 63 04 3c 93 9a f1 dc 56 93 d9 0d f6 60 0b a8 30 40 28 e4 a3 24 ae ae 9e 42 08 06 f0 6c 2c 6a 5c c0 7c ba a8 b1 af e0 7d f4 83 69 c7 20 a4 2a 02 45 f3 45 d5 d9 6e 7c 49 52 25 5b d2 07 d4 85 6e 9e 83 67 96 0c ad c0 65 19 41 f6 b1 49 dd 4a b0 be 58 21 74 ca 84 14 18 3f dd 27 dc 19 7d 36 1e 30 0e 3c ce 1b fb bd 5c 1d ec 4a af 81 20 20 01 76 5a 03 0a a8 d5 f0 8e 65 40 62 fe 84 7c 99 21 18 4f c2 6c f1 3a 11 68 a1 00 e4 c7 04 0c 60 66 eb ba 8f ec 74 f1 b0 00 ec 7a 79 9d 4b ff 10 e9 73 e5 96 8c e3 04 34 76 24 7a 83 38 e8 35 c1 26 6f b0 b1 4f f7 83 ad d9 95 e9 f6 c6 61 d7 88 ce 7a b4 3a 80 87 2d a3 b3 69 65 6a 3f a9 69 b2 67 98 2c ed 76 5d 7c bc 9b 91 99 99 ea cb 50 c4 c1 d8 c7 78 fd 7e 2a dc dc 3f fc f5 63 3d 78 3a 99 42 Data Ascii: b0;0'c<V`0@($Bl,j\\|}i EEn\|IR%[ngeAIJX!t?'}60<\J vZe@b\|!Ol:h`ftzyKs4v$z85&oOaz:-iej?ig,v]\|Px~?c=x:B
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 0d 62 81 19 83 31 66 c6 18 c0 60 58 70 48 62 b9 cc 72 27 1d 76 fb c4 90 c6 36 09 fb 14 6a 12 b8 86 9f fe 92 41 6c a5 15 8b 8e ee 5a 48 0b a7 67 af 6b bf 05 bc 8e db d2 5b b6 4d 32 c1 2f 7d a3 b5 ad 4e db e4 dd 53 97 7d c6 0a 9f 57 c9 2c 55 41 b6 71 99 d5 21 ec 02 7f 0b b7 f8 07 7a a3 98 88 fe 5e 74 64 60 cc 75 da 85 7a 0d bc 04 9f 02 c7 c3 2a e6 6f 0d 7b 6c 8c 81 d9 70 c1 fa 68 40 d5 49 ff 3f 7e 01 09 0a d8 0a 7a 67 d6 14 d3 15 8a 2c 4d c5 b4 53 33 d3 5f f7 2d 00 32 4f 01 63 8a de c7 00 b4 e9 78 53 e7 4a 89 53 73 4d a2 c1 0f 5a d7 f7 55 ad 4a 80 88 01 21 55 1d cd b9 3d b9 76 1e 2f 7b 21 5e bd a7 87 15 e7 32 e6 a2 2e 82 0e 8f 48 64 bd db cc 0b ee 08 38 a7 14 82 52 87 51 0e 7d 86 b1 3b f7 d1 9b 2e e1 04 95 28 ee 3c eb b1 5a 32 c1 ae 75 95 a9 b7 d3 ed f6 a6 Data Ascii: b1f`XpHbr'v6jAlZHgk[M2/}NS}W,UAq!z^td`uz*o{lph@I?~zg,MS3_-2OcxSJSsMZUJ!U=v/{!^2.Hd8RQ};.(<Z2u
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 6b cd 7e 1c 22 3a da ec 24 b7 f7 f7 f7 74 85 44 96 83 b5 b7 5d 67 d5 37 47 12 c0 fb a6 db ec 6f 8e 7d 21 03 23 b4 da 98 e2 ae ba 07 5d ce 35 39 41 80 c2 fe d6 50 c6 c0 1d 56 5e c0 26 bf c9 3d f0 cb 32 a1 90 14 8c e1 b4 86 14 78 c4 56 87 de 13 99 8f 6c 6c 21 a1 1c 98 14 15 b6 af c0 31 02 c4 84 4f bf 76 59 e2 5a a7 13 51 95 17 5d 7f a2 11 58 e4 10 7c 6b fb 60 68 6f 04 58 aa 4b 05 2b c6 31 3b f5 3f 5d 2b 5a 05 ad 98 4f 07 30 d8 cd e2 d6 bf b5 14 51 2c 22 06 6c 4b 66 50 c6 72 5a e9 0c dd 8b 7e f3 70 63 4c 5f a9 45 3a 8c 32 75 0a 2a f8 58 6d e2 00 68 88 84 2c 67 ba 78 54 47 56 7a 1b bc fc 5e 71 cc 9a fc c2 54 d6 50 16 cd 66 63 2e 85 78 30 bd b0 b0 20 45 20 af fa 35 14 c5 44 6f e9 24 0c bb 54 ae f5 c2 b4 f9 2f 36 ff ff c9 1a d0 6b 63 b8 81 e5 f4 02 5b d0 a1 03 Data Ascii: k~":$tD]g7Go}!#]59APV^&=2xVll!1OvYZQ]X\|k`hoXK+1;?]+ZO0Q,"lKfPrZ~pcL_E:2u*Xmh,gxTGVz^qTPfc.x0 E 5Do$T/6kc[
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: ae 73 cd ab c7 db ff 66 b9 0b 65 11 59 a9 ee 5c b7 14 08 10 4a 96 9e f2 29 00 9f 27 60 cb 0d 9e b9 76 c0 9e 74 e0 2b 08 f0 c7 fc 88 a5 87 dd 23 c6 3e dc 7c af 0b fc f7 f3 f9 17 bf 31 c3 77 6d d8 7b bf 6b 8b 8e 63 cb e1 7a ef d1 92 74 44 1c 5d e3 c4 5b da e2 58 19 1d a5 a2 59 4a 4d d9 f0 13 75 bc ad f5 f2 93 20 ca a3 56 1d fe 4c 71 f3 35 61 91 87 08 3a c2 69 21 06 27 30 b6 14 43 d4 cc 73 4c 1e 65 1a b2 a8 55 83 0e c7 80 04 6b 29 d2 bd 7a 86 63 8a 05 b3 fa ba 2f 2d 09 a3 f7 b6 50 40 00 90 c0 17 25 d8 b5 7d 3b 5a 8d ff 7e 31 47 2e b4 43 06 7c dc 6b 05 1b 53 c1 ee 57 fb 90 ba 78 fc ec be fd c0 2f 14 d3 ad 2d ff ac e2 38 2b af cd 2f f0 77 2f d4 a3 20 ed 77 95 0e 94 12 80 11 e6 de 6f 19 f8 42 a6 72 80 2d 84 f9 b2 81 01 d5 ff 89 7f 12 15 04 7a 08 93 d1 21 04 20 Data Ascii: sfeY\J)'`vt+#>\|1wm{kcztD][XYJMu VLq5a:i!'0CsLeUk)zc/-P@%};Z~1G.C\|kSWx/-8+/w/ woBr-z!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50105	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	525	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10968 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 9598 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 d0 2a 00 00 57 45 42 50 56 50 38 4c c3 2a 00 00 2f ff c0 3f 00 09 49 6e 23 49 92 04 33 73 8f ee 08 f3 fe ff 83 63 ed 65 e6 1c d1 ff 09 c0 ff 7b dc 95 e6 dc 93 77 9e 24 ad fc 62 09 c0 06 f0 c0 06 e0 de 33 6d 65 1e b1 a6 65 6c a4 33 1e 30 f3 3b 02 60 25 e0 e5 8d 84 08 82 e5 09 c0 0d 29 04 09 32 33 6d 49 77 04 be 25 18 10 eb cc 3a 42 04 24 81 65 00 06 30 cc 33 00 35 31 a5 0f 23 c7 8b 99 fc 94 94 39 69 b7 f6 64 12 c8 a5 fb 05 0b 40 55 ef 03 ad bd f1 42 7d 8c d1 da 18 8f 80 c5 18 ad a5 75 c3 c5 a9 79 f1 55 37 55 37 0f bf ef 7f 71 01 b7 91 24 47 52 de d3 41 1d 2b f1 f9 97 15 ef bf 49 67 c0 6b 33 d3 ad 9d ec 34 92 6d a9 6a 76 14 75 e4 93 47 92 7f 54 fc 25 04 84 e3 48 92 1c 25 ef 0e cd e9 17 2f a2 ac c0 7f 93 30 a1 ff 13 40 82 3b fa c4 09 30 26 4c 01 Data Ascii: RIFFWEBPVP8L/?In#I3sce{w$b3meel30;`%)23mIw%:B$e0351#9id@UB}uyU7U7q$GRA+Igk34mjvuGT%H%/0@;0&L
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 5e 01 5d 3d 59 2c 13 3d 66 66 66 66 66 69 98 a1 a1 78 29 b2 3b b2 15 11 6e ff 2e 50 fe c2 0d 06 52 17 c8 0b b4 af 03 30 fe 7d bd f4 f7 04 62 69 c9 2d 91 5b ef c9 64 8b 71 d1 0d 7f 9f 5c 79 cc dc 3a 40 88 ae 20 d9 cc 52 9f 60 5c 3d 1d 82 4d bd 3d 81 dc 71 f5 fa 02 7b 00 5d 82 5d b9 58 ae 04 48 92 4c db aa 83 6b 7c db b6 6d db b6 6d db b6 6d db b6 6d f3 e2 d9 f6 7b 07 ef ca ad 6d 5b d5 96 b5 ce 7d 1f 99 3b 14 41 11 ee 12 d1 91 35 42 ce a0 06 77 77 22 77 d7 8f fb ee 39 31 01 7a ad fd 57 65 eb 56 6a d4 5c df 76 77 39 b8 bb 44 ee 0e 11 b7 c4 f5 91 11 bb fb f1 73 3e 9b 35 82 b9 36 ba 17 f1 8b a4 3b c3 21 de f2 0f fe c8 48 ff 58 b8 2f 61 e0 cc a0 92 8e 8c b0 1a 29 19 79 25 85 33 83 91 ac f0 ac 10 5f 8d 4c 57 80 3b 3f 24 a3 9d 94 cc 9d 9e 74 5c fb 55 e0 85 7b 05 Data Ascii: ^]=Y,=fffffix);n.PR0}bi-[dq\y:@ R`\=M=q{]]XHLk\|mmmm{m[};A5Bww"w91zWeVj\vw9Ds>56;!HX/a)y%3_LW;?$t\U{
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: e5 43 95 28 29 d4 0c 06 f4 bf f2 9a 67 d7 ab d0 6a 90 36 5d 49 cc 90 89 9b 10 66 88 19 2c c1 e2 fc 1a ce 50 0b ee 0c 51 0b a9 f3 60 a9 33 be fd ed 4e 97 92 c9 27 a8 50 f4 11 aa 93 a2 44 81 51 97 83 a1 8c 8f 32 85 4c 6e 84 30 23 a6 90 29 cc 88 e9 40 94 85 83 e0 85 28 61 95 20 47 46 06 58 14 54 14 29 8a 28 58 c5 7e 1c ae 0c bd b6 90 c9 4d 70 33 45 26 61 11 16 ac 1c 88 5a 48 11 1e 43 8a b0 ca 36 85 8d 01 26 05 07 4a 8a 12 45 55 30 58 e8 8d 32 b0 42 26 84 1b 53 04 61 11 99 44 66 21 2c a4 08 2f 84 12 56 09 29 56 d9 82 21 0a 0e 8a 14 25 8a 0a 18 1c 3c 93 22 c4 a3 b0 10 b1 9d 21 66 10 21 93 30 6f 48 59 48 11 6a 91 12 56 11 52 ac 69 60 02 43 85 12 45 71 a0 c2 00 0e dc 40 09 85 b7 24 07 41 01 84 0b e4 51 40 8e a0 00 c2 05 37 e2 b6 29 82 45 5c 9f 62 d9 55 45 41 0c Data Ascii: C()gj6]If,PQ`3N'PDQ2Ln0#)@(a GFXT)(X~Mp3E&aZHC6&JEU0X2B&SaDf!,/V)V!%<"!f!0oHYHjVRi`CEq@$AQ@7)E\bUEA
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: b2 94 5c 3b bb c8 d3 29 5a 87 03 9f 17 0e c2 0b 52 c2 aa aa c2 41 89 a2 70 50 14 45 0c 60 40 ca 95 1f 79 bf 37 bb c3 cd cf ad e1 c0 91 9b 17 0e 84 17 a2 82 55 86 07 25 85 c2 41 51 94 28 30 cc 8a cb ae 94 ca a4 20 26 07 33 3d 8a 8e 58 0a 19 96 75 2c c9 94 8d c6 6c b6 e6 27 53 c8 d6 c2 f4 8e d5 d7 e3 fd f5 f5 dc 8f 8b d6 8f e0 09 38 10 8f 21 2a 58 25 38 50 52 28 0e 94 42 45 81 61 96 6e 6e c4 15 84 bd 60 4a 00 8f 7c 5b f7 3d e1 63 6e 45 27 54 06 74 00 84 44 67 b6 c2 0a b3 6a 95 ce b1 58 cd b0 cd f8 37 1f cc d7 d3 3c da 91 53 0c 29 6e fc 56 84 c7 90 12 bc 10 39 0e 4a 0a 85 83 a2 28 51 30 8c a6 54 c4 15 06 be 8d f8 c8 1d 76 70 ff e3 76 a0 05 36 12 c1 d3 44 45 b4 88 85 a8 4d 4f b0 7a 97 f0 2d 5e ba 92 7a 76 4a 3b 82 b4 90 20 8a f0 18 52 c2 2a 41 a1 a4 50 dc 19 Data Ascii: \;)ZRApPE`@y7U%AQ(0 &3=Xu,l'S8!X%8PR(BEann`J\|[=cnE'TtDgjX7<S)nV9J(Q0Tvpv6DEMOz-^zvJ; RAP
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 4c 68 b9 9c 31 e2 7d d9 c8 aa 2c 33 16 0f be d8 08 fa 59 d5 89 ff c9 a7 c0 a5 c3 5e c0 8a d2 80 60 17 11 98 10 66 10 f2 e1 2c 29 d7 57 a0 28 52 cc 23 02 b9 b6 47 90 05 b0 e7 2c 50 99 87 5b bc 19 1e 94 65 74 25 24 17 06 44 29 94 28 29 52 9c 3a 9c c6 b1 dd 11 98 9f 4a 8a ca a0 28 9c ae 7e c1 97 45 be 08 41 52 e9 8c af b9 c4 fa 4d 6b 41 1e 6e 78 11 0d 0b 45 2a 97 02 9f 9d e2 2b 28 72 98 43 89 88 9d 6c 86 d3 38 54 a5 a8 78 f0 89 b3 7f ed f9 f5 cb 56 57 57 48 b9 e4 53 a9 81 69 2c 6c cc 0a bf 94 39 c0 a6 5a 51 91 cf ec 29 da cd 09 11 41 44 4a 34 b9 b0 0d cc 1c 29 2a b0 36 a1 04 27 85 8a f2 7a cc af 3e de 7f d5 e4 76 ad 63 ad 23 59 a9 64 53 38 8e 05 72 ad f2 73 4d 12 0b 51 49 97 4f 46 4e a5 14 79 69 c9 c3 61 47 bb 36 64 42 51 51 ee 5d 02 b1 bd fd 44 b3 f8 d3 7c Data Ascii: Lh1},3Y^`f,)W(R#G,P[et%$D)()R:J(~EARMkAnxE+(rCl8TxVWWHSi,l9ZQ)ADJ4)6'z>vc#YdS8rsMQIOFNyiaG6dBQQ]D\|
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 60 1e 94 c9 c0 26 0c da 9b 21 91 09 0c e5 93 d6 b2 fd 0d 32 9d e0 61 1a 92 87 fe 9b 7f 0e cc 6b 4f 38 13 59 fc 43 0e db f1 48 82 a7 05 a3 5e 9a 8d d7 87 b2 28 3f 72 45 7f 24 f7 3a 74 20 89 ea 44 b0 10 82 19 79 ca 59 52 78 a1 38 00 9b 30 16 76 65 61 0b 59 18 db a3 c7 21 1d a4 63 be a3 a0 3d ca c8 8b 86 31 01 42 a2 93 e1 4d 5d 2e 72 89 82 7f 3a a7 b7 3c 59 c5 8c 12 89 05 c6 82 24 76 9b 10 2c c4 60 11 6f e0 0b 7c 6d bf 90 29 e6 c1 b7 ce 14 8c 49 b5 1f 57 03 76 5a f7 34 0c 92 09 25 d6 21 c5 dc e9 9d 05 33 2c ec c6 43 9a 98 82 25 01 3f 37 8f f3 fd 8f ba f0 9e d6 8e 74 8c 34 13 f3 1d ba 83 29 73 9f 82 70 97 25 ac 3f d0 7d 7f 24 16 0e 1e 83 a8 c0 6b 7c c0 73 c7 81 2d 19 98 7d 2d 32 49 99 b6 2d 25 fb 1d 06 cd b9 68 86 bf df 1e aa d6 3f 7f d7 4a 39 85 af 6f 7f ca Data Ascii: `&!2akO8YCH^(?rE$:t DyYRx80veaY!c=1BM].r:<Y$v,`o\|m)IWvZ4%!3,C%?7t4)sp%?}$k\|s-}-2I-%h?J9o
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 48 88 2d 01 a6 84 a1 34 7b 3e 26 6d 30 c7 dd 30 21 de 18 1b 31 9d c0 d6 36 4d d3 dd bb 2f 60 3e 2a f9 98 f4 d9 f9 b4 4e 83 ed e0 ff f2 55 ce cf 5e d1 3a 4c 75 9a 86 61 02 58 b7 be 06 c9 24 46 87 7d e4 41 5b 1c 1f d2 72 00 6c 65 6d 55 8b a7 37 42 71 89 23 0b 69 88 e9 cd 1b ff b9 de bd 37 3d 7c b8 5e 94 0e d3 2f 7c 19 7e 9c f2 91 69 ef fc 25 77 90 75 ef 45 e6 3b 3e af 7e a5 6f 32 d4 c1 cb 30 4d b7 93 b6 b4 9a db 56 60 48 a9 11 39 c2 b1 58 db 3b 61 22 9b 56 d4 41 8b 26 97 c0 45 b2 d6 1a b3 d9 63 9d 22 ca c6 33 d1 7f 11 b3 ba 24 87 1c 06 99 a2 e1 9c 3e 96 1f 9d a7 9f 91 97 9f 35 3f db 9c de 6a 97 c2 57 7a c7 b7 fb 50 5d bd 64 cf bd 57 b0 85 20 16 75 27 d6 4e 44 f2 ce d9 1f 0d 6b 00 b9 81 0e 25 41 a2 0f 1f 3f 2c d0 d0 3a 78 23 7c f5 89 75 b7 5d ed c2 c9 c7 1c Data Ascii: H-4{>&m00!16M/`>*NU^:LuaX$F}A[rlemU7Bq#i7=\|^/\|~i%wuE;>~o20MV`H9X;a"VA&Ec"3$>5?jWzP]dW u'NDk%A?,:x#\|u]
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 46 13 76 b9 2d eb eb 0c ba 2f ec d2 a2 73 7f ad ff e5 43 4a 65 ae 0e 78 42 b2 8a 63 48 ee b8 fd 71 cf 94 f4 d0 c1 a6 24 63 a9 7f e0 29 fd 6d eb eb 31 c0 00 13 08 d6 5e a2 80 90 eb 40 27 41 8e 5b 2e 77 ac 38 75 9d 76 f6 8a d3 cf 95 12 7b b1 2d 32 e4 29 6b 97 4f 07 79 3a d0 db 85 76 5b a8 4b 58 d5 63 34 b7 9a 23 12 56 b1 47 c6 9e 6a ec b1 ef 69 15 4b 93 1b 93 c1 f0 41 7f e0 89 f2 8c 25 6a 78 08 cc 83 ac b3 83 30 50 72 fb bc d1 0a 6c 2e 4f f3 1d 0b 3d e6 c9 be 53 b2 1a 2c 2a 32 37 81 15 c8 4e 18 ae f5 d1 17 db 85 c1 af d5 91 5f da 32 ed 3a 76 16 29 6c f3 70 1e 0b 7b ef 41 82 02 c3 ef 6e 19 8c 0a 6c 6f 21 4f dc 39 27 1c 60 2c 20 e5 21 39 10 45 8c 42 28 09 37 49 c2 c9 85 7e 67 cd cb f3 49 b7 fe 52 2d a5 6e e5 b0 67 54 60 25 65 79 8c d5 19 89 7e b9 69 ee d5 52 Data Ascii: Fv-/sCJexBcHq$c)m1^@'A[.w8uv{-2)kOy:v[KXc4#VGjiKA%jx0Prl.O=S,*27N_2:v)lp{Anlo!O9'`, !9EB(7I~gIR-ngT`%ey~iR
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 8e 64 49 3c b8 39 ce 72 42 87 e3 33 54 d4 c6 a4 94 33 ba 28 95 b6 e3 e4 a8 02 07 30 f8 03 3f e4 c9 f8 25 95 5a 7d ce b9 27 a4 15 45 a7 cc 9d fb 9f f3 e6 07 03 b6 ab 06 7e 50 1a d1 83 7d 6f 1f 14 d2 81 f2 a0 74 b8 d7 ac 79 0c 53 4a 19 6c d8 6b 8e ec b3 cf 7b 71 a4 ca d1 62 3f e0 0c e5 d8 50 93 42 9f 27 62 06 87 c6 68 67 64 a9 df f9 19 66 91 f0 d9 26 69 f3 ac a7 7f 6e 40 cb ea c6 12 de 7c 56 0f bd 58 72 99 92 0c 2c 0a 79 eb 20 83 1c 25 ad fd e0 29 8c 9a 82 31 60 ae 9a 85 a3 6c 9b ca a7 b3 08 45 28 98 0e a8 a8 d3 a1 ac a6 3a 62 56 eb 83 af ae 77 bd bd 26 9a 64 47 5d b1 cf b9 e2 dc b1 5f 83 da dd 5c 94 05 39 a6 fb d5 aa b3 c6 23 ef 74 70 cc e1 80 39 b2 19 99 66 0f c6 60 ac 41 4e a6 9c ad 21 95 38 51 0e f2 5a 84 b4 28 42 5a 52 52 f2 6d d5 68 e3 01 b0 ca 83 ff Data Ascii: dI<9rB3T3(0?%Z}'E~P}otySJlk{qb?PB'bhgdf&in@\|VXr,y %)1`lE(:bVw&dG]_\9#tp9f`AN!8QZ(BZRRmh
2024-04-19 14:06:55 UTC	207	IN	Data Raw: 68 b4 67 19 be b3 78 ee e7 e7 ce b3 6f a6 e3 72 c7 cf 6a c7 7d 5b 7c 03 77 0c a3 3b 1d f1 f4 14 ef ee ee 7e ee e7 16 91 0e 3a 3a d2 a4 75 e8 f4 d3 b3 a7 de b4 74 36 1d d2 d2 3a 8d 48 37 d2 4f cf d9 b4 e8 a4 e9 6c 3a a3 8e 6d ba 3d e9 90 6f 3e e5 5d 46 f2 cd 7c f3 e9 49 10 1d 5a 74 b4 74 3a 8d b8 d8 82 86 18 b7 6d e8 e8 68 c3 74 34 82 de 18 35 69 a1 d3 3c f7 73 9e e2 5d 9f 8b 3a 36 1d 5a 3a a4 0d 5b 3a 3a 74 c8 73 5a 3f d1 b1 6d 41 0b 3a 9b 86 74 90 e7 f4 53 eb 0b 74 3a 2d 1a dd fd d4 f2 ae 23 22 1d 3a 3a 3a 9d 0e 3a ee dd d1 b1 ed 6c 3a 1d c3 16 1d 0f d8 71 b9 49 c7 b8 a3 d3 2d f4 bb ef af f8 bf cf ff 7d ad 04 00 Data Ascii: hgxorj}[\|w;~::ut6:H7Ol:m=o>]F\|IZtt:mht45i<s]:6Z:[::tsZ?mA:tSt:-#"::::l:qI-}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50106	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	525	OUT	GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3812 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4105 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	722	IN	Data Raw: 52 49 46 46 dc 0e 00 00 57 45 42 50 56 50 38 4c d0 0e 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 e0 96 66 9f ff 7f b8 dd b5 9c fa 1a d1 ff 09 c8 4d 3f 36 81 6e 01 d5 0d 60 5d 06 f6 63 82 e8 09 ec 4c 70 32 01 3b 30 04 24 2a d8 59 12 c5 ce cc df 02 76 a6 5e 4a 02 76 e6 a2 06 ec ac 88 ca bb b1 26 5e b3 2a 17 ac 4b 61 47 54 f6 c4 ec ba a7 0b a8 b1 6d cb 8a 76 fe 31 02 bd 04 b3 7a 01 b4 fb e3 53 58 24 6e db c8 68 2a ec ff 5f 37 3c 7c f0 80 e3 48 92 a4 a6 f0 00 ff ad 4b de e7 bc 01 29 fa 3f 01 e9 47 7f 5b 67 dd b9 33 98 13 00 a6 04 7f 30 40 4c 00 80 00 7a 1d 18 7a 8f b7 6d 8d 40 00 10 ff 9e ae 03 29 c5 d0 02 77 61 c9 20 9d 39 94 12 ee c2 6a a4 fd e3 87 15 7a 8a b0 24 a4 c3 6f ad e0 ab 3b b1 42 c7 d6 c1 4d 00 21 a1 76 52 14 00 03 30 91 ce ad ca 9e 00 80 80 74 56 80 Data Ascii: RIFFWEBPVP8L/?M8rFfM?6n`]cLp2;0$Yv^Jv&^KaGTmv1zSX$nh*_7<\|HK)?G[g30@Lzzm@)wa 9jz$o;BM!vR0tV
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 34 07 85 9a ec a9 fd d3 73 c7 65 a6 b4 43 a2 28 04 c2 3e fb 69 8f f3 f9 40 69 96 69 c0 c5 e6 dc 22 f6 8f 88 de c5 48 2e 48 52 60 dc 48 b5 57 0a 42 4e 8c 3d e3 be fa 39 7a 0f ef e7 85 d4 ac c9 9e b9 5c 59 f7 73 45 9c 3b 71 a0 50 a1 8c c4 35 69 b5 e7 32 30 3a b1 47 dc 48 8e 7f 74 76 79 a7 2c 15 9e 6b 54 89 ad ca c6 08 98 f7 84 fb 4f e3 dd b2 90 96 32 26 c9 98 0c 0c 69 9c 36 9c 49 0b 21 b9 16 e2 ca 78 d3 37 fb c1 ab 38 76 cd 24 b4 43 33 3d cf 19 8a 72 e3 fa bc 72 f3 3e 70 43 ce 1c b3 71 25 2a 51 13 cc b6 4d 9c 71 41 60 98 d6 93 07 7f fb 6b 7f 1f 38 f6 de 8f 36 ce 9a a3 34 33 54 23 e0 95 66 91 da 37 bf fc e5 db c3 79 f7 bb 72 5b 74 54 c3 52 86 6b 90 5c 2c 0c 04 46 61 60 c5 40 48 6e 5c 7f eb 26 73 ed 7a 37 26 aa 0e 37 a4 43 4d a6 01 c5 8a 82 a1 a3 34 93 b4 40 Data Ascii: 4seC(>i@ii"H.HR`HWBN=9z\YsE;qP5i20:GHtvy,kTO2&i6I!x78v$C3=rr>pCq%*QMqA`k8643T#f7yr[tTRk\,Fa`@Hn\&sz7&7CM4@
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: a5 bb f7 e7 7d f8 7b 4f d3 ad 9f cd f7 a7 83 66 c1 d0 ce 62 9e 04 06 63 54 79 e6 d2 8f b1 4e 94 bb f9 67 ce 5c 3d f9 d9 db 36 bf 3c 14 51 07 2e da cb 06 95 2c 30 34 43 e6 16 89 24 a3 1f bb 74 57 d7 e3 cf d8 ba be b1 6e d9 db 01 fe e4 dd 3c a8 c3 3c df 57 b2 b6 72 a6 26 cd 8b ad e3 b4 a1 10 54 10 cc a4 bc 93 5c 31 df 76 2e bf d8 77 bd dc a6 2f 08 ee 6f bd f6 b5 db ff 3f 2b d2 af 1c eb e7 36 41 b7 e8 b6 ac c8 14 49 e0 46 bb 95 ff 81 44 3a 1c 66 f3 41 1d e9 94 aa bb a8 f2 f0 43 22 5f 3f db 9d d7 c6 6d f2 56 ac 77 52 47 7f 33 ab 9e eb 35 51 5c 89 42 69 56 48 a4 fb 85 42 a9 53 a8 c3 7a d4 4e 77 70 e5 43 ff a9 e5 2f 7f f8 ab 6f 45 b8 4d 73 e8 da c9 d8 90 30 10 18 d9 90 c3 b4 8c 59 b3 1c 4e f7 84 57 24 ea 2e ca f2 44 c7 4f 08 f3 b5 47 fd 02 7f b7 e9 46 5a 81 98 Data Ascii: }{OfbcTyNg\=6<Q.,04C$tWn<<Wr&T\1v.w/o?+6AIFD:fAC"_?mVwRG35Q\BiVHBSzNwpC/oEMs0YNW$.DOGFZ
2024-04-19 14:06:55 UTC	580	IN	Data Raw: 4d ab ec f6 d7 9a 2f a0 e5 15 6a 22 0e ad e2 51 48 51 44 9a ad 18 4a 30 0f d4 61 7c d4 d8 e9 2f 98 df f2 36 6f b3 e2 4a 91 c2 62 5a 36 0e 65 3a e0 a2 3d d4 a2 c4 1a 36 d6 ee d6 ec ef fa 2f 9d 6e 3a 9c 78 49 b6 4e a6 03 4a 3b 4c 53 1c 22 6c 4c bb 7a a2 10 66 0c cd b4 39 35 53 33 5b 54 44 9d e6 58 6f 4c ec 93 43 27 1a 6a 93 e2 11 d5 50 ad 58 6b 8d 3a ad f6 c3 42 c2 b2 68 96 90 8d 55 f3 64 cb c4 aa 22 6a 8d 2b ab f6 84 66 c1 bd cb 04 43 51 5c 90 10 1b a2 a0 6a 8d ba b1 5e da 43 4f 2b 03 c2 b6 a5 5d 81 91 58 55 7c 63 e5 9e 91 93 ff f1 06 81 b0 ed aa f9 78 43 49 d3 28 d6 b5 be db e6 da 17 da f7 95 ac 43 22 67 db 9e 1e 87 4a 18 cc eb 77 db 37 13 65 7a 42 9a 46 2d 12 eb 04 81 81 30 7f 66 dd 94 fb c2 d6 2f 87 f6 18 66 c8 24 61 d4 1a b5 56 54 9f ed a9 39 b1 f4 96 Data Ascii: M/j"QHQDJ0a\|/6oJbZ6e:=6/n:xINJ;LS"lLzf95S3[TDXoLC'jPXk:BhUd"j+fCQ\j^CO+]XU\|cxCI(C"gJw7ezBF-0f/f$aVT9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50108	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	1507	OUT	GET /store/apps/category/PRODUCTIVITY HTTP/1.1 Host: play.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535613.0.0.0
2024-04-19 14:06:56 UTC	2281	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:56 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Content-Security-Policy: script-src 'report-sample' 'nonce-qCWD_--5iCI5WUdBBtL8ug' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups reporting-endpoints: default="/_/PlayStoreUi/web-reports?context=eJzjitDikmII1JBikPj6kkkNiF-sZWV-B8T6x1mZjYE4-hQrcxwQr33OyrwZiL--YGX-CcRO6TNYA4DYp34GaxQQt948xzoZiJP-nWctAGIhbo6Gr50b2QQ62qYGAABLFCcm" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 37 32 61 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 66 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 Data Ascii: 72a2<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://play.google.com/"><link ref="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><meta
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 73 68 69 70 32 5c 22 2c 5c 22 61 69 72 2e 45 70 69 63 42 61 74 74 6c 65 46 61 6e 74 61 73 79 35 5c 22 2c 5c 22 61 69 72 2e 62 67 2e 6c 61 6e 2e 4d 6f 6e 6f 70 6f 6c 69 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 62 75 72 61 63 6f 70 72 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 61 63 68 65 74 61 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 68 69 6e 63 68 6f 6e 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 64 6f 6d 69 6e 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 6d 65 67 61 6a 6f 67 6f 73 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 70 61 72 63 68 69 73 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d Data Ascii: ship2\",\"air.EpicBattleFantasy5\",\"air.bg.lan.Monopoli\",\"air.br.com.buracopro.mobile\",\"air.br.com.cacheta.mobile\",\"air.br.com.chinchon.mobile\",\"air.br.com.domino.mobile\",\"air.br.com.megajogos.mobile\",\"air.br.com.parchis.mobile\",\"air.br.com
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 68 62 6c 6f 63 6b 33 64 5c 22 2c 5c 22 61 70 70 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 5f 61 70 70 5c 22 2c 5c 22 61 70 70 2e 66 78 72 6f 79 61 6c 65 70 72 6f 2e 63 6f 6d 5c 22 2c 5c 22 61 70 70 2e 73 75 70 65 72 6b 69 63 6b 6f 66 66 5c 22 2c 5c 22 61 70 70 73 2e 72 2e 74 77 6f 74 68 6f 75 73 61 6e 64 66 6f 72 74 79 65 69 67 68 74 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 6a 69 67 73 61 77 2e 70 75 7a 7a 6c 65 2e 6f 6e 6c 69 6e 65 2e 66 72 65 65 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 70 61 69 6e 74 2e 62 79 2e 6e 75 6d 62 65 72 2e 67 61 6d 65 2e 70 75 7a 7a 6c 65 2e 66 72 65 65 5c 22 2c 5c 22 61 74 61 2e 6b 72 61 6b 65 6e 2e 73 69 6e 67 6c 65 63 69 74 79 5c 22 Data Ascii: hblock3d\",\"app.fourequalsten.fourequalsten_app\",\"app.fxroyalepro.com\",\"app.superkickoff\",\"apps.r.twothousandfortyeight\",\"art.color.planet.jigsaw.puzzle.online.free\",\"art.color.planet.paint.by.number.game.puzzle.free\",\"ata.kraken.singlecity\"
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 2c 5c 22 62 79 2e 72 65 64 74 6f 77 65 72 2e 41 34 61 71 75 61 50 72 69 6e 74 5c 22 2c 5c 22 62 79 2e 76 6f 73 74 72 61 77 2e 67 61 6d 65 2e 72 75 2e 6b 65 79 62 6f 61 72 64 5c 22 2c 5c 22 63 61 2e 68 79 70 65 72 68 69 70 70 6f 2e 61 64 76 65 6e 74 75 72 65 61 67 65 73 5c 22 2c 5c 22 63 61 2e 6c 62 63 73 74 75 64 69 6f 73 2e 68 65 6d 70 69 72 65 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 66 69 73 68 69 6e 67 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 70 6d 33 5c 22 2c 5c 22 63 61 66 65 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c 5c 22 63 61 72 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c 5c 22 63 61 72 2e 70 61 72 6b 69 6e 67 2e 67 61 6d 65 73 2e 6d 61 73 74 65 72 2e 6a 61 Data Ascii: ,\"by.redtower.A4aquaPrint\",\"by.vostraw.game.ru.keyboard\",\"ca.hyperhippo.adventureages\",\"ca.lbcstudios.hempire\",\"ca.roofdog.fishing\",\"ca.roofdog.pm3\",\"cafe.games.toddlers.and.kids\",\"car.games.toddlers.and.kids\",\"car.parking.games.master.ja
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 75 64 69 6f 2e 47 72 61 73 73 4d 61 73 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 45 76 6f 54 41 70 70 73 2e 47 61 6d 65 4f 66 45 76 6f 6c 75 74 69 6f 6e 5c 22 2c 5c 22 63 6f 6d 2e 46 34 6e 74 6f 6d 47 61 6d 65 73 2e 47 65 6f 6d 65 74 72 79 4a 75 6d 70 33 44 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 42 61 6e 61 6e 61 4b 6f 6e 67 42 6c 61 73 74 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 31 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 32 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 6c 61 6e 6e 65 2e 4d 69 6e 75 74 65 73 54 69 6c 6c 44 61 77 6e 2e 72 6f 67 75 65 6c 69 6b 65 2e 73 68 6f Data Ascii: udio.GrassMaster\",\"com.EvoTApps.GameOfEvolution\",\"com.F4ntomGames.GeometryJump3D\",\"com.FDGEntertainment.BananaKongBlast.gp\",\"com.FDGEntertainment.CoverOrange1.gp\",\"com.FDGEntertainment.CoverOrange2.gp\",\"com.Flanne.MinutesTillDawn.roguelike.sho
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 4c 69 66 65 5c 22 2c 5c 22 63 6f 6d 2e 4f 4f 5a 4f 4f 47 4f 52 41 45 2e 43 68 61 72 61 63 74 65 72 4d 61 6b 65 72 5c 22 2c 5c 22 63 6f 6d 2e 4f 72 79 75 67 65 6e 2e 57 6f 72 6c 64 4f 66 50 72 61 6e 64 69 73 42 65 74 61 5c 22 2c 5c 22 63 6f 6d 2e 4f 73 4f 73 2e 54 69 6e 79 41 72 63 68 65 72 73 5c 22 2c 5c 22 63 6f 6d 2e 4f 77 69 6e 67 73 2e 41 72 72 6f 77 57 61 72 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 43 6f 6f 6b 69 6e 67 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 49 6e 54 68 65 53 75 70 65 72 6d 61 72 6b 65 74 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 69 72 74 68 64 61 79 50 61 72 74 79 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 48 Data Ascii: Life\",\"com.OOZOOGORAE.CharacterMaker\",\"com.Oryugen.WorldOfPrandisBeta\",\"com.OsOs.TinyArchers\",\"com.Owings.ArrowWar\",\"com.PSVStudio.BarboskinsCooking\",\"com.PSVStudio.BarboskinsInTheSupermarket\",\"com.PSVStudio.BirthdayParty\",\"com.PSVStudio.H
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 72 57 61 73 68 39 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 63 61 72 77 61 73 68 34 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 65 6e 74 69 73 74 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 6f 63 74 6f 72 56 65 74 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 72 65 73 73 55 70 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 66 61 72 6d 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 68 61 69 72 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 64 73 42 75 73 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 6e 64 65 72 67 61 72 74 65 6e 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6d 65 6e 74 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 Data Ascii: rWash9\",\"com.YovoGames.carwash4\",\"com.YovoGames.dentist3\",\"com.YovoGames.doctorVet\",\"com.YovoGames.dressUp\",\"com.YovoGames.farm5\",\"com.YovoGames.hair5\",\"com.YovoGames.kidsBus\",\"com.YovoGames.kindergarten3\",\"com.YovoGames.ment\",\"com.Yov
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 74 2e 6e 61 75 74 69 63 61 6c 6c 69 66 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 68 61 71 75 65 73 74 2e 70 65 74 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 65 6e 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 72 75 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 72 61 63 69 6e 67 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 64 69 6e 6f 73 61 75 72 2e 67 61 6d 65 73 2e 6c 69 74 74 6c 65 2e 6b 69 64 73 2e 74 Data Ascii: t.nauticallife\",\"com.alphaquest.pet\",\"com.amayasoft.bookstorem4.en\",\"com.amayasoft.bookstorem4.ru\",\"com.amayasoft.cars.kids.racing.toddlers.garage.game\",\"com.amayasoft.cars.kids.toddlers.garage.game\",\"com.amayasoft.dinosaur.games.little.kids.t
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 6d 2e 61 74 72 69 6c 6c 69 6f 6e 67 61 6d 65 73 2e 63 68 65 73 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d 2e 61 75 65 72 2e 64 61 77 6e 62 72 65 61 6b 2e 74 72 69 61 6c 2e 73 69 6e 67 6c 65 2e 70 6c 61 79 65 72 2e 66 72 65 65 5c 22 2c 5c 22 63 6f 6d 2e 61 75 74 75 6d 6e 69 6e 74 65 72 61 63 74 69 76 65 2e 6d 79 72 75 6d 6d 79 5c 22 2c 5c 22 63 6f 6d 2e 61 76 65 63 74 6f 72 2e 69 74 77 2e 69 74 77 6d 6a 31 36 68 64 5c 22 2c 5c 22 63 6f 6d 2e 61 76 6f 6b 69 64 64 6f 2e 67 61 6d 65 73 2e 74 68 69 6e 6b 72 6f 6c 6c 73 5f 6b 69 6e 67 73 5f 61 6e 64 5f 71 75 65 65 6e 73 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 69 61 6e 61 6e 6f 76 65 6c 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 Data Ascii: m.atrilliongames.chessnew\",\"com.auer.dawnbreak.trial.single.player.free\",\"com.autumninteractive.myrummy\",\"com.avector.itw.itwmj16hd\",\"com.avokiddo.games.thinkrolls_kings_and_queens\",\"com.awardsmediagroup.diananovelsnew\",\"com.awardsmediagroup.d
2024-04-19 14:06:56 UTC	2281	IN	Data Raw: 66 75 72 6e 69 73 68 2e 68 6f 6d 65 2e 67 61 6d 65 73 2e 68 6f 6d 65 73 63 61 70 65 73 2e 6c 69 66 65 2e 6f 63 64 5c 22 2c 5c 22 63 6f 6d 2e 62 66 61 2e 62 61 74 74 6c 65 6c 69 6e 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 67 66 2e 6d 65 72 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 67 61 6d 65 73 2e 62 61 74 61 6b 6f 6e 6c 69 6e 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 6f 6f 73 2e 6d 61 72 72 69 61 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 69 62 6f 6f 6d 2e 69 64 6c 65 73 68 65 6c 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 76 65 72 73 65 2e 77 6f 72 64 2e 73 65 61 72 63 68 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 77 6f 72 64 73 65 61 72 63 68 2e 63 72 6f 73 73 77 6f 72 64 2e 70 75 7a 7a 6c 65 2e 67 61 6d 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 Data Ascii: furnish.home.games.homescapes.life.ocd\",\"com.bfa.battlelines\",\"com.bgf.merge\",\"com.bhgames.batakonline\",\"com.bhoos.marriage\",\"com.bibiboom.idleshelter\",\"com.bible.verse.word.search.game\",\"com.bible.wordsearch.crossword.puzzle.games\",\"com.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50112	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1101	OUT	GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:57 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:57 GMT Server: fife Content-Length: 6458 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	733	IN	Data Raw: 52 49 46 46 32 19 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c e9 18 00 00 2f ff c0 3f 00 4d 40 6c db 48 92 04 cb be b7 3a ff 84 bb b6 ba f7 09 20 a2 ff 13 20 49 b6 3c 04 c8 b4 b3 9d 11 07 6c 24 79 8a 48 3c e1 0c fc b0 63 62 5b c6 47 3c f0 9e 9c 24 c0 40 09 27 ea 01 6c 0a 79 da 24 96 69 64 3c 6f 94 c8 ea 74 47 c9 40 b6 a9 2a b9 aa 24 28 49 95 3c f2 46 95 d2 04 0e bc 3a 01 94 12 40 6d e3 c1 02 10 40 49 35 a1 2d c9 db 7a 86 a0 d6 b2 41 ed 26 a9 a9 ad 76 bb ea 42 9a e3 11 f0 d9 aa aa ba 5c 62 50 b7 80 6e fe 4a 55 55 47 cc 74 d3 4f d3 0b 29 b7 96 1f e5 e7 ca 6a 16 70 63 db 76 d5 2c 4c e4 e9 bf 1c 2a 60 28 80 b1 11 c8 bc 48 43 24 f7 dc fd 32 39 e3 b6 6d 24 b1 82 c5 ec 7d 05 81 9f db 7f 61 5b 83 e4 46 92 1c 49 32 fd a5 9b Data Ascii: RIFF2WEBPVP8XVP8L/?M@lH: I<l$yH<cb[G<$@'ly$id<otG@$(I<F:@m@I5-zA&vB\bPnJUUGtO)jpcv,L`(HC$29m$}a[FI2
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 23 81 f6 c4 04 58 d5 b6 6d 91 24 e9 fb fe e4 82 9c e6 ee 22 35 87 30 6e 1c 1d 2a cf f2 9e c9 1e 43 43 31 53 52 c4 2f fe 3f 22 07 2a 23 ec a3 96 6b d4 e4 d5 ae d5 92 df 2b dc 3a e6 86 41 b5 92 39 96 ec 2a a6 52 cb 4c e9 96 d9 31 a3 62 46 d9 72 dd 5e 12 20 49 32 6d ab f7 fa 9e 3b cf b6 cd 6f db b6 6d db b6 6d 1b cf fe b6 6d db 36 e6 5a 92 b4 6d 5b 5a e7 7d ff 9f 04 62 27 44 91 9c ba fb d8 a6 1d 79 77 d0 6d 74 11 ee 3b 68 c7 1d f7 ea 12 74 e4 2e 1c 20 ee 01 7e fe 98 80 21 c8 fa 45 2f 5d f1 cc d9 ce 9c fe 7f 17 b8 74 ad e8 da 55 8e 31 df 39 cc 0c 97 58 d7 75 4e 73 ff 9d f7 c1 db 01 3e 7d 0f bb 22 97 bb 9c 7c bd f5 9b f7 e7 e6 c3 c5 70 c6 09 88 71 3a df 43 f4 39 59 bf 5d 85 2a 78 01 bc ea 95 a3 6c 31 21 70 44 62 33 c3 5c 65 a7 e6 e6 4a e4 f4 46 3d b7 60 74 66 Data Ascii: #Xm$"50nCC1SR/?"#k+:A9RL1bFr^ I2m;ommm6Zm[Z}b'Dywmt;ht. ~!E/]tU19XuNs>}"\|pq:C9Y]xl1!pDb3\eJF=`tf
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: e1 25 a0 52 ca 1a 9e e4 5d 04 50 ea 36 32 c7 8e 09 82 20 01 50 72 1a 1b 06 0b 83 eb 9c 49 17 91 18 e3 e7 c6 cf ed 80 fb f8 c5 fe a7 68 cf 55 d9 07 1c 98 df aa 34 f5 2c cf 1d 08 de 09 40 dd 89 f7 27 27 04 d7 96 f3 ce 54 11 89 31 7e 6e dc 80 79 2b 24 14 92 ed 4b 98 0d 3e 02 1c 2e 69 d6 f7 d4 2f fa 42 03 80 be 8f 56 ae a5 a8 0f 52 85 3f 10 b8 9a f0 10 4f 88 53 a3 4e 12 5b 2c 42 2d 21 50 ef da 9a 34 76 95 63 31 4b 4f 07 0c cd aa ef 3a 7d 6b 8c 04 d3 5f 92 42 3b c0 55 84 07 79 a2 7f 27 5d 86 1c 77 5e 2a 10 0d c6 f4 2d 13 22 85 0d 8f 33 c0 d0 c4 2d 4f 7e e8 96 7d ec e3 17 cb ff c4 84 d4 91 f3 9b 2b 09 37 7a 1a 0f c3 f1 6c d0 c5 ee ca ca 18 5e 69 5f 05 ef c7 3b c8 00 d5 5e b6 e5 b1 f3 83 82 2f 26 81 63 ef 3e dd 27 36 ec 68 eb c9 97 10 fc e6 6a d2 0f f5 5e 77 c4 Data Ascii: %R]P62 PrIhU4,@''T1~ny+$K>.i/BVR?OSN[,B-!P4vc1KO:}k_B;Uy']w^*-"3-O~}+7zl^i_;^/&c>'6hj^w
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 82 98 8d 2b 9b b7 bf 88 b7 17 02 e8 41 14 7a a4 13 aa 9d 6b 16 e9 6f 03 0e 87 67 d4 0f ad 35 01 d6 da cc 55 e9 f6 34 3e 74 6e ff 30 b7 db 97 c7 5e 08 10 ed b4 95 10 36 f5 43 0b 2f 81 30 49 20 24 b2 72 66 0f bf e5 61 a9 49 f3 c0 7c 49 dc 6a 45 5d 69 65 5b 5e 62 a8 bb 36 9c 6b eb e9 01 c4 91 77 5e 07 fb a7 f1 2c c0 c8 ea a9 b5 86 94 7e 60 10 84 30 03 cd c2 2c 48 b2 9e 86 9e 46 48 28 84 10 a4 d0 8b cc d4 a7 f1 8b 55 28 f2 a3 79 13 80 67 6d ac b2 ec 97 c2 f0 c4 f9 70 13 00 8c 8e d5 82 05 fc 6d 75 88 58 9a c9 88 c8 4a 3a 2c 04 15 20 6c 6f 03 ce e6 42 12 e0 18 bd 1a 8f 10 42 01 2d d8 6b 08 0d 8c 34 ae 8d 58 68 f1 17 5a 73 58 cf c6 fb 80 a5 f1 58 a8 26 15 96 c0 5c 6a ba 59 1c 59 38 b8 32 03 2a d1 62 0f f8 db d6 ac e9 4c f9 ce e1 92 7b 05 bf 66 1c 6b 11 88 93 09 Data Ascii: +Azkog5U4>tn0^6C/0I $rfaI\|IjE]ie[^b6kw^,~`0,HFH(U(ygmpmuXJ:, loBB-k4XhZsXX&\jYY82*bL{fk
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 06 2e 22 e4 7c 2a 3a f6 18 46 fa e7 c2 05 93 a7 d8 e7 22 39 35 02 7b d4 91 fe b9 71 e1 d2 93 fe f2 a7 52 9b 0a 7f cd f8 0f 26 8c 68 75 dd 7c 26 30 05 6d a6 e8 3f 68 25 3d e0 6b 9e b7 e5 74 12 46 f8 a0 95 f4 80 cb e2 5d 0a cf b7 4f 6a d3 f8 a0 95 f1 6d 94 51 40 62 8a a2 df ec 23 2a b8 b1 9f c7 1d 77 97 25 1b fb 7a 79 9b d2 d3 ec 52 1a f9 b4 86 08 02 05 ca fe 45 c4 b2 04 d7 e9 f3 12 f7 59 5d 0c e8 67 ff f7 33 91 29 5a e9 71 94 1a cb 14 3c 2e 28 4a 7f 7b b5 35 a0 f2 63 07 51 b6 38 0a b6 5b 31 e0 ef 52 53 f3 99 e4 dc 22 dd 11 38 6f 45 d9 62 df a2 82 c0 9b 00 29 57 1d 04 97 ca cd 9d 81 97 81 b2 c5 7a 98 8a 01 8f f8 35 72 dd 81 71 b9 c7 ee 6b a8 2a 4e 5d 0c 67 ab b8 8a a3 6c 71 4f 97 64 6d 92 16 ad 81 72 d5 71 aa 2b dc d5 f5 c4 5b d7 53 37 1d 10 c0 8e 38 a8 3b Data Ascii: ."\|:F"95{qR&hu\|&0m?h%=ktF]OjmQ@b#w%zyREY]g3)Zq<.(J{5cQ8[1RS"8oEb)Wz5rqk*N]glqOdmrq+[S78;
2024-04-19 14:06:57 UTC	705	IN	Data Raw: ca 72 c4 58 8d a4 b3 6a 73 5b ff df d6 ff 37 5d d7 66 c5 b1 54 57 b1 9a b7 5c 70 5c 39 38 26 43 29 02 bf 51 ae 88 b7 9c a3 0a 56 eb e2 73 f6 cb d6 d3 d7 53 90 93 83 b3 ef 55 f5 72 c9 d9 96 ec 1b 6b 89 e2 dc f6 7e d7 12 17 b5 15 6b 69 6f 3a 22 6e 04 0a f5 37 9f a3 9d 2a 16 4f 77 b1 bf a0 60 de b1 b4 86 39 55 b1 6e fa 7f d3 ae 56 4b c1 fc c8 9b e6 55 ad d9 1a ed e2 f2 23 85 f2 23 17 c7 1a df ac 62 11 f6 6c bb ae ec a8 4d 3e b7 28 26 ab b5 6b d3 9e db 8c aa dd da 11 db 4e ac ae 6a 0e 5e 33 87 58 04 7e db a7 9d d8 7b aa 1d d6 56 2e 5a 9e aa e5 d8 0d 14 a6 68 a9 e0 ed cc 59 c5 71 5b ff df bc d6 31 b3 ea e1 d2 96 ea 12 a9 79 cb 05 bf f3 9d 93 a6 52 f8 cf 3d ef 92 7f a1 2e 8d 5a 17 9f f3 1d eb e9 eb a9 9a 07 76 8f c6 2e 3e 4f 75 59 b8 e4 af f6 8d b5 44 f5 dc b6 Data Ascii: rXjs[7]fTW\p\98&C)QVsSUrk~kio:"n7*Ow`9UnVKU##blM>(&kNj^3X~{V.ZhYq[1yR=.Zv.>OuYD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50110	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1101	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 498 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:04 GMT Expires: Sat, 20 Apr 2024 10:12:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 14093 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	498	IN	Data Raw: 52 49 46 46 ea 01 00 00 57 45 42 50 56 50 38 4c de 01 00 00 2f ff c0 3f 10 4f c1 a0 6d 23 49 9e 99 65 71 34 8f fb 7f 57 1a 08 da b6 8d 33 2a e3 0f 71 3f 82 b6 6d e3 ae 2c ce 1f d7 99 4c 63 1b 49 92 93 46 cb a0 09 8f 10 30 f1 c1 d2 1a 02 50 22 40 88 34 ff c6 bd b5 b4 39 70 f9 4d ac e0 b7 3e 6b db 77 16 5a ef 9a a9 5b 95 2a 51 0d a2 40 10 3a 15 2e 2d fe 00 6b 01 41 18 d0 e1 2b 22 4c ff d3 07 f8 21 c1 b6 6d b5 6d 64 fa 37 f7 86 e1 eb 7f 85 19 e6 3f 4b fb 41 51 8a e8 ff 04 0c 8b ff 17 ff cf 47 dc 7e de 5f 5c 57 2b 6f 8f e2 b5 7e bd 69 bd 55 33 ef 8e 11 ad af cb 5e 4d bd 3b 21 62 f5 36 8d d5 1a 11 91 fa 99 aa b5 77 27 12 11 a7 d5 55 35 49 44 98 5e ba 51 22 82 b4 e9 d5 2a 11 31 7a 1f ed 12 11 a2 c7 6e 98 88 08 9d 37 cb 44 04 a8 55 d3 44 c4 a7 1a 27 22 7b 22 b2 Data Ascii: RIFFWEBPVP8L/?Om#Ieq4W3q?m,LcIF0P"@49pM>kwZ[Q@:.-kA+"L!mmd7?KAQG~_\W+o~iU3^M;!b6w'U5ID^Q"*1zn7DUD'"{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50115	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1100	OUT	GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3702 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:41 GMT Expires: Sat, 20 Apr 2024 11:17:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 10156 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	721	IN	Data Raw: 52 49 46 46 6e 0e 00 00 57 45 42 50 56 50 38 4c 61 0e 00 00 2f ff c0 3f 00 55 e1 b1 ff 7f dd 25 45 3f dc 5d db 5d 70 77 77 77 77 77 77 28 c1 dd b5 dd dd dd dd dd dd dd dd dd fb d6 73 ff df df ff fb c7 a1 65 11 2c c0 1d 32 d2 e2 97 17 9d e1 ae e1 0d 09 d9 00 1b 68 a2 8e c8 58 02 b9 56 d4 d1 83 53 31 ee 12 b9 7f d0 e8 9b 37 6c 80 d0 dd 23 ad 1c 22 87 54 23 77 b9 78 d6 d4 cd 20 74 87 3a e7 66 bd 04 52 cd 2a c6 a1 e8 ec b9 e7 c9 6a 03 1d 93 ba 4b 4b 88 45 d6 29 d2 1b c0 33 62 08 6d 76 e0 3e 13 61 c5 1a be e3 53 f1 44 75 26 72 9f 89 d1 70 dc dd a5 b2 b1 d8 22 4b dd 2d d2 8d 0c cf 02 6a dc dd dd 3d b3 b4 ce 33 12 b9 64 d4 39 92 23 49 52 64 2b 15 79 92 bd d3 57 fc 5f df d0 c2 40 0f 74 25 48 90 6d bb 6d 1b fe f7 fe 47 61 05 40 88 6a 56 83 7b 4b f6 bf 9a 64 29 fd Data Ascii: RIFFnWEBPVP8La/?U%E?]]pwwwwww(se,2hXVS17l#"T#wx t:fR*jKKE)3bmv>aSDu&rp"K-j=3d9#IRd+yW_@t%HmmGa@jV{Kd)
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 60 3c ed fa bd 6d 07 ea df 2e 83 05 57 80 63 6b fc db 19 8d 99 ca 61 bd 56 14 bf ad 64 ef be 18 fa be 20 ea eb 5a a5 28 71 2f 3c 39 2c 89 61 24 e5 b1 ab c8 44 5e 0f 83 67 22 64 a4 53 bf 6f 29 32 56 36 8e f2 a3 6e ab b2 99 9a ae 3c 48 b0 6a 39 f5 ff 00 90 25 56 00 3f 59 0c 3e ba 8e 28 a7 15 d3 40 f0 80 95 d3 29 8b ef 64 e0 b9 09 2f b8 c7 f5 28 af d5 49 e1 d9 d8 ea b1 b8 0a ca e4 42 ef a1 e8 4f e5 05 e9 68 ca 6e 65 32 78 94 3f f9 c9 4c 54 45 83 b0 8a 35 d0 29 c3 55 c8 36 e8 89 43 b7 11 e5 b1 2e 2b 84 55 94 41 53 8e d3 d1 e7 f2 04 ef aa 3c b6 68 42 58 45 0e e5 38 1a 16 2f cf 3f f7 67 50 1e 33 c3 b1 f2 bd cb a2 53 8e a3 61 f1 14 9d 07 3c 64 46 8a 70 3a f6 fe 58 2c 83 72 1c 0d 8b a7 69 19 2b 28 8b 1d 46 90 22 9c e6 4f ee 17 c2 51 34 2c de a2 ab 80 85 7c 28 ad Data Ascii: `<m.WckaVd Z(q/<9,a$D^g"dSo)2V6n<Hj9%V?Y>(@)d/(IBOhne2x?LTE5)U6C.+UAS<hBXE8/?gP3Sa<dFp:X,ri+(F"OQ4,\|(
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 8a 06 c6 45 e4 e5 34 ef f3 b3 cc c9 b8 cf eb d3 be d4 2f aa e5 ca 81 89 02 55 46 69 96 5e 91 3d 39 24 3a 88 f8 46 6b 96 c2 f1 50 a5 49 f3 3e fc 49 12 2a a1 f9 46 9b b0 82 85 0d 1e 84 66 f9 f4 69 fc 89 7c d6 74 b6 f4 46 7e d1 6b 80 03 83 56 9e 8c a6 62 71 83 41 20 3f 82 15 95 bf 9c 4f b4 32 39 30 70 9b f4 3d d0 d4 1d 8c 18 08 22 6f 80 8d dc db 1f ba f8 f2 7f e9 bf 33 2e e9 09 34 bb ff f6 80 10 67 70 c3 7f 7d a1 2f fe 07 af f0 5d b1 df 75 6e d7 44 d3 aa 81 a0 10 71 b9 31 93 b6 d4 6b dd a5 7d da 4e 00 df 95 7a a4 67 d1 f4 18 04 88 88 fc c8 67 61 e5 f2 ad 86 d6 e9 d2 19 fe c0 6f 02 1a 45 d6 20 11 71 d9 80 8a c4 d6 4c cb de 1c fe db 04 cd 22 9f 7e 92 d3 16 2c 22 f2 8a 61 80 d5 d2 7e c1 26 5d 15 dd 98 fd e2 bb 56 4d 9a 06 0c 83 14 38 22 12 1f 53 5e 80 55 d0 5d Data Ascii: E4/UFi^=9$:FkPI>I*Ffi\|tF~kVbqA ?O290p="o3.4gp}/]unDq1k}NzggaoE qL"~,"a~&]VM8"S^U]
2024-04-19 14:06:57 UTC	471	IN	Data Raw: 44 ff 5d 2e b2 95 49 b5 c4 7b 2e 0c c7 c1 b9 91 57 3c ce 8f ab fb ad 1d 0b 7e 48 b8 77 58 50 c5 2e 23 7e 3b d7 cc ae f9 6d c4 7b f7 59 93 1e b7 93 f9 ea ee c8 2a 01 38 89 71 8f 1c a9 7e 4a bd 08 8a f9 54 21 fd 21 2c 8b a1 5b 8b 6f 7a b0 cc fd 19 21 c1 e8 0c 1a 2a 91 0d ef 9b 1a a4 78 d6 a4 5a 22 4f 43 99 b4 9e 23 fe a8 d6 86 cd 4a 60 3a 83 0b fe 66 68 3f ec b2 6e 13 23 c6 c5 42 67 d0 f0 a1 9f 68 5f 33 e6 84 3e cd 60 76 93 6a 29 48 dd cf 22 03 5d db 86 6d a9 4f c5 8f bf 42 2c 75 b9 31 c7 6b 6e 32 b4 eb 1a 93 5d 2a fe 44 82 d6 e5 c6 a9 bf fe 66 16 8d be 02 7a 18 b4 f8 a4 5a b2 f9 18 c0 8a e9 be f9 53 2d 79 59 d5 b1 7f 43 89 6b 91 40 8e bd 3b a6 bb 97 df bc aa 15 cd 99 6f 31 c2 b7 8f a7 5d c4 7a b7 39 60 85 e5 73 1c 9c ac a3 b0 ae 70 46 7b c6 08 31 09 ee 0f Data Ascii: D].I{.W<~HwXP.#~;m{Y8q~JT!!,[oz!xZ"OC#J`:fh?n#Bgh_3>`vj)H"]mOB,u1kn2]*DfzZS-yYCk@;o1]z9`spF{1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50111	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1102	OUT	GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 532 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:04 GMT Expires: Sat, 20 Apr 2024 10:12:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 14093 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	532	IN	Data Raw: 52 49 46 46 0c 02 00 00 57 45 42 50 56 50 38 4c 00 02 00 00 2f ff c0 3f 10 3f c1 2a 92 a4 56 73 e1 9f ec 02 d9 b8 43 40 78 d1 86 80 a0 c8 ff d1 d8 34 92 e4 a8 fb 7c 7e 3a 1a cf 1f d7 a7 6e 18 d5 b6 b5 63 7f ff e8 a4 95 00 6a 69 a0 82 99 00 df d4 d4 0b 00 6c 20 81 0c fa 7f e6 48 0b a6 cb 27 3e bf 4f 3c 7e dd 3a 5f fb f8 d1 7e 70 0e 25 25 25 01 48 40 28 e8 b7 20 70 5f c9 d9 95 91 f5 89 a2 59 8f 32 5c f9 e1 87 e7 45 80 40 12 24 4a 92 dc b6 15 95 0e bb ce 36 01 52 d2 3a c7 ff ff 49 16 4a 05 e0 1c de 23 23 fa 3f 01 dd e2 ff c5 ff f3 11 b7 6f 87 ab 3e 96 72 bc 6c af f5 63 9f 52 8a c5 dc 9f a9 b5 be 6e 87 58 d4 fd 39 d4 56 2f 63 2c ec fe 9c 50 4b 7d 8e b1 40 84 da 69 75 17 8b 44 a8 99 ee 53 a1 08 35 d2 66 88 a5 22 d4 46 af a9 5c 84 9a e8 58 32 42 2d 74 53 34 42 Data Ascii: RIFFWEBPVP8L/??*VsC@x4\|~:ncjil H'>O<~:_~p%%%H@( p_Y2\E@$J6R:IJ##?o>rlcRnX9V/c,PK}@iuDS5f"F\X2B-tS4B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50114	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1101	OUT	GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 458 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:00 GMT Expires: Sat, 20 Apr 2024 12:12:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 6897 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	458	IN	Data Raw: 52 49 46 46 c2 01 00 00 57 45 42 50 56 50 38 4c b5 01 00 00 2f ff c0 3f 10 37 a1 a8 91 a4 a8 b9 f1 ef 07 21 d8 e0 3f b4 0d 03 69 db c4 c1 fd 7b dd 76 01 41 91 ff a3 b1 8d 24 c9 49 ff a3 55 2a c4 48 78 d8 32 8a 37 01 f7 02 c0 08 09 32 b4 fe e5 88 10 7f f0 a4 58 84 f3 26 9a 9c 6e 61 b1 43 c0 0f 01 a5 40 1e f8 64 81 04 47 41 01 c4 65 7d d8 6c 1d 15 05 15 90 20 db 76 db 36 50 c3 87 ba dc bb fd 5c de db ff 3a 25 fc ff 53 89 88 fe 4f 40 19 fe 1f fe 9f 8e b8 7c ba 3e 6c 5a 2f eb 67 bc e6 0f 6b 33 6b fd f8 41 b4 de 77 d6 ba 5a bf 85 58 3d d7 d6 d9 fa 4d 21 52 1f b5 75 88 42 9c 66 db d6 25 0a 61 ba b5 4e 51 08 d2 c2 5a af 28 c4 e8 b1 63 14 42 74 d3 33 0a 11 3a 76 8d 42 80 ac 75 8d 42 7c 5a e7 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 Data Ascii: RIFFWEBPVP8L/?7!?i{vA$IU*Hx272X&naC@dGAe}l v6P\:%SO@\|>lZ/gk3kAwZX=M!RuBf%aNQZ(cBt3:vBuB\|Z(dB(dB(dB(dB(dB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50113	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1101	OUT	GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3872 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:04 GMT Expires: Sat, 20 Apr 2024 10:12:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 14093 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	721	IN	Data Raw: 52 49 46 46 18 0f 00 00 57 45 42 50 56 50 38 4c 0c 0f 00 00 2f ff c0 3f 00 1e 0f db b6 1d 92 a4 6d 5b cd 75 5d bf c0 b6 6d 36 ab 7a 6c db b6 ad 54 45 8d 6d 2b 9d d5 b6 ad f1 b4 6d db ee 8e 42 66 c4 79 1e c7 79 1e 97 af b1 6d b6 1d 17 c6 33 97 59 75 2d 39 97 7d 45 8e 6d c4 5c d5 58 96 21 25 6a db 8e 47 d2 dd b6 ad f4 29 d7 be 8d b1 ed a5 3d 49 c6 33 2b b6 76 63 db b6 6d b6 6d 77 27 a5 ef 8f cb be 69 d1 b6 6d 4a 92 76 55 db 65 9b 61 23 8d 40 ea b3 6d db b6 6d db b6 ed ee b2 8d fb 5e d8 8e 48 86 ef bb a7 ff 92 d8 b6 11 24 49 ae da 00 dd 9b f1 77 2a ae bd fb ab d2 37 7c 9d e8 3f 27 fa cf 89 69 d3 6a c3 9e 6a 1f 7f 77 d8 e9 17 2a 60 13 b0 3e 00 d2 d5 17 1f bc f8 ac 72 2f 7f d8 72 fd ee 6f 30 f4 8d 4a 15 5e fd 78 33 70 f5 96 c0 ce 12 27 1a 17 3a 17 7a 20 4d f9 Data Ascii: RIFFWEBPVP8L/?m[u]m6zlTEm+mBfyym3Yu-9}Em\X!%jG)=I3+vcmmw'imJvUea#@mm^H$Iw7\|?'ijjw`>r/ro0J^x3p':z M
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: fb ae 58 ac fb 9e ea e3 47 85 eb ee 0d d2 69 32 ea 7a 00 8b 92 ed 30 d8 98 52 5d 17 b1 74 de cc dc 1c 63 9a 8c 65 7f 3a b8 97 0d 83 fb db 39 f7 31 62 14 11 dd dc 46 2b f9 e8 09 e1 31 99 97 82 81 b7 27 09 0d f3 36 2e 7c 81 54 9a 7e f6 8f 0f ad 19 01 83 c3 61 f4 5c c6 39 6c 4b de 72 42 06 33 46 31 d1 dc 4f 08 65 58 7b e3 1f 26 87 f2 33 b8 03 16 2e 87 7b 76 bb 61 a5 86 05 d3 07 0e 75 9c 4e 8e ba ef c5 00 ad ac 00 8c e0 26 16 4e 1d 9a c1 45 6d ef 27 93 7e e9 fc e1 c0 e4 62 f8 9e b4 70 38 fc ee 80 27 17 bd 60 70 e9 ec be 46 a8 a4 78 d9 f9 41 7a f9 30 b3 ae 67 c7 85 b6 64 1b 0c 3e 2e ac 66 0f 91 b4 ff 73 a7 87 85 26 27 a7 1c 44 17 73 cb 6d 9e ef 67 df c7 89 71 76 27 d7 d1 48 90 d5 23 79 31 87 27 61 78 9c 75 d8 c6 bd 8d 0b 33 54 05 85 d4 7b e9 1b 1f 66 93 9b ac Data Ascii: XGi2z0R]tce:91bF+1'6.\|T~a\9lKrB3F1OeX{&3.{vauN&NEm'~bp8'`pFxAz0gd>.fs&'Dsmgqv'H#y1'axu3T{f
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 66 d0 c4 0b 7e 0c d5 d2 cf c8 0b 9a aa dc fa 98 05 a4 e3 bc 0a f1 2a c6 30 2b 72 70 36 a2 c5 e0 52 99 17 01 62 a8 58 5d ef 97 82 ee 07 a2 88 41 53 ed e7 bf b0 c0 d4 d4 77 11 8f 1f fd 8c ca 40 31 ce c4 0c 9a 38 11 23 86 9a 32 8e b8 a0 89 53 82 c4 50 67 77 72 1d 69 41 13 a8 9e 44 74 a0 2b 68 ba ad 5f 3a 0f 4b 5f 23 98 57 31 a8 0a 9a 02 b4 57 8b 3f 69 01 eb b9 18 de 3a 5d 6c 2a df f2 70 80 0e c4 a0 89 17 91 62 a8 e7 c4 0e 9a dc 1c 81 b6 7d e8 1b be f5 b3 c5 29 b1 62 a8 8b 44 a6 00 1e cc a0 09 41 2f e0 b5 3c 29 72 d0 e4 45 8d 18 34 f1 22 5a 0c 25 ae c3 b0 b6 fa 3f 4c c4 a0 09 45 e3 a6 90 73 1d 71 74 00 27 de 25 8b 89 bc b0 c7 50 d4 38 4c bc 16 6d 07 70 a4 06 4d 9c 12 30 86 3a 7b 88 63 82 fe 33 aa 41 3a d0 82 a6 a7 6f e1 45 c0 18 2a d6 c0 57 85 64 68 6b cd cb Data Ascii: f~0+rp6RbX]ASw@18#2SPgwriADt+h_:K_#W1W?i:]lpb})bDA/<)rE4"Z%?LEsqt'%P8LmpM0:{c3A:oE*Wdhk
2024-04-19 14:06:57 UTC	641	IN	Data Raw: 9a 73 c7 c9 09 59 3d bb 45 87 de b4 2a c9 a4 c3 ef 4f 2f 85 cc 6c 61 2f ab 26 56 2b a2 a3 4c a7 cd ae f0 33 c7 50 5f 0e cb b7 29 3e a0 4a 52 31 b0 45 2c 88 7c 29 63 cf 3a 63 12 69 16 c2 97 25 7e 7c 2a 77 7e 09 ab c5 20 eb aa 24 97 ca bf 57 5a 14 89 b1 4e 8b 8a 8f 52 a6 38 86 8f 32 c6 50 1f 09 28 dc f6 ad 2a c9 a6 d5 08 30 39 dc b9 d1 d4 7c a6 04 44 7f b2 ca 6b 5f e7 2c 4e 66 21 77 64 ce 96 59 a9 4a d2 d1 70 6d 79 5e 18 0b 2b e3 ff 4f 94 11 e1 46 70 33 1d 5d 95 90 31 b3 f4 d4 ea da a5 4a f2 29 e9 d4 e8 d5 0c 75 8b d9 a3 99 52 10 4d 1a 4a eb 3d b0 85 61 04 f7 b5 68 f5 a6 f9 1b 55 49 42 7a 47 ca 6c 30 fd 9e d5 87 86 75 2d 04 3e 7e cc b7 e1 a2 f8 9c 46 bf 76 ec cb a8 92 8c 4a 7e 24 b3 24 32 43 d0 24 0b ca 6c b1 e5 19 89 6c 45 e8 f1 d9 30 87 39 68 92 6c 04 77 Data Ascii: sY=EO/la/&V+L3P_)>JR1E,\|)c:ci%~\|w~ $WZNR82P(*09\|Dk_,Nf!wdYJpmy^+OFp3]1J)uRMJ=ahUIBzGl0u->~FvJ~$$2C$llE09hlw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50117	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1102	OUT	GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 882 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:47 GMT Expires: Sat, 20 Apr 2024 11:12:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 10450 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	722	IN	Data Raw: 52 49 46 46 6a 03 00 00 57 45 42 50 56 50 38 4c 5d 03 00 00 2f ff c0 3f 10 b7 e2 2a 92 24 c5 aa 63 f2 af ee 5c 30 be ae bf a7 c1 40 da 36 71 70 ff 5e b7 9d 4d 23 49 8e ea f8 a3 7b 04 ff f1 85 ef dd de b0 8d 24 c9 49 bf 44 e4 42 8e 64 88 87 4d 00 6f a1 dc 4b 00 2b 24 c8 d0 fd 0c 14 c4 cf 06 45 08 04 06 44 fc 44 94 42 89 5f 3c f4 13 b7 9d 50 e8 16 a0 29 3c 10 9b ee 30 11 88 9f 95 40 08 44 a9 79 2c 10 e8 30 44 c1 ac c0 0d f1 a7 19 3c bf 62 11 ce fb 8b 36 9d 03 02 7e 08 18 05 e4 94 0c a9 e0 86 ab 00 44 48 33 db 82 9e bd 46 89 02 25 0c 12 6c 5b 52 24 45 73 dc dd 7d 06 87 ae cc 2c c9 c4 dd 21 b0 d8 ff 6e a0 b2 e4 e3 1d 11 d1 ff 09 18 19 fa 7f e8 ff ff 47 9c 78 fb e4 d1 3d d7 96 d9 a7 fe 35 f6 f2 ae 55 75 ed f1 95 fa d6 fb 07 d6 b5 6a f6 85 a9 5f bd ce 5c cb 66 Data Ascii: RIFFjWEBPVP8L]/?*$c\0@6qp^M#I{$IDBdMoK+$EDDB_<P)<0@Dy,0D<b6~DH3F%l[R$Es},!nGx=5Uuj_\f
2024-04-19 14:06:57 UTC	160	IN	Data Raw: e2 4a 02 93 97 85 03 46 73 3b 57 97 0e 0a 07 8d fa b0 5b cf 41 f0 0e 1c d5 32 d6 aa 2e fd 1e d6 ba ff 62 8b b5 42 14 4d ad f1 7f 78 34 d6 aa 10 b5 ed d0 7f 43 ff fd 0e 74 af eb 6c f7 3d b2 dd 66 1f 77 df 93 ae 7b da 7d 6f bb ee 55 f7 4d dc ed b8 f1 ee 93 97 b6 cb ec f3 91 1e 38 f6 a0 cb ee 8f f6 01 79 9f 75 57 f6 6e a4 1f be c9 ba 2a 7b 23 7d f1 fd 7d db 45 f6 e1 c7 91 fe 38 fa dc aa 6a 97 58 d5 bb 2f c6 46 7a e5 f8 ab a7 8f 6d 77 dc 7b f4 e4 ed c4 c8 d0 ff 43 ff ff 3f 22 00 Data Ascii: JFs;W[A2.bBMx4Ctl=fw{}oUM8yuWn*{#}}E8jX/Fzmw{C?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50118	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	1101	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4416 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:17:25 GMT Expires: Sat, 20 Apr 2024 12:17:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 6572 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	722	IN	Data Raw: 52 49 46 46 38 11 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c f0 10 00 00 2f ff c0 3f 00 55 e1 8d ff 5f b5 65 39 67 78 c4 cc cc cc cc d2 30 33 33 33 33 33 33 33 33 43 33 33 73 f7 63 66 66 6c ee 36 f6 de 6b ed 73 4e 9f b3 4c b1 da 15 b3 14 01 83 ad 7a 19 c8 42 5f 7a b6 e0 78 5b 64 a9 6a 30 02 0c e0 76 0a 02 ef 78 62 8a 80 71 89 19 53 58 b2 19 23 d8 35 96 30 09 05 c0 d6 f3 9e 39 ec b6 2c b9 77 aa d4 39 a8 74 c5 16 53 0e f2 da 1f 4f 8c d6 ed 27 f4 98 59 1a 86 bf 58 3e f6 aa b1 c6 53 08 bb 4a 4b 60 0d 24 70 ed 2b 66 3a 55 cf 13 f5 b5 5e c9 1c f3 3f f2 9f fb 62 10 4b 61 90 db 59 1c 91 d7 01 88 f1 56 c9 64 f6 a6 4e 8b 65 ad 00 4e 00 a2 37 b4 3c 61 5b e3 89 75 57 04 37 04 91 27 51 00 c0 b2 b1 66 75 36 ba 25 69 67 9c 6d 73 Data Ascii: RIFF8WEBPVP8XVP8L/?U_e9gx033333333C33scffl6ksNLzB_zx[dj0vxbqSX#509,w9tSO'YX>SJK`$p+f:U^?bKaYVdNeN7<a[uW7'Qfu6%igms
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: cd a8 92 6c ed 4b 8b 7d c0 ce 2f d2 6d 16 a5 ca 25 10 48 1e db cf 2a 36 64 1f d1 1d e1 86 36 70 e8 55 1d 96 22 b6 9b 67 67 9f d8 5a 5a 91 7a c4 8e a2 1d 72 bf c5 50 84 c0 be f2 30 19 78 ec d6 5f e9 30 ef 46 36 bf 50 cb 40 fc 66 ee 5c 1e ad 88 18 87 9a 5a 27 d9 94 38 8a 81 2e e7 ef 63 3c 5e 59 01 40 20 90 bc 9d 51 c1 40 a0 66 52 e1 86 22 00 d0 d7 ff fc 0f 45 4b 14 c3 42 a2 1d a9 c7 7b 72 00 79 2c 97 14 7b a9 aa 64 21 39 dc a3 8e 43 03 20 3a 11 50 5c ff 8b 7f 35 0b d5 96 78 4c 89 ab 00 c2 bf a7 30 55 2c 04 76 5e b1 6e a8 57 b3 7a 74 ec 24 48 be bc 05 26 36 6d 09 3d f6 e8 ae 94 47 49 82 a2 33 81 60 23 be ed 8e f1 68 4f 2a c4 67 50 d4 b1 69 d8 a8 4a 78 0c a1 46 29 a4 dc ec c8 e1 6c 04 a2 3b c4 0d b7 de 35 6b 5b 5a 34 3a cf 48 f2 00 85 f5 68 4f f8 e3 14 73 4a Data Ascii: lK}/m%H6d6pU"ggZZzrP0x_0F6P@f\Z'8.c<^Y@ Q@fR"EKB{ry,{d!9C :P\5xL0U,v^nWzt$H&6m=GI3`#hOgPiJxF)l;5k[Z4:HhOsJ
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 46 31 69 c8 28 8d 09 39 9b 9c e7 df 79 7d 7f c5 0a a9 03 f0 ac 0a 5f 86 08 47 ee c9 5d cb 7d 3a 40 21 14 dd 11 22 0d 11 4d 6d c4 ef 8f de 72 e7 f5 73 56 6b 78 35 d0 8a 0d 4f 9d 8b 91 20 ce 26 f3 e3 42 19 f8 20 5a 1a a5 e8 6d 20 fd c8 9b 5f c1 f8 9e ec e1 ce 1c db 8f 35 fc d9 c1 57 2e fb e0 10 21 ce 21 75 cf d5 28 a3 69 f2 e2 b3 d2 1b 2d cc 61 32 59 98 67 3c 66 93 db c4 ec 1a ae 3c 56 48 0d fe 4f 0a 7f 93 0c f1 b2 17 2d 51 b2 96 24 5f b9 2c 52 76 47 a4 15 01 b7 d7 f9 fa ef ca 18 c7 9e d0 c3 a5 13 db 8f 35 3c 80 38 9b 5f 99 5a 2d 19 22 4e 81 73 d8 74 cb ad e1 2b 02 40 a0 8d 68 63 16 69 db 40 4d fa 50 25 ed 87 4d ab 11 fd ff 8e 1f d3 4a 6a 48 44 1d ee c6 df 33 51 20 e2 cc 4a 7f 70 eb 3d e7 61 42 65 d5 75 bf fe 5d c7 c9 59 90 7a 8b 03 9b a7 0b a3 8c 38 78 2e Data Ascii: F1i(9y}_G]}:@!"MmrsVkx5O &B Zm _5W.!!u(i-a2Yg<f<VHO-Q$_,RvG5<8_Z-"Nst+@hci@MP%MJjHD3Q Jp=aBeu]Yz8x.
2024-04-19 14:06:57 UTC	1184	IN	Data Raw: 91 1e db 6d 2b 07 42 cd 3f 0f a9 37 30 55 09 09 90 bd ea 9f 5f ad 10 c2 4e 38 72 12 8b 30 93 73 44 83 a3 d9 ad 07 4e 56 78 63 a5 35 e7 52 5d e3 c7 af 3d 34 d6 b8 44 63 76 d0 00 a7 ca cc 28 b5 d2 90 9f 06 86 f5 79 8e ee 0b 08 ac 04 42 ce 3f 0f a9 77 d8 54 03 09 31 4e 03 00 68 73 d6 39 31 73 8e cc 8c 12 15 c5 58 03 ae da ee b8 b1 a5 45 c7 92 94 cc cb 8d 08 a8 be 56 40 6a ad 9e e0 d1 cc a4 21 30 d7 f5 fc ea cb 09 52 9f 47 40 22 01 68 be 28 c3 62 14 45 d1 90 e8 67 b4 f6 07 c0 6c bb a5 83 4e e3 88 b2 07 cc 43 a6 0d 4d c8 78 55 d9 9d 35 0c d2 ef ab b2 0a 12 0c e4 a1 d2 29 73 94 1d 20 4f ee 17 88 43 66 37 eb c8 3c 9a 4d 75 f9 b3 7a 4c ad a5 d2 8d ab 46 4e 90 fe f9 15 24 9c 9e 50 ea 28 34 26 95 be 05 76 56 61 32 51 14 45 35 37 73 eb d6 29 0e ec b3 ba e1 de ab 6a Data Ascii: m+B?70U_N8r0sDNVxc5R]=4Dcv(yB?wT1Nhs91sXEV@j!0RG@"h(bEglNCMxU5)s OCf7<MuzLFN$P(4&vVa2QE57s)j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50121	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1101	OUT	GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2070 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:00 GMT Expires: Sat, 20 Apr 2024 12:12:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 6898 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	722	IN	Data Raw: 52 49 46 46 0e 08 00 00 57 45 42 50 56 50 38 4c 01 08 00 00 2f ff c0 3f 00 c7 05 39 92 24 45 52 e4 f2 ea ff 58 45 19 2a 63 e9 4e 06 c7 8d 24 29 52 f6 fa 6f e1 be ce 01 66 98 aa 64 dc b6 8d 24 6a fb 6f f6 7e ae e7 5f 6d da 06 8c 53 66 df a1 67 41 10 10 01 11 18 32 b8 10 10 85 22 94 30 04 7e 9e 21 c0 b0 d9 7e 97 e7 41 40 5a 1a 1a 14 04 99 15 c1 42 e8 86 0b 42 07 86 16 4a a0 13 41 21 4c 21 8c 41 90 e7 02 a9 50 94 06 44 71 d2 80 d0 69 a2 4c 10 20 2d 88 c1 61 f1 9f bb 71 d1 30 8d 42 99 3f 88 83 61 8a c6 80 08 95 16 05 51 10 01 99 c6 2f 5f 45 41 98 45 93 fe 26 e5 19 da 58 90 02 d2 c5 0c 0c 36 79 cf f9 18 4a a4 b2 f9 82 1c 6f 50 14 cd 1c 46 b8 11 e1 09 82 44 f8 37 90 7f 0c 60 02 81 05 04 02 81 2b f9 cf 69 cf 1c f6 0f 28 5c db 9e b6 cd 56 5a 1b 8f 1c 2a c3 98 99 Data Ascii: RIFFWEBPVP8L/?9$ERXEcN$)Rofd$jo~_mSfgA2"0~!~A@ZBBJA!L!APDqiL -aq0B?aQ/_EAE&X6yJoPFD7`+i(\VZ
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 66 4e 17 57 52 47 85 42 31 53 d4 9d 12 27 74 8a 1c bb 31 ba 44 64 21 b7 70 24 e2 e3 f0 f2 b6 f3 8d 4e 42 18 38 65 01 99 53 9a ea 97 a5 5d cc 46 f6 bc 19 6f 3a a1 7e 4f 53 09 19 ea 12 d9 c9 2d 1c 8d 28 86 2e 4e 9e 14 8a 44 76 72 65 6d 89 f9 b9 ba bc 8d dd 1a 53 2a 66 8a 9d 53 3e 74 e8 bb b8 e3 cd 94 3c 3d 17 b3 4a 73 54 e6 66 9a a4 a5 da 84 b0 75 ca 4f bf 8e 8b 3f ef d0 77 31 b3 34 2f 97 1a 79 59 54 3e 31 4a 9b 10 20 4e 91 a3 b7 d3 2e 86 a0 22 e1 f4 2f 85 87 45 e5 57 33 6d 9a 84 40 71 4a a3 0a c1 c5 3a 0b 9d 35 ed e0 1f bf eb 2c 03 42 71 ca b7 ae 01 17 c3 91 3b 6f 7b cc 03 7b c2 d3 b2 ec 22 24 39 86 ec da 35 c4 21 42 92 3d 6b 5a 18 f8 93 d8 36 58 4f 46 1d ef ea 3a 2d c0 7a b2 e7 bb 07 fa 9b da 6b 66 00 7a f3 52 75 e0 cd d2 ea 6c 38 6f 9e f9 aa dd c3 c1 a7 Data Ascii: fNWRGB1S't1Dd!p$NB8eS]Fo:~OS-(.NDvremS*fS>t<=JsTfuO?w14/yYT>1J N."/EW3m@qJ:5,Bq;o{{"$95!B=kZ6XOF:-zkfzRul8o
2024-04-19 14:06:58 UTC	93	IN	Data Raw: 31 8d e7 58 93 08 80 1a 13 40 85 75 c9 08 a8 21 c7 73 ac 4d 04 40 0d 78 a0 02 43 3c 03 36 50 81 25 9e 01 18 a8 c0 f3 78 52 a8 40 05 9e 78 86 5d 83 e7 78 24 4b 96 37 7e 41 28 2a aa 3c 15 57 24 cb 56 58 5d b3 58 0d 4b 56 2e b9 b5 5d 96 2c 5f 83 fe cf a0 ff 33 e8 ff fc ff e7 48 00 Data Ascii: 1X@u!sM@xC<6P%xR@x]x$K7~A(*<W$VX]XKV.],_3H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	50120	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1100	OUT	GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3008 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:05 GMT Expires: Sat, 20 Apr 2024 10:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 14093 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	721	IN	Data Raw: 52 49 46 46 b8 0b 00 00 57 45 42 50 56 50 38 4c ab 0b 00 00 2f ff c0 3f 00 e2 50 dc 36 92 92 f4 5f f6 31 c3 2b 22 26 80 dd b6 95 34 b6 95 8d 0c 5b 98 6c 45 c3 0e 80 46 d1 16 df 22 9d ff ff 0f d9 ce 29 6f 1d db b6 79 3c 37 b6 6d 73 f7 ec ce ac 3d e7 da f6 e1 7a ef 3d 8e 6d db b6 6d 3b 39 67 e6 57 fc bf b1 cb fb 4a 69 57 a9 58 39 e9 72 95 3a ff 2a 6c 5d e5 21 24 f5 ed e2 87 90 ca a9 ec 74 36 26 76 d2 de 57 1a c9 db ff 19 92 f3 5d db 4a c6 b6 bb 6a d6 7b cb 31 ff 80 73 e5 39 27 dc bc f6 ee 2d 36 8e ee 8d 6d db 98 aa 1e 2b e8 4e 46 16 6d db c6 de 9c da b6 ed 38 b9 5f 6c db 36 df 6a db ed 9b 6d db b6 6d db ee 87 eb ff fb bf 3f a9 fa 3f 01 72 6b db 5a 1e a7 87 e9 bf 00 4c 05 6b 16 98 99 99 99 99 19 c4 d2 a7 ef 1a 4a 70 03 5f 01 2a c0 8d 08 62 47 2a c0 3d d0 f0 Data Ascii: RIFFWEBPVP8L/?P6_1+"&4[lEF")oy<7ms=z=mm;9gWJiWX9r:l]!$t6&vW]Jj{1s9'-6m+NFm8_l6jmm??rkZLkJp_bG*=
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: f8 7d 0b 8e 4b ab 67 80 b1 74 61 b9 56 e0 57 8f c1 99 42 a3 1f 06 8b e5 2e a2 71 b8 c1 14 e8 b2 ec c2 72 ed c6 b9 ce 43 31 85 c6 87 e1 ec 56 30 b6 46 95 01 ac f8 6e e3 5c 17 22 43 f1 9e 35 22 8b a0 c8 f9 b1 12 c6 04 bd 1b 5a ea 5a ed dd 5a 24 6e b9 17 a1 7f 83 4a b5 43 6f ce 03 71 7e 95 60 04 18 38 0a ad ee 5f c3 e1 50 7d 49 97 08 03 c4 a1 e8 f0 1b 18 36 47 16 58 23 15 81 7b 0d 11 83 79 77 fe 05 e1 a1 af cb a0 4e 10 23 39 36 60 dc 2b 13 e7 1d fe 8b c1 4d 77 26 04 89 4f 80 6e f0 ea 3c 13 35 10 9c 69 29 1a 41 52 25 8f 91 59 3d 0f ec 73 cf 38 10 d8 5f 77 32 0a 41 94 c4 44 93 d9 0e ef f6 96 5a 73 cf 58 00 6c 88 38 d0 29 8d 4e 23 fd 68 5a 11 96 db 27 d9 ef be cf 4b c1 04 71 86 4b 83 69 f3 fd 74 c1 ee f2 49 e6 bb b6 f1 84 11 27 21 d1 60 7a 71 51 45 fc 96 07 a4 Data Ascii: }KgtaVWB.qrC1V0Fn\"C5"ZZZ$nJCoq~`8_P}I6GX#{ywN#96`+Mw&On<5i)AR%Y=s8_w2ADZsXl8)N#hZ'KqKitI'!`zqQE
2024-04-19 14:06:58 UTC	1032	IN	Data Raw: e1 25 24 4d 8d a4 68 d4 86 cb 0a a2 65 00 c6 cf ee 25 24 a5 46 02 cc 0a a2 fd 22 bb 87 90 94 ea 30 32 06 18 76 0f 26 29 d5 19 45 a3 f2 98 2c bb 1b 93 94 aa 8c a2 11 89 9e 54 6d 20 93 06 c3 e6 c6 24 91 59 e1 a2 fd 03 9b 0b 93 14 cb 8d c2 11 79 6c 36 9b 13 93 14 4b 70 e1 b0 44 4f 2c 35 90 49 83 6e 73 1a 24 c5 52 bd 68 58 02 a3 87 6e 75 18 24 8d d0 0b 86 e5 b1 d9 ac 76 83 e4 b1 db ac 36 83 24 32 cb 5f b4 cf 09 dd 62 33 48 1a a0 03 f3 4c 6b 8b d5 20 f9 43 c1 b0 c0 65 85 8b e6 9c d0 2c 56 9d a4 01 5a c1 90 38 e6 6a f9 8b 56 6b f4 d6 5a 78 2e e2 9b c9 44 2c 16 9d 22 32 eb 8b 97 fc c5 7d 2a f8 5f 8a 26 6e b6 e8 04 d2 a0 01 b3 9e 78 d5 8f a0 18 71 a9 27 1c 30 5a a5 c9 6c 3c ac 3a 34 b9 08 0d 93 f4 28 09 cc 14 e6 9a 9d 58 32 61 b3 59 57 1b 1c 1e 21 b1 21 1a ef 71 Data Ascii: %$Mhe%$F"02v&)E,Tm $Yyl6KpDO,5Ins$RhXnu$v6$2_b3HLk Ce,VZ8jVkZx.D,"2}*_&nxq'0Zl<:4(X2aYW!!q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50119	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1101	OUT	GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:58 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:58 GMT Server: fife Content-Length: 6294 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	733	IN	Data Raw: 52 49 46 46 8e 18 00 00 57 45 42 50 56 50 38 4c 82 18 00 00 2f ff c0 3f 00 2a 2c f6 ff ad fe 24 67 f3 61 66 2a 6c 2e 68 ee aa fe d7 bf 98 99 99 99 99 19 06 aa ea f7 79 3e cf f7 fe ca cd 1a 12 47 a5 a2 18 1d 33 a8 e8 52 59 00 73 1c 53 ff c3 b4 83 a8 d9 c0 0d 6a 54 f8 9c 33 5b 98 f2 ad c2 d7 87 5a 85 99 d1 45 b1 e2 44 c7 65 64 98 23 73 a2 38 83 6a 54 14 c3 13 66 6e 15 56 ed 6e 40 45 b5 0f 94 0c 5d 9b 5d dc 30 67 0b cc 1c c5 1c c5 ac 5a b5 1a 90 e3 c2 e8 ae ca 89 ce 0a 4a 85 af 8e ca 02 fa 9c da 41 98 51 45 65 50 8d 0f f3 0e 72 b2 8a 51 41 fd 3f fd 84 99 19 14 27 57 e6 b4 0f 0f aa d0 0d ab 28 96 f7 1c 09 90 6c 9b 76 b5 63 db b6 ed e4 db b6 6d c4 b6 6d db 7c 7e b1 6d db b6 6d 13 62 00 00 49 98 ff bf eb 4d d2 a0 d3 02 2c d4 fe cb a2 6d ab 6a ab b5 db d1 6b f3 Data Ascii: RIFFWEBPVP8L/?,$gafl.hy>G3RYsSjT3[ZEDed#s8jTfnVn@E]]0gZJAQEePrQA?'W(lvcmm\|~mmbIM,mjk
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 6b 8e cd ce 01 9a b1 55 6b 79 a1 77 8c cf 42 e8 0f c9 ff 73 98 25 6b 35 b7 b1 f6 98 a8 de 55 32 77 f2 28 1f 4c 6c ce eb 33 ec 75 34 5b f1 22 07 d3 2b de 85 b1 84 14 79 6b 0b b9 ea f4 2d 0f 2c df 7d f6 f8 dc fb a8 42 07 7d 11 1e a7 36 2d 30 22 88 6d 58 0c cf 9f cb 01 83 30 e3 99 c0 4f 02 bf 2c fe b2 9d 1b 66 d6 c0 71 e4 58 4a 6c d4 f0 2e dd cb eb 2c 59 bf eb 5d 27 d8 16 54 d9 b9 db b9 ab 30 96 93 22 ed 9f 12 bd cd 20 ec 98 42 1b 10 82 73 9f 25 fc 59 41 c4 36 ad 7f 93 2c dd ba bd cb ca a3 67 e7 67 6d 04 bc 82 14 e7 1e 5f 9d d2 58 56 8a f3 bc 65 af 32 b9 ad 14 6a f2 9c 34 33 e6 38 15 9a 43 22 8c d8 fa 4d fe 32 6f d2 d9 c3 a8 ca 43 3a a9 b1 28 39 b7 b8 84 e7 40 d4 cc 9f 3d bd c7 41 f7 57 d2 35 34 3b b7 04 0b 1b 96 3d 7b 8d d9 63 c7 96 44 b9 29 74 f2 d7 38 0d Data Ascii: kUkywBs%k5U2w(Ll3u4["+yk-,}B}6-0"mX0O,fqXJl.,Y]'T0" Bs%YA6,ggm_XVe2j438C"M2oC:(9@=AW54;={cD)t8
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 6a b2 04 56 d9 ef d0 5c 9c 53 95 68 3f a6 0e 33 a0 d1 f0 36 2d 34 dc fb 0c e1 fb d9 34 b3 7c ef 41 ef 53 5c a8 f6 e1 02 a5 9e 20 9a da be 91 58 b4 58 73 1d 5a bb db db ce e9 ce ef 24 18 55 fb 68 2f ce ed 96 a8 ce a4 99 21 23 d1 35 c4 e8 b8 77 36 aa 78 d1 ce b4 ce 2d 05 8f a9 7b 6d ed 74 0e 32 61 a9 a3 b5 37 b2 2a 4b c3 72 e8 f4 a7 80 0a 9b 7c a5 d3 ce 94 e6 92 96 6a 1e fb 50 b8 fa 48 c7 6e 7d 4b 4b 21 80 9d ee b5 05 e4 dc e3 ab 93 7e 36 96 72 ba a2 c1 75 ca 5a 05 68 70 ee 93 08 a0 b5 bd 4c 70 e7 16 f5 60 9b 2f dd b8 19 18 ab e5 ad 1d 01 74 89 34 21 d2 9a 5f 5c 02 5b 71 40 53 f2 6d 61 c6 c9 b2 74 48 47 f8 98 12 e8 1a 6d 42 c8 b9 25 70 ae a5 30 9f 49 a0 b5 83 d4 b1 ec cf 9f b9 60 de 2b b8 dd 92 31 5d fd 2d 4c 3b 4f 05 14 d7 1c d7 c1 0c cd 9a 4e 1f 3e b3 92 Data Ascii: jV\Sh?36-44\|AS\ XXsZ$Uh/!#5w6x-{mt2a7*Kr\|jPHn}KK!~6ruZhpLp`/t4!_\[q@SmatHGmB%p0I`+1]-L;ON>
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: d9 09 e2 98 65 7b 7c aa 73 4f a8 49 c4 f7 10 aa 1b ff 1c 1c 4c a3 ef 43 b5 2a f0 e9 19 37 a9 69 27 51 24 df 05 b1 a3 1b c1 d9 f1 6e cb 74 ee 37 47 aa 68 3f 46 c9 c9 3d 2f 86 8a 59 4f b5 a3 69 5d 1b cc 15 20 ce dd de 53 e1 34 fa d2 17 c4 a3 c9 0e 0e 74 75 96 05 4a 30 45 72 07 15 62 88 76 d4 3b d1 03 2f 90 8f 3b f7 41 48 6b 7e 08 95 92 2b d3 07 e5 e1 dd 2e ae 73 5f 2b cc c2 85 8a 38 f7 11 71 ea b0 42 a0 8a 6a 33 42 07 f3 8b 48 6b 9e d1 b3 2b f8 99 7a 9b e9 89 74 02 30 db 2b 60 07 d3 3d c2 22 76 f4 da 4c e7 ee 95 e0 71 ae 10 a8 a2 9a 00 54 fc cc 0b 04 03 f1 11 67 3d f0 02 5d a2 83 e9 e0 a5 00 e7 f6 af 00 e6 5a 91 d6 fc e9 2a ce ed 01 6c 74 00 cc bb 20 76 74 30 d3 b9 77 bc d3 3a 98 8f 47 aa e8 ae 55 4a ee 01 8a ef 10 61 47 13 ea 12 e2 67 c3 72 26 62 6b 2e 3e Data Ascii: e{\|sOILC7i'Q$nt7Gh?F=/YOi] S4tuJ0Erbv;/;AHk~+.s_+8qBj3BHk+zt0+`="vLqTg=]Zlt vt0w:GUJaGgr&bk.>
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 20 b8 7a a8 67 50 84 73 77 0e 30 cc 2a 9a da b6 45 bc e1 62 1d 7c 94 53 ce 13 ac e5 49 89 c3 1c 7f 80 d9 33 f8 9e 88 73 0f cf 9b 15 06 cf 06 61 a9 a4 3b de a6 0e e6 fc 12 1a 29 61 e2 3a fd 31 21 10 e1 dc 8f e9 60 1e 93 e9 dc 0b 97 af ae f1 a6 27 d2 95 4c f7 24 3b 6d 68 23 96 3c 56 38 e6 4e 9d fd 73 be 73 8f 2c 5a 98 3d 83 1b 11 e7 be 4c 27 21 1b 32 e6 49 22 08 d9 41 09 af b1 0a 23 0e 20 d8 f5 55 87 f4 0c 52 9d 7b 62 7d 16 c1 ee ef bb 82 b7 3c a1 2e 33 e8 8f 8d e8 62 74 a5 30 2b f6 1e ea 81 63 3f 0e 89 a4 04 2e 25 e2 2d c7 8e c1 9b ad fe 60 e2 30 c7 7e e8 08 f5 0c 32 9d bb a3 af 16 c1 00 6c 0c 78 cb ed 5c 25 a7 18 bb bd e9 b0 56 1c 7e 37 ce 8b 22 3d 83 cc f9 d6 f8 77 23 82 0f 34 3c e9 9a 39 b0 73 38 79 8a 39 f7 25 c3 cc 9b 3c a1 9e 41 e2 7c 6b 4c 5d 2e 28 Data Ascii: zgPsw0*Eb\|SI3sa;)a:1!`'L$;mh#<V8Nss,Z=L'!2I"A# UR{b}<.3bt0+c?.%-`0~2lx\%V~7"=w#4<9s8y9%<A\|kL].(
2024-04-19 14:06:58 UTC	541	IN	Data Raw: 86 77 f6 5e ce 6b 99 d2 59 8e 5f ad c1 b9 a7 b6 15 b1 d3 32 b3 47 ae f8 c5 9c 07 b3 7c ef a9 77 8d d0 fb a2 cc 26 b1 d3 32 33 91 57 ff 1b 16 dd 03 5d 6e d8 d3 73 10 3a 25 49 1b 7c cc 21 ce ab 99 35 bc 6f 0e c9 d3 73 90 39 25 49 93 b7 b5 55 ce cb 69 65 2a 98 df 34 db 49 61 91 d3 32 b3 e1 a9 6e d3 79 3b b7 b9 29 a0 35 9a e0 61 24 4e c7 d7 e4 ff e9 bc 9f f6 ce da 2f 58 5a 28 d0 b9 6d 76 41 5f e5 ca 41 e6 4e 9d db a9 60 ce 66 b3 d8 fd 7d 27 cf b9 93 a8 47 88 73 e5 22 c3 b2 27 13 58 ef 39 b7 c9 f7 f8 dc 5f 81 2b 23 e9 e4 a9 a3 c4 7a cb b9 4d 7a 2f 53 3b 8b 2b 2f f9 f5 a6 3a 2c af d6 37 3d 07 2d 3f e4 76 9f c4 95 9f cc 9b 3a 77 ff d4 e7 85 ae e9 39 e8 f8 8f 07 f5 47 04 57 9e 32 7b e4 d8 fd 53 97 e3 4f 63 36 cb 71 6e 93 c5 7f eb ca 57 e6 4e 9e 95 da cc 0f 2d 7f Data Ascii: w^kY_2G\|w&23W]ns:%I\|!5os9%IUie*4Ia2ny;)5a$N/XZ(mvA_AN`f}'Gs"'X9_+#zMz/S;+/:,7=-?v:w9GW2{SOc6qnWN-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	50122	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1102	OUT	GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 23302 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:06:58 GMT Expires: Sat, 20 Apr 2024 14:06:58 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	724	IN	Data Raw: 52 49 46 46 fe 5a 00 00 57 45 42 50 56 50 38 4c f1 5a 00 00 2f ff c0 3f 00 09 89 6d 1b 09 92 84 1a 69 eb d6 b3 9f 7f c2 55 d3 3f 21 44 f4 7f 02 00 05 f0 19 27 e0 04 58 40 a2 56 31 0e e1 ce 16 1e 3f 51 4e de f4 18 14 ba 3d 62 e4 09 01 b4 ea 0c c4 2c 14 33 39 00 45 88 cc f4 57 0e 3b d1 06 90 3d 49 4e 20 d1 6e d5 27 76 d7 72 8e d8 32 fd 95 a7 54 c5 bd 99 fd 1f 50 d7 1b a5 32 d8 d8 3c 28 25 09 0f 3b eb e7 6f 94 2a ef b4 bf 2a ab 94 07 cc c3 a7 03 e3 b2 aa fe 01 bf 91 ed be e9 a6 6a b1 aa 0a ae ab 2e 40 f0 7b df 4c 47 b4 8a b3 e7 de a2 00 bf 61 ab 08 5f b8 1f b4 4a 5d c0 2c dd 0d 5e 55 17 90 39 a2 0f dc 00 55 c5 63 ac aa 25 0e a0 a1 00 fa be 6f 40 f1 71 03 1a ec 76 22 6f cc 2d e8 92 83 7b 4b 86 b8 07 b3 1d 3b b3 08 82 2f e0 8a 12 e4 85 a0 11 89 f2 7d 43 14 d5 Data Ascii: RIFFZWEBPVP8LZ/?miU?!D'X@V1?QN=b,39EW;=IN n'vr2TP2<(%;o**j.@{LGa_J],^U9Uc%o@qv"o-{K;/}C
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 97 77 b6 73 c6 0b 7a 6d 6d db b6 6d db b6 f6 76 e7 f9 ef de 3b 0b b4 d6 fa 5a e7 3c 07 02 7a ec c1 ac ac 46 8a 05 95 0c 75 15 69 82 63 41 97 da fb 55 76 e1 62 8b 66 27 aa 0a ab 16 34 d6 95 d9 71 a1 a3 66 46 f3 62 b2 4e cc b4 6d e3 8e 3f e0 7d 21 c8 b6 d9 4e 74 7f b9 c5 04 d8 91 fe 5f 91 bd e5 8f bb c3 8b 46 90 41 e6 9a b9 43 6c 6b 70 c8 60 01 ba 09 cb 1c 32 77 77 8d 88 dc dd 1d 6e 4f cf 39 3d 2c e0 b3 01 c2 6f 9d 6a e4 ac a0 91 a9 a9 53 f5 ca 5d c1 54 4d d4 78 48 e6 f2 8b d8 41 57 67 9d 53 e5 dc fa c5 48 fa 16 da cb 98 98 22 a5 c8 86 c0 95 24 c9 a6 55 f5 6c 7e bd fd ef cc b6 d9 6e 63 db 56 95 7b 71 0f dd e9 c0 1d 3a a0 00 a7 15 aa 81 4c 3b 70 97 d8 dd 21 72 e7 c6 04 fc df fe ff c0 7f a3 f8 af f0 5f 43 74 f4 3f f4 df f1 5f 33 fe 6b fd 57 fe 97 fe 8b 72 e4 Data Ascii: wszmmmv;Z<zFuicAUvbf'4qfFbNm?}!Nt_FAClkp`2wwnO9=,ojS]TMxHAWgSH"$Ul~ncV{q:L;p!r_Ct?_3kWr
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 39 8f 3c de 73 cb af b8 47 eb a5 a3 51 44 10 21 25 19 36 4b d6 c8 35 d6 b0 64 8d 73 1f e7 b0 d4 5e e6 b9 56 cd 32 cf b5 6a 96 79 26 7b 99 d6 5e b3 4c 6b ac 61 c9 65 c9 1a 36 8b 8d 88 ec 88 10 41 87 ae f6 8e ea af a7 2f fe fd 18 cf f3 90 35 72 59 a4 0f 16 1d 4b 47 db c3 6b 5b 36 82 70 59 7f 8f af 51 1d e7 7d 56 94 0f 67 1a a9 14 8f c8 ed fd 25 ef 5d d5 14 81 10 22 64 86 94 23 05 d6 a8 32 6b 50 18 55 46 ca cc a5 94 4c 2b 0d 99 56 1a 32 2d 46 ce 62 e4 48 28 8c aa fd 64 d6 a0 ca 4c 64 1a 1b 42 8b 10 82 6a 75 37 6b ab f2 6f b3 cf c1 c9 cc 24 f3 da 65 dd d5 76 77 cf d7 3d c7 f4 da b4 3e b2 73 0e ec ee e6 5d f9 e0 4a 23 8b e7 61 74 8c f7 41 75 85 70 d9 12 36 56 1a 63 19 ab 18 95 63 31 97 a1 12 ce dc ec 69 9a 61 f2 98 19 c7 64 ce 8c 63 32 67 c6 31 99 2a bc cb ac Data Ascii: 9<sGQD!%6K5ds^V2jy&{^Lkae6A/5rYKGk[6pYQ}Vg%]"d#2kPUFL+V2-FbH(dLdBju7ko$evw=>s]J#atAup6Vcc1iadc2g1*
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: d6 db 0f d9 ae 46 44 a1 0e d8 e5 52 ce 4a 4b d2 22 5a f5 bb ef 87 10 63 ad e9 1f 87 6c a1 83 54 b0 17 fb 60 27 4c 44 68 f4 4f 2c 3f b9 8d 2d 7d f6 a7 a1 ca c8 52 aa e6 92 05 a5 7c 70 73 b9 d9 ae 6c 96 cb cd 72 b9 59 2e 37 cb e5 66 bb b2 d9 5c 8f be b8 39 ab ca 2c 6a 95 91 35 94 e8 60 8b 67 4b d2 46 13 11 9a b4 c2 48 45 99 46 64 a4 0e e2 08 ef 3b f3 dd 5d a5 8f 0e 44 e5 8e 5a ec 6b b2 42 2b 11 a9 5d 56 fe 86 b0 b1 e7 67 d6 c6 ac 2c 0b 8a 72 33 6e 6c 5e 2e 2b 5f d8 54 fe 4a 5b 9c f1 2b 6d 71 c6 af b4 c5 19 bf d2 16 67 bc b0 a9 7c b9 7c 6a 97 db 8d ad a0 58 cc 5a 35 0f 73 77 e4 88 e1 bd 45 fc d9 86 17 32 ba 5b 88 e2 2d 7d e5 34 94 ca 61 08 19 ad 1d ac 3a 22 08 22 ad 71 aa 5a 24 16 21 88 f0 d3 8d 94 5f e4 31 0c d4 2a 0a e5 5f 18 2e 37 cf 11 6c 87 e7 f8 14 db Data Ascii: FDRJK"ZclT`'LDhO,?-}R\|pslrY.7f\9,j5`gKFHEFd;]DZkB+]Vg,r3nl^.+_TJ[+mqg\|\|jXZ5swE2[-}4a:""qZ$!_1*_.7l
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 79 94 8a 26 53 6e fd 95 72 e6 53 28 a3 d6 5e ec 4b 49 46 de ba 19 04 9d dd eb e7 9e e6 81 e0 75 71 59 14 a3 62 d8 62 fa 4f 22 56 4b af 39 c7 ae 5c df 2e 82 e3 f0 8a fb 70 e4 6c d9 68 97 79 63 2c 19 6b f7 ec 9d da 3d c3 e8 38 f3 30 7f 7a fb ba 1f dc 1d d1 41 a8 e8 70 d9 c2 65 0b 97 2d 5c b6 80 8a 0e 42 45 07 65 fb ba 1f e6 4f ff 5b 6e c1 8a e1 19 a6 93 67 21 59 79 ed 6a b7 f0 16 5e 2a bd a2 da 73 bb 16 50 73 29 bc 3a 32 f4 4f 7e 1d a1 9e b9 ca bc f6 62 93 46 18 8e fa b3 25 9e 02 e1 72 b8 9a 32 05 0c f6 17 67 6e 0b cf cc f0 3e 8e a8 7b e8 0a dd a1 03 1d 3a 82 08 1d 41 84 8e 20 42 47 10 a1 23 e8 d0 81 0e 1d dc ef a1 8f 23 aa c2 fb b9 c5 bf 67 a6 ee 75 ca f2 22 61 7e 28 20 4c db 56 ac ea 0e 3b 09 ed b2 26 8b ed 68 b6 08 a8 89 72 75 b3 bd e2 9b ba 57 fd bc 7a Data Ascii: y&SnrS(^KIFuqYbbO"VK9\.plhyc,k=80zApe-\BEeO[ng!Yyj^*sPs):2O~bF%r2gn>{:A BG##gu"a~( LV;&hruWz
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 26 b5 46 79 bd 04 e5 bd fb 5c e4 fb d3 e7 fa 66 4f b3 3e d9 d3 ac 4f f6 34 eb 93 3d cd fa 64 3f 7c ae 6f eb 37 c4 8a a8 df 10 a2 bc 34 fe 68 3a 0e d1 8a 15 78 d7 aa af 35 ec 96 91 3b 32 96 d6 11 d1 47 5b f7 d8 c4 6f 5a 55 9f 6b 8c 8b 74 19 6c c7 e1 70 35 ad 71 5a eb 29 84 28 d7 83 84 3c 27 e4 4a 0a 8b 80 08 d1 88 e4 d5 c4 d1 15 25 b6 52 74 ad 1c 23 e7 9e 47 9a 0f 2a 96 4c 2a 96 4c 2a 96 4c 2a 96 4c 1c 69 3e e6 67 3e 73 54 a6 7a 96 8a 12 db d1 f5 09 a9 9b 88 10 2e a2 82 b6 6a 99 29 97 61 17 22 23 11 42 df e5 b1 85 af a4 72 59 3e 9e 24 6b 1c bb ad 44 47 53 2d 90 21 ad 31 ea c2 c8 9a 54 10 25 44 0b a1 b3 25 f5 59 1c a1 1e c7 94 51 25 3d f2 f1 c0 9c aa 94 2c cb f5 e5 fa 72 7d b9 be 28 59 b5 4a e5 9c b6 87 4c 8f 47 54 e5 31 ad 50 9f 45 e9 ea d5 9d 22 44 07 0e Data Ascii: &Fy\fO>O4=d?\|o74h:x5;2G[oZUktlp5qZ)(<'J%Rt#GLLLLi>g>sTz.j)a"#BrY>$kDGS-!1T%D%YQ%=,r}(YJLGT1PE"D
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 90 73 48 43 0e b7 ff 89 cb 10 9e 81 e7 de 91 f7 56 e3 6d f6 9c 3f e4 cb ed 62 55 99 6b 65 c4 33 df 87 68 9f 0c 94 9e 6b 55 66 e6 60 8c 9c 6a 87 a8 e8 a0 7f c4 4b 1d 8f 3a 72 a7 28 ff e4 af 8a ed 07 ee 74 fd e8 ce 35 a5 89 f2 4f a6 24 59 99 72 51 59 aa 52 55 a9 4a 6b 2d 55 e5 a8 52 95 aa 4a 55 5a b9 e4 da ad 69 24 52 7e e0 66 69 f5 39 fd fb 73 ff f1 d3 da 08 cf ed 69 c3 e6 66 99 1e 69 46 76 95 38 9a 46 1c 81 2a 16 56 e5 be 08 57 5b 1c fa 58 f3 51 1e 7b 4a 1f 0c 92 03 0e 79 66 76 7e fa 6f 6f 5b 50 ee 3e 98 57 32 8b cc b1 56 8c 5a 35 57 05 8c 38 e3 61 18 51 31 b1 7f 9d 86 61 c4 19 0f c3 88 0a 56 cd 25 7e 99 2a 6b 40 e6 9f 1b 09 e1 13 a7 cb 1f 53 ff 1c 5e a3 78 6e 65 bb b2 51 94 5a 73 cb 99 db d2 41 45 36 51 21 d6 5c cb 9c 95 94 e8 2b e5 fd 69 0a f6 ca 52 6e Data Ascii: sHCVm?bUke3hkUf`jK:r(t5O$YrQYRUJk-URJUZi$R~fi9sifiFv8FVW[XQ{Jyfv~oo[P>W2VZ5W8aQ1aV%~k@S^xneQZsAE6Q!\+iRn
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 9a 44 74 77 6b 62 23 43 5a 14 a5 a6 07 33 1f 73 66 96 0a 2c 21 4a 94 10 dd 41 08 b4 b0 75 e8 08 5b 87 16 02 2d 04 c1 21 38 88 8e 77 61 95 f1 c8 87 95 35 2b a7 52 43 b1 c9 8e 08 11 ad 0b 1d fb 57 4c ab 8e 91 35 a4 74 59 bc 63 69 3d 7a dc 09 f1 11 c7 fb 24 3b 03 87 8f d6 58 52 88 f7 f4 ee 6e dd 21 08 04 d6 28 92 65 a6 ac 95 54 96 22 94 10 1d 2e a3 c3 65 b4 9b 99 46 36 3f 69 64 fb 27 03 41 07 42 8b 26 b0 4a 3d 4c f9 50 d2 a3 a4 3a 8d 4d 0a 1d 81 d6 9a f9 15 b3 ab 58 8c 74 bd 88 e9 75 ef 57 f5 37 1d 17 a1 0f 1e ee e3 2b 4c 97 79 91 c6 c1 f4 7d f6 c1 dd 3b 84 a6 db d2 46 19 c5 54 e7 5c 66 ca 29 02 07 11 ba 43 6f b4 8c 5e 49 67 f4 73 11 8b f5 d4 5b bd ac d0 5b bd ac d0 b1 58 4f 1d 8b 95 f8 61 25 1d 6d 1b ed 32 02 a1 a2 cc b4 ab 34 96 a9 4e 43 8a 95 3a ba 31 95 Data Ascii: Dtwkb#CZ3sf,!JAu[-!8wa5+RCWL5tYci=z$;XRn!(eT".eF6?id'AB&J=LP:MXtuW7+Ly};FT\f)Co^Igs[[XOa%m24NC:1
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 99 de 38 8a a8 f9 fa 4c 1e 52 4b fe 87 80 57 2a a8 e8 38 f2 c8 a3 0e cf f3 50 af fb 3f d6 ea f2 f3 9e 72 f2 33 67 d4 17 fe 33 a3 be f0 9f bf 23 77 7e de 6f f9 56 7f fa af 7b 8d 23 aa 38 8e 43 04 5c b1 a0 22 e4 43 93 ba d3 29 54 cc 1a 88 24 b7 1f b2 5d 0d ca b4 72 57 55 2c 68 81 32 67 c6 a8 ac aa 68 ff f6 ee 0a d7 8b 5a f3 51 ec cb ed 16 a5 33 c6 96 15 1d 35 ea 28 b3 24 ae 52 32 12 74 ad 3a d2 30 de 72 fc fe 4d 44 cc 3d f9 ac fa f1 47 7e d6 69 9e 52 9d e6 29 1d df 3f 16 9f c7 f1 23 cd cf 6d 9b f3 6f 3d 7d a7 37 77 8d 04 7d 0e 8d eb 1d 9c 98 6a 54 15 8a 78 b6 24 6d 04 51 41 9a 8f 5c 06 32 b2 31 d5 61 3c 94 dd af e8 8e 0e 21 ca ce 94 ec 2b a9 d0 1a cb 6f 8c 4f 1b 99 ef d3 52 dd 42 4b 1f c6 ff 40 bf 5f e4 fb e0 f7 f9 3c 3c a7 59 2b ac d6 71 84 03 0e 0e 38 38 Data Ascii: 8LRKW*8P?r3g3#w~oV{#8C\"C)T$]rWU,h2ghZQ35($R2t:0rMD=G~iR)?#mo=}7w}jTx$mQA\21a<!+oORBK@_<<Y+q88
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: f9 b3 f5 2b eb fc 8b f4 df 79 23 e0 fb 1b eb 77 ef c3 7b 7e 80 55 83 8d af b4 bf a2 ad b7 36 50 ae 6e 36 db 33 7f aa 0c ee 9c ae 26 12 c5 c8 91 f9 fc 8a 8c 46 4d c0 90 0b 76 a4 e9 21 f1 30 25 1e a6 34 b1 4b 94 61 34 b5 db 57 ec 41 96 bb fb 60 f9 60 f9 db 33 77 55 c5 f3 06 d2 2e 60 b3 d5 7c 7f d6 6f b9 5d 3a fc 8e 6f f3 9d f2 d3 ed c2 50 19 2f d1 23 b6 e0 ae 88 66 fe 5f 32 e0 41 50 2a 2a a0 a2 02 2a 2a 28 0f 2b e0 81 ef 36 44 a1 bb bd b7 6d d3 dc ad 90 48 e9 ea 11 2d cd e9 69 62 b3 b9 ba ea 02 67 4b cb e2 f2 4b 57 a5 df a7 c3 e1 e6 b2 63 55 98 de 19 e8 6e e2 27 bc 21 1c d3 88 b3 11 32 ba 09 a9 9b 90 ba 21 38 c0 24 8c a6 36 74 eb 9e b6 8c 9c e3 a5 94 61 20 83 8e e3 78 3f c7 ce 3d 97 d6 17 77 e6 fd 4e a8 a5 66 84 3d 8f 32 75 7a fa e8 c0 aa 11 19 44 47 5f 46 Data Ascii: +y#w{~U6Pn63&FMv!0%4Ka4WA``3wU.`\|o]:oP/#f_2AP****(+6DmH-ibgKKWcUn'!2!8$6ta x?=wNf=2uzDG_F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50126	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1102	OUT	GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4004 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:29:11 GMT Expires: Sat, 20 Apr 2024 13:29:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 2267 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	722	IN	Data Raw: 52 49 46 46 9c 0f 00 00 57 45 42 50 56 50 38 4c 8f 0f 00 00 2f ff c0 3f 10 1e db fe 3f ab 76 db ac eb 3c 42 1f a0 af d3 4f ef 7b 97 98 ed 72 1b f0 39 47 70 f6 ac 32 73 fb b4 06 9d b3 f7 7f cd da bb dc 35 f1 29 83 ec 32 4a 0a f3 91 c2 cc 39 ce 18 83 ca 52 65 0c 33 4d 58 0e 48 8c 64 5b b5 55 69 eb bb bb 0b bc f7 ee de 33 e7 3e dc 1d 82 40 76 24 49 8a 64 a5 a0 a7 c1 53 ee 49 c1 ef 7d d1 31 33 0c ef ee f0 b8 04 48 92 4c db fa b6 6d 9b 0f df b6 6d db fe cf b6 6d db b6 6d db b6 df b7 79 0b 16 24 5b 55 a3 73 cf 14 98 d7 8a 65 b2 c6 28 5c 7f 53 e3 c7 2f fc d7 4f eb c8 25 33 5d b2 ee cb af ed a7 e1 ba 87 98 97 16 c1 dc c3 d4 cb 9d e4 e1 11 40 08 f4 f2 20 79 92 ac 08 66 5e 1a a4 37 a4 9b 9f d1 51 77 16 51 97 4c 6f 44 b9 64 35 b5 db 5e ba a4 20 42 79 ab ca df e4 8a Data Ascii: RIFFWEBPVP8L/??v<BO{r9Gp2s5)2J9Re3MXHd[Ui3>@v$IdSI}13HLmmmmy$[Use(\S/O%3]@ yf^7QwQLoDd5^ By
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: ee 31 73 7b 10 a3 27 db 85 5e 0f 8b f9 51 45 3b 33 85 18 ed 61 4b 22 6b 0d 44 16 92 71 22 35 88 6a 8c 26 e4 ee d4 9a 08 5b 77 7c f6 de bb fe b1 c2 85 08 ed 92 a1 84 6e a9 0d d6 ef de b0 2a 67 ac dd b8 fc 59 b0 fc a5 b1 12 9f dd 65 e6 74 ba fe 5f 1f ac df bd 66 55 4e 59 9d 33 86 ab 73 2e 98 98 46 01 d4 9f fc 97 85 2c 34 5e d6 8e d1 52 2f 0c 87 a7 e4 84 ce f2 20 00 5a e6 5c 32 84 81 8a b6 65 d6 6a 86 e1 f0 94 1c d3 5e ec 40 9a 90 16 5e 45 39 30 49 4f e1 4a ed 30 1c 9e 9c 63 da 2f 77 20 fd 81 af 11 0a ad c9 72 aa cb 44 bd 10 c2 46 08 0c 5d af 19 7a ba f5 a2 03 e6 dc aa 92 c0 cf 78 a5 5e e8 63 dc 13 e4 91 a0 7f 68 b6 be 18 0e 97 c7 56 3d 28 9b 4b 84 43 6e 6f 8c d1 62 35 c6 70 38 98 a8 91 11 77 b9 64 28 a7 cd 2d 13 11 db 16 22 16 8a 72 d1 ed 19 ee 13 c7 59 20 Data Ascii: 1s{'^QE;3aK"kDq"5j&[w\|n*gYet_fUNY3s.F,4^R/ Z\2ej^@^E90IOJ0c/w rDF]zx^chV=(KCnob5p8wd(-"rY
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 75 b9 64 f4 67 74 8d a4 47 72 25 58 12 c4 dc 61 84 43 50 fd 29 1b 76 af 59 95 53 30 68 26 58 85 d1 e6 fa 00 25 f9 c2 df df eb 2a 6b e2 8d f5 4f a9 69 ce 59 5a 55 fd b9 88 1b 3a ea 2c f7 2c 60 50 eb 74 f3 3d 4c 7f 41 82 2a 09 59 a9 aa 3c 5c 7b 76 82 31 c9 f8 c5 fd cf fc c0 94 f9 06 be 65 eb 13 82 aa b8 64 45 08 91 94 33 aa fc d0 8f 4f 22 55 45 28 eb bd 18 6d 9c 1d 5d 6c e2 85 8e da 8b 1d fb 30 68 f6 d2 0a 21 42 85 80 4a 52 7d aa 28 42 95 f4 9b cd 09 0e 4c b6 cd 28 70 77 af db be 66 75 4e 81 a0 42 a8 0c a1 ae 33 a8 d2 b7 33 00 fa 9b 15 3a 3a e3 b9 61 19 82 6a 97 89 00 f2 c3 39 54 d9 ae ea 2f 80 32 0e 48 b9 5d 50 b3 18 54 3e 3b 3b 88 d7 7f 32 48 04 9d ea 94 33 27 74 f4 a9 db 37 06 10 34 17 32 c5 8b 54 07 5a 06 d9 25 13 2b 53 d6 8c 50 9d 98 46 f6 41 50 e9 ba Data Ascii: udgtGr%XaCP)vYS0h&X%kOiYZU:,,`Pt=LAY<\{v1edE3O"UE(m]l0h!BJR}(BL(pwfuNB33::aj9T/2H]PT>;;2H3't742TZ%+SPFAP
2024-04-19 14:06:58 UTC	772	IN	Data Raw: 5b 24 f3 2f 26 ac ee 47 2e 91 bf d4 53 bf ab 2e 19 47 6a 95 dc 7b 90 16 42 cb 25 09 ab f3 a7 15 57 5e 50 5b fd ee 16 ed 55 ab 4a a6 24 25 64 26 67 c3 7b ee 5b 99 33 60 59 b4 9b 35 d6 ef 72 77 b8 e0 11 de aa e2 b7 99 c9 1f f6 78 5c c0 cf f1 6d c0 d5 21 2f a4 9a eb 77 db 25 93 77 04 99 d9 45 e8 c2 38 27 a5 ba eb 77 3d 84 5e b9 44 81 e5 4d 69 ab 62 ea 77 3f 0e 1d 7c 4f 91 e5 f2 76 cd 8c 69 dc 85 18 74 11 b2 ae 79 6f da 5e 31 8d bb 11 01 e0 c5 30 9a da d2 98 c6 5d e1 ae b3 a1 75 cd 73 a9 87 62 1a 77 87 f9 ab bd a7 d8 f2 8e 9e 8d 8d 69 dc 25 ce 3a 88 ad ab 2d a6 de 8a 6a dc 2d ae 5a d9 0b 5f 00 d7 f6 6b 70 dd 8f bb 96 ce 9f 83 37 ff 50 ea ab 9a 1f 77 6f 1f 3c b9 a1 3c bb bf 44 9b 6b 7d dc c5 a3 01 9a fe 44 a9 66 d7 f7 b8 9b 07 e7 f1 d8 f5 a9 9c 6a 7a dc d5 a5 Data Ascii: [$/&G.S.Gj{B%W^P[UJ$%d&g{[3`Y5rwx\m!/w%wE8'w=^DMibw?\|Ovityo^10]usbwi%:-j-Z_kp7Pwo<<Dk}Dfjz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50127	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1100	OUT	GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9108 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:16:32 GMT Expires: Sat, 20 Apr 2024 10:16:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13826 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	721	IN	Data Raw: 52 49 46 46 8c 23 00 00 57 45 42 50 56 50 38 4c 80 23 00 00 2f ff c0 3f 00 4d 38 8e 24 c9 51 22 6f f6 10 db fe 5b 0c ac 40 bd 23 fa 3f 01 e9 a4 93 4e 3a e9 a4 93 4e ba ff b9 16 b4 b1 5a 52 bb 1c 43 da b6 d4 82 4c 64 57 6d 8a a5 43 b4 73 57 ea d3 ea ba 27 96 0e d1 b8 e1 86 5b 15 aa 8c 1f f1 3a 0f 55 26 33 53 65 b6 26 aa 32 13 a3 0f a6 da 8c d1 cb 93 4b 6b 43 97 a1 95 f1 65 83 20 08 82 20 88 2f b8 90 1d 49 92 22 59 6e f7 75 fa 4b 18 f6 24 60 e6 99 a6 79 12 38 8a 24 c9 aa f2 c8 89 18 09 e5 5f 15 02 10 00 ef 33 01 29 92 24 47 52 f0 47 e9 db 62 4e df 15 80 7b f4 9f 81 db 46 8a 9a c3 ec c1 e2 27 82 22 9e f9 94 79 e8 07 32 57 32 e3 0f b0 f7 22 f1 96 bd 37 96 75 88 48 86 f1 c8 77 95 22 de 2a 45 c4 c7 7b 6b d4 5b d1 ec df 58 bf 7f 7c d6 54 1f 89 08 23 c2 2e 1b 6d Data Ascii: RIFF#WEBPVP8L#/?M8$Q"o[@#?N:NZRCLdWmCsW'[:U&3Se&2KkCe /I"YnuK$`y8$_3)$GRGbN{F'"y2W2"7uHw"*E{k[X\|T#.m
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: cc 8c 61 4e 06 33 d2 ce df 9e d8 cd c9 f5 27 e5 2a ff 71 e5 e2 01 cb 9a 52 e2 a5 ab c2 81 5f b9 5d 72 39 5a 57 62 74 e9 5c fd aa ce 55 95 d5 56 94 6b db 56 6d 2b 63 ac 23 f7 c8 77 7f fe ea 64 40 76 44 06 49 50 76 77 bf 7a f6 94 a4 6d db 5a 27 cf fb fd 49 da a4 ee ee ed 0c 67 05 0c 99 b2 16 2e 66 6e eb 60 01 2c 81 2d c0 d8 1d 2a c8 71 cd 39 f9 bf 70 c4 46 92 d4 0c 22 6c 38 bb 6b 17 98 cd f9 ff cd f3 c6 3f fa 1f 47 e0 05 80 38 a8 e7 78 96 d1 15 4e 00 ee c3 71 d4 c7 23 a5 05 96 cf 05 08 c3 11 0f e8 de 80 17 31 4c be 94 2e f9 02 8f 87 0f ff f6 42 84 7d 66 2e a1 cb 43 fc bc 43 e0 ee de 5a e3 19 b2 2a 95 a7 18 a1 8b e7 0a a8 c0 41 86 aa 78 a3 eb f3 14 38 c6 e0 61 f9 5c 95 ce 4b 88 02 74 73 38 56 ba d0 c5 f2 b9 54 5d b0 6a 94 50 f4 e5 73 55 e8 b5 17 09 17 d0 d5 Data Ascii: aN3'qR_]r9ZWbt\UVkVm+c#wd@vDIPvwzmZ'Ig.fn`,-q9pF"l8k?G8xNq#1L.B}f.CCZ*Ax8a\Kts8VT]jPsU
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 57 47 fe 1e 50 9b ef ba 7e 2b 89 19 a4 42 a3 03 c2 2d 83 14 cd c0 c5 c2 0c 46 49 4d 9c a1 6e c2 4f 3f 94 e7 96 76 bd f1 59 69 7c 2a 4b 97 b6 2a 74 bd 22 10 34 ba ed 8a d2 8d d5 e9 cc ab 5e 69 e5 4c 44 42 43 08 52 6f e1 84 ad 80 d3 77 b1 a7 6e 48 b3 db 9b 22 a6 a4 d4 cf 2d ed 12 aa 6e 8e 43 01 02 43 09 49 57 10 04 45 84 45 5e 4a 28 49 90 1c 0d 91 9b dd 7c 5c 1c 44 a3 3a d7 0b 0d 41 80 de 7b 37 53 86 e2 5c d5 27 90 c5 ce 7b ed c6 21 00 83 25 ed 02 42 a0 34 ea 1a 01 80 fa 31 73 54 64 3c e6 e5 62 42 63 d8 15 42 ea 33 aa 77 9d 5b 79 ae 47 39 33 ac 62 6f b8 aa 4e ed 81 8b 54 bd 76 36 ce 42 71 e7 a9 5c 56 30 e7 ac de 3a 0f 47 3d 66 ea 22 c2 b4 b3 07 12 d4 41 40 4f e7 96 9f ab c3 b1 9c f8 b9 38 0b b7 5d 7c 36 d7 fa 9c c2 de 81 78 29 de 5d b8 c2 b7 54 d9 a9 73 f6 Data Ascii: WGP~+B-FIMnO?vYi\|Kt"4^iLDBCRownH"-nCCIWEE^J(I\|\D:A{7S\'{!%B41sTd<bBcB3w[yG93boNTv6Bq\V0:G=f"A@O8]\|6x)]Ts
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: e2 a3 fc 7d 83 79 b9 8e e3 0f f9 5a 9e 9b 76 1d 87 4a 67 17 d5 a9 3d e8 55 74 a2 76 42 be 1b d7 07 d7 7f e5 ba 42 31 b9 ec c2 89 3b d3 8b c0 f2 94 e7 e5 aa bd 3c 37 cb 05 5f ef 42 22 57 aa bd 3a 9b 18 9f fe 3e 98 fd 9d 7d 70 5d 33 5c 05 7a 4a cb 06 58 7f b6 d1 9c 67 c2 d3 86 f0 79 b9 56 fa 56 9e 9b e5 aa 8f 7a 01 fe 5e a5 2b 40 a8 76 d7 f7 9d e0 51 3d d3 e5 49 b6 26 f3 73 61 03 c6 4a 40 0b dc 14 98 9a 19 b9 68 d4 f2 dc 4c 97 db c3 c6 41 aa 0c cb 95 12 17 6d ad 24 5b 4c 14 05 a8 9f 83 64 b9 79 84 42 fa 7c 5c d4 b5 3c b7 84 2b 30 1c 8d d5 b4 3d d8 2d 7d 96 2b 0f 17 61 42 03 0e 27 f1 c3 ae 3a 16 4a a0 b3 99 91 cb 0f 42 f7 f2 dc 94 cb d4 20 24 67 53 77 1f 3c 45 2e 09 42 ae 5c 21 42 6d 41 e3 e9 51 61 66 13 cc c8 45 ab 51 9e 9b e9 6a ab 10 d5 41 97 58 89 6a 4f Data Ascii: }yZvJg=UtvBB1;<7_B"W:>}p]3\zJXgyVVz^+@vQ=I&saJ@hLAm$[LdyB\|\<+0=-}+aB':JB $gSw<E.B\!BmAQafEQjAXjO
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: eb 37 ee 02 2f 47 84 88 26 6c e3 c0 9e 97 eb 40 07 23 ca 73 33 5d 96 cd 12 98 6a b2 5d eb f3 e9 91 d0 1e 29 41 fc fe 81 eb be 3b 98 e7 80 0b 83 a5 99 8f eb 49 c5 cb 73 b3 5c d9 a3 d1 00 15 b8 c6 90 c5 c8 7a 74 5f fd 03 29 ae 46 84 95 48 6a 6d ec 31 27 d7 8d 46 8c 92 5b d6 72 95 e4 78 f4 32 97 63 f9 bf ce 81 09 03 84 99 88 3c 6c c9 9c 5c 2b ae aa 60 04 57 2d b0 da d9 ff 54 e8 72 3b e8 dc 38 c3 aa c2 04 b9 79 90 68 9a 4a 6c 4e ae 56 9e 5b c2 65 77 c8 36 1a a0 6c 97 0b 67 ad 9b 57 1b 13 ea b7 fe 4a b6 3c b7 b4 cb d9 32 77 24 9d 28 70 01 a7 a5 7d 91 5f 43 ec 06 db cc 7e c2 9c f4 66 ea 3a 62 79 6e 09 57 2d d9 97 2d 72 85 90 d2 78 f7 31 5e 6c 32 b1 ed 26 93 48 67 12 3e 2b 97 88 d8 ca ab 3c d7 0a 3d 29 ab a6 a4 52 e4 3a 65 5a 0f dc 1a 21 51 73 50 a3 3d 3f 9d f0 Data Ascii: 7/G&l@#s3]j])A;Is\zt_)FHjm1'F[rx2c<l\+`W-Tr;8yhJlNV[ew6lgWJ<2w$(p}_C~f:bynW--rx1^l2&Hg>+<=)R:eZ!QsP=?
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: f2 a2 3d 2f 3c 23 0f f2 ab 43 65 18 d1 7b bd fd c6 89 d6 ac e3 ae 33 e6 bc 0c a4 90 26 b7 e2 5c 3d d4 85 7a 07 be f0 36 28 80 0d 29 01 ed 72 31 ea a7 14 58 ab 2e 33 da 89 cc 4e d2 55 08 a1 e2 e3 f0 b0 67 bc 79 41 e9 18 9c d8 10 64 e9 1e 4f 6c da 7e db 49 c5 04 36 8e 91 5b 71 ae e1 7c 70 0d 51 15 24 24 54 b5 36 51 19 e5 72 d3 4f 42 f8 50 08 4c 53 c5 c8 1e 38 d2 a0 92 3b 39 d7 c8 0f de 52 5c f6 53 94 13 a5 30 e6 04 00 43 c6 13 99 75 3c 9e fe 4d b2 97 81 5b 61 ae fa 2f d4 1e a0 9c 9b d8 bd 7f 03 2e aa 6e 4e f5 3d 60 4d 46 8f 5d a6 ce b1 ea 2f 63 8a fd d4 40 3e 29 84 74 e5 32 8b 2e 3c 75 be 84 7d 1a 31 9d 0b cc c2 c7 1a 8b 3b e6 fe cf 55 3f e7 df e3 61 4c 00 0c 8a 95 43 b5 74 6e c5 b9 aa 33 b1 8b 6b f0 93 30 e7 66 c4 77 f5 3f 4d d7 5a ca d6 cc 01 fe 5d 18 5f Data Ascii: =/<#Ce{3&\=z6()r1X.3NUgyAdOl~I6[q\|pQ$$T6QrOBPLS8;9R\S0Cu<M[a/.nN=`MF]/c@>)t2.<u}1;U?aLCtn3k0fw?MZ]_
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: c8 77 a5 34 38 8b ba fc b9 2f fd da b3 b4 d1 05 98 53 a8 14 4d e3 e2 f7 14 13 0f e8 8e ca 0e eb 37 1e e4 56 49 71 6e e5 ae cf 2a 3c 6f 7d 15 35 62 d0 19 fb f2 4f 82 6c 57 56 ee 38 d5 69 70 c3 ef d4 2c 07 56 63 e2 a4 01 22 69 90 91 8e eb 1a 50 0e 84 45 ff 34 a0 f2 c6 93 4e 71 6e e5 ae b7 83 09 cd d0 ee 51 3b ab b4 59 2b b6 7c d7 5f fc c0 7f 0d 55 b1 b0 36 c9 48 df 53 68 c5 b8 2e 66 bb 1e f4 bf bb 50 57 95 cd 0d ca 73 2b 77 ad 08 47 95 73 b3 3c 3b 95 a1 0b 63 81 eb a4 e7 c1 2d 7f 08 d1 42 92 8a 5d e8 55 75 32 45 23 e9 11 5d 04 34 81 6f c0 de 5a 53 e7 d1 99 e2 dc 46 70 35 74 15 ab 10 3c 54 5f 1a b0 16 b9 0a 91 b2 b1 09 86 a0 05 d0 4e d6 23 f1 be c2 c8 2e 26 3b 12 74 97 d6 b7 5a 2b 8d 37 d6 d2 dc 46 74 35 3e b9 71 55 d7 c2 55 cd 56 ad cc e5 63 33 7e 08 c0 38 Data Ascii: w48/SM7VIqn*<o}5bOlWV8ip,Vc"iPE4NqnQ;Y+\|_U6HSh.fPWs+wGs<;c-B]Uu2E#]4oZSFp5t<T_N#.&;tZ+7Ft5>qUUVc3~8
2024-04-19 14:06:58 UTC	857	IN	Data Raw: b6 d0 02 6d 25 e5 08 5c fc 26 60 a0 08 53 1a d3 f1 c1 10 a8 bf fe 7a 52 f7 21 a4 7e 52 d7 21 0e b7 0d e3 92 e5 ba 8e e3 da 7e f2 89 77 57 be 9c 14 63 18 dd 61 ba 02 06 33 80 9d fe 1b 3a 5f 07 45 a2 22 16 9c de 23 06 44 30 66 2e 45 ae 27 b5 cc b5 f7 d6 ba bb 3d 4e 51 f0 1c 4b 0c 7f b2 4a 84 3b b9 0d 5e 3f 84 b7 37 ef 90 df ef d9 77 10 c6 80 9c c2 a5 84 03 c7 13 2f de f4 a4 64 14 97 c9 5c e2 6c 76 20 32 74 b2 f0 c9 71 ce 8c df 04 41 7a 16 9c ca 04 dc f2 27 bd 29 fe 77 1b bf f0 f2 ad 3f 2a c3 44 bb 84 65 74 57 7a 6c ba 1b 0d 88 18 9e 36 88 cb 94 2e d7 8a 7b d6 08 d8 57 28 73 5d bf 07 7f 90 f2 5e a7 78 19 75 5a 15 82 01 33 0f 90 d6 9b f0 19 77 17 21 04 e3 b8 0e 07 f9 ca c6 89 5f 78 e3 d5 48 d9 a4 df f7 e9 b8 12 bf ef a0 67 cd 20 e5 ae da 1a 36 77 d3 b8 ef 31 Data Ascii: m%\&`SzR!~R!~wWca3:_E"#D0f.E'=NQKJ;^?7w/d\lv 2tqAz')w?*DetWzl6.{W(s]^xuZ3w!_xHg 6w1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50128	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1100	OUT	GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4932 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:16 GMT Expires: Sat, 20 Apr 2024 11:17:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 10182 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	721	IN	Data Raw: 52 49 46 46 3c 13 00 00 57 45 42 50 56 50 38 4c 30 13 00 00 2f ff c0 3f 00 09 87 8d 24 49 8d 76 a6 f1 37 ce 3f 62 c4 32 12 01 44 f4 7f 02 e6 09 25 e9 cb 67 a2 46 92 e8 b6 d3 cc 8c 2b 8f 9d bf 6e d3 69 70 17 5a 86 94 85 cb ca b6 97 0d d1 6a ad d1 d6 4b 34 97 ef f1 a5 24 99 ad 92 4e 82 bb 7c 6b 22 65 7d dc 45 b4 60 ca bd e0 f2 b7 05 4c 59 b8 0b 2d b3 80 1d d9 b6 69 ab 9f 6d 7b 07 f0 fc c5 fc a3 b2 16 ea be 00 dc 46 92 a4 48 79 7c 22 3f ff c4 88 e7 bf 49 6f 01 83 e8 36 92 24 45 ca 88 17 f1 98 a1 e3 a5 f7 df a2 35 61 4d e8 ff 04 e0 3f dc 1c 3e ab 86 4d fd bb fe dd fb d5 43 4c f4 43 7b 7d 5f aa b0 68 00 f3 a5 cf b5 6e 3a fa 97 db 72 f9 7e b2 54 6d 2e 1d 7f 26 fd 66 9a 37 fb cf c3 ff 77 df 77 f2 e0 a8 6a 1e b5 41 72 5d 33 48 93 ee 43 61 40 b3 43 36 89 d1 44 c8 Data Ascii: RIFF<WEBPVP8L0/?$Iv7?b2D%gF+nipZjK4$N\|k"e}E`LY-im{FHy\|"?Io6$E5aM?>MCLC{}_hn:r~Tm.&f7wwjAr]3HCa@C6D
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 3a 93 0c 19 5e 19 21 1d a5 45 c1 1b 46 28 98 e9 cd 24 88 f4 b4 51 77 e2 b1 6f 7d b5 ce 35 18 c5 07 00 53 c9 3d ec e8 b1 6f ff 64 76 33 55 af 98 92 f0 b5 38 92 7d e0 be 51 f1 17 79 de f1 d8 4f ae ae df 45 a4 47 0f 89 66 b9 5b a3 bd c0 2f 00 00 0f 10 1c 78 25 8e cb ac 36 df d7 7c b3 79 10 4c 01 de a8 2b 17 12 f0 a0 51 3f b8 5e 59 62 77 1f bd d2 be 42 d2 c3 77 70 5c fc 10 01 c0 53 c6 33 1f 8e 8b 3b d9 03 10 12 38 66 3a c5 f4 8d 03 40 28 ee a4 ac 30 cc 73 e4 3a f8 01 00 00 a4 03 b8 2f 4e 26 99 22 32 9a 24 02 00 02 e1 91 fb 81 8b 44 fe 00 21 ba 0d a1 e4 ca f5 d6 07 9b c5 7f 39 4f 8e 9b e8 fc ea b3 46 7b f4 b2 bd 6e 59 5d 58 d9 82 27 7b 61 db 5d 67 bd 0e 56 98 9f 5e fa f8 58 17 2f 6d f2 a8 88 4e 2b 6d 6e 5a 6d 6f 43 cb ad 4e 49 a2 61 11 f8 2a 9f 6e ab 3d b1 33 Data Ascii: :^!EF($Qwo}5S=odv3U8}QyOEGf[/x%6\|yL+Q?^YbwBwp\S3;8f:@(0s:/N&"2$D!9OF{nY]X'{a]gV^X/mN+mnZmoCNIa*n=3
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 53 f1 47 40 f4 77 65 ba f0 da e1 c7 44 44 f3 00 94 60 3c fa cd fb d8 f2 99 27 e3 9b f1 19 d3 3b b3 a6 99 6d 87 57 d5 1a 1d eb f7 63 53 83 1c 82 2c 51 e7 b0 71 8f 5f 5a ba d5 2f 83 ff ae db f0 c4 9d 8d 2e 46 af ff 59 a5 a4 14 e5 e6 ab 9e b8 1e 6b ba fd 9c c6 25 81 b2 54 52 b1 77 bd e3 1d 2a a1 6f 6d 8b f8 20 dd 3e ff 92 48 25 d3 a2 4d a0 b6 ca 93 ad 6c 7c a9 06 a6 6c f2 a0 49 6e 1d ce 91 3c 14 a9 0f dd 02 b6 dc 69 cd fb 0f a7 af d2 89 65 e3 35 9f 70 10 ed b8 63 20 11 00 9c bc 91 83 97 7a fc 97 c4 1c 70 b4 89 bc 7e f7 fb ef 26 a8 da eb c6 db 47 bd f8 ce b1 37 5f 6f b0 5e d6 b7 f3 c6 5d 0f df 51 9d 2a 9b 3a 20 5e c7 ea 8f 4e 11 d1 43 5e fa e0 ca 59 76 c7 75 56 ae 92 e3 5e 5d 15 18 7d 8f 08 6e cb 8e 71 bb ae 14 5c 60 42 91 6b f9 e2 9f 7f 42 b7 c6 27 4f fd 5f Data Ascii: SG@weDD`<';mWcS,Qq_Z/.FYk%TRwom >H%Ml\|lIn<ie5pc zp~&G7_o^]Q: ^NC^YvuV^]}nq\`BkB'O_
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 79 f2 99 95 60 d0 39 f8 04 80 21 a9 f5 3f c7 56 83 75 17 92 24 1c 41 17 9f 99 82 09 17 f8 cc 67 86 84 a4 af 01 d3 00 ed b9 cd a6 00 1b c0 e4 dd 76 ea 4c e1 31 a5 1b 52 d2 1c 5a fb 8c 98 82 2e 6e 08 1c f3 af a0 42 05 80 66 68 4c 32 80 24 82 7f c3 fb 17 37 84 8f 06 e2 a2 03 95 fc 83 df d4 10 ab 9e 90 66 82 74 22 12 57 31 05 04 5f ef 9d b8 11 d6 ac 44 76 bb 69 15 b9 c9 5d 3a e9 10 09 91 00 48 ee 8e eb f2 89 db 36 a3 84 d8 6e 1f f1 17 9b 50 e4 be 8f 0d 94 10 dc ee 25 31 e3 c3 12 81 e9 2d 0b 1b 02 b7 dc 8a e0 8c 51 35 13 1b 4c 68 95 f9 ca fa f2 f6 bf bb 02 3a 79 16 3f 22 fb df b7 ff fc be 64 a4 ea a4 c4 be 0c 53 e0 06 c0 bb a9 37 3d ae eb 1e 22 07 03 ca c2 86 48 5f 78 f4 2f 57 81 1d 00 54 a6 ba 27 24 e7 13 18 59 16 e4 38 cd 33 23 27 c7 a9 78 16 eb 55 00 ac 43 Data Ascii: y`9!?Vu$AgvL1RZ.nBfhL2$7ft"W1_Dvi]:H6nP%1-Q5Lh:y?"dS7="H_x/WT'$Y83#'xUC
2024-04-19 14:06:58 UTC	446	IN	Data Raw: 78 71 73 20 19 12 ca 2a 38 2f bb 3e 01 72 92 f1 bc d3 36 38 d5 46 99 c7 c1 62 0c 5e 0a 5d c7 79 4e 40 53 7f b7 34 61 d1 9d b2 ed 9c 35 dc 2a e4 47 62 17 1e 7c 4a e9 3a 63 25 e4 85 87 c9 08 8b 24 3a cc 2d c1 5e 08 25 38 4f 3b 65 7a 26 4a 3f 73 80 89 16 f2 ba b3 84 06 45 e8 14 cb 3b db 40 16 c2 21 38 ac 38 67 d5 cf 58 29 49 42 36 84 a6 24 3a b2 67 b3 d2 ee 28 14 ab bd c5 42 e3 a7 68 74 d5 af 80 7d 4f 22 c2 65 4d 99 b2 07 70 0a 51 2e e7 f6 a9 be 00 7b 2c 61 31 fe bd 7b e0 cb 95 43 34 14 c6 a6 69 ed 65 69 0d c6 b4 96 f6 25 01 87 31 02 b2 5a fa fe 8b 73 75 c1 8c ed f3 6e af fb 54 3f d0 d0 f4 af fe d4 1c 17 c6 79 e5 e0 ec f6 d9 8b 6c de fe d3 5e f1 ce 08 36 c0 d9 cb 5f a9 c0 e6 fb bf 1a 57 56 47 64 0e 51 bf 2b d9 eb 65 5b f1 a8 73 ef 25 d7 0e 40 be cf 52 00 bd Data Ascii: xqs 8/>r68Fb^]yN@S4a5Gb\|J:c%$:-^%8O;ez&J?sE;@!88gX)IB6$:g(Bht}O"eMpQ.{,a1{C4iei%1ZsunT?yl^6_WVGdQ+e[s%@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50129	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1100	OUT	GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 48322 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:21:03 GMT Expires: Sat, 20 Apr 2024 10:21:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 13555 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	720	IN	Data Raw: 52 49 46 46 ba bc 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 71 bc 00 00 2f ff c0 3f 10 4d 38 6c 80 36 6c 84 4d 09 23 ff 5f dc 34 6d b7 1d 10 d1 ff 09 00 1a 80 6d 49 c3 b6 6c 0f 7b e8 00 40 12 dd 89 6d 1f 92 e4 11 db 1a b1 92 84 64 b7 13 d9 49 24 1d d6 b0 95 c4 4e 12 b2 6c 7b 61 1f 4a 62 c7 49 86 ed c4 fc 2c 92 93 4f f1 39 5a a4 16 4e 9c 44 52 e2 61 5b 49 16 de 4e 44 db 92 e4 67 43 ef f2 02 7f 91 24 b8 2e 36 97 68 fe 49 00 13 3f cd eb e6 ba aa 58 7c bd 16 b5 57 64 6d 90 c5 35 5e e7 c3 c5 eb 7a 68 f7 56 dd 2a 92 38 61 45 dc 21 9e 9d d8 e4 c3 e0 f7 f6 6b 13 2f ce 09 cc 02 d7 20 2f 08 9e 48 a2 8a 0f 16 b7 fb 89 fd 5e e0 a9 89 ee 5e 40 8e 24 d9 55 94 f1 fc 37 f2 07 67 d8 45 eb db 88 2f 02 03 dc b6 8d 24 49 32 6b f7 3e Data Ascii: RIFFWEBPVP8XVP8Lq/?M8l6lM#_4mmIl{@mdI$Nl{aJbI,O9ZNDRa[INDgC$.6hI?X\|Wdm5^zhV*8aE!k/ /H^^@$U7gE/$I2k>
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 3c c4 38 76 59 8e 6c c0 fd 90 d3 e1 2b 02 0b 70 eb 23 e8 04 04 6f be 1b ae 55 d3 10 de 0d 86 37 95 3b d7 50 e8 2e 66 58 1d 39 39 57 ba 01 7d 8b 37 7c 8c a1 c6 85 d4 c1 8e 44 48 e1 3b 92 6d d5 b6 6d db f2 c8 63 a2 06 73 2e 66 46 fd ff 97 02 cc 8a cc 35 4a f2 5c db b6 6a db 92 6d 95 d2 fa 9c eb a0 31 a9 c0 66 2a 30 5b e8 48 6a 1a 98 00 6c 1a 58 d8 d2 09 19 2d 9a a3 15 a9 db b6 2d 7f 72 ce 5d 93 bb bf b3 b6 64 d9 87 67 27 39 54 97 ea 90 7e 89 3c 6b bf e3 f7 17 a0 f5 c7 f1 e2 ae 89 63 ee 61 02 78 2d fb 27 c9 91 6d c9 dd 43 59 a7 e7 e1 2b 8c df ff c3 cd 2b 15 ee 3d 4f eb 0b fc f1 c5 8e c5 5a e4 5a 37 46 60 58 53 38 b5 29 f5 14 47 24 ed 08 03 63 e3 3d e6 a6 09 02 8c 40 78 93 bb 77 5c 45 8a 3c 82 c4 48 0a 8c 82 ad 9e d4 c2 41 08 47 37 d1 43 a2 a4 2a 11 0e 22 f9 Data Ascii: <8vYl+p#oU7;P.fX99W}7\|DH;mmcs.fF5J\jm1f0[HjlX--r]dg'9T~<kcax-'mCY++=OZZ7F`XS8)G$c=@xw\E<HAG7C"
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 92 6e b9 28 4e e3 2f ff f9 fb f3 fe a3 fb 4a ff e4 bf cf ec c5 fd 53 72 ca 4f 7e 7f 98 fb d8 b5 4a 9f f4 76 4b 20 dd c7 25 76 cb 42 d8 44 ad c2 5b c6 83 e5 29 b3 e4 11 b2 ad 8f 8d ac 5e 72 bb 64 0a 75 a1 36 97 aa e8 97 4a da a8 e4 38 fe 49 58 f2 62 b7 37 38 bb d1 f4 f7 f8 4d 2f 95 27 e3 92 f3 52 46 54 64 bc dc a0 b0 e9 c6 67 cb 97 9e 1c 37 e5 c0 0f 76 fd 54 97 2c f6 a6 f7 2d c8 9c 79 9b b6 d5 6a af 63 1c f5 52 65 45 21 59 81 a5 dc 5a 16 f5 90 96 74 79 e2 1a ca 7a 07 ad fc b4 16 05 ba a8 a1 a5 6e 3b 49 83 80 4b bb 85 c5 90 f0 4c d9 2f 8b 3c 2c b6 d1 c4 25 aa 90 94 13 81 d9 17 37 3f 6d 4c 04 7f 8f 7f aa aa b7 08 e2 a8 07 7d 04 7f 4b 7f fa 51 bf 75 f3 e7 5f f4 a2 fc 14 9c f6 a3 df 1d 9d b6 2f 3d 34 f5 28 a5 0c 29 4a 1b 4b 82 10 9c d0 bb 9c 9d 99 3e ae b0 4f Data Ascii: n(N/JSrO~JvK %vBD[)^rdu6J8IXb78M/'RFTdg7vT,-yjcReE!YZtyzn;IKL/<,%7?mL}KQu_/=4()JK>O
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: f6 a4 75 4c 75 6c f9 3e 2a b2 5f 2e 37 8d 0c 2e 08 12 ba c8 f4 9b 91 8d 42 7f a1 9c 97 6e d9 5d 8d 8f 4b 9f 4e bc 85 cb 01 0d 60 c7 13 6e a9 70 05 a5 8c 8a f0 62 47 7a 6f 9e 77 65 96 bd 2c 8b 2c f6 cc c3 60 f1 02 a8 4b fe b8 11 3c 97 80 62 fa 96 96 4f 89 11 bc 90 51 13 5d d2 9b e7 5f 7c d1 59 2b 4e 2c f8 cb 09 6d 83 b0 45 7f 9f d6 9c 79 89 7a 9d 82 c9 79 4d 6c 6d c7 25 f0 9c 50 76 8d 7a 42 bb d5 e4 42 b5 0c 55 eb d0 2e d9 88 34 dd 8e 3c 5c bb 91 1d d1 8e bd 40 77 f3 36 e3 50 e3 81 ab 26 ed 2b 2d a7 fc e4 fb 43 17 1a ec 3e 98 f7 c9 b3 2a 53 ab 96 ce b9 43 b0 4e 3c 28 8f 29 0d e8 e4 18 4f 83 a4 e9 75 54 dc c3 78 ed 87 79 7e a7 cc 5d de 2f 77 27 38 66 a7 d3 d0 44 72 d1 ea 0d f2 c1 15 bd 80 a5 fb 7d 3d bb 5e 38 be a5 be de 39 fd c2 4b 50 85 61 2a b4 f6 27 ae Data Ascii: uLul>_.7.Bn]KN`npbGzowe,,`K<bOQ]_\|Y+N,mEyzyMlm%PvzBBU.4<\@w6P&+-C>SCN<()OuTxy~]/w'8fDr}=^89KPa*'
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: ed 3a b6 dc 7b 93 fe e0 e8 98 65 58 06 54 74 87 16 99 2b 65 8b 52 5d 44 cd c8 19 8c 64 bc 6c 63 49 49 85 a2 47 0c 84 6e c6 35 5b 6a 31 b1 97 54 5b 06 05 7b 5a e8 cc 90 be b4 e9 38 f6 1f 4a db 4d 98 b7 1c 93 33 ce 69 6c 69 10 1c 2f ca 80 0a ec 51 28 9b 32 f6 49 b0 c0 d9 7b 1b c9 95 b5 c2 c5 61 6d f4 ab b5 11 90 da a1 c5 97 8b 1d ec eb c7 05 c2 ec fe 1a 77 1b a0 66 c6 b6 57 10 84 6a c0 be bd 3f a8 2a 99 c4 fc fa 66 19 8b 2e 2e ab 20 ad 5b 16 57 c3 27 9f ce 13 1e 15 5d a1 37 10 7f 93 2c 7f 99 7b 29 43 7b 8b 23 d7 65 01 8d 67 42 09 41 66 13 e0 1b b0 39 5d 76 4e 0a 56 f8 9d 28 a8 d6 4f 7b 8d 2e 24 68 e4 92 0b 58 0e 68 05 5c de 5a 02 a1 a0 4f 51 52 88 7c 80 74 2f 13 c3 a8 49 9d e7 fc 69 4c c3 a6 48 4f 06 45 10 06 6b f9 e1 d6 9f a0 96 eb 77 ed 20 f7 43 a9 83 24 Data Ascii: :{eXTt+eR]DdlcIIGn5[j1T[{Z8JM3ili/Q(2I{amwfWj?*f.. [W']7,{)C{#egBAf9]vNV(O{.$hXh\ZOQR\|t/IiLHOEkw C$
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 69 b3 97 49 03 7c ae 72 50 6a cb a2 05 5b c8 8c ca cc 34 b9 d3 92 1c 98 45 91 1b 3f d5 5f 68 3d d6 00 88 0c 6d 5f 98 94 a2 c8 c4 8b 5a 7b 04 05 a1 13 6e 4a b6 fc 1c 87 7a e4 6d 9c e1 45 b9 44 ca af d7 c4 fe 3d 7f b1 6b 5a 64 95 bc 92 2f ae d8 83 6c 71 82 20 77 ee 5f 2e 9b 7e d3 27 9b 06 f8 77 5e e0 71 87 01 2e 55 2e b5 17 2d 8f a6 2c a5 76 2e fb f2 bb 3b 69 75 b6 6f 75 0f da 1a c9 e3 79 e8 e0 37 a1 58 5a 78 74 82 95 43 f6 f5 c7 94 ea 20 f9 84 bf 6c 1e 2e c3 c6 33 87 5a 12 6d 51 c8 a8 90 42 03 91 7e e0 f6 de 85 33 2b 03 da 1a 76 7a 4c 2d 7c 9d 39 65 5d 81 4c c1 b0 90 8e 43 51 30 6e b0 8e 68 e9 bd 94 68 29 53 c5 df ee 05 32 78 b5 ec 17 2f d5 4b f5 67 b6 22 45 28 74 44 28 b7 7a a5 79 d1 ce e3 4f 96 b0 93 32 bc 07 35 90 84 b1 b1 db 1f ea b9 7f 42 8b 56 10 ee Data Ascii: iI\|rPj[4E?_h=m_Z{nJzmED=kZd/lq w_.~'w^q.U.-,v.;iuouy7XZxtC l.3ZmQB~3+vzL-\|9e]LCQ0nhh)S2x/Kg"E(tD(zyO25BV
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 2b 4e 3f 10 d9 1e d8 80 18 21 2c 1c 54 36 b6 d6 d6 ec 4e 7d 29 bf 06 95 d4 ea 55 5d 84 25 97 6e 55 f1 0c 40 f8 89 83 1c b2 26 93 23 c7 9d d1 47 9c e1 0d 20 af 2d 72 ba e0 60 8f 0d 04 27 db 72 4a 5e 0e d9 48 67 e6 b1 02 5e 16 cb 81 a6 ba 62 ba 41 de 01 b9 28 de 0e 2a f5 e5 1d a1 6f 2b 20 97 a5 bc d3 dc 3c ca e7 4d 1b 7b 7e 03 30 f7 93 00 2a 4b f7 71 2f 6c c8 58 5c bf 28 cb 22 12 7a 80 25 c4 31 0d cb fb 22 6c d8 d3 f7 a3 ff c5 3f e4 c7 54 2f af 96 c5 fa a1 f6 03 67 62 0c e4 a1 b3 a5 56 d9 a8 ec 97 3c 14 b8 bf e9 25 16 35 41 10 0c 09 e3 1b 4b 46 cc 5a dd 0e 64 5b 5b c2 cb be 8c 28 94 2d 16 71 08 77 10 5e 0e b9 97 4a 29 24 c4 f6 0b e0 b3 b1 f6 d3 62 69 b1 73 95 8d 59 11 e3 48 5f 2f 84 d4 78 4a 69 81 ad 44 2b c3 22 a9 47 9e 70 f0 d3 1f 1a 19 16 65 63 89 cc a7 Data Ascii: +N?!,T6N})U]%nU@&#G -r`'rJ^Hg^bA(o+ <M{~0Kq/lX\("z%1"l?T/gbV<%5AKFZd[[(-qw^J)$bisYH_/xJiD+"Gpec
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: c2 24 1e 82 fb 0f 9a a6 fb ca 89 25 f3 e8 30 5c 6e ad 2d 79 6c 69 58 fe f0 48 d7 96 a9 c9 39 65 6f 58 28 f3 b9 9f 44 cf 60 b6 3a 6d 81 79 09 65 c6 e3 91 20 3e 81 35 d6 06 27 c1 38 32 e4 9c 13 96 a2 cc 44 8f c2 b2 df 21 ce f3 e9 9d 0b 2f 5c 0e 7f 96 72 d4 c6 32 78 99 ba d2 7a 4e 08 a0 69 4e 52 a7 c1 36 1a 2e 39 57 84 09 6b b5 b0 45 fd 7a 45 58 39 b8 94 67 a6 2c 6d 5a 8e db f7 30 4e 87 65 26 99 43 c2 0c b6 48 ba b8 50 e9 b4 62 b8 ec 97 f6 ab f5 50 84 1a 6f e7 ad 78 23 6c 27 00 a0 92 8f 5f 6e 67 5b 9b f1 35 81 58 fe 51 28 f2 a7 6d 13 85 51 c9 0c ff bd 85 ab 4e bd 25 ba e4 e5 b8 ad 8b 60 68 ae 77 f5 f1 fb 1f 1e fc 9d df 45 4d 76 27 dd 57 a8 b9 3d b4 17 6d 40 1f 43 76 55 95 22 08 fc 4a 71 3e ac 84 99 7f 40 b2 29 cc 66 3b d0 e0 f1 68 2f 5b ce e3 ab 32 07 ff 01 Data Ascii: $%0\n-yliXH9eoX(D`:mye >5'82D!/\r2xzNiNR6.9WkEzEX9g,mZ0Ne&CHPbPox#l'_ng[5XQ(mQN%`hwEMv'W=m@CvU"Jq>@)f;h/[2
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 60 a3 a6 29 64 d8 b4 91 a1 6d 5f b2 20 b0 14 ca 25 cb e7 0a 9c 0c a0 f4 d3 0b c2 6c c1 2c 96 c5 38 8b f7 71 45 d0 29 8f 56 4a 1b e6 9d c4 5b e6 88 f5 43 b9 a8 ac fb 9a 91 d2 c9 39 ee 06 d4 ce ec 50 57 78 f0 b3 17 5f 56 cb b0 70 ce 3b eb a7 fe 80 e3 27 04 1b 07 f3 5d ce dd f2 8d 6d c2 72 0f be 57 2c 7e 21 13 52 3c a3 b8 aa 39 a7 e1 a5 94 23 c6 e8 49 fd 99 65 a1 94 7c 49 e7 4d 36 42 86 9a 68 44 0e 25 53 4d a5 01 78 26 cb a5 62 bf ef a5 dc 99 92 6c e3 1e e4 59 b3 1a eb d2 92 12 7c 2a 17 87 5b 16 5f 6f 84 9d b3 aa 36 b6 a5 b1 d5 99 36 fd aa 0e b7 0c 9c ae 70 ff 87 b7 e7 98 3e 2b 47 ef 9b d1 68 a0 b2 9c 9f b4 a3 c0 7c 1d 36 8e 7c 68 fe b8 c9 d1 e9 20 25 bb 7e e7 ab a6 3d 5a 1d 66 d8 25 51 69 96 a3 48 da d1 bf 24 04 b9 e7 a8 be 8c ad 8d c2 c3 b4 ac b4 fe 86 31 Data Ascii: `)dm_ %l,8qE)VJ[C9PWx_Vp;']mrW,~!R<9#Ie\|IM6BhD%SMx&blY\|*[_o66p>+Gh\|6\|h %~=Zf%QiH$1
2024-04-19 14:06:58 UTC	1255	IN	Data Raw: 06 22 de 5e bf 1a 70 ce a2 51 a4 ca 21 2a 7c 42 d6 c7 b6 5f 68 41 3f 8f 09 cd 30 56 1a a0 58 3e bc fb 3a eb 30 2c d8 64 45 81 88 72 5b 96 9f 86 50 16 8c f5 05 97 fe 43 70 d2 f9 b2 67 a8 ba 16 ee f8 e0 66 5c 7b 54 c9 f2 61 13 c9 1e 28 8b d8 d0 65 e9 27 c9 35 f8 24 90 59 1e 16 7f b9 76 86 cd f6 be 7a af 24 d5 1c a8 ab ce b6 f7 ef 1f aa 2a 43 c1 62 70 4e f2 06 2b 97 56 64 2d 2e 4b 63 73 5b 2e 8e 08 d5 13 07 84 96 68 ea 35 46 e6 71 ad f8 a5 45 7b 7c 6a ac 6b e2 f6 68 5c 7a 69 0f 4d 73 96 07 f0 9c e1 04 a7 7c 19 5d c6 1c 65 c6 55 4a 84 dc 48 47 5b 19 0f 65 e2 36 85 2d f3 a6 38 9d 7f 98 20 f6 cb 58 d5 e3 2f 34 70 d6 04 64 aa bb a7 ec ab ba 39 86 ee 74 2c 74 0b 53 42 cc 87 4b f7 a9 a5 42 14 05 02 5f c2 87 7e b3 cc 4b 8b 22 38 39 37 74 f1 39 6e 2e 0c 4b 96 3f 3e Data Ascii: "^pQ!\|B_hA?0VX>:0,dEr[PCpgf\{Ta(e'5$Yvz$CbpN+Vd-.Kcs[.h5FqE{\|jkh\ziMs\|]eUJHG[e6-8 X/4pd9t,tSBKB_~K"897t9n.K?>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50130	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	1101	OUT	GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:58 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:58 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:58 GMT Server: fife Content-Length: 1842 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:58 UTC	733	IN	Data Raw: 52 49 46 46 2a 07 00 00 57 45 42 50 56 50 38 4c 1d 07 00 00 2f ff c0 3f 00 85 3d e8 ff df b5 6d 3e 7f 25 e9 de 7b 0f dc bd 77 ab d1 dd aa bb a5 7f 85 6a e1 4e dc a9 6c 65 ef 04 75 e2 89 17 78 72 99 5a 3d 8d ab 3e 80 c1 fc 8c 46 cc 85 13 e6 20 1e c8 e4 cc 19 72 87 25 dc 9f 6a a4 f4 d3 25 ff f8 fe f8 7e be df 6e 47 f4 7f 02 e8 92 ff 2f f9 5f 4d 97 0a f3 c9 18 8e fd ce d3 0a 6b 7f 74 47 e4 ac d6 ac 94 b2 33 71 c4 60 bf cb 01 02 df 3a aa 17 d5 e3 69 23 8c 83 f7 bb df 07 76 fe bd da 2d 17 e6 93 31 1c f3 5f f5 c5 e7 40 13 1f 55 ab 95 4a 6e 2e 81 18 ec 77 39 40 9e 1e 53 71 aa c7 d3 46 04 07 7d bd ef 03 79 e7 54 63 b9 30 3f 7b 08 c7 fc 57 39 2f 07 2e 7f c5 de 4a 25 37 97 08 63 e8 ce 2b 1d c0 75 91 a9 ba 31 f4 8b 2f 82 22 ee e3 e8 d8 8f 41 29 3b 17 d9 e9 07 ae 9f Data Ascii: RIFF*WEBPVP8L/?=m>%{wjNleuxrZ=>F r%j%~nG/_MktG3q`:i#v-1_@UJn.w9@SqF}yTc0?{W9/.J%7c+u1/"A);
2024-04-19 14:06:58 UTC	1109	IN	Data Raw: 10 31 66 a4 f2 25 93 9a 7c a7 12 b5 ad ef f7 0f 62 38 9e 4c e7 2a 26 c9 36 ae 20 cf 69 75 df 11 1c c3 70 62 36 73 bc 5a 27 e9 67 f8 7b 46 c7 06 6f 00 31 62 cc 65 0b 35 62 38 cf db 0f 8e 12 ff bc 6d 23 15 64 ed 67 a4 7b 29 ed 7b 5a fb e8 ff 65 30 4b b9 74 32 8e 38 e8 ef 6b af ea 51 f1 a8 11 43 0c f9 3c 4e 07 58 9e d5 a1 bd 20 34 a1 7a d5 e3 99 23 47 04 2d 82 e0 19 e5 5a 2a cc 27 e3 88 81 01 f7 fb 60 ed 82 18 10 7d 41 91 a6 a7 42 de de 36 68 f8 1b 85 8c 8a fa 21 29 d1 03 20 7c b7 88 77 0b ea 26 25 ea 04 1b 96 05 80 c0 37 6d 8e 66 49 89 76 80 1d 5b ec 37 91 a7 c6 2b 47 0d ec f9 40 e3 1e 8b 8c 7b 3f df 88 3a a9 53 c4 26 50 6e d8 9a b5 7c d4 82 a9 50 b7 d9 a5 45 14 51 5d d9 ba ec 02 0f 08 33 95 ed e7 b6 81 b2 ae 98 85 c7 0f 87 c3 db 6e 74 be 44 58 ab ae 5c 64 Data Ascii: 1f%\|b8L&6 iupb6sZ'g{Fo1be5b8m#dg{){Ze0Kt28kQC<NX 4z#G-Z'`}AB6h!) \|w&%7mfIv[7+G@{?:S&Pn\|PEQ]3ntDX\d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50107	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535613.0.0.0
2024-04-19 14:07:00 UTC	4381	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 31 38 39 34 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535618947",null,null,null,null,
2024-04-19 14:07:00 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:00 GMT Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:00 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 32 30 32 31 35 22 5d 0d 0a Data Ascii: 1a["900000","1713535620215"]
2024-04-19 14:07:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50134	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	525	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 498 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:05:46 GMT Expires: Sat, 20 Apr 2024 13:05:46 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3674 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	498	IN	Data Raw: 52 49 46 46 ea 01 00 00 57 45 42 50 56 50 38 4c de 01 00 00 2f ff c0 3f 10 4f c1 a0 6d 23 49 9e 99 65 71 34 8f fb 7f 57 1a 08 da b6 8d 33 2a e3 0f 71 3f 82 b6 6d e3 ae 2c ce 1f d7 99 4c 63 1b 49 92 93 46 cb a0 09 8f 10 30 f1 c1 d2 1a 02 50 22 40 88 34 ff c6 bd b5 b4 39 70 f9 4d ac e0 b7 3e 6b db 77 16 5a ef 9a a9 5b 95 2a 51 0d a2 40 10 3a 15 2e 2d fe 00 6b 01 41 18 d0 e1 2b 22 4c ff d3 07 f8 21 c1 b6 6d b5 6d 64 fa 37 f7 86 e1 eb 7f 85 19 e6 3f 4b fb 41 51 8a e8 ff 04 0c 8b ff 17 ff cf 47 dc 7e de 5f 5c 57 2b 6f 8f e2 b5 7e bd 69 bd 55 33 ef 8e 11 ad af cb 5e 4d bd 3b 21 62 f5 36 8d d5 1a 11 91 fa 99 aa b5 77 27 12 11 a7 d5 55 35 49 44 98 5e ba 51 22 82 b4 e9 d5 2a 11 31 7a 1f ed 12 11 a2 c7 6e 98 88 08 9d 37 cb 44 04 a8 55 d3 44 c4 a7 1a 27 22 7b 22 b2 Data Ascii: RIFFWEBPVP8L/?Om#Ieq4W3q?m,LcIF0P"@49pM>kwZ[Q@:.-kA+"L!mmd7?KAQG~_\W+o~iU3^M;!b6w'U5ID^Q"*1zn7DUD'"{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50135	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	525	OUT	GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 458 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:52:27 GMT Expires: Sat, 20 Apr 2024 13:52:27 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 873 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	458	IN	Data Raw: 52 49 46 46 c2 01 00 00 57 45 42 50 56 50 38 4c b5 01 00 00 2f ff c0 3f 10 37 a1 a8 91 a4 a8 b9 f1 ef 07 21 d8 e0 3f b4 0d 03 69 db c4 c1 fd 7b dd 76 01 41 91 ff a3 b1 8d 24 c9 49 ff a3 55 2a c4 48 78 d8 32 8a 37 01 f7 02 c0 08 09 32 b4 fe e5 88 10 7f f0 a4 58 84 f3 26 9a 9c 6e 61 b1 43 c0 0f 01 a5 40 1e f8 64 81 04 47 41 01 c4 65 7d d8 6c 1d 15 05 15 90 20 db 76 db 36 50 c3 87 ba dc bb fd 5c de db ff 3a 25 fc ff 53 89 88 fe 4f 40 19 fe 1f fe 9f 8e b8 7c ba 3e 6c 5a 2f eb 67 bc e6 0f 6b 33 6b fd f8 41 b4 de 77 d6 ba 5a bf 85 58 3d d7 d6 d9 fa 4d 21 52 1f b5 75 88 42 9c 66 db d6 25 0a 61 ba b5 4e 51 08 d2 c2 5a af 28 c4 e8 b1 63 14 42 74 d3 33 0a 11 3a 76 8d 42 80 ac 75 8d 42 7c 5a e7 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 Data Ascii: RIFFWEBPVP8L/?7!?i{vA$IU*Hx272X&naC@dGAe}l v6P\:%SO@\|>lZ/gk3kAwZX=M!RuBf%aNQZ(cBt3:vBuB\|Z(dB(dB(dB(dB(dB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50137	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	524	OUT	GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3702 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:52:28 GMT Expires: Sat, 20 Apr 2024 13:52:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 872 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	723	IN	Data Raw: 52 49 46 46 6e 0e 00 00 57 45 42 50 56 50 38 4c 61 0e 00 00 2f ff c0 3f 00 55 e1 b1 ff 7f dd 25 45 3f dc 5d db 5d 70 77 77 77 77 77 77 28 c1 dd b5 dd dd dd dd dd dd dd dd dd fb d6 73 ff df df ff fb c7 a1 65 11 2c c0 1d 32 d2 e2 97 17 9d e1 ae e1 0d 09 d9 00 1b 68 a2 8e c8 58 02 b9 56 d4 d1 83 53 31 ee 12 b9 7f d0 e8 9b 37 6c 80 d0 dd 23 ad 1c 22 87 54 23 77 b9 78 d6 d4 cd 20 74 87 3a e7 66 bd 04 52 cd 2a c6 a1 e8 ec b9 e7 c9 6a 03 1d 93 ba 4b 4b 88 45 d6 29 d2 1b c0 33 62 08 6d 76 e0 3e 13 61 c5 1a be e3 53 f1 44 75 26 72 9f 89 d1 70 dc dd a5 b2 b1 d8 22 4b dd 2d d2 8d 0c cf 02 6a dc dd dd 3d b3 b4 ce 33 12 b9 64 d4 39 92 23 49 52 64 2b 15 79 92 bd d3 57 fc 5f df d0 c2 40 0f 74 25 48 90 6d bb 6d 1b fe f7 fe 47 61 05 40 88 6a 56 83 7b 4b f6 bf 9a 64 29 fd Data Ascii: RIFFnWEBPVP8La/?U%E?]]pwwwwww(se,2hXVS17l#"T#wx t:fR*jKKE)3bmv>aSDu&rp"K-j=3d9#IRd+yW_@t%HmmGa@jV{Kd)
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: ed fa bd 6d 07 ea df 2e 83 05 57 80 63 6b fc db 19 8d 99 ca 61 bd 56 14 bf ad 64 ef be 18 fa be 20 ea eb 5a a5 28 71 2f 3c 39 2c 89 61 24 e5 b1 ab c8 44 5e 0f 83 67 22 64 a4 53 bf 6f 29 32 56 36 8e f2 a3 6e ab b2 99 9a ae 3c 48 b0 6a 39 f5 ff 00 90 25 56 00 3f 59 0c 3e ba 8e 28 a7 15 d3 40 f0 80 95 d3 29 8b ef 64 e0 b9 09 2f b8 c7 f5 28 af d5 49 e1 d9 d8 ea b1 b8 0a ca e4 42 ef a1 e8 4f e5 05 e9 68 ca 6e 65 32 78 94 3f f9 c9 4c 54 45 83 b0 8a 35 d0 29 c3 55 c8 36 e8 89 43 b7 11 e5 b1 2e 2b 84 55 94 41 53 8e d3 d1 e7 f2 04 ef aa 3c b6 68 42 58 45 0e e5 38 1a 16 2f cf 3f f7 67 50 1e 33 c3 b1 f2 bd cb a2 53 8e a3 61 f1 14 9d 07 3c 64 46 8a 70 3a f6 fe 58 2c 83 72 1c 0d 8b a7 69 19 2b 28 8b 1d 46 90 22 9c e6 4f ee 17 c2 51 34 2c de a2 ab 80 85 7c 28 ad 25 e1 Data Ascii: m.WckaVd Z(q/<9,a$D^g"dSo)2V6n<Hj9%V?Y>(@)d/(IBOhne2x?LTE5)U6C.+UAS<hBXE8/?gP3Sa<dFp:X,ri+(F"OQ4,\|(%
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: c6 45 e4 e5 34 ef f3 b3 cc c9 b8 cf eb d3 be d4 2f aa e5 ca 81 89 02 55 46 69 96 5e 91 3d 39 24 3a 88 f8 46 6b 96 c2 f1 50 a5 49 f3 3e fc 49 12 2a a1 f9 46 9b b0 82 85 0d 1e 84 66 f9 f4 69 fc 89 7c d6 74 b6 f4 46 7e d1 6b 80 03 83 56 9e 8c a6 62 71 83 41 20 3f 82 15 95 bf 9c 4f b4 32 39 30 70 9b f4 3d d0 d4 1d 8c 18 08 22 6f 80 8d dc db 1f ba f8 f2 7f e9 bf 33 2e e9 09 34 bb ff f6 80 10 67 70 c3 7f 7d a1 2f fe 07 af f0 5d b1 df 75 6e d7 44 d3 aa 81 a0 10 71 b9 31 93 b6 d4 6b dd a5 7d da 4e 00 df 95 7a a4 67 d1 f4 18 04 88 88 fc c8 67 61 e5 f2 ad 86 d6 e9 d2 19 fe c0 6f 02 1a 45 d6 20 11 71 d9 80 8a c4 d6 4c cb de 1c fe db 04 cd 22 9f 7e 92 d3 16 2c 22 f2 8a 61 80 d5 d2 7e c1 26 5d 15 dd 98 fd e2 bb 56 4d 9a 06 0c 83 14 38 22 12 1f 53 5e 80 55 d0 5d d7 9e Data Ascii: E4/UFi^=9$:FkPI>I*Ffi\|tF~kVbqA ?O290p="o3.4gp}/]unDq1k}NzggaoE qL"~,"a~&]VM8"S^U]
2024-04-19 14:07:00 UTC	469	IN	Data Raw: 5d 2e b2 95 49 b5 c4 7b 2e 0c c7 c1 b9 91 57 3c ce 8f ab fb ad 1d 0b 7e 48 b8 77 58 50 c5 2e 23 7e 3b d7 cc ae f9 6d c4 7b f7 59 93 1e b7 93 f9 ea ee c8 2a 01 38 89 71 8f 1c a9 7e 4a bd 08 8a f9 54 21 fd 21 2c 8b a1 5b 8b 6f 7a b0 cc fd 19 21 c1 e8 0c 1a 2a 91 0d ef 9b 1a a4 78 d6 a4 5a 22 4f 43 99 b4 9e 23 fe a8 d6 86 cd 4a 60 3a 83 0b fe 66 68 3f ec b2 6e 13 23 c6 c5 42 67 d0 f0 a1 9f 68 5f 33 e6 84 3e cd 60 76 93 6a 29 48 dd cf 22 03 5d db 86 6d a9 4f c5 8f bf 42 2c 75 b9 31 c7 6b 6e 32 b4 eb 1a 93 5d 2a fe 44 82 d6 e5 c6 a9 bf fe 66 16 8d be 02 7a 18 b4 f8 a4 5a b2 f9 18 c0 8a e9 be f9 53 2d 79 59 d5 b1 7f 43 89 6b 91 40 8e bd 3b a6 bb 97 df bc aa 15 cd 99 6f 31 c2 b7 8f a7 5d c4 7a b7 39 60 85 e5 73 1c 9c ac a3 b0 ae 70 46 7b c6 08 31 09 ee 0f 0b 03 Data Ascii: ].I{.W<~HwXP.#~;m{Y8q~JT!!,[oz!xZ"OC#J`:fh?n#Bgh_3>`vj)H"]mOB,u1kn2]*DfzZS-yYCk@;o1]z9`spF{1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50136	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	526	OUT	GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 532 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:57:13 GMT Expires: Sat, 20 Apr 2024 12:57:13 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4187 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	532	IN	Data Raw: 52 49 46 46 0c 02 00 00 57 45 42 50 56 50 38 4c 00 02 00 00 2f ff c0 3f 10 3f c1 2a 92 a4 56 73 e1 9f ec 02 d9 b8 43 40 78 d1 86 80 a0 c8 ff d1 d8 34 92 e4 a8 fb 7c 7e 3a 1a cf 1f d7 a7 6e 18 d5 b6 b5 63 7f ff e8 a4 95 00 6a 69 a0 82 99 00 df d4 d4 0b 00 6c 20 81 0c fa 7f e6 48 0b a6 cb 27 3e bf 4f 3c 7e dd 3a 5f fb f8 d1 7e 70 0e 25 25 25 01 48 40 28 e8 b7 20 70 5f c9 d9 95 91 f5 89 a2 59 8f 32 5c f9 e1 87 e7 45 80 40 12 24 4a 92 dc b6 15 95 0e bb ce 36 01 52 d2 3a c7 ff ff 49 16 4a 05 e0 1c de 23 23 fa 3f 01 dd e2 ff c5 ff f3 11 b7 6f 87 ab 3e 96 72 bc 6c af f5 63 9f 52 8a c5 dc 9f a9 b5 be 6e 87 58 d4 fd 39 d4 56 2f 63 2c ec fe 9c 50 4b 7d 8e b1 40 84 da 69 75 17 8b 44 a8 99 ee 53 a1 08 35 d2 66 88 a5 22 d4 46 af a9 5c 84 9a e8 58 32 42 2d 74 53 34 42 Data Ascii: RIFFWEBPVP8L/??*VsC@x4\|~:ncjil H'>O<~:_~p%%%H@( p_Y2\E@$J6R:IJ##?o>rlcRnX9V/c,PK}@iuDS5f"F\X2B-tS4B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50138	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	525	OUT	GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3872 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:38:46 GMT Expires: Sat, 20 Apr 2024 13:38:46 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1694 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	722	IN	Data Raw: 52 49 46 46 18 0f 00 00 57 45 42 50 56 50 38 4c 0c 0f 00 00 2f ff c0 3f 00 1e 0f db b6 1d 92 a4 6d 5b cd 75 5d bf c0 b6 6d 36 ab 7a 6c db b6 ad 54 45 8d 6d 2b 9d d5 b6 ad f1 b4 6d db ee 8e 42 66 c4 79 1e c7 79 1e 97 af b1 6d b6 1d 17 c6 33 97 59 75 2d 39 97 7d 45 8e 6d c4 5c d5 58 96 21 25 6a db 8e 47 d2 dd b6 ad f4 29 d7 be 8d b1 ed a5 3d 49 c6 33 2b b6 76 63 db b6 6d b6 6d 77 27 a5 ef 8f cb be 69 d1 b6 6d 4a 92 76 55 db 65 9b 61 23 8d 40 ea b3 6d db b6 6d db b6 ed ee b2 8d fb 5e d8 8e 48 86 ef bb a7 ff 92 d8 b6 11 24 49 ae da 00 dd 9b f1 77 2a ae bd fb ab d2 37 7c 9d e8 3f 27 fa cf 89 69 d3 6a c3 9e 6a 1f 7f 77 d8 e9 17 2a 60 13 b0 3e 00 d2 d5 17 1f bc f8 ac 72 2f 7f d8 72 fd ee 6f 30 f4 8d 4a 15 5e fd 78 33 70 f5 96 c0 ce 12 27 1a 17 3a 17 7a 20 4d f9 Data Ascii: RIFFWEBPVP8L/?m[u]m6zlTEm+mBfyym3Yu-9}Em\X!%jG)=I3+vcmmw'imJvUea#@mm^H$Iw7\|?'ijjw`>r/ro0J^x3p':z M
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: ae 58 ac fb 9e ea e3 47 85 eb ee 0d d2 69 32 ea 7a 00 8b 92 ed 30 d8 98 52 5d 17 b1 74 de cc dc 1c 63 9a 8c 65 7f 3a b8 97 0d 83 fb db 39 f7 31 62 14 11 dd dc 46 2b f9 e8 09 e1 31 99 97 82 81 b7 27 09 0d f3 36 2e 7c 81 54 9a 7e f6 8f 0f ad 19 01 83 c3 61 f4 5c c6 39 6c 4b de 72 42 06 33 46 31 d1 dc 4f 08 65 58 7b e3 1f 26 87 f2 33 b8 03 16 2e 87 7b 76 bb 61 a5 86 05 d3 07 0e 75 9c 4e 8e ba ef c5 00 ad ac 00 8c e0 26 16 4e 1d 9a c1 45 6d ef 27 93 7e e9 fc e1 c0 e4 62 f8 9e b4 70 38 fc ee 80 27 17 bd 60 70 e9 ec be 46 a8 a4 78 d9 f9 41 7a f9 30 b3 ae 67 c7 85 b6 64 1b 0c 3e 2e ac 66 0f 91 b4 ff 73 a7 87 85 26 27 a7 1c 44 17 73 cb 6d 9e ef 67 df c7 89 71 76 27 d7 d1 48 90 d5 23 79 31 87 27 61 78 9c 75 d8 c6 bd 8d 0b 33 54 05 85 d4 7b e9 1b 1f 66 93 9b ac bf Data Ascii: XGi2z0R]tce:91bF+1'6.\|T~a\9lKrB3F1OeX{&3.{vauN&NEm'~bp8'`pFxAz0gd>.fs&'Dsmgqv'H#y1'axu3T{f
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: d0 c4 0b 7e 0c d5 d2 cf c8 0b 9a aa dc fa 98 05 a4 e3 bc 0a f1 2a c6 30 2b 72 70 36 a2 c5 e0 52 99 17 01 62 a8 58 5d ef 97 82 ee 07 a2 88 41 53 ed e7 bf b0 c0 d4 d4 77 11 8f 1f fd 8c ca 40 31 ce c4 0c 9a 38 11 23 86 9a 32 8e b8 a0 89 53 82 c4 50 67 77 72 1d 69 41 13 a8 9e 44 74 a0 2b 68 ba ad 5f 3a 0f 4b 5f 23 98 57 31 a8 0a 9a 02 b4 57 8b 3f 69 01 eb b9 18 de 3a 5d 6c 2a df f2 70 80 0e c4 a0 89 17 91 62 a8 e7 c4 0e 9a dc 1c 81 b6 7d e8 1b be f5 b3 c5 29 b1 62 a8 8b 44 a6 00 1e cc a0 09 41 2f e0 b5 3c 29 72 d0 e4 45 8d 18 34 f1 22 5a 0c 25 ae c3 b0 b6 fa 3f 4c c4 a0 09 45 e3 a6 90 73 1d 71 74 00 27 de 25 8b 89 bc b0 c7 50 d4 38 4c bc 16 6d 07 70 a4 06 4d 9c 12 30 86 3a 7b 88 63 82 fe 33 aa 41 3a d0 82 a6 a7 6f e1 45 c0 18 2a d6 c0 57 85 64 68 6b cd cb 64 Data Ascii: ~0+rp6RbX]ASw@18#2SPgwriADt+h_:K_#W1W?i:]lpb})bDA/<)rE4"Z%?LEsqt'%P8LmpM0:{c3A:oE*Wdhkd
2024-04-19 14:07:00 UTC	640	IN	Data Raw: 73 c7 c9 09 59 3d bb 45 87 de b4 2a c9 a4 c3 ef 4f 2f 85 cc 6c 61 2f ab 26 56 2b a2 a3 4c a7 cd ae f0 33 c7 50 5f 0e cb b7 29 3e a0 4a 52 31 b0 45 2c 88 7c 29 63 cf 3a 63 12 69 16 c2 97 25 7e 7c 2a 77 7e 09 ab c5 20 eb aa 24 97 ca bf 57 5a 14 89 b1 4e 8b 8a 8f 52 a6 38 86 8f 32 c6 50 1f 09 28 dc f6 ad 2a c9 a6 d5 08 30 39 dc b9 d1 d4 7c a6 04 44 7f b2 ca 6b 5f e7 2c 4e 66 21 77 64 ce 96 59 a9 4a d2 d1 70 6d 79 5e 18 0b 2b e3 ff 4f 94 11 e1 46 70 33 1d 5d 95 90 31 b3 f4 d4 ea da a5 4a f2 29 e9 d4 e8 d5 0c 75 8b d9 a3 99 52 10 4d 1a 4a eb 3d b0 85 61 04 f7 b5 68 f5 a6 f9 1b 55 49 42 7a 47 ca 6c 30 fd 9e d5 87 86 75 2d 04 3e 7e cc b7 e1 a2 f8 9c 46 bf 76 ec cb a8 92 8c 4a 7e 24 b3 24 32 43 d0 24 0b ca 6c b1 e5 19 89 6c 45 e8 f1 d9 30 87 39 68 92 6c 04 77 da Data Ascii: sY=EO/la/&V+L3P_)>JR1E,\|)c:ci%~\|w~ $WZNR82P(*09\|Dk_,Nf!wdYJpmy^+OFp3]1J)uRMJ=ahUIBzGl0u->~FvJ~$$2C$llE09hlw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50133	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	525	OUT	GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:00 GMT Server: fife Content-Length: 6458 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	733	IN	Data Raw: 52 49 46 46 32 19 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c e9 18 00 00 2f ff c0 3f 00 4d 40 6c db 48 92 04 cb be b7 3a ff 84 bb b6 ba f7 09 20 a2 ff 13 20 49 b6 3c 04 c8 b4 b3 9d 11 07 6c 24 79 8a 48 3c e1 0c fc b0 63 62 5b c6 47 3c f0 9e 9c 24 c0 40 09 27 ea 01 6c 0a 79 da 24 96 69 64 3c 6f 94 c8 ea 74 47 c9 40 b6 a9 2a b9 aa 24 28 49 95 3c f2 46 95 d2 04 0e bc 3a 01 94 12 40 6d e3 c1 02 10 40 49 35 a1 2d c9 db 7a 86 a0 d6 b2 41 ed 26 a9 a9 ad 76 bb ea 42 9a e3 11 f0 d9 aa aa ba 5c 62 50 b7 80 6e fe 4a 55 55 47 cc 74 d3 4f d3 0b 29 b7 96 1f e5 e7 ca 6a 16 70 63 db 76 d5 2c 4c e4 e9 bf 1c 2a 60 28 80 b1 11 c8 bc 48 43 24 f7 dc fd 32 39 e3 b6 6d 24 b1 82 c5 ec 7d 05 81 9f db 7f 61 5b 83 e4 46 92 1c 49 32 fd a5 9b Data Ascii: RIFF2WEBPVP8XVP8L/?M@lH: I<l$yH<cb[G<$@'ly$id<otG@$(I<F:@m@I5-zA&vB\bPnJUUGtO)jpcv,L`(HC$29m$}a[FI2
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 23 81 f6 c4 04 58 d5 b6 6d 91 24 e9 fb fe e4 82 9c e6 ee 22 35 87 30 6e 1c 1d 2a cf f2 9e c9 1e 43 43 31 53 52 c4 2f fe 3f 22 07 2a 23 ec a3 96 6b d4 e4 d5 ae d5 92 df 2b dc 3a e6 86 41 b5 92 39 96 ec 2a a6 52 cb 4c e9 96 d9 31 a3 62 46 d9 72 dd 5e 12 20 49 32 6d ab f7 fa 9e 3b cf b6 cd 6f db b6 6d db b6 6d 1b cf fe b6 6d db 36 e6 5a 92 b4 6d 5b 5a e7 7d ff 9f 04 62 27 44 91 9c ba fb d8 a6 1d 79 77 d0 6d 74 11 ee 3b 68 c7 1d f7 ea 12 74 e4 2e 1c 20 ee 01 7e fe 98 80 21 c8 fa 45 2f 5d f1 cc d9 ce 9c fe 7f 17 b8 74 ad e8 da 55 8e 31 df 39 cc 0c 97 58 d7 75 4e 73 ff 9d f7 c1 db 01 3e 7d 0f bb 22 97 bb 9c 7c bd f5 9b f7 e7 e6 c3 c5 70 c6 09 88 71 3a df 43 f4 39 59 bf 5d 85 2a 78 01 bc ea 95 a3 6c 31 21 70 44 62 33 c3 5c 65 a7 e6 e6 4a e4 f4 46 3d b7 60 74 66 Data Ascii: #Xm$"50nCC1SR/?"#k+:A9RL1bFr^ I2m;ommm6Zm[Z}b'Dywmt;ht. ~!E/]tU19XuNs>}"\|pq:C9Y]xl1!pDb3\eJF=`tf
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: e1 25 a0 52 ca 1a 9e e4 5d 04 50 ea 36 32 c7 8e 09 82 20 01 50 72 1a 1b 06 0b 83 eb 9c 49 17 91 18 e3 e7 c6 cf ed 80 fb f8 c5 fe a7 68 cf 55 d9 07 1c 98 df aa 34 f5 2c cf 1d 08 de 09 40 dd 89 f7 27 27 04 d7 96 f3 ce 54 11 89 31 7e 6e dc 80 79 2b 24 14 92 ed 4b 98 0d 3e 02 1c 2e 69 d6 f7 d4 2f fa 42 03 80 be 8f 56 ae a5 a8 0f 52 85 3f 10 b8 9a f0 10 4f 88 53 a3 4e 12 5b 2c 42 2d 21 50 ef da 9a 34 76 95 63 31 4b 4f 07 0c cd aa ef 3a 7d 6b 8c 04 d3 5f 92 42 3b c0 55 84 07 79 a2 7f 27 5d 86 1c 77 5e 2a 10 0d c6 f4 2d 13 22 85 0d 8f 33 c0 d0 c4 2d 4f 7e e8 96 7d ec e3 17 cb ff c4 84 d4 91 f3 9b 2b 09 37 7a 1a 0f c3 f1 6c d0 c5 ee ca ca 18 5e 69 5f 05 ef c7 3b c8 00 d5 5e b6 e5 b1 f3 83 82 2f 26 81 63 ef 3e dd 27 36 ec 68 eb c9 97 10 fc e6 6a d2 0f f5 5e 77 c4 Data Ascii: %R]P62 PrIhU4,@''T1~ny+$K>.i/BVR?OSN[,B-!P4vc1KO:}k_B;Uy']w^*-"3-O~}+7zl^i_;^/&c>'6hj^w
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 82 98 8d 2b 9b b7 bf 88 b7 17 02 e8 41 14 7a a4 13 aa 9d 6b 16 e9 6f 03 0e 87 67 d4 0f ad 35 01 d6 da cc 55 e9 f6 34 3e 74 6e ff 30 b7 db 97 c7 5e 08 10 ed b4 95 10 36 f5 43 0b 2f 81 30 49 20 24 b2 72 66 0f bf e5 61 a9 49 f3 c0 7c 49 dc 6a 45 5d 69 65 5b 5e 62 a8 bb 36 9c 6b eb e9 01 c4 91 77 5e 07 fb a7 f1 2c c0 c8 ea a9 b5 86 94 7e 60 10 84 30 03 cd c2 2c 48 b2 9e 86 9e 46 48 28 84 10 a4 d0 8b cc d4 a7 f1 8b 55 28 f2 a3 79 13 80 67 6d ac b2 ec 97 c2 f0 c4 f9 70 13 00 8c 8e d5 82 05 fc 6d 75 88 58 9a c9 88 c8 4a 3a 2c 04 15 20 6c 6f 03 ce e6 42 12 e0 18 bd 1a 8f 10 42 01 2d d8 6b 08 0d 8c 34 ae 8d 58 68 f1 17 5a 73 58 cf c6 fb 80 a5 f1 58 a8 26 15 96 c0 5c 6a ba 59 1c 59 38 b8 32 03 2a d1 62 0f f8 db d6 ac e9 4c f9 ce e1 92 7b 05 bf 66 1c 6b 11 88 93 09 Data Ascii: +Azkog5U4>tn0^6C/0I $rfaI\|IjE]ie[^b6kw^,~`0,HFH(U(ygmpmuXJ:, loBB-k4XhZsXX&\jYY82*bL{fk
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 06 2e 22 e4 7c 2a 3a f6 18 46 fa e7 c2 05 93 a7 d8 e7 22 39 35 02 7b d4 91 fe b9 71 e1 d2 93 fe f2 a7 52 9b 0a 7f cd f8 0f 26 8c 68 75 dd 7c 26 30 05 6d a6 e8 3f 68 25 3d e0 6b 9e b7 e5 74 12 46 f8 a0 95 f4 80 cb e2 5d 0a cf b7 4f 6a d3 f8 a0 95 f1 6d 94 51 40 62 8a a2 df ec 23 2a b8 b1 9f c7 1d 77 97 25 1b fb 7a 79 9b d2 d3 ec 52 1a f9 b4 86 08 02 05 ca fe 45 c4 b2 04 d7 e9 f3 12 f7 59 5d 0c e8 67 ff f7 33 91 29 5a e9 71 94 1a cb 14 3c 2e 28 4a 7f 7b b5 35 a0 f2 63 07 51 b6 38 0a b6 5b 31 e0 ef 52 53 f3 99 e4 dc 22 dd 11 38 6f 45 d9 62 df a2 82 c0 9b 00 29 57 1d 04 97 ca cd 9d 81 97 81 b2 c5 7a 98 8a 01 8f f8 35 72 dd 81 71 b9 c7 ee 6b a8 2a 4e 5d 0c 67 ab b8 8a a3 6c 71 4f 97 64 6d 92 16 ad 81 72 d5 71 aa 2b dc d5 f5 c4 5b d7 53 37 1d 10 c0 8e 38 a8 3b Data Ascii: ."\|:F"95{qR&hu\|&0m?h%=ktF]OjmQ@b#w%zyREY]g3)Zq<.(J{5cQ8[1RS"8oEb)Wz5rqk*N]glqOdmrq+[S78;
2024-04-19 14:07:00 UTC	705	IN	Data Raw: ca 72 c4 58 8d a4 b3 6a 73 5b ff df d6 ff 37 5d d7 66 c5 b1 54 57 b1 9a b7 5c 70 5c 39 38 26 43 29 02 bf 51 ae 88 b7 9c a3 0a 56 eb e2 73 f6 cb d6 d3 d7 53 90 93 83 b3 ef 55 f5 72 c9 d9 96 ec 1b 6b 89 e2 dc f6 7e d7 12 17 b5 15 6b 69 6f 3a 22 6e 04 0a f5 37 9f a3 9d 2a 16 4f 77 b1 bf a0 60 de b1 b4 86 39 55 b1 6e fa 7f d3 ae 56 4b c1 fc c8 9b e6 55 ad d9 1a ed e2 f2 23 85 f2 23 17 c7 1a df ac 62 11 f6 6c bb ae ec a8 4d 3e b7 28 26 ab b5 6b d3 9e db 8c aa dd da 11 db 4e ac ae 6a 0e 5e 33 87 58 04 7e db a7 9d d8 7b aa 1d d6 56 2e 5a 9e aa e5 d8 0d 14 a6 68 a9 e0 ed cc 59 c5 71 5b ff df bc d6 31 b3 ea e1 d2 96 ea 12 a9 79 cb 05 bf f3 9d 93 a6 52 f8 cf 3d ef 92 7f a1 2e 8d 5a 17 9f f3 1d eb e9 eb a9 9a 07 76 8f c6 2e 3e 4f 75 59 b8 e4 af f6 8d b5 44 f5 dc b6 Data Ascii: rXjs[7]fTW\p\98&C)QVsSUrk~kio:"n7*Ow`9UnVKU##blM>(&kNj^3X~{V.ZhYq[1yR=.Zv.>OuYD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50141	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1166	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:07:00 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:00 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-cz-vMUTUU-PnkG_ezhUh_w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50143	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	526	OUT	GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 882 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:43:02 GMT Expires: Sat, 20 Apr 2024 12:43:02 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5038 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	723	IN	Data Raw: 52 49 46 46 6a 03 00 00 57 45 42 50 56 50 38 4c 5d 03 00 00 2f ff c0 3f 10 b7 e2 2a 92 24 c5 aa 63 f2 af ee 5c 30 be ae bf a7 c1 40 da 36 71 70 ff 5e b7 9d 4d 23 49 8e ea f8 a3 7b 04 ff f1 85 ef dd de b0 8d 24 c9 49 bf 44 e4 42 8e 64 88 87 4d 00 6f a1 dc 4b 00 2b 24 c8 d0 fd 0c 14 c4 cf 06 45 08 04 06 44 fc 44 94 42 89 5f 3c f4 13 b7 9d 50 e8 16 a0 29 3c 10 9b ee 30 11 88 9f 95 40 08 44 a9 79 2c 10 e8 30 44 c1 ac c0 0d f1 a7 19 3c bf 62 11 ce fb 8b 36 9d 03 02 7e 08 18 05 e4 94 0c a9 e0 86 ab 00 44 48 33 db 82 9e bd 46 89 02 25 0c 12 6c 5b 52 24 45 73 dc dd 7d 06 87 ae cc 2c c9 c4 dd 21 b0 d8 ff 6e a0 b2 e4 e3 1d 11 d1 ff 09 18 19 fa 7f e8 ff ff 47 9c 78 fb e4 d1 3d d7 96 d9 a7 fe 35 f6 f2 ae 55 75 ed f1 95 fa d6 fb 07 d6 b5 6a f6 85 a9 5f bd ce 5c cb 66 Data Ascii: RIFFjWEBPVP8L]/?*$c\0@6qp^M#I{$IDBdMoK+$EDDB_<P)<0@Dy,0D<b6~DH3F%l[R$Es},!nGx=5Uuj_\f
2024-04-19 14:07:00 UTC	159	IN	Data Raw: 4a 02 93 97 85 03 46 73 3b 57 97 0e 0a 07 8d fa b0 5b cf 41 f0 0e 1c d5 32 d6 aa 2e fd 1e d6 ba ff 62 8b b5 42 14 4d ad f1 7f 78 34 d6 aa 10 b5 ed d0 7f 43 ff fd 0e 74 af eb 6c f7 3d b2 dd 66 1f 77 df 93 ae 7b da 7d 6f bb ee 55 f7 4d dc ed b8 f1 ee 93 97 b6 cb ec f3 91 1e 38 f6 a0 cb ee 8f f6 01 79 9f 75 57 f6 6e a4 1f be c9 ba 2a 7b 23 7d f1 fd 7d db 45 f6 e1 c7 91 fe 38 fa dc aa 6a 97 58 d5 bb 2f c6 46 7a e5 f8 ab a7 8f 6d 77 dc 7b f4 e4 ed c4 c8 d0 ff 43 ff ff 3f 22 00 Data Ascii: JFs;W[A2.bBMx4Ctl=fw{}oUM8yuWn*{#}}E8jX/Fzmw{C?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50145	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	525	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4416 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:05:46 GMT Expires: Sat, 20 Apr 2024 13:05:46 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3674 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	722	IN	Data Raw: 52 49 46 46 38 11 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c f0 10 00 00 2f ff c0 3f 00 55 e1 8d ff 5f b5 65 39 67 78 c4 cc cc cc cc d2 30 33 33 33 33 33 33 33 33 43 33 33 73 f7 63 66 66 6c ee 36 f6 de 6b ed 73 4e 9f b3 4c b1 da 15 b3 14 01 83 ad 7a 19 c8 42 5f 7a b6 e0 78 5b 64 a9 6a 30 02 0c e0 76 0a 02 ef 78 62 8a 80 71 89 19 53 58 b2 19 23 d8 35 96 30 09 05 c0 d6 f3 9e 39 ec b6 2c b9 77 aa d4 39 a8 74 c5 16 53 0e f2 da 1f 4f 8c d6 ed 27 f4 98 59 1a 86 bf 58 3e f6 aa b1 c6 53 08 bb 4a 4b 60 0d 24 70 ed 2b 66 3a 55 cf 13 f5 b5 5e c9 1c f3 3f f2 9f fb 62 10 4b 61 90 db 59 1c 91 d7 01 88 f1 56 c9 64 f6 a6 4e 8b 65 ad 00 4e 00 a2 37 b4 3c 61 5b e3 89 75 57 04 37 04 91 27 51 00 c0 b2 b1 66 75 36 ba 25 69 67 9c 6d 73 Data Ascii: RIFF8WEBPVP8XVP8L/?U_e9gx033333333C33scffl6ksNLzB_zx[dj0vxbqSX#509,w9tSO'YX>SJK`$p+f:U^?bKaYVdNeN7<a[uW7'Qfu6%igms
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: cd a8 92 6c ed 4b 8b 7d c0 ce 2f d2 6d 16 a5 ca 25 10 48 1e db cf 2a 36 64 1f d1 1d e1 86 36 70 e8 55 1d 96 22 b6 9b 67 67 9f d8 5a 5a 91 7a c4 8e a2 1d 72 bf c5 50 84 c0 be f2 30 19 78 ec d6 5f e9 30 ef 46 36 bf 50 cb 40 fc 66 ee 5c 1e ad 88 18 87 9a 5a 27 d9 94 38 8a 81 2e e7 ef 63 3c 5e 59 01 40 20 90 bc 9d 51 c1 40 a0 66 52 e1 86 22 00 d0 d7 ff fc 0f 45 4b 14 c3 42 a2 1d a9 c7 7b 72 00 79 2c 97 14 7b a9 aa 64 21 39 dc a3 8e 43 03 20 3a 11 50 5c ff 8b 7f 35 0b d5 96 78 4c 89 ab 00 c2 bf a7 30 55 2c 04 76 5e b1 6e a8 57 b3 7a 74 ec 24 48 be bc 05 26 36 6d 09 3d f6 e8 ae 94 47 49 82 a2 33 81 60 23 be ed 8e f1 68 4f 2a c4 67 50 d4 b1 69 d8 a8 4a 78 0c a1 46 29 a4 dc ec c8 e1 6c 04 a2 3b c4 0d b7 de 35 6b 5b 5a 34 3a cf 48 f2 00 85 f5 68 4f f8 e3 14 73 4a Data Ascii: lK}/m%H6d6pU"ggZZzrP0x_0F6P@f\Z'8.c<^Y@ Q@fR"EKB{ry,{d!9C :P\5xL0U,v^nWzt$H&6m=GI3`#hOgPiJxF)l;5k[Z4:HhOsJ
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 46 31 69 c8 28 8d 09 39 9b 9c e7 df 79 7d 7f c5 0a a9 03 f0 ac 0a 5f 86 08 47 ee c9 5d cb 7d 3a 40 21 14 dd 11 22 0d 11 4d 6d c4 ef 8f de 72 e7 f5 73 56 6b 78 35 d0 8a 0d 4f 9d 8b 91 20 ce 26 f3 e3 42 19 f8 20 5a 1a a5 e8 6d 20 fd c8 9b 5f c1 f8 9e ec e1 ce 1c db 8f 35 fc d9 c1 57 2e fb e0 10 21 ce 21 75 cf d5 28 a3 69 f2 e2 b3 d2 1b 2d cc 61 32 59 98 67 3c 66 93 db c4 ec 1a ae 3c 56 48 0d fe 4f 0a 7f 93 0c f1 b2 17 2d 51 b2 96 24 5f b9 2c 52 76 47 a4 15 01 b7 d7 f9 fa ef ca 18 c7 9e d0 c3 a5 13 db 8f 35 3c 80 38 9b 5f 99 5a 2d 19 22 4e 81 73 d8 74 cb ad e1 2b 02 40 a0 8d 68 63 16 69 db 40 4d fa 50 25 ed 87 4d ab 11 fd ff 8e 1f d3 4a 6a 48 44 1d ee c6 df 33 51 20 e2 cc 4a 7f 70 eb 3d e7 61 42 65 d5 75 bf fe 5d c7 c9 59 90 7a 8b 03 9b a7 0b a3 8c 38 78 2e Data Ascii: F1i(9y}_G]}:@!"MmrsVkx5O &B Zm _5W.!!u(i-a2Yg<f<VHO-Q$_,RvG5<8_Z-"Nst+@hci@MP%MJjHD3Q Jp=aBeu]Yz8x.
2024-04-19 14:07:00 UTC	1184	IN	Data Raw: 91 1e db 6d 2b 07 42 cd 3f 0f a9 37 30 55 09 09 90 bd ea 9f 5f ad 10 c2 4e 38 72 12 8b 30 93 73 44 83 a3 d9 ad 07 4e 56 78 63 a5 35 e7 52 5d e3 c7 af 3d 34 d6 b8 44 63 76 d0 00 a7 ca cc 28 b5 d2 90 9f 06 86 f5 79 8e ee 0b 08 ac 04 42 ce 3f 0f a9 77 d8 54 03 09 31 4e 03 00 68 73 d6 39 31 73 8e cc 8c 12 15 c5 58 03 ae da ee b8 b1 a5 45 c7 92 94 cc cb 8d 08 a8 be 56 40 6a ad 9e e0 d1 cc a4 21 30 d7 f5 fc ea cb 09 52 9f 47 40 22 01 68 be 28 c3 62 14 45 d1 90 e8 67 b4 f6 07 c0 6c bb a5 83 4e e3 88 b2 07 cc 43 a6 0d 4d c8 78 55 d9 9d 35 0c d2 ef ab b2 0a 12 0c e4 a1 d2 29 73 94 1d 20 4f ee 17 88 43 66 37 eb c8 3c 9a 4d 75 f9 b3 7a 4c ad a5 d2 8d ab 46 4e 90 fe f9 15 24 9c 9e 50 ea 28 34 26 95 be 05 76 56 61 32 51 14 45 35 37 73 eb d6 29 0e ec b3 ba e1 de ab 6a Data Ascii: m+B?70U_N8r0sDNVxc5R]=4Dcv(yB?wT1Nhs91sXEV@j!0RG@"h(bEglNCMxU5)s OCf7<MuzLFN$P(4&vVa2QE57s)j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50144	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	525	OUT	GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2070 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:06:13 GMT Expires: Sat, 20 Apr 2024 14:06:13 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 47 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	724	IN	Data Raw: 52 49 46 46 0e 08 00 00 57 45 42 50 56 50 38 4c 01 08 00 00 2f ff c0 3f 00 c7 05 39 92 24 45 52 e4 f2 ea ff 58 45 19 2a 63 e9 4e 06 c7 8d 24 29 52 f6 fa 6f e1 be ce 01 66 98 aa 64 dc b6 8d 24 6a fb 6f f6 7e ae e7 5f 6d da 06 8c 53 66 df a1 67 41 10 10 01 11 18 32 b8 10 10 85 22 94 30 04 7e 9e 21 c0 b0 d9 7e 97 e7 41 40 5a 1a 1a 14 04 99 15 c1 42 e8 86 0b 42 07 86 16 4a a0 13 41 21 4c 21 8c 41 90 e7 02 a9 50 94 06 44 71 d2 80 d0 69 a2 4c 10 20 2d 88 c1 61 f1 9f bb 71 d1 30 8d 42 99 3f 88 83 61 8a c6 80 08 95 16 05 51 10 01 99 c6 2f 5f 45 41 98 45 93 fe 26 e5 19 da 58 90 02 d2 c5 0c 0c 36 79 cf f9 18 4a a4 b2 f9 82 1c 6f 50 14 cd 1c 46 b8 11 e1 09 82 44 f8 37 90 7f 0c 60 02 81 05 04 02 81 2b f9 cf 69 cf 1c f6 0f 28 5c db 9e b6 cd 56 5a 1b 8f 1c 2a c3 98 99 Data Ascii: RIFFWEBPVP8L/?9$ERXEcN$)Rofd$jo~_mSfgA2"0~!~A@ZBBJA!L!APDqiL -aq0B?aQ/_EAE&X6yJoPFD7`+i(\VZ
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 17 57 52 47 85 42 31 53 d4 9d 12 27 74 8a 1c bb 31 ba 44 64 21 b7 70 24 e2 e3 f0 f2 b6 f3 8d 4e 42 18 38 65 01 99 53 9a ea 97 a5 5d cc 46 f6 bc 19 6f 3a a1 7e 4f 53 09 19 ea 12 d9 c9 2d 1c 8d 28 86 2e 4e 9e 14 8a 44 76 72 65 6d 89 f9 b9 ba bc 8d dd 1a 53 2a 66 8a 9d 53 3e 74 e8 bb b8 e3 cd 94 3c 3d 17 b3 4a 73 54 e6 66 9a a4 a5 da 84 b0 75 ca 4f bf 8e 8b 3f ef d0 77 31 b3 34 2f 97 1a 79 59 54 3e 31 4a 9b 10 20 4e 91 a3 b7 d3 2e 86 a0 22 e1 f4 2f 85 87 45 e5 57 33 6d 9a 84 40 71 4a a3 0a c1 c5 3a 0b 9d 35 ed e0 1f bf eb 2c 03 42 71 ca b7 ae 01 17 c3 91 3b 6f 7b cc 03 7b c2 d3 b2 ec 22 24 39 86 ec da 35 c4 21 42 92 3d 6b 5a 18 f8 93 d8 36 58 4f 46 1d ef ea 3a 2d c0 7a b2 e7 bb 07 fa 9b da 6b 66 00 7a f3 52 75 e0 cd d2 ea 6c 38 6f 9e f9 aa dd c3 c1 a7 fd 82 Data Ascii: WRGB1S't1Dd!p$NB8eS]Fo:~OS-(.NDvremS*fS>t<=JsTfuO?w14/yYT>1J N."/EW3m@qJ:5,Bq;o{{"$95!B=kZ6XOF:-zkfzRul8o
2024-04-19 14:07:00 UTC	91	IN	Data Raw: e7 58 93 08 80 1a 13 40 85 75 c9 08 a8 21 c7 73 ac 4d 04 40 0d 78 a0 02 43 3c 03 36 50 81 25 9e 01 18 a8 c0 f3 78 52 a8 40 05 9e 78 86 5d 83 e7 78 24 4b 96 37 7e 41 28 2a aa 3c 15 57 24 cb 56 58 5d b3 58 0d 4b 56 2e b9 b5 5d 96 2c 5f 83 fe cf a0 ff 33 e8 ff fc ff e7 48 00 Data Ascii: X@u!sM@xC<6P%xR@x]x$K7~A(*<W$VX]XKV.],_3H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50147	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	525	OUT	GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:00 GMT Server: fife Content-Length: 6294 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	733	IN	Data Raw: 52 49 46 46 8e 18 00 00 57 45 42 50 56 50 38 4c 82 18 00 00 2f ff c0 3f 00 2a 2c f6 ff ad fe 24 67 f3 61 66 2a 6c 2e 68 ee aa fe d7 bf 98 99 99 99 99 19 06 aa ea f7 79 3e cf f7 fe ca cd 1a 12 47 a5 a2 18 1d 33 a8 e8 52 59 00 73 1c 53 ff c3 b4 83 a8 d9 c0 0d 6a 54 f8 9c 33 5b 98 f2 ad c2 d7 87 5a 85 99 d1 45 b1 e2 44 c7 65 64 98 23 73 a2 38 83 6a 54 14 c3 13 66 6e 15 56 ed 6e 40 45 b5 0f 94 0c 5d 9b 5d dc 30 67 0b cc 1c c5 1c c5 ac 5a b5 1a 90 e3 c2 e8 ae ca 89 ce 0a 4a 85 af 8e ca 02 fa 9c da 41 98 51 45 65 50 8d 0f f3 0e 72 b2 8a 51 41 fd 3f fd 84 99 19 14 27 57 e6 b4 0f 0f aa d0 0d ab 28 96 f7 1c 09 90 6c 9b 76 b5 63 db b6 ed e4 db b6 6d c4 b6 6d db 7c 7e b1 6d db b6 6d 13 62 00 00 49 98 ff bf eb 4d d2 a0 d3 02 2c d4 fe cb a2 6d ab 6a ab b5 db d1 6b f3 Data Ascii: RIFFWEBPVP8L/?,$gafl.hy>G3RYsSjT3[ZEDed#s8jTfnVn@E]]0gZJAQEePrQA?'W(lvcmm\|~mmbIM,mjk
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 6b 8e cd ce 01 9a b1 55 6b 79 a1 77 8c cf 42 e8 0f c9 ff 73 98 25 6b 35 b7 b1 f6 98 a8 de 55 32 77 f2 28 1f 4c 6c ce eb 33 ec 75 34 5b f1 22 07 d3 2b de 85 b1 84 14 79 6b 0b b9 ea f4 2d 0f 2c df 7d f6 f8 dc fb a8 42 07 7d 11 1e a7 36 2d 30 22 88 6d 58 0c cf 9f cb 01 83 30 e3 99 c0 4f 02 bf 2c fe b2 9d 1b 66 d6 c0 71 e4 58 4a 6c d4 f0 2e dd cb eb 2c 59 bf eb 5d 27 d8 16 54 d9 b9 db b9 ab 30 96 93 22 ed 9f 12 bd cd 20 ec 98 42 1b 10 82 73 9f 25 fc 59 41 c4 36 ad 7f 93 2c dd ba bd cb ca a3 67 e7 67 6d 04 bc 82 14 e7 1e 5f 9d d2 58 56 8a f3 bc 65 af 32 b9 ad 14 6a f2 9c 34 33 e6 38 15 9a 43 22 8c d8 fa 4d fe 32 6f d2 d9 c3 a8 ca 43 3a a9 b1 28 39 b7 b8 84 e7 40 d4 cc 9f 3d bd c7 41 f7 57 d2 35 34 3b b7 04 0b 1b 96 3d 7b 8d d9 63 c7 96 44 b9 29 74 f2 d7 38 0d Data Ascii: kUkywBs%k5U2w(Ll3u4["+yk-,}B}6-0"mX0O,fqXJl.,Y]'T0" Bs%YA6,ggm_XVe2j438C"M2oC:(9@=AW54;={cD)t8
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 6a b2 04 56 d9 ef d0 5c 9c 53 95 68 3f a6 0e 33 a0 d1 f0 36 2d 34 dc fb 0c e1 fb d9 34 b3 7c ef 41 ef 53 5c a8 f6 e1 02 a5 9e 20 9a da be 91 58 b4 58 73 1d 5a bb db db ce e9 ce ef 24 18 55 fb 68 2f ce ed 96 a8 ce a4 99 21 23 d1 35 c4 e8 b8 77 36 aa 78 d1 ce b4 ce 2d 05 8f a9 7b 6d ed 74 0e 32 61 a9 a3 b5 37 b2 2a 4b c3 72 e8 f4 a7 80 0a 9b 7c a5 d3 ce 94 e6 92 96 6a 1e fb 50 b8 fa 48 c7 6e 7d 4b 4b 21 80 9d ee b5 05 e4 dc e3 ab 93 7e 36 96 72 ba a2 c1 75 ca 5a 05 68 70 ee 93 08 a0 b5 bd 4c 70 e7 16 f5 60 9b 2f dd b8 19 18 ab e5 ad 1d 01 74 89 34 21 d2 9a 5f 5c 02 5b 71 40 53 f2 6d 61 c6 c9 b2 74 48 47 f8 98 12 e8 1a 6d 42 c8 b9 25 70 ae a5 30 9f 49 a0 b5 83 d4 b1 ec cf 9f b9 60 de 2b b8 dd 92 31 5d fd 2d 4c 3b 4f 05 14 d7 1c d7 c1 0c cd 9a 4e 1f 3e b3 92 Data Ascii: jV\Sh?36-44\|AS\ XXsZ$Uh/!#5w6x-{mt2a7*Kr\|jPHn}KK!~6ruZhpLp`/t4!_\[q@SmatHGmB%p0I`+1]-L;ON>
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: d9 09 e2 98 65 7b 7c aa 73 4f a8 49 c4 f7 10 aa 1b ff 1c 1c 4c a3 ef 43 b5 2a f0 e9 19 37 a9 69 27 51 24 df 05 b1 a3 1b c1 d9 f1 6e cb 74 ee 37 47 aa 68 3f 46 c9 c9 3d 2f 86 8a 59 4f b5 a3 69 5d 1b cc 15 20 ce dd de 53 e1 34 fa d2 17 c4 a3 c9 0e 0e 74 75 96 05 4a 30 45 72 07 15 62 88 76 d4 3b d1 03 2f 90 8f 3b f7 41 48 6b 7e 08 95 92 2b d3 07 e5 e1 dd 2e ae 73 5f 2b cc c2 85 8a 38 f7 11 71 ea b0 42 a0 8a 6a 33 42 07 f3 8b 48 6b 9e d1 b3 2b f8 99 7a 9b e9 89 74 02 30 db 2b 60 07 d3 3d c2 22 76 f4 da 4c e7 ee 95 e0 71 ae 10 a8 a2 9a 00 54 fc cc 0b 04 03 f1 11 67 3d f0 02 5d a2 83 e9 e0 a5 00 e7 f6 af 00 e6 5a 91 d6 fc e9 2a ce ed 01 6c 74 00 cc bb 20 76 74 30 d3 b9 77 bc d3 3a 98 8f 47 aa e8 ae 55 4a ee 01 8a ef 10 61 47 13 ea 12 e2 67 c3 72 26 62 6b 2e 3e Data Ascii: e{\|sOILC7i'Q$nt7Gh?F=/YOi] S4tuJ0Erbv;/;AHk~+.s_+8qBj3BHk+zt0+`="vLqTg=]Zlt vt0w:GUJaGgr&bk.>
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 20 b8 7a a8 67 50 84 73 77 0e 30 cc 2a 9a da b6 45 bc e1 62 1d 7c 94 53 ce 13 ac e5 49 89 c3 1c 7f 80 d9 33 f8 9e 88 73 0f cf 9b 15 06 cf 06 61 a9 a4 3b de a6 0e e6 fc 12 1a 29 61 e2 3a fd 31 21 10 e1 dc 8f e9 60 1e 93 e9 dc 0b 97 af ae f1 a6 27 d2 95 4c f7 24 3b 6d 68 23 96 3c 56 38 e6 4e 9d fd 73 be 73 8f 2c 5a 98 3d 83 1b 11 e7 be 4c 27 21 1b 32 e6 49 22 08 d9 41 09 af b1 0a 23 0e 20 d8 f5 55 87 f4 0c 52 9d 7b 62 7d 16 c1 ee ef bb 82 b7 3c a1 2e 33 e8 8f 8d e8 62 74 a5 30 2b f6 1e ea 81 63 3f 0e 89 a4 04 2e 25 e2 2d c7 8e c1 9b ad fe 60 e2 30 c7 7e e8 08 f5 0c 32 9d bb a3 af 16 c1 00 6c 0c 78 cb ed 5c 25 a7 18 bb bd e9 b0 56 1c 7e 37 ce 8b 22 3d 83 cc f9 d6 f8 77 23 82 0f 34 3c e9 9a 39 b0 73 38 79 8a 39 f7 25 c3 cc 9b 3c a1 9e 41 e2 7c 6b 4c 5d 2e 28 Data Ascii: zgPsw0*Eb\|SI3sa;)a:1!`'L$;mh#<V8Nss,Z=L'!2I"A# UR{b}<.3bt0+c?.%-`0~2lx\%V~7"=w#4<9s8y9%<A\|kL].(
2024-04-19 14:07:00 UTC	541	IN	Data Raw: 86 77 f6 5e ce 6b 99 d2 59 8e 5f ad c1 b9 a7 b6 15 b1 d3 32 b3 47 ae f8 c5 9c 07 b3 7c ef a9 77 8d d0 fb a2 cc 26 b1 d3 32 33 91 57 ff 1b 16 dd 03 5d 6e d8 d3 73 10 3a 25 49 1b 7c cc 21 ce ab 99 35 bc 6f 0e c9 d3 73 90 39 25 49 93 b7 b5 55 ce cb 69 65 2a 98 df 34 db 49 61 91 d3 32 b3 e1 a9 6e d3 79 3b b7 b9 29 a0 35 9a e0 61 24 4e c7 d7 e4 ff e9 bc 9f f6 ce da 2f 58 5a 28 d0 b9 6d 76 41 5f e5 ca 41 e6 4e 9d db a9 60 ce 66 b3 d8 fd 7d 27 cf b9 93 a8 47 88 73 e5 22 c3 b2 27 13 58 ef 39 b7 c9 f7 f8 dc 5f 81 2b 23 e9 e4 a9 a3 c4 7a cb b9 4d 7a 2f 53 3b 8b 2b 2f f9 f5 a6 3a 2c af d6 37 3d 07 2d 3f e4 76 9f c4 95 9f cc 9b 3a 77 ff d4 e7 85 ae e9 39 e8 f8 8f 07 f5 47 04 57 9e 32 7b e4 d8 fd 53 97 e3 4f 63 36 cb 71 6e 93 c5 7f eb ca 57 e6 4e 9e 95 da cc 0f 2d 7f Data Ascii: w^kY_2G\|w&23W]ns:%I\|!5os9%IUie*4Ia2ny;)5a$N/XZ(mvA_AN`f}'Gs"'X9_+#zMz/S;+/:,7=-?v:w9GW2{SOc6qnWN-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50146	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	524	OUT	GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3008 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:54:19 GMT Expires: Sat, 20 Apr 2024 13:54:19 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 761 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	723	IN	Data Raw: 52 49 46 46 b8 0b 00 00 57 45 42 50 56 50 38 4c ab 0b 00 00 2f ff c0 3f 00 e2 50 dc 36 92 92 f4 5f f6 31 c3 2b 22 26 80 dd b6 95 34 b6 95 8d 0c 5b 98 6c 45 c3 0e 80 46 d1 16 df 22 9d ff ff 0f d9 ce 29 6f 1d db b6 79 3c 37 b6 6d 73 f7 ec ce ac 3d e7 da f6 e1 7a ef 3d 8e 6d db b6 6d 3b 39 67 e6 57 fc bf b1 cb fb 4a 69 57 a9 58 39 e9 72 95 3a ff 2a 6c 5d e5 21 24 f5 ed e2 87 90 ca a9 ec 74 36 26 76 d2 de 57 1a c9 db ff 19 92 f3 5d db 4a c6 b6 bb 6a d6 7b cb 31 ff 80 73 e5 39 27 dc bc f6 ee 2d 36 8e ee 8d 6d db 98 aa 1e 2b e8 4e 46 16 6d db c6 de 9c da b6 ed 38 b9 5f 6c db 36 df 6a db ed 9b 6d db b6 6d db ee 87 eb ff fb bf 3f a9 fa 3f 01 72 6b db 5a 1e a7 87 e9 bf 00 4c 05 6b 16 98 99 99 99 99 19 c4 d2 a7 ef 1a 4a 70 03 5f 01 2a c0 8d 08 62 47 2a c0 3d d0 f0 Data Ascii: RIFFWEBPVP8L/?P6_1+"&4[lEF")oy<7ms=z=mm;9gWJiWX9r:l]!$t6&vW]Jj{1s9'-6m+NFm8_l6jmm??rkZLkJp_bG*=
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 0b 8e 4b ab 67 80 b1 74 61 b9 56 e0 57 8f c1 99 42 a3 1f 06 8b e5 2e a2 71 b8 c1 14 e8 b2 ec c2 72 ed c6 b9 ce 43 31 85 c6 87 e1 ec 56 30 b6 46 95 01 ac f8 6e e3 5c 17 22 43 f1 9e 35 22 8b a0 c8 f9 b1 12 c6 04 bd 1b 5a ea 5a ed dd 5a 24 6e b9 17 a1 7f 83 4a b5 43 6f ce 03 71 7e 95 60 04 18 38 0a ad ee 5f c3 e1 50 7d 49 97 08 03 c4 a1 e8 f0 1b 18 36 47 16 58 23 15 81 7b 0d 11 83 79 77 fe 05 e1 a1 af cb a0 4e 10 23 39 36 60 dc 2b 13 e7 1d fe 8b c1 4d 77 26 04 89 4f 80 6e f0 ea 3c 13 35 10 9c 69 29 1a 41 52 25 8f 91 59 3d 0f ec 73 cf 38 10 d8 5f 77 32 0a 41 94 c4 44 93 d9 0e ef f6 96 5a 73 cf 58 00 6c 88 38 d0 29 8d 4e 23 fd 68 5a 11 96 db 27 d9 ef be cf 4b c1 04 71 86 4b 83 69 f3 fd 74 c1 ee f2 49 e6 bb b6 f1 84 11 27 21 d1 60 7a 71 51 45 fc 96 07 a4 cb 2b Data Ascii: KgtaVWB.qrC1V0Fn\"C5"ZZZ$nJCoq~`8_P}I6GX#{ywN#96`+Mw&On<5i)AR%Y=s8_w2ADZsXl8)N#hZ'KqKitI'!`zqQE+
2024-04-19 14:07:00 UTC	1030	IN	Data Raw: 24 4d 8d a4 68 d4 86 cb 0a a2 65 00 c6 cf ee 25 24 a5 46 02 cc 0a a2 fd 22 bb 87 90 94 ea 30 32 06 18 76 0f 26 29 d5 19 45 a3 f2 98 2c bb 1b 93 94 aa 8c a2 11 89 9e 54 6d 20 93 06 c3 e6 c6 24 91 59 e1 a2 fd 03 9b 0b 93 14 cb 8d c2 11 79 6c 36 9b 13 93 14 4b 70 e1 b0 44 4f 2c 35 90 49 83 6e 73 1a 24 c5 52 bd 68 58 02 a3 87 6e 75 18 24 8d d0 0b 86 e5 b1 d9 ac 76 83 e4 b1 db ac 36 83 24 32 cb 5f b4 cf 09 dd 62 33 48 1a a0 03 f3 4c 6b 8b d5 20 f9 43 c1 b0 c0 65 85 8b e6 9c d0 2c 56 9d a4 01 5a c1 90 38 e6 6a f9 8b 56 6b f4 d6 5a 78 2e e2 9b c9 44 2c 16 9d 22 32 eb 8b 97 fc c5 7d 2a f8 5f 8a 26 6e b6 e8 04 d2 a0 01 b3 9e 78 d5 8f a0 18 71 a9 27 1c 30 5a a5 c9 6c 3c ac 3a 34 b9 08 0d 93 f4 28 09 cc 14 e6 9a 9d 58 32 61 b3 59 57 1b 1c 1e 21 b1 21 1a ef 71 bc 13 Data Ascii: $Mhe%$F"02v&)E,Tm $Yyl6KpDO,5Ins$RhXnu$v6$2_b3HLk Ce,VZ8jVkZx.D,"2}*_&nxq'0Zl<:4(X2aYW!!q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50148	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	526	OUT	GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:00 GMT Server: fife Content-Length: 23302 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	732	IN	Data Raw: 52 49 46 46 fe 5a 00 00 57 45 42 50 56 50 38 4c f1 5a 00 00 2f ff c0 3f 00 09 89 6d 1b 09 92 84 1a 69 eb d6 b3 9f 7f c2 55 d3 3f 21 44 f4 7f 02 00 05 f0 19 27 e0 04 58 40 a2 56 31 0e e1 ce 16 1e 3f 51 4e de f4 18 14 ba 3d 62 e4 09 01 b4 ea 0c c4 2c 14 33 39 00 45 88 cc f4 57 0e 3b d1 06 90 3d 49 4e 20 d1 6e d5 27 76 d7 72 8e d8 32 fd 95 a7 54 c5 bd 99 fd 1f 50 d7 1b a5 32 d8 d8 3c 28 25 09 0f 3b eb e7 6f 94 2a ef b4 bf 2a ab 94 07 cc c3 a7 03 e3 b2 aa fe 01 bf 91 ed be e9 a6 6a b1 aa 0a ae ab 2e 40 f0 7b df 4c 47 b4 8a b3 e7 de a2 00 bf 61 ab 08 5f b8 1f b4 4a 5d c0 2c dd 0d 5e 55 17 90 39 a2 0f dc 00 55 c5 63 ac aa 25 0e a0 a1 00 fa be 6f 40 f1 71 03 1a ec 76 22 6f cc 2d e8 92 83 7b 4b 86 b8 07 b3 1d 3b b3 08 82 2f e0 8a 12 e4 85 a0 11 89 f2 7d 43 14 d5 Data Ascii: RIFFZWEBPVP8LZ/?miU?!D'X@V1?QN=b,39EW;=IN n'vr2TP2<(%;o**j.@{LGa_J],^U9Uc%o@qv"o-{K;/}C
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 6d db b6 6d db b6 f6 76 e7 f9 ef de 3b 0b b4 d6 fa 5a e7 3c 07 02 7a ec c1 ac ac 46 8a 05 95 0c 75 15 69 82 63 41 97 da fb 55 76 e1 62 8b 66 27 aa 0a ab 16 34 d6 95 d9 71 a1 a3 66 46 f3 62 b2 4e cc b4 6d e3 8e 3f e0 7d 21 c8 b6 d9 4e 74 7f b9 c5 04 d8 91 fe 5f 91 bd e5 8f bb c3 8b 46 90 41 e6 9a b9 43 6c 6b 70 c8 60 01 ba 09 cb 1c 32 77 77 8d 88 dc dd 1d 6e 4f cf 39 3d 2c e0 b3 01 c2 6f 9d 6a e4 ac a0 91 a9 a9 53 f5 ca 5d c1 54 4d d4 78 48 e6 f2 8b d8 41 57 67 9d 53 e5 dc fa c5 48 fa 16 da cb 98 98 22 a5 c8 86 c0 95 24 c9 a6 55 f5 6c 7e bd fd ef cc b6 d9 6e 63 db 56 95 7b 71 0f dd e9 c0 1d 3a a0 00 a7 15 aa 81 4c 3b 70 97 d8 dd 21 72 e7 c6 04 fc df fe ff c0 7f a3 f8 af f0 5f 43 74 f4 3f f4 df f1 5f 33 fe 6b fd 57 fe 97 fe 8b 72 e4 c8 72 39 8b cf 76 b5 26 Data Ascii: mmv;Z<zFuicAUvbf'4qfFbNm?}!Nt_FAClkp`2wwnO9=,ojS]TMxHAWgSH"$Ul~ncV{q:L;p!r_Ct?_3kWrr9v&
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 47 eb a5 a3 51 44 10 21 25 19 36 4b d6 c8 35 d6 b0 64 8d 73 1f e7 b0 d4 5e e6 b9 56 cd 32 cf b5 6a 96 79 26 7b 99 d6 5e b3 4c 6b ac 61 c9 65 c9 1a 36 8b 8d 88 ec 88 10 41 87 ae f6 8e ea af a7 2f fe fd 18 cf f3 90 35 72 59 a4 0f 16 1d 4b 47 db c3 6b 5b 36 82 70 59 7f 8f af 51 1d e7 7d 56 94 0f 67 1a a9 14 8f c8 ed fd 25 ef 5d d5 14 81 10 22 64 86 94 23 05 d6 a8 32 6b 50 18 55 46 ca cc a5 94 4c 2b 0d 99 56 1a 32 2d 46 ce 62 e4 48 28 8c aa fd 64 d6 a0 ca 4c 64 1a 1b 42 8b 10 82 6a 75 37 6b ab f2 6f b3 cf c1 c9 cc 24 f3 da 65 dd d5 76 77 cf d7 3d c7 f4 da b4 3e b2 73 0e ec ee e6 5d f9 e0 4a 23 8b e7 61 74 8c f7 41 75 85 70 d9 12 36 56 1a 63 19 ab 18 95 63 31 97 a1 12 ce dc ec 69 9a 61 f2 98 19 c7 64 ce 8c 63 32 67 c6 31 99 2a bc cb ac 79 f4 2c ce dc c8 65 a8 Data Ascii: GQD!%6K5ds^V2jy&{^Lkae6A/5rYKGk[6pYQ}Vg%]"d#2kPUFL+V2-FbH(dLdBju7ko$evw=>s]J#atAup6Vcc1iadc2g1*y,e
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 0e d8 e5 52 ce 4a 4b d2 22 5a f5 bb ef 87 10 63 ad e9 1f 87 6c a1 83 54 b0 17 fb 60 27 4c 44 68 f4 4f 2c 3f b9 8d 2d 7d f6 a7 a1 ca c8 52 aa e6 92 05 a5 7c 70 73 b9 d9 ae 6c 96 cb cd 72 b9 59 2e 37 cb e5 66 bb b2 d9 5c 8f be b8 39 ab ca 2c 6a 95 91 35 94 e8 60 8b 67 4b d2 46 13 11 9a b4 c2 48 45 99 46 64 a4 0e e2 08 ef 3b f3 dd 5d a5 8f 0e 44 e5 8e 5a ec 6b b2 42 2b 11 a9 5d 56 fe 86 b0 b1 e7 67 d6 c6 ac 2c 0b 8a 72 33 6e 6c 5e 2e 2b 5f d8 54 fe 4a 5b 9c f1 2b 6d 71 c6 af b4 c5 19 bf d2 16 67 bc b0 a9 7c b9 7c 6a 97 db 8d ad a0 58 cc 5a 35 0f 73 77 e4 88 e1 bd 45 fc d9 86 17 32 ba 5b 88 e2 2d 7d e5 34 94 ca 61 08 19 ad 1d ac 3a 22 08 22 ad 71 aa 5a 24 16 21 88 f0 d3 8d 94 5f e4 31 0c d4 2a 0a e5 5f 18 2e 37 cf 11 6c 87 e7 f8 14 db f1 3a 5e df 1c 35 ee 5d Data Ascii: RJK"ZclT`'LDhO,?-}R\|pslrY.7f\9,j5`gKFHEFd;]DZkB+]Vg,r3nl^.+_TJ[+mqg\|\|jXZ5swE2[-}4a:""qZ$!_1*_.7l:^5]
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 72 e6 53 28 a3 d6 5e ec 4b 49 46 de ba 19 04 9d dd eb e7 9e e6 81 e0 75 71 59 14 a3 62 d8 62 fa 4f 22 56 4b af 39 c7 ae 5c df 2e 82 e3 f0 8a fb 70 e4 6c d9 68 97 79 63 2c 19 6b f7 ec 9d da 3d c3 e8 38 f3 30 7f 7a fb ba 1f dc 1d d1 41 a8 e8 70 d9 c2 65 0b 97 2d 5c b6 80 8a 0e 42 45 07 65 fb ba 1f e6 4f ff 5b 6e c1 8a e1 19 a6 93 67 21 59 79 ed 6a b7 f0 16 5e 2a bd a2 da 73 bb 16 50 73 29 bc 3a 32 f4 4f 7e 1d a1 9e b9 ca bc f6 62 93 46 18 8e fa b3 25 9e 02 e1 72 b8 9a 32 05 0c f6 17 67 6e 0b cf cc f0 3e 8e a8 7b e8 0a dd a1 03 1d 3a 82 08 1d 41 84 8e 20 42 47 10 a1 23 e8 d0 81 0e 1d dc ef a1 8f 23 aa c2 fb b9 c5 bf 67 a6 ee 75 ca f2 22 61 7e 28 20 4c db 56 ac ea 0e 3b 09 ed b2 26 8b ed 68 b6 08 a8 89 72 75 b3 bd e2 9b ba 57 fd bc 7a 0b 52 fb 60 4a b9 4a 1e Data Ascii: rS(^KIFuqYbbO"VK9\.plhyc,k=80zApe-\BEeO[ng!Yyj^*sPs):2O~bF%r2gn>{:A BG##gu"a~( LV;&hruWzR`JJ
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: fb 5c e4 fb d3 e7 fa 66 4f b3 3e d9 d3 ac 4f f6 34 eb 93 3d cd fa 64 3f 7c ae 6f eb 37 c4 8a a8 df 10 a2 bc 34 fe 68 3a 0e d1 8a 15 78 d7 aa af 35 ec 96 91 3b 32 96 d6 11 d1 47 5b f7 d8 c4 6f 5a 55 9f 6b 8c 8b 74 19 6c c7 e1 70 35 ad 71 5a eb 29 84 28 d7 83 84 3c 27 e4 4a 0a 8b 80 08 d1 88 e4 d5 c4 d1 15 25 b6 52 74 ad 1c 23 e7 9e 47 9a 0f 2a 96 4c 2a 96 4c 2a 96 4c 2a 96 4c 1c 69 3e e6 67 3e 73 54 a6 7a 96 8a 12 db d1 f5 09 a9 9b 88 10 2e a2 82 b6 6a 99 29 97 61 17 22 23 11 42 df e5 b1 85 af a4 72 59 3e 9e 24 6b 1c bb ad 44 47 53 2d 90 21 ad 31 ea c2 c8 9a 54 10 25 44 0b a1 b3 25 f5 59 1c a1 1e c7 94 51 25 3d f2 f1 c0 9c aa 94 2c cb f5 e5 fa 72 7d b9 be 28 59 b5 4a e5 9c b6 87 4c 8f 47 54 e5 31 ad 50 9f 45 e9 ea d5 9d 22 44 07 0e 31 ad 62 25 09 35 14 29 Data Ascii: \fO>O4=d?\|o74h:x5;2G[oZUktlp5qZ)(<'J%Rt#GLLLLi>g>sTz.j)a"#BrY>$kDGS-!1T%D%YQ%=,r}(YJLGT1PE"D1b%5)
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: cb 10 9e 81 e7 de 91 f7 56 e3 6d f6 9c 3f e4 cb ed 62 55 99 6b 65 c4 33 df 87 68 9f 0c 94 9e 6b 55 66 e6 60 8c 9c 6a 87 a8 e8 a0 7f c4 4b 1d 8f 3a 72 a7 28 ff e4 af 8a ed 07 ee 74 fd e8 ce 35 a5 89 f2 4f a6 24 59 99 72 51 59 aa 52 55 a9 4a 6b 2d 55 e5 a8 52 95 aa 4a 55 5a b9 e4 da ad 69 24 52 7e e0 66 69 f5 39 fd fb 73 ff f1 d3 da 08 cf ed 69 c3 e6 66 99 1e 69 46 76 95 38 9a 46 1c 81 2a 16 56 e5 be 08 57 5b 1c fa 58 f3 51 1e 7b 4a 1f 0c 92 03 0e 79 66 76 7e fa 6f 6f 5b 50 ee 3e 98 57 32 8b cc b1 56 8c 5a 35 57 05 8c 38 e3 61 18 51 31 b1 7f 9d 86 61 c4 19 0f c3 88 0a 56 cd 25 7e 99 2a 6b 40 e6 9f 1b 09 e1 13 a7 cb 1f 53 ff 1c 5e a3 78 6e 65 bb b2 51 94 5a 73 cb 99 db d2 41 45 36 51 21 d6 5c cb 9c 95 94 e8 2b e5 fd 69 0a f6 ca 52 6e 3e bd 5e c6 11 fc b6 1f Data Ascii: Vm?bUke3hkUf`jK:r(t5O$YrQYRUJk-URJUZi$R~fi9sifiFv8FVW[XQ{Jyfv~oo[P>W2VZ5W8aQ1aV%~k@S^xneQZsAE6Q!\+iRn>^
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 5a 14 a5 a6 07 33 1f 73 66 96 0a 2c 21 4a 94 10 dd 41 08 b4 b0 75 e8 08 5b 87 16 02 2d 04 c1 21 38 88 8e 77 61 95 f1 c8 87 95 35 2b a7 52 43 b1 c9 8e 08 11 ad 0b 1d fb 57 4c ab 8e 91 35 a4 74 59 bc 63 69 3d 7a dc 09 f1 11 c7 fb 24 3b 03 87 8f d6 58 52 88 f7 f4 ee 6e dd 21 08 04 d6 28 92 65 a6 ac 95 54 96 22 94 10 1d 2e a3 c3 65 b4 9b 99 46 36 3f 69 64 fb 27 03 41 07 42 8b 26 b0 4a 3d 4c f9 50 d2 a3 a4 3a 8d 4d 0a 1d 81 d6 9a f9 15 b3 ab 58 8c 74 bd 88 e9 75 ef 57 f5 37 1d 17 a1 0f 1e ee e3 2b 4c 97 79 91 c6 c1 f4 7d f6 c1 dd 3b 84 a6 db d2 46 19 c5 54 e7 5c 66 ca 29 02 07 11 ba 43 6f b4 8c 5e 49 67 f4 73 11 8b f5 d4 5b bd ac d0 5b bd ac d0 b1 58 4f 1d 8b 95 f8 61 25 1d 6d 1b ed 32 02 a1 a2 cc b4 ab 34 96 a9 4e 43 8a 95 3a ba 31 95 5f b1 ed 17 9e 85 24 a1 Data Ascii: Z3sf,!JAu[-!8wa5+RCWL5tYci=z$;XRn!(eT".eF6?id'AB&J=LP:MXtuW7+Ly};FT\f)Co^Igs[[XOa%m24NC:1_$
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 1e 52 4b fe 87 80 57 2a a8 e8 38 f2 c8 a3 0e cf f3 50 af fb 3f d6 ea f2 f3 9e 72 f2 33 67 d4 17 fe 33 a3 be f0 9f bf 23 77 7e de 6f f9 56 7f fa af 7b 8d 23 aa 38 8e 43 04 5c b1 a0 22 e4 43 93 ba d3 29 54 cc 1a 88 24 b7 1f b2 5d 0d ca b4 72 57 55 2c 68 81 32 67 c6 a8 ac aa 68 ff f6 ee 0a d7 8b 5a f3 51 ec cb ed 16 a5 33 c6 96 15 1d 35 ea 28 b3 24 ae 52 32 12 74 ad 3a d2 30 de 72 fc fe 4d 44 cc 3d f9 ac fa f1 47 7e d6 69 9e 52 9d e6 29 1d df 3f 16 9f c7 f1 23 cd cf 6d 9b f3 6f 3d 7d a7 37 77 8d 04 7d 0e 8d eb 1d 9c 98 6a 54 15 8a 78 b6 24 6d 04 51 41 9a 8f 5c 06 32 b2 31 d5 61 3c 94 dd af e8 8e 0e 21 ca ce 94 ec 2b a9 d0 1a cb 6f 8c 4f 1b 99 ef d3 52 dd 42 4b 1f c6 ff 40 bf 5f e4 fb e0 f7 f9 3c 3c a7 59 2b ac d6 71 84 03 0e 0e 38 38 e8 38 c2 b3 75 1c 87 e7 Data Ascii: RKW*8P?r3g3#w~oV{#8C\"C)T$]rWU,h2ghZQ35($R2t:0rMD=G~iR)?#mo=}7w}jTx$mQA\21a<!+oORBK@_<<Y+q888u
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: df 79 23 e0 fb 1b eb 77 ef c3 7b 7e 80 55 83 8d af b4 bf a2 ad b7 36 50 ae 6e 36 db 33 7f aa 0c ee 9c ae 26 12 c5 c8 91 f9 fc 8a 8c 46 4d c0 90 0b 76 a4 e9 21 f1 30 25 1e a6 34 b1 4b 94 61 34 b5 db 57 ec 41 96 bb fb 60 f9 60 f9 db 33 77 55 c5 f3 06 d2 2e 60 b3 d5 7c 7f d6 6f b9 5d 3a fc 8e 6f f3 9d f2 d3 ed c2 50 19 2f d1 23 b6 e0 ae 88 66 fe 5f 32 e0 41 50 2a 2a a0 a2 02 2a 2a 28 0f 2b e0 81 ef 36 44 a1 bb bd b7 6d d3 dc ad 90 48 e9 ea 11 2d cd e9 69 62 b3 b9 ba ea 02 67 4b cb e2 f2 4b 57 a5 df a7 c3 e1 e6 b2 63 55 98 de 19 e8 6e e2 27 bc 21 1c d3 88 b3 11 32 ba 09 a9 9b 90 ba 21 38 c0 24 8c a6 36 74 eb 9e b6 8c 9c e3 a5 94 61 20 83 8e e3 78 3f c7 ce 3d 97 d6 17 77 e6 fd 4e a8 a5 66 84 3d 8f 32 75 7a fa e8 c0 aa 11 19 44 47 5f 46 04 86 9a c2 8a 10 a2 23 Data Ascii: y#w{~U6Pn63&FMv!0%4Ka4WA``3wU.`\|o]:oP/#f_2AP****(+6DmH-ibgKKWcUn'!2!8$6ta x?=wNf=2uzDG_F#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50150	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	526	OUT	GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 4004 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	733	IN	Data Raw: 52 49 46 46 9c 0f 00 00 57 45 42 50 56 50 38 4c 8f 0f 00 00 2f ff c0 3f 10 1e db fe 3f ab 76 db ac eb 3c 42 1f a0 af d3 4f ef 7b 97 98 ed 72 1b f0 39 47 70 f6 ac 32 73 fb b4 06 9d b3 f7 7f cd da bb dc 35 f1 29 83 ec 32 4a 0a f3 91 c2 cc 39 ce 18 83 ca 52 65 0c 33 4d 58 0e 48 8c 64 5b b5 55 69 eb bb bb 0b bc f7 ee de 33 e7 3e dc 1d 82 40 76 24 49 8a 64 a5 a0 a7 c1 53 ee 49 c1 ef 7d d1 31 33 0c ef ee f0 b8 04 48 92 4c db fa b6 6d 9b 0f df b6 6d db fe cf b6 6d db b6 6d db b6 df b7 79 0b 16 24 5b 55 a3 73 cf 14 98 d7 8a 65 b2 c6 28 5c 7f 53 e3 c7 2f fc d7 4f eb c8 25 33 5d b2 ee cb af ed a7 e1 ba 87 98 97 16 c1 dc c3 d4 cb 9d e4 e1 11 40 08 f4 f2 20 79 92 ac 08 66 5e 1a a4 37 a4 9b 9f d1 51 77 16 51 97 4c 6f 44 b9 64 35 b5 db 5e ba a4 20 42 79 ab ca df e4 8a Data Ascii: RIFFWEBPVP8L/??v<BO{r9Gp2s5)2J9Re3MXHd[Ui3>@v$IdSI}13HLmmmmy$[Use(\S/O%3]@ yf^7QwQLoDd5^ By
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 8b f9 51 45 3b 33 85 18 ed 61 4b 22 6b 0d 44 16 92 71 22 35 88 6a 8c 26 e4 ee d4 9a 08 5b 77 7c f6 de bb fe b1 c2 85 08 ed 92 a1 84 6e a9 0d d6 ef de b0 2a 67 ac dd b8 fc 59 b0 fc a5 b1 12 9f dd 65 e6 74 ba fe 5f 1f ac df bd 66 55 4e 59 9d 33 86 ab 73 2e 98 98 46 01 d4 9f fc 97 85 2c 34 5e d6 8e d1 52 2f 0c 87 a7 e4 84 ce f2 20 00 5a e6 5c 32 84 81 8a b6 65 d6 6a 86 e1 f0 94 1c d3 5e ec 40 9a 90 16 5e 45 39 30 49 4f e1 4a ed 30 1c 9e 9c 63 da 2f 77 20 fd 81 af 11 0a ad c9 72 aa cb 44 bd 10 c2 46 08 0c 5d af 19 7a ba f5 a2 03 e6 dc aa 92 c0 cf 78 a5 5e e8 63 dc 13 e4 91 a0 7f 68 b6 be 18 0e 97 c7 56 3d 28 9b 4b 84 43 6e 6f 8c d1 62 35 c6 70 38 98 a8 91 11 77 b9 64 28 a7 cd 2d 13 11 db 16 22 16 8a 72 d1 ed 19 ee 13 c7 59 20 56 b8 22 96 27 e8 69 57 f5 a3 cb Data Ascii: QE;3aK"kDq"5j&[w\|n*gYet_fUNY3s.F,4^R/ Z\2ej^@^E90IOJ0c/w rDF]zx^chV=(KCnob5p8wd(-"rY V"'iW
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 58 12 c4 dc 61 84 43 50 fd 29 1b 76 af 59 95 53 30 68 26 58 85 d1 e6 fa 00 25 f9 c2 df df eb 2a 6b e2 8d f5 4f a9 69 ce 59 5a 55 fd b9 88 1b 3a ea 2c f7 2c 60 50 eb 74 f3 3d 4c 7f 41 82 2a 09 59 a9 aa 3c 5c 7b 76 82 31 c9 f8 c5 fd cf fc c0 94 f9 06 be 65 eb 13 82 aa b8 64 45 08 91 94 33 aa fc d0 8f 4f 22 55 45 28 eb bd 18 6d 9c 1d 5d 6c e2 85 8e da 8b 1d fb 30 68 f6 d2 0a 21 42 85 80 4a 52 7d aa 28 42 95 f4 9b cd 09 0e 4c b6 cd 28 70 77 af db be 66 75 4e 81 a0 42 a8 0c a1 ae 33 a8 d2 b7 33 00 fa 9b 15 3a 3a e3 b9 61 19 82 6a 97 89 00 f2 c3 39 54 d9 ae ea 2f 80 32 0e 48 b9 5d 50 b3 18 54 3e 3b 3b 88 d7 7f 32 48 04 9d ea 94 33 27 74 f4 a9 db 37 06 10 34 17 32 c5 8b 54 07 5a 06 d9 25 13 2b 53 d6 8c 50 9d 98 46 f6 41 50 e9 ba 34 e1 75 23 a8 fc 6b 65 ca 9b 11 Data Ascii: XaCP)vYS0h&X%kOiYZU:,,`Pt=LAY<\{v1edE3O"UE(m]l0h!BJR}(BL(pwfuNB33::aj9T/2H]PT>;;2H3't742TZ%+SPFAP4u#ke
2024-04-19 14:07:01 UTC	761	IN	Data Raw: d4 53 bf ab 2e 19 47 6a 95 dc 7b 90 16 42 cb 25 09 ab f3 a7 15 57 5e 50 5b fd ee 16 ed 55 ab 4a a6 24 25 64 26 67 c3 7b ee 5b 99 33 60 59 b4 9b 35 d6 ef 72 77 b8 e0 11 de aa e2 b7 99 c9 1f f6 78 5c c0 cf f1 6d c0 d5 21 2f a4 9a eb 77 db 25 93 77 04 99 d9 45 e8 c2 38 27 a5 ba eb 77 3d 84 5e b9 44 81 e5 4d 69 ab 62 ea 77 3f 0e 1d 7c 4f 91 e5 f2 76 cd 8c 69 dc 85 18 74 11 b2 ae 79 6f da 5e 31 8d bb 11 01 e0 c5 30 9a da d2 98 c6 5d e1 ae b3 a1 75 cd 73 a9 87 62 1a 77 87 f9 ab bd a7 d8 f2 8e 9e 8d 8d 69 dc 25 ce 3a 88 ad ab 2d a6 de 8a 6a dc 2d ae 5a d9 0b 5f 00 d7 f6 6b 70 dd 8f bb 96 ce 9f 83 37 ff 50 ea ab 9a 1f 77 6f 1f 3c b9 a1 3c bb bf 44 9b 6b 7d dc c5 a3 01 9a fe 44 a9 66 d7 f7 b8 9b 07 e7 f1 d8 f5 a9 9c 6a 7a dc d5 a5 5d 92 15 ae e9 bf a4 92 51 cb e3 Data Ascii: S.Gj{B%W^P[UJ$%d&g{[3`Y5rwx\m!/w%wE8'w=^DMibw?\|Ovityo^10]usbwi%:-j-Z_kp7Pwo<<Dk}Dfjz]Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50151	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	524	OUT	GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9108 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:04:55 GMT Expires: Sat, 20 Apr 2024 14:04:55 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 126 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	723	IN	Data Raw: 52 49 46 46 8c 23 00 00 57 45 42 50 56 50 38 4c 80 23 00 00 2f ff c0 3f 00 4d 38 8e 24 c9 51 22 6f f6 10 db fe 5b 0c ac 40 bd 23 fa 3f 01 e9 a4 93 4e 3a e9 a4 93 4e ba ff b9 16 b4 b1 5a 52 bb 1c 43 da b6 d4 82 4c 64 57 6d 8a a5 43 b4 73 57 ea d3 ea ba 27 96 0e d1 b8 e1 86 5b 15 aa 8c 1f f1 3a 0f 55 26 33 53 65 b6 26 aa 32 13 a3 0f a6 da 8c d1 cb 93 4b 6b 43 97 a1 95 f1 65 83 20 08 82 20 88 2f b8 90 1d 49 92 22 59 6e f7 75 fa 4b 18 f6 24 60 e6 99 a6 79 12 38 8a 24 c9 aa f2 c8 89 18 09 e5 5f 15 02 10 00 ef 33 01 29 92 24 47 52 f0 47 e9 db 62 4e df 15 80 7b f4 9f 81 db 46 8a 9a c3 ec c1 e2 27 82 22 9e f9 94 79 e8 07 32 57 32 e3 0f b0 f7 22 f1 96 bd 37 96 75 88 48 86 f1 c8 77 95 22 de 2a 45 c4 c7 7b 6b d4 5b d1 ec df 58 bf 7f 7c d6 54 1f 89 08 23 c2 2e 1b 6d Data Ascii: RIFF#WEBPVP8L#/?M8$Q"o[@#?N:NZRCLdWmCsW'[:U&3Se&2KkCe /I"YnuK$`y8$_3)$GRGbN{F'"y2W2"7uHw"*E{k[X\|T#.m
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 61 4e 06 33 d2 ce df 9e d8 cd c9 f5 27 e5 2a ff 71 e5 e2 01 cb 9a 52 e2 a5 ab c2 81 5f b9 5d 72 39 5a 57 62 74 e9 5c fd aa ce 55 95 d5 56 94 6b db 56 6d 2b 63 ac 23 f7 c8 77 7f fe ea 64 40 76 44 06 49 50 76 77 bf 7a f6 94 a4 6d db 5a 27 cf fb fd 49 da a4 ee ee ed 0c 67 05 0c 99 b2 16 2e 66 6e eb 60 01 2c 81 2d c0 d8 1d 2a c8 71 cd 39 f9 bf 70 c4 46 92 d4 0c 22 6c 38 bb 6b 17 98 cd f9 ff cd f3 c6 3f fa 1f 47 e0 05 80 38 a8 e7 78 96 d1 15 4e 00 ee c3 71 d4 c7 23 a5 05 96 cf 05 08 c3 11 0f e8 de 80 17 31 4c be 94 2e f9 02 8f 87 0f ff f6 42 84 7d 66 2e a1 cb 43 fc bc 43 e0 ee de 5a e3 19 b2 2a 95 a7 18 a1 8b e7 0a a8 c0 41 86 aa 78 a3 eb f3 14 38 c6 e0 61 f9 5c 95 ce 4b 88 02 74 73 38 56 ba d0 c5 f2 b9 54 5d b0 6a 94 50 f4 e5 73 55 e8 b5 17 09 17 d0 d5 ab 90 Data Ascii: aN3'qR_]r9ZWbt\UVkVm+c#wd@vDIPvwzmZ'Ig.fn`,-q9pF"l8k?G8xNq#1L.B}f.CCZ*Ax8a\Kts8VT]jPsU
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: fe 1e 50 9b ef ba 7e 2b 89 19 a4 42 a3 03 c2 2d 83 14 cd c0 c5 c2 0c 46 49 4d 9c a1 6e c2 4f 3f 94 e7 96 76 bd f1 59 69 7c 2a 4b 97 b6 2a 74 bd 22 10 34 ba ed 8a d2 8d d5 e9 cc ab 5e 69 e5 4c 44 42 43 08 52 6f e1 84 ad 80 d3 77 b1 a7 6e 48 b3 db 9b 22 a6 a4 d4 cf 2d ed 12 aa 6e 8e 43 01 02 43 09 49 57 10 04 45 84 45 5e 4a 28 49 90 1c 0d 91 9b dd 7c 5c 1c 44 a3 3a d7 0b 0d 41 80 de 7b 37 53 86 e2 5c d5 27 90 c5 ce 7b ed c6 21 00 83 25 ed 02 42 a0 34 ea 1a 01 80 fa 31 73 54 64 3c e6 e5 62 42 63 d8 15 42 ea 33 aa 77 9d 5b 79 ae 47 39 33 ac 62 6f b8 aa 4e ed 81 8b 54 bd 76 36 ce 42 71 e7 a9 5c 56 30 e7 ac de 3a 0f 47 3d 66 ea 22 c2 b4 b3 07 12 d4 41 40 4f e7 96 9f ab c3 b1 9c f8 b9 38 0b b7 5d 7c 36 d7 fa 9c c2 de 81 78 29 de 5d b8 c2 b7 54 d9 a9 73 f6 aa 4b Data Ascii: P~+B-FIMnO?vYi\|Kt"4^iLDBCRownH"-nCCIWEE^J(I\|\D:A{7S\'{!%B41sTd<bBcB3w[yG93boNTv6Bq\V0:G=f"A@O8]\|6x)]TsK
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: fc 7d 83 79 b9 8e e3 0f f9 5a 9e 9b 76 1d 87 4a 67 17 d5 a9 3d e8 55 74 a2 76 42 be 1b d7 07 d7 7f e5 ba 42 31 b9 ec c2 89 3b d3 8b c0 f2 94 e7 e5 aa bd 3c 37 cb 05 5f ef 42 22 57 aa bd 3a 9b 18 9f fe 3e 98 fd 9d 7d 70 5d 33 5c 05 7a 4a cb 06 58 7f b6 d1 9c 67 c2 d3 86 f0 79 b9 56 fa 56 9e 9b e5 aa 8f 7a 01 fe 5e a5 2b 40 a8 76 d7 f7 9d e0 51 3d d3 e5 49 b6 26 f3 73 61 03 c6 4a 40 0b dc 14 98 9a 19 b9 68 d4 f2 dc 4c 97 db c3 c6 41 aa 0c cb 95 12 17 6d ad 24 5b 4c 14 05 a8 9f 83 64 b9 79 84 42 fa 7c 5c d4 b5 3c b7 84 2b 30 1c 8d d5 b4 3d d8 2d 7d 96 2b 0f 17 61 42 03 0e 27 f1 c3 ae 3a 16 4a a0 b3 99 91 cb 0f 42 f7 f2 dc 94 cb d4 20 24 67 53 77 1f 3c 45 2e 09 42 ae 5c 21 42 6d 41 e3 e9 51 61 66 13 cc c8 45 ab 51 9e 9b e9 6a ab 10 d5 41 97 58 89 6a 4f 99 2b Data Ascii: }yZvJg=UtvBB1;<7_B"W:>}p]3\zJXgyVVz^+@vQ=I&saJ@hLAm$[LdyB\|\<+0=-}+aB':JB $gSw<E.B\!BmAQafEQjAXjO+
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: ee 02 2f 47 84 88 26 6c e3 c0 9e 97 eb 40 07 23 ca 73 33 5d 96 cd 12 98 6a b2 5d eb f3 e9 91 d0 1e 29 41 fc fe 81 eb be 3b 98 e7 80 0b 83 a5 99 8f eb 49 c5 cb 73 b3 5c d9 a3 d1 00 15 b8 c6 90 c5 c8 7a 74 5f fd 03 29 ae 46 84 95 48 6a 6d ec 31 27 d7 8d 46 8c 92 5b d6 72 95 e4 78 f4 32 97 63 f9 bf ce 81 09 03 84 99 88 3c 6c c9 9c 5c 2b ae aa 60 04 57 2d b0 da d9 ff 54 e8 72 3b e8 dc 38 c3 aa c2 04 b9 79 90 68 9a 4a 6c 4e ae 56 9e 5b c2 65 77 c8 36 1a a0 6c 97 0b 67 ad 9b 57 1b 13 ea b7 fe 4a b6 3c b7 b4 cb d9 32 77 24 9d 28 70 01 a7 a5 7d 91 5f 43 ec 06 db cc 7e c2 9c f4 66 ea 3a 62 79 6e 09 57 2d d9 97 2d 72 85 90 d2 78 f7 31 5e 6c 32 b1 ed 26 93 48 67 12 3e 2b 97 88 d8 ca ab 3c d7 0a 3d 29 ab a6 a4 52 e4 3a 65 5a 0f dc 1a 21 51 73 50 a3 3d 3f 9d f0 39 b9 Data Ascii: /G&l@#s3]j])A;Is\zt_)FHjm1'F[rx2c<l\+`W-Tr;8yhJlNV[ew6lgWJ<2w$(p}_C~f:bynW--rx1^l2&Hg>+<=)R:eZ!QsP=?9
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 3d 2f 3c 23 0f f2 ab 43 65 18 d1 7b bd fd c6 89 d6 ac e3 ae 33 e6 bc 0c a4 90 26 b7 e2 5c 3d d4 85 7a 07 be f0 36 28 80 0d 29 01 ed 72 31 ea a7 14 58 ab 2e 33 da 89 cc 4e d2 55 08 a1 e2 e3 f0 b0 67 bc 79 41 e9 18 9c d8 10 64 e9 1e 4f 6c da 7e db 49 c5 04 36 8e 91 5b 71 ae e1 7c 70 0d 51 15 24 24 54 b5 36 51 19 e5 72 d3 4f 42 f8 50 08 4c 53 c5 c8 1e 38 d2 a0 92 3b 39 d7 c8 0f de 52 5c f6 53 94 13 a5 30 e6 04 00 43 c6 13 99 75 3c 9e fe 4d b2 97 81 5b 61 ae fa 2f d4 1e a0 9c 9b d8 bd 7f 03 2e aa 6e 4e f5 3d 60 4d 46 8f 5d a6 ce b1 ea 2f 63 8a fd d4 40 3e 29 84 74 e5 32 8b 2e 3c 75 be 84 7d 1a 31 9d 0b cc c2 c7 1a 8b 3b e6 fe cf 55 3f e7 df e3 61 4c 00 0c 8a 95 43 b5 74 6e c5 b9 aa 33 b1 8b 6b f0 93 30 e7 66 c4 77 f5 3f 4d d7 5a ca d6 cc 01 fe 5d 18 5f a2 b7 Data Ascii: =/<#Ce{3&\=z6()r1X.3NUgyAdOl~I6[q\|pQ$$T6QrOBPLS8;9R\S0Cu<M[a/.nN=`MF]/c@>)t2.<u}1;U?aLCtn3k0fw?MZ]_
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: a5 34 38 8b ba fc b9 2f fd da b3 b4 d1 05 98 53 a8 14 4d e3 e2 f7 14 13 0f e8 8e ca 0e eb 37 1e e4 56 49 71 6e e5 ae cf 2a 3c 6f 7d 15 35 62 d0 19 fb f2 4f 82 6c 57 56 ee 38 d5 69 70 c3 ef d4 2c 07 56 63 e2 a4 01 22 69 90 91 8e eb 1a 50 0e 84 45 ff 34 a0 f2 c6 93 4e 71 6e e5 ae b7 83 09 cd d0 ee 51 3b ab b4 59 2b b6 7c d7 5f fc c0 7f 0d 55 b1 b0 36 c9 48 df 53 68 c5 b8 2e 66 bb 1e f4 bf bb 50 57 95 cd 0d ca 73 2b 77 ad 08 47 95 73 b3 3c 3b 95 a1 0b 63 81 eb a4 e7 c1 2d 7f 08 d1 42 92 8a 5d e8 55 75 32 45 23 e9 11 5d 04 34 81 6f c0 de 5a 53 e7 d1 99 e2 dc 46 70 35 74 15 ab 10 3c 54 5f 1a b0 16 b9 0a 91 b2 b1 09 86 a0 05 d0 4e d6 23 f1 be c2 c8 2e 26 3b 12 74 97 d6 b7 5a 2b 8d 37 d6 d2 dc 46 74 35 3e b9 71 55 d7 c2 55 cd 56 ad cc e5 63 33 7e 08 c0 38 bd 4f Data Ascii: 48/SM7VIqn*<o}5bOlWV8ip,Vc"iPE4NqnQ;Y+\|_U6HSh.fPWs+wGs<;c-B]Uu2E#]4oZSFp5t<T_N#.&;tZ+7Ft5>qUUVc3~8O
2024-04-19 14:07:01 UTC	855	IN	Data Raw: 02 6d 25 e5 08 5c fc 26 60 a0 08 53 1a d3 f1 c1 10 a8 bf fe 7a 52 f7 21 a4 7e 52 d7 21 0e b7 0d e3 92 e5 ba 8e e3 da 7e f2 89 77 57 be 9c 14 63 18 dd 61 ba 02 06 33 80 9d fe 1b 3a 5f 07 45 a2 22 16 9c de 23 06 44 30 66 2e 45 ae 27 b5 cc b5 f7 d6 ba bb 3d 4e 51 f0 1c 4b 0c 7f b2 4a 84 3b b9 0d 5e 3f 84 b7 37 ef 90 df ef d9 77 10 c6 80 9c c2 a5 84 03 c7 13 2f de f4 a4 64 14 97 c9 5c e2 6c 76 20 32 74 b2 f0 c9 71 ce 8c df 04 41 7a 16 9c ca 04 dc f2 27 bd 29 fe 77 1b bf f0 f2 ad 3f 2a c3 44 bb 84 65 74 57 7a 6c ba 1b 0d 88 18 9e 36 88 cb 94 2e d7 8a 7b d6 08 d8 57 28 73 5d bf 07 7f 90 f2 5e a7 78 19 75 5a 15 82 01 33 0f 90 d6 9b f0 19 77 17 21 04 e3 b8 0e 07 f9 ca c6 89 5f 78 e3 d5 48 d9 a4 df f7 e9 b8 12 bf ef a0 67 cd 20 e5 ae da 1a 36 77 d3 b8 ef 31 9e 07 Data Ascii: m%\&`SzR!~R!~wWca3:_E"#D0f.E'=NQKJ;^?7w/d\lv 2tqAz')w?*DetWzl6.{W(s]^xuZ3w!_xHg 6w1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50152	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	524	OUT	GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 4932 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	733	IN	Data Raw: 52 49 46 46 3c 13 00 00 57 45 42 50 56 50 38 4c 30 13 00 00 2f ff c0 3f 00 09 87 8d 24 49 8d 76 a6 f1 37 ce 3f 62 c4 32 12 01 44 f4 7f 02 e6 09 25 e9 cb 67 a2 46 92 e8 b6 d3 cc 8c 2b 8f 9d bf 6e d3 69 70 17 5a 86 94 85 cb ca b6 97 0d d1 6a ad d1 d6 4b 34 97 ef f1 a5 24 99 ad 92 4e 82 bb 7c 6b 22 65 7d dc 45 b4 60 ca bd e0 f2 b7 05 4c 59 b8 0b 2d b3 80 1d d9 b6 69 ab 9f 6d 7b 07 f0 fc c5 fc a3 b2 16 ea be 00 dc 46 92 a4 48 79 7c 22 3f ff c4 88 e7 bf 49 6f 01 83 e8 36 92 24 45 ca 88 17 f1 98 a1 e3 a5 f7 df a2 35 61 4d e8 ff 04 e0 3f dc 1c 3e ab 86 4d fd bb fe dd fb d5 43 4c f4 43 7b 7d 5f aa b0 68 00 f3 a5 cf b5 6e 3a fa 97 db 72 f9 7e b2 54 6d 2e 1d 7f 26 fd 66 9a 37 fb cf c3 ff 77 df 77 f2 e0 a8 6a 1e b5 41 72 5d 33 48 93 ee 43 61 40 b3 43 36 89 d1 44 c8 Data Ascii: RIFF<WEBPVP8L0/?$Iv7?b2D%gF+nipZjK4$N\|k"e}E`LY-im{FHy\|"?Io6$E5aM?>MCLC{}_hn:r~Tm.&f7wwjAr]3HCa@C6D
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 46 28 98 e9 cd 24 88 f4 b4 51 77 e2 b1 6f 7d b5 ce 35 18 c5 07 00 53 c9 3d ec e8 b1 6f ff 64 76 33 55 af 98 92 f0 b5 38 92 7d e0 be 51 f1 17 79 de f1 d8 4f ae ae df 45 a4 47 0f 89 66 b9 5b a3 bd c0 2f 00 00 0f 10 1c 78 25 8e cb ac 36 df d7 7c b3 79 10 4c 01 de a8 2b 17 12 f0 a0 51 3f b8 5e 59 62 77 1f bd d2 be 42 d2 c3 77 70 5c fc 10 01 c0 53 c6 33 1f 8e 8b 3b d9 03 10 12 38 66 3a c5 f4 8d 03 40 28 ee a4 ac 30 cc 73 e4 3a f8 01 00 00 a4 03 b8 2f 4e 26 99 22 32 9a 24 02 00 02 e1 91 fb 81 8b 44 fe 00 21 ba 0d a1 e4 ca f5 d6 07 9b c5 7f 39 4f 8e 9b e8 fc ea b3 46 7b f4 b2 bd 6e 59 5d 58 d9 82 27 7b 61 db 5d 67 bd 0e 56 98 9f 5e fa f8 58 17 2f 6d f2 a8 88 4e 2b 6d 6e 5a 6d 6f 43 cb ad 4e 49 a2 61 11 f8 2a 9f 6e ab 3d b1 33 6b c7 cd 54 a3 95 e8 b7 4a d5 b9 66 Data Ascii: F($Qwo}5S=odv3U8}QyOEGf[/x%6\|yL+Q?^YbwBwp\S3;8f:@(0s:/N&"2$D!9OF{nY]X'{a]gV^X/mN+mnZmoCNIa*n=3kTJf
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 44 44 f3 00 94 60 3c fa cd fb d8 f2 99 27 e3 9b f1 19 d3 3b b3 a6 99 6d 87 57 d5 1a 1d eb f7 63 53 83 1c 82 2c 51 e7 b0 71 8f 5f 5a ba d5 2f 83 ff ae db f0 c4 9d 8d 2e 46 af ff 59 a5 a4 14 e5 e6 ab 9e b8 1e 6b ba fd 9c c6 25 81 b2 54 52 b1 77 bd e3 1d 2a a1 6f 6d 8b f8 20 dd 3e ff 92 48 25 d3 a2 4d a0 b6 ca 93 ad 6c 7c a9 06 a6 6c f2 a0 49 6e 1d ce 91 3c 14 a9 0f dd 02 b6 dc 69 cd fb 0f a7 af d2 89 65 e3 35 9f 70 10 ed b8 63 20 11 00 9c bc 91 83 97 7a fc 97 c4 1c 70 b4 89 bc 7e f7 fb ef 26 a8 da eb c6 db 47 bd f8 ce b1 37 5f 6f b0 5e d6 b7 f3 c6 5d 0f df 51 9d 2a 9b 3a 20 5e c7 ea 8f 4e 11 d1 43 5e fa e0 ca 59 76 c7 75 56 ae 92 e3 5e 5d 15 18 7d 8f 08 6e cb 8e 71 bb ae 14 5c 60 42 91 6b f9 e2 9f 7f 42 b7 c6 27 4f fd 5f 9c a9 6a 43 06 4f 8d be 55 bb 78 56 Data Ascii: DD`<';mWcS,Qq_Z/.FYk%TRwom >H%Ml\|lIn<ie5pc zp~&G7_o^]Q: ^NC^YvuV^]}nq\`BkB'O_jCOUxV
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: f5 3f c7 56 83 75 17 92 24 1c 41 17 9f 99 82 09 17 f8 cc 67 86 84 a4 af 01 d3 00 ed b9 cd a6 00 1b c0 e4 dd 76 ea 4c e1 31 a5 1b 52 d2 1c 5a fb 8c 98 82 2e 6e 08 1c f3 af a0 42 05 80 66 68 4c 32 80 24 82 7f c3 fb 17 37 84 8f 06 e2 a2 03 95 fc 83 df d4 10 ab 9e 90 66 82 74 22 12 57 31 05 04 5f ef 9d b8 11 d6 ac 44 76 bb 69 15 b9 c9 5d 3a e9 10 09 91 00 48 ee 8e eb f2 89 db 36 a3 84 d8 6e 1f f1 17 9b 50 e4 be 8f 0d 94 10 dc ee 25 31 e3 c3 12 81 e9 2d 0b 1b 02 b7 dc 8a e0 8c 51 35 13 1b 4c 68 95 f9 ca fa f2 f6 bf bb 02 3a 79 16 3f 22 fb df b7 ff fc be 64 a4 ea a4 c4 be 0c 53 e0 06 c0 bb a9 37 3d ae eb 1e 22 07 03 ca c2 86 48 5f 78 f4 2f 57 81 1d 00 54 a6 ba 27 24 e7 13 18 59 16 e4 38 cd 33 23 27 c7 a9 78 16 eb 55 00 ac 43 4c c9 a7 68 88 67 24 cf 19 80 1b bb Data Ascii: ?Vu$AgvL1RZ.nBfhL2$7ft"W1_Dvi]:H6nP%1-Q5Lh:y?"dS7="H_x/WT'$Y83#'xUCLhg$
2024-04-19 14:07:01 UTC	434	IN	Data Raw: 01 72 92 f1 bc d3 36 38 d5 46 99 c7 c1 62 0c 5e 0a 5d c7 79 4e 40 53 7f b7 34 61 d1 9d b2 ed 9c 35 dc 2a e4 47 62 17 1e 7c 4a e9 3a 63 25 e4 85 87 c9 08 8b 24 3a cc 2d c1 5e 08 25 38 4f 3b 65 7a 26 4a 3f 73 80 89 16 f2 ba b3 84 06 45 e8 14 cb 3b db 40 16 c2 21 38 ac 38 67 d5 cf 58 29 49 42 36 84 a6 24 3a b2 67 b3 d2 ee 28 14 ab bd c5 42 e3 a7 68 74 d5 af 80 7d 4f 22 c2 65 4d 99 b2 07 70 0a 51 2e e7 f6 a9 be 00 7b 2c 61 31 fe bd 7b e0 cb 95 43 34 14 c6 a6 69 ed 65 69 0d c6 b4 96 f6 25 01 87 31 02 b2 5a fa fe 8b 73 75 c1 8c ed f3 6e af fb 54 3f d0 d0 f4 af fe d4 1c 17 c6 79 e5 e0 ec f6 d9 8b 6c de fe d3 5e f1 ce 08 36 c0 d9 cb 5f a9 c0 e6 fb bf 1a 57 56 47 64 0e 51 bf 2b d9 eb 65 5b f1 a8 73 ef 25 d7 0e 40 be cf 52 00 bd 15 c6 96 e8 ae 79 d7 b9 f7 5f 06 ae Data Ascii: r68Fb^]yN@S4a5*Gb\|J:c%$:-^%8O;ez&J?sE;@!88gX)IB6$:g(Bht}O"eMpQ.{,a1{C4iei%1ZsunT?yl^6_WVGdQ+e[s%@Ry_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50153	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1578	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=3a6l25apk2qh HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahQjhgtqGjilS4ufRwoRKvfYBGNt9kD399GwGFmwPnaNTM7QZnKPtVvsqIG8ITSC3HfL-7686rnNg2vGfg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:07:01 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:01 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-9oj_kVzBxeDDApmqCwzgWw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:01 UTC	364	IN	Data Raw: 35 37 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5758<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 39 6f 6a 5f 6b 56 7a 42 78 65 44 44 41 70 6d 71 43 77 7a 67 57 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="9oj_kVzBxeDDApmqCwzgWw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 2d 48 32 65 6c 62 53 74 68 53 62 66 77 6e 76 35 35 79 56 31 62 2d 32 4a 76 35 71 33 55 43 4d 55 31 49 43 75 33 52 71 51 30 6a 51 59 2d 41 6a 42 49 64 4b 73 6f 51 31 58 74 72 64 34 72 54 50 34 34 56 68 4d 43 6c 54 6b 44 75 61 68 48 64 45 73 75 4a 31 44 4d 72 37 31 30 43 36 7a 38 4d 71 4d 47 69 77 56 71 51 79 53 77 66 52 58 58 72 38 4f 67 7a 45 6d 4b 73 75 57 72 33 55 31 50 34 79 6d 53 6c 47 76 78 78 50 31 32 6e 61 53 42 44 55 4d 64 32 4f 37 79 50 48 55 58 69 43 5a 6c 6e 51 6d 71 77 65 65 4f 49 6d 43 44 31 74 39 66 66 31 33 70 44 37 6b 51 54 45 55 4e 6b 79 7a 34 56 6f 46 79 41 66 2d 72 38 6b 49 62 4a 69 38 78 33 6e 69 37 79 5f 54 69 51 48 42 41 33 44 35 6f 36 34 52 73 78 59 30 32 6f 35 53 62 4b 63 45 48 74 6f 66 4d 42 56 78 59 52 61 32 67 69 54 44 4e 61 66 Data Ascii: -H2elbSthSbfwnv55yV1b-2Jv5q3UCMU1ICu3RqQ0jQY-AjBIdKsoQ1Xtrd4rTP44VhMClTkDuahHdEsuJ1DMr710C6z8MqMGiwVqQySwfRXXr8OgzEmKsuWr3U1P4ymSlGvxxP12naSBDUMd2O7yPHUXiCZlnQmqweeOImCD1t9ff13pD7kQTEUNkyz4VoFyAf-r8kIbJi8x3ni7y_TiQHBA3D5o64RsxY02o5SbKcEHtofMBVxYRa2giTDNaf
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 79 6f 2d 48 7a 41 77 59 6f 61 4b 68 4e 70 6b 70 76 4a 62 4a 56 7a 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 39 6f 6a 5f 6b 56 7a 42 78 65 44 44 41 70 6d 71 43 77 7a 67 57 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: yo-HzAwYoaKhNpkpvJbJVzA"><script type="text/javascript" nonce="9oj_kVzBxeDDApmqCwzgWw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 51 79 57 57 74 70 62 54 4a 53 65 46 59 72 65 46 52 5a 64 46 56 4a 55 58 5a 47 53 55 70 48 4e 30 6c 42 4d 7a 56 7a 65 45 6c 44 64 6b 39 75 4d 56 56 46 4d 6a 46 6d 4e 33 64 72 56 6a 45 72 63 58 6c 5a 57 6b 70 71 55 47 68 6a 64 6d 4e 73 64 7a 4e 52 53 6b 46 4a 55 54 64 51 61 56 4e 57 64 33 46 30 65 57 46 4d 4e 30 64 4b 5a 46 4e 73 62 6b 52 4a 55 30 59 79 51 32 55 30 4d 31 5a 68 51 6d 59 76 59 56 4e 35 4e 45 64 70 55 47 35 6a 4e 57 70 6e 53 6a 4a 53 55 54 64 59 63 6a 42 56 55 58 52 7a 65 45 31 78 53 7a 63 35 4f 58 70 48 4d 7a 4e 49 5a 57 78 77 53 43 39 70 59 54 6b 31 61 6b 78 44 62 48 68 34 4e 58 49 32 56 57 4a 48 63 57 39 32 4e 58 6c 59 56 6c 4a 30 55 57 70 5a 56 58 64 59 4d 58 6c 59 53 56 45 79 54 48 56 72 63 56 70 73 52 33 6c 32 64 7a 68 77 4c 30 31 58 56 Data Ascii: QyWWtpbTJSeFYreFRZdFVJUXZGSUpHN0lBMzVzeElDdk9uMVVFMjFmN3drVjErcXlZWkpqUGhjdmNsdzNRSkFJUTdQaVNWd3F0eWFMN0dKZFNsbkRJU0YyQ2U0M1ZhQmYvYVN5NEdpUG5jNWpnSjJSUTdYcjBVUXRzeE1xSzc5OXpHMzNIZWxwSC9pYTk1akxDbHh4NXI2VWJHcW92NXlYVlJ0UWpZVXdYMXlYSVEyTHVrcVpsR3l2dzhwL01XV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50154	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1723	OUT	POST /_/PlayStoreUi/data/batchexecute?rpcids=w3QCWb&source-path=%2Fstore%2Fapps%2Fcategory%2FPRODUCTIVITY&f.sid=-8008743000736633856&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58021&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 33680 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535620.0.0.0; _ga=GA1.1.702310893.1713535574
2024-04-19 14:07:01 UTC	16384	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 25 35 42 25 35 42 25 32 32 77 33 51 43 57 62 25 32 32 25 32 43 25 32 32 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 32 25 32 43 25 35 43 25 32 32 50 52 4f 44 55 43 54 49 56 49 54 59 25 35 43 25 32 32 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 38 25 32 43 25 35 42 32 30 25 32 43 35 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 45 41 67 61 77 77 45 49 43 42 44 45 31 6f 4c 59 41 68 43 63 78 71 72 32 44 52 43 6f 70 70 57 6c 41 52 44 42 36 4e 47 6b 43 78 44 61 75 2d 42 66 45 50 69 57 72 63 63 46 45 4d 76 7a 76 66 4d 43 45 4e 57 76 31 73 77 45 47 4b 75 35 30 75 4d 47 47 4c 44 33 32 4e 45 4d 47 4f 72 35 38 63 30 49 47 4a 58 76 79 4e 6f 44 47 49 4f 6d 71 62 30 4d 47 4d 6a 47 5f 63 34 4a 47 4a 58 6d 39 4e 73 50 47 4c 76 35 Data Ascii: f.req=%5B%5B%5B%22w3QCWb%22%2C%22%5B%5Bnull%2C2%2C%5C%22PRODUCTIVITY%5C%22%2Cnull%2C%5B%5B8%2C%5B20%2C50%5D%2Cnull%2C%5C%22EAgawwEICBDE1oLYAhCcxqr2DRCoppWlARDB6NGkCxDau-BfEPiWrccFEMvzvfMCENWv1swEGKu50uMGGLD32NEMGOr58c0IGJXvyNoDGIOmqb0MGMjG_c4JGJXm9NsPGLv5
2024-04-19 14:07:01 UTC	16384	OUT	Data Raw: 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 36 35 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 35 31 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 36 33 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 33 32 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 Data Ascii: %5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C165%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C151%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C163%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C32%5D%2C%5B%5B1%2C7%2C6%2C9
2024-04-19 14:07:01 UTC	912	OUT	Data Raw: 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 36 35 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 35 31 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 36 33 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 33 32 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 Data Ascii: %5D%5D%2C%5B%5B2%2C165%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C151%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C163%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C32%5D%2C%5B%5B1%2C5%2C7%2C
2024-04-19 14:07:01 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:01 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:01 UTC	15	IN	Data Raw: 37 64 30 66 0d 0a 29 5d 7d 27 0a 0a 31 39 38 Data Ascii: 7d0f)]}'198
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 30 30 39 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 77 33 51 43 57 62 22 2c 22 5b 5b 6e 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5c 22 71 67 4a 59 45 6c 59 4b 55 67 70 51 43 6b 70 75 62 32 35 66 63 47 56 79 63 32 39 75 59 57 78 70 65 6d 56 6b 58 30 46 51 55 46 4e 66 51 30 46 55 52 55 64 50 55 6c 6c 66 63 6d 56 6a 63 31 39 30 62 33 42 70 59 31 38 77 64 45 4a 51 65 6c 64 42 55 48 4a 35 4f 46 39 53 52 55 4e 50 54 55 31 46 54 6b 52 46 52 46 39 4a 54 6c 39 55 54 31 42 4a 51 78 41 74 47 41 4d 51 43 51 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 22 2c 5b 5b 5c 22 6e 6f 6e 5f 70 65 72 73 6f 6e 61 6c 69 7a 65 64 5f 41 50 50 53 5f 43 41 54 45 47 4f 52 59 5f 72 65 63 73 5f 74 6f 70 69 63 5f 30 74 42 50 7a 57 41 50 72 79 38 5f 52 45 43 4f 4d 4d Data Ascii: 009[["wrb.fr","w3QCWb","[[null,[[null,null,null,[\"qgJYElYKUgpQCkpub25fcGVyc29uYWxpemVkX0FQUFNfQ0FURUdPUllfcmVjc190b3BpY18wdEJQeldBUHJ5OF9SRUNPTU1FTkRFRF9JTl9UT1BJQxAtGAMQCQ\\u003d\\u003d\",[[\"non_personalized_APPS_CATEGORY_recs_topic_0tBPzWAPry8_RECOMM
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 35 66 61 32 4b 6c 74 51 73 4a 79 56 48 35 34 4f 55 64 53 33 4f 55 6e 70 41 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 32 32 30 38 2c 31 32 34 32 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 73 6a 54 57 76 4b 70 63 6f 4a 79 5a 55 45 52 39 6a 4b 71 43 66 68 6a 4e 65 33 69 72 70 66 55 71 72 61 52 30 44 6b 30 4a 39 4c 68 2d 66 75 79 43 49 45 4f 71 66 45 5a 4c 72 6f 55 7a 32 6e 35 58 63 42 73 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 32 32 30 38 2c 31 32 34 32 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 56 35 66 6f 71 54 6d 36 43 72 55 Data Ascii: 5fa2KltQsJyVH54OUdS3OUnpA\"]],[null,2,[2208,1242],[null,null,\"https://play-lh.googleusercontent.com/sjTWvKpcoJyZUER9jKqCfhjNe3irpfUqraR0Dk0J9Lh-fuyCIEOqfEZLroUz2n5XcBs\"]],[null,2,[2208,1242],[null,null,\"https://play-lh.googleusercontent.com/V5foqTm6CrU
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 37 33 6e 77 65 78 32 57 7a 34 70 35 63 75 35 79 45 63 45 77 71 6c 68 4c 66 34 63 32 33 6f 78 78 37 61 59 48 4d 72 62 6d 41 63 68 57 43 4a 48 43 62 69 71 4e 73 48 63 77 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 32 32 30 38 2c 31 32 34 32 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 71 31 6c 34 6a 77 4f 39 48 58 63 7a 76 33 69 41 79 68 5a 37 2d 55 63 5f 5f 79 66 51 46 56 6f 49 68 6d 61 45 47 48 62 4f 6f 62 39 79 55 46 76 7a 4b 6b 43 5a 73 35 6b 4d 43 39 30 48 76 6f 30 46 63 70 63 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 32 32 30 38 2c 31 32 34 32 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f Data Ascii: 73nwex2Wz4p5cu5yEcEwqlhLf4c23oxx7aYHMrbmAchWCJHCbiqNsHcw\"]],[null,2,[2208,1242],[null,null,\"https://play-lh.googleusercontent.com/q1l4jwO9HXczv3iAyhZ7-Uc__yfQFVoIhmaEGHbOob9yUFvzKkCZs5kMC90Hvo0Fcpc\"]],[null,2,[2208,1242],[null,null,\"https://play-lh.go
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 57 53 50 2d 52 6b 4c 79 53 4a 2d 55 73 67 63 6e 37 59 35 39 41 71 62 55 4d 7a 4c 57 44 34 6d 52 36 47 4a 48 57 33 2d 53 31 77 52 50 41 67 6a 72 44 6d 66 66 4c 57 33 73 49 59 77 38 6c 79 58 54 70 5a 67 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 32 32 30 38 2c 31 32 34 32 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 39 6f 45 45 46 4f 67 36 59 6b 66 34 55 59 5a 57 55 6b 31 4f 35 68 66 4d 57 44 33 68 53 31 50 48 6d 4c 47 74 2d 53 6f 4b 73 33 30 65 4e 33 5a 54 78 70 74 4a 4a 6e 69 31 36 41 69 42 4b 6a 33 38 6c 36 6a 76 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 32 32 30 38 2c 31 32 34 32 5d Data Ascii: ogleusercontent.com/WSP-RkLySJ-Usgcn7Y59AqbUMzLWD4mR6GJHW3-S1wRPAgjrDmffLW3sIYw8lyXTpZg\"]],[null,2,[2208,1242],[null,null,\"https://play-lh.googleusercontent.com/9oEEFOg6Ykf4UYZWUk1O5hfMWD3hS1PHmLGt-SoKs30eN3ZTxptJJni16AiBKj38l6jv\"]],[null,2,[2208,1242]
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 78 47 58 41 54 4c 63 76 2d 4f 55 49 53 4c 6b 36 48 61 6c 78 42 47 55 54 57 56 63 37 4f 31 39 79 5a 44 61 4e 6a 65 6d 56 62 4a 35 62 61 6b 4c 79 69 75 5a 67 4a 4d 56 74 51 43 33 50 63 70 4e 32 62 69 39 51 5c 22 5d 5d 5d 2c 5c 22 54 61 70 53 63 61 6e 6e 65 72 20 2d 20 50 44 46 20 53 63 61 6e 6e 65 72 20 41 70 70 5c 22 2c 5b 5c 22 34 2e 37 5c 22 2c 34 2e 37 31 30 33 36 33 34 5d 2c 5c 22 50 72 6f 64 75 63 74 69 76 69 74 79 5c 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 5b 30 2c 5c 22 55 53 44 5c 22 2c 5c 22 5c 22 5d 5d 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5c 22 42 75 79 5c 22 5d 2c 6e 75 6c 6c Data Ascii: ,[null,null,\"https://play-lh.googleusercontent.com/xGXATLcv-OUISLk6HalxBGUTWVc7O19yZDaNjemVbJ5bakLyiuZgJMVtQC3PcpN2bi9Q\"]]],\"TapScanner - PDF Scanner App\",[\"4.7\",4.7103634],\"Productivity\",null,null,[null,[[0,\"USD\",\"\"]],null,[null,\"Buy\"],null
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 73 20 50 44 46 20 53 63 61 6e 6e 65 72 20 61 70 70 2e 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 5c 5c 75 30 30 33 65 4a 6f 69 6e 20 6f 76 65 72 20 31 30 30 20 4d 69 6c 6c 69 6f 6e 20 73 61 74 69 73 66 69 65 64 20 75 73 65 72 73 5c 5c 75 30 30 33 63 2f 62 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 31 30 30 20 4d 69 6c 6c 69 6f 6e 20 75 73 65 72 73 20 74 72 75 73 74 20 54 61 70 53 63 61 6e 6e 65 72 20 74 6f 20 62 65 20 74 68 65 69 72 20 74 69 6e 79 20 70 6f 72 74 61 62 6c 65 20 73 63 61 6e 6e 65 72 2e 20 44 6f 77 6e 6c 6f 61 64 20 61 6e 64 20 73 74 61 72 74 20 73 63 61 6e 6e 69 6e 67 20 6e 6f 77 20 77 69 74 68 20 74 68 65 20 74 6f 70 20 73 63 61 6e 6e 65 72 20 63 68 6f 69 63 65 21 5c 5c 75 30 30 33 63 Data Ascii: s PDF Scanner app.\\u003cbr\\u003e\\u003cb\\u003eJoin over 100 Million satisfied users\\u003c/b\\u003e\\u003cbr\\u003e100 Million users trust TapScanner to be their tiny portable scanner. Download and start scanning now with the top scanner choice!\\u003c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50157	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	525	OUT	GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:02 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 1842 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:02 UTC	733	IN	Data Raw: 52 49 46 46 2a 07 00 00 57 45 42 50 56 50 38 4c 1d 07 00 00 2f ff c0 3f 00 85 3d e8 ff df b5 6d 3e 7f 25 e9 de 7b 0f dc bd 77 ab d1 dd aa bb a5 7f 85 6a e1 4e dc a9 6c 65 ef 04 75 e2 89 17 78 72 99 5a 3d 8d ab 3e 80 c1 fc 8c 46 cc 85 13 e6 20 1e c8 e4 cc 19 72 87 25 dc 9f 6a a4 f4 d3 25 ff f8 fe f8 7e be df 6e 47 f4 7f 02 e8 92 ff 2f f9 5f 4d 97 0a f3 c9 18 8e fd ce d3 0a 6b 7f 74 47 e4 ac d6 ac 94 b2 33 71 c4 60 bf cb 01 02 df 3a aa 17 d5 e3 69 23 8c 83 f7 bb df 07 76 fe bd da 2d 17 e6 93 31 1c f3 5f f5 c5 e7 40 13 1f 55 ab 95 4a 6e 2e 81 18 ec 77 39 40 9e 1e 53 71 aa c7 d3 46 04 07 7d bd ef 03 79 e7 54 63 b9 30 3f 7b 08 c7 fc 57 39 2f 07 2e 7f c5 de 4a 25 37 97 08 63 e8 ce 2b 1d c0 75 91 a9 ba 31 f4 8b 2f 82 22 ee e3 e8 d8 8f 41 29 3b 17 d9 e9 07 ae 9f Data Ascii: RIFF*WEBPVP8L/?=m>%{wjNleuxrZ=>F r%j%~nG/_MktG3q`:i#v-1_@UJn.w9@SqF}yTc0?{W9/.J%7c+u1/"A);
2024-04-19 14:07:02 UTC	1109	IN	Data Raw: 10 31 66 a4 f2 25 93 9a 7c a7 12 b5 ad ef f7 0f 62 38 9e 4c e7 2a 26 c9 36 ae 20 cf 69 75 df 11 1c c3 70 62 36 73 bc 5a 27 e9 67 f8 7b 46 c7 06 6f 00 31 62 cc 65 0b 35 62 38 cf db 0f 8e 12 ff bc 6d 23 15 64 ed 67 a4 7b 29 ed 7b 5a fb e8 ff 65 30 4b b9 74 32 8e 38 e8 ef 6b af ea 51 f1 a8 11 43 0c f9 3c 4e 07 58 9e d5 a1 bd 20 34 a1 7a d5 e3 99 23 47 04 2d 82 e0 19 e5 5a 2a cc 27 e3 88 81 01 f7 fb 60 ed 82 18 10 7d 41 91 a6 a7 42 de de 36 68 f8 1b 85 8c 8a fa 21 29 d1 03 20 7c b7 88 77 0b ea 26 25 ea 04 1b 96 05 80 c0 37 6d 8e 66 49 89 76 80 1d 5b ec 37 91 a7 c6 2b 47 0d ec f9 40 e3 1e 8b 8c 7b 3f df 88 3a a9 53 c4 26 50 6e d8 9a b5 7c d4 82 a9 50 b7 d9 a5 45 14 51 5d d9 ba ec 02 0f 08 33 95 ed e7 b6 81 b2 ae 98 85 c7 0f 87 c3 db 6e 74 be 44 58 ab ae 5c 64 Data Ascii: 1f%\|b8L&6 iupb6sZ'g{Fo1be5b8m#dg{){Ze0Kt28kQC<NX 4z#G-Z'`}AB6h!) \|w&%7mfIv[7+G@{?:S&Pn\|PEQ]3ntDX\d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50158	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	524	OUT	GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:02 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 48322 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:13:41 GMT Expires: Sat, 20 Apr 2024 13:13:41 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3200 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:02 UTC	721	IN	Data Raw: 52 49 46 46 ba bc 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 71 bc 00 00 2f ff c0 3f 10 4d 38 6c 80 36 6c 84 4d 09 23 ff 5f dc 34 6d b7 1d 10 d1 ff 09 00 1a 80 6d 49 c3 b6 6c 0f 7b e8 00 40 12 dd 89 6d 1f 92 e4 11 db 1a b1 92 84 64 b7 13 d9 49 24 1d d6 b0 95 c4 4e 12 b2 6c 7b 61 1f 4a 62 c7 49 86 ed c4 fc 2c 92 93 4f f1 39 5a a4 16 4e 9c 44 52 e2 61 5b 49 16 de 4e 44 db 92 e4 67 43 ef f2 02 7f 91 24 b8 2e 36 97 68 fe 49 00 13 3f cd eb e6 ba aa 58 7c bd 16 b5 57 64 6d 90 c5 35 5e e7 c3 c5 eb 7a 68 f7 56 dd 2a 92 38 61 45 dc 21 9e 9d d8 e4 c3 e0 f7 f6 6b 13 2f ce 09 cc 02 d7 20 2f 08 9e 48 a2 8a 0f 16 b7 fb 89 fd 5e e0 a9 89 ee 5e 40 8e 24 d9 55 94 f1 fc 37 f2 07 67 d8 45 eb db 88 2f 02 03 dc b6 8d 24 49 32 6b f7 3e Data Ascii: RIFFWEBPVP8XVP8Lq/?M8l6lM#_4mmIl{@mdI$Nl{aJbI,O9ZNDRa[INDgC$.6hI?X\|Wdm5^zhV*8aE!k/ /H^^@$U7gE/$I2k>
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: c4 38 76 59 8e 6c c0 fd 90 d3 e1 2b 02 0b 70 eb 23 e8 04 04 6f be 1b ae 55 d3 10 de 0d 86 37 95 3b d7 50 e8 2e 66 58 1d 39 39 57 ba 01 7d 8b 37 7c 8c a1 c6 85 d4 c1 8e 44 48 e1 3b 92 6d d5 b6 6d db f2 c8 63 a2 06 73 2e 66 46 fd ff 97 02 cc 8a cc 35 4a f2 5c db b6 6a db 92 6d 95 d2 fa 9c eb a0 31 a9 c0 66 2a 30 5b e8 48 6a 1a 98 00 6c 1a 58 d8 d2 09 19 2d 9a a3 15 a9 db b6 2d 7f 72 ce 5d 93 bb bf b3 b6 64 d9 87 67 27 39 54 97 ea 90 7e 89 3c 6b bf e3 f7 17 a0 f5 c7 f1 e2 ae 89 63 ee 61 02 78 2d fb 27 c9 91 6d c9 dd 43 59 a7 e7 e1 2b 8c df ff c3 cd 2b 15 ee 3d 4f eb 0b fc f1 c5 8e c5 5a e4 5a 37 46 60 58 53 38 b5 29 f5 14 47 24 ed 08 03 63 e3 3d e6 a6 09 02 8c 40 78 93 bb 77 5c 45 8a 3c 82 c4 48 0a 8c 82 ad 9e d4 c2 41 08 47 37 d1 43 a2 a4 2a 11 0e 22 f9 43 Data Ascii: 8vYl+p#oU7;P.fX99W}7\|DH;mmcs.fF5J\jm1f0[HjlX--r]dg'9T~<kcax-'mCY++=OZZ7F`XS8)G$c=@xw\E<HAG7C"C
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 6e b9 28 4e e3 2f ff f9 fb f3 fe a3 fb 4a ff e4 bf cf ec c5 fd 53 72 ca 4f 7e 7f 98 fb d8 b5 4a 9f f4 76 4b 20 dd c7 25 76 cb 42 d8 44 ad c2 5b c6 83 e5 29 b3 e4 11 b2 ad 8f 8d ac 5e 72 bb 64 0a 75 a1 36 97 aa e8 97 4a da a8 e4 38 fe 49 58 f2 62 b7 37 38 bb d1 f4 f7 f8 4d 2f 95 27 e3 92 f3 52 46 54 64 bc dc a0 b0 e9 c6 67 cb 97 9e 1c 37 e5 c0 0f 76 fd 54 97 2c f6 a6 f7 2d c8 9c 79 9b b6 d5 6a af 63 1c f5 52 65 45 21 59 81 a5 dc 5a 16 f5 90 96 74 79 e2 1a ca 7a 07 ad fc b4 16 05 ba a8 a1 a5 6e 3b 49 83 80 4b bb 85 c5 90 f0 4c d9 2f 8b 3c 2c b6 d1 c4 25 aa 90 94 13 81 d9 17 37 3f 6d 4c 04 7f 8f 7f aa aa b7 08 e2 a8 07 7d 04 7f 4b 7f fa 51 bf 75 f3 e7 5f f4 a2 fc 14 9c f6 a3 df 1d 9d b6 2f 3d 34 f5 28 a5 0c 29 4a 1b 4b 82 10 9c d0 bb 9c 9d 99 3e ae b0 4f 7c Data Ascii: n(N/JSrO~JvK %vBD[)^rdu6J8IXb78M/'RFTdg7vT,-yjcReE!YZtyzn;IKL/<,%7?mL}KQu_/=4()JK>O\|
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: a4 75 4c 75 6c f9 3e 2a b2 5f 2e 37 8d 0c 2e 08 12 ba c8 f4 9b 91 8d 42 7f a1 9c 97 6e d9 5d 8d 8f 4b 9f 4e bc 85 cb 01 0d 60 c7 13 6e a9 70 05 a5 8c 8a f0 62 47 7a 6f 9e 77 65 96 bd 2c 8b 2c f6 cc c3 60 f1 02 a8 4b fe b8 11 3c 97 80 62 fa 96 96 4f 89 11 bc 90 51 13 5d d2 9b e7 5f 7c d1 59 2b 4e 2c f8 cb 09 6d 83 b0 45 7f 9f d6 9c 79 89 7a 9d 82 c9 79 4d 6c 6d c7 25 f0 9c 50 76 8d 7a 42 bb d5 e4 42 b5 0c 55 eb d0 2e d9 88 34 dd 8e 3c 5c bb 91 1d d1 8e bd 40 77 f3 36 e3 50 e3 81 ab 26 ed 2b 2d a7 fc e4 fb 43 17 1a ec 3e 98 f7 c9 b3 2a 53 ab 96 ce b9 43 b0 4e 3c 28 8f 29 0d e8 e4 18 4f 83 a4 e9 75 54 dc c3 78 ed 87 79 7e a7 cc 5d de 2f 77 27 38 66 a7 d3 d0 44 72 d1 ea 0d f2 c1 15 bd 80 a5 fb 7d 3d bb 5e 38 be a5 be de 39 fd c2 4b 50 85 61 2a b4 f6 27 ae 89 Data Ascii: uLul>_.7.Bn]KN`npbGzowe,,`K<bOQ]_\|Y+N,mEyzyMlm%PvzBBU.4<\@w6P&+-C>SCN<()OuTxy~]/w'8fDr}=^89KPa*'
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 3a b6 dc 7b 93 fe e0 e8 98 65 58 06 54 74 87 16 99 2b 65 8b 52 5d 44 cd c8 19 8c 64 bc 6c 63 49 49 85 a2 47 0c 84 6e c6 35 5b 6a 31 b1 97 54 5b 06 05 7b 5a e8 cc 90 be b4 e9 38 f6 1f 4a db 4d 98 b7 1c 93 33 ce 69 6c 69 10 1c 2f ca 80 0a ec 51 28 9b 32 f6 49 b0 c0 d9 7b 1b c9 95 b5 c2 c5 61 6d f4 ab b5 11 90 da a1 c5 97 8b 1d ec eb c7 05 c2 ec fe 1a 77 1b a0 66 c6 b6 57 10 84 6a c0 be bd 3f a8 2a 99 c4 fc fa 66 19 8b 2e 2e ab 20 ad 5b 16 57 c3 27 9f ce 13 1e 15 5d a1 37 10 7f 93 2c 7f 99 7b 29 43 7b 8b 23 d7 65 01 8d 67 42 09 41 66 13 e0 1b b0 39 5d 76 4e 0a 56 f8 9d 28 a8 d6 4f 7b 8d 2e 24 68 e4 92 0b 58 0e 68 05 5c de 5a 02 a1 a0 4f 51 52 88 7c 80 74 2f 13 c3 a8 49 9d e7 fc 69 4c c3 a6 48 4f 06 45 10 06 6b f9 e1 d6 9f a0 96 eb 77 ed 20 f7 43 a9 83 24 c8 Data Ascii: :{eXTt+eR]DdlcIIGn5[j1T[{Z8JM3ili/Q(2I{amwfWj?*f.. [W']7,{)C{#egBAf9]vNV(O{.$hXh\ZOQR\|t/IiLHOEkw C$
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: b3 97 49 03 7c ae 72 50 6a cb a2 05 5b c8 8c ca cc 34 b9 d3 92 1c 98 45 91 1b 3f d5 5f 68 3d d6 00 88 0c 6d 5f 98 94 a2 c8 c4 8b 5a 7b 04 05 a1 13 6e 4a b6 fc 1c 87 7a e4 6d 9c e1 45 b9 44 ca af d7 c4 fe 3d 7f b1 6b 5a 64 95 bc 92 2f ae d8 83 6c 71 82 20 77 ee 5f 2e 9b 7e d3 27 9b 06 f8 77 5e e0 71 87 01 2e 55 2e b5 17 2d 8f a6 2c a5 76 2e fb f2 bb 3b 69 75 b6 6f 75 0f da 1a c9 e3 79 e8 e0 37 a1 58 5a 78 74 82 95 43 f6 f5 c7 94 ea 20 f9 84 bf 6c 1e 2e c3 c6 33 87 5a 12 6d 51 c8 a8 90 42 03 91 7e e0 f6 de 85 33 2b 03 da 1a 76 7a 4c 2d 7c 9d 39 65 5d 81 4c c1 b0 90 8e 43 51 30 6e b0 8e 68 e9 bd 94 68 29 53 c5 df ee 05 32 78 b5 ec 17 2f d5 4b f5 67 b6 22 45 28 74 44 28 b7 7a a5 79 d1 ce e3 4f 96 b0 93 32 bc 07 35 90 84 b1 b1 db 1f ea b9 7f 42 8b 56 10 ee 10 Data Ascii: I\|rPj[4E?_h=m_Z{nJzmED=kZd/lq w_.~'w^q.U.-,v.;iuouy7XZxtC l.3ZmQB~3+vzL-\|9e]LCQ0nhh)S2x/Kg"E(tD(zyO25BV
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 4e 3f 10 d9 1e d8 80 18 21 2c 1c 54 36 b6 d6 d6 ec 4e 7d 29 bf 06 95 d4 ea 55 5d 84 25 97 6e 55 f1 0c 40 f8 89 83 1c b2 26 93 23 c7 9d d1 47 9c e1 0d 20 af 2d 72 ba e0 60 8f 0d 04 27 db 72 4a 5e 0e d9 48 67 e6 b1 02 5e 16 cb 81 a6 ba 62 ba 41 de 01 b9 28 de 0e 2a f5 e5 1d a1 6f 2b 20 97 a5 bc d3 dc 3c ca e7 4d 1b 7b 7e 03 30 f7 93 00 2a 4b f7 71 2f 6c c8 58 5c bf 28 cb 22 12 7a 80 25 c4 31 0d cb fb 22 6c d8 d3 f7 a3 ff c5 3f e4 c7 54 2f af 96 c5 fa a1 f6 03 67 62 0c e4 a1 b3 a5 56 d9 a8 ec 97 3c 14 b8 bf e9 25 16 35 41 10 0c 09 e3 1b 4b 46 cc 5a dd 0e 64 5b 5b c2 cb be 8c 28 94 2d 16 71 08 77 10 5e 0e b9 97 4a 29 24 c4 f6 0b e0 b3 b1 f6 d3 62 69 b1 73 95 8d 59 11 e3 48 5f 2f 84 d4 78 4a 69 81 ad 44 2b c3 22 a9 47 9e 70 f0 d3 1f 1a 19 16 65 63 89 cc a7 fe Data Ascii: N?!,T6N})U]%nU@&#G -r`'rJ^Hg^bA(o+ <M{~0Kq/lX\("z%1"l?T/gbV<%5AKFZd[[(-qw^J)$bisYH_/xJiD+"Gpec
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 24 1e 82 fb 0f 9a a6 fb ca 89 25 f3 e8 30 5c 6e ad 2d 79 6c 69 58 fe f0 48 d7 96 a9 c9 39 65 6f 58 28 f3 b9 9f 44 cf 60 b6 3a 6d 81 79 09 65 c6 e3 91 20 3e 81 35 d6 06 27 c1 38 32 e4 9c 13 96 a2 cc 44 8f c2 b2 df 21 ce f3 e9 9d 0b 2f 5c 0e 7f 96 72 d4 c6 32 78 99 ba d2 7a 4e 08 a0 69 4e 52 a7 c1 36 1a 2e 39 57 84 09 6b b5 b0 45 fd 7a 45 58 39 b8 94 67 a6 2c 6d 5a 8e db f7 30 4e 87 65 26 99 43 c2 0c b6 48 ba b8 50 e9 b4 62 b8 ec 97 f6 ab f5 50 84 1a 6f e7 ad 78 23 6c 27 00 a0 92 8f 5f 6e 67 5b 9b f1 35 81 58 fe 51 28 f2 a7 6d 13 85 51 c9 0c ff bd 85 ab 4e bd 25 ba e4 e5 b8 ad 8b 60 68 ae 77 f5 f1 fb 1f 1e fc 9d df 45 4d 76 27 dd 57 a8 b9 3d b4 17 6d 40 1f 43 76 55 95 22 08 fc 4a 71 3e ac 84 99 7f 40 b2 29 cc 66 3b d0 e0 f1 68 2f 5b ce e3 ab 32 07 ff 01 47 Data Ascii: $%0\n-yliXH9eoX(D`:mye >5'82D!/\r2xzNiNR6.9WkEzEX9g,mZ0Ne&CHPbPox#l'_ng[5XQ(mQN%`hwEMv'W=m@CvU"Jq>@)f;h/[2G
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: a3 a6 29 64 d8 b4 91 a1 6d 5f b2 20 b0 14 ca 25 cb e7 0a 9c 0c a0 f4 d3 0b c2 6c c1 2c 96 c5 38 8b f7 71 45 d0 29 8f 56 4a 1b e6 9d c4 5b e6 88 f5 43 b9 a8 ac fb 9a 91 d2 c9 39 ee 06 d4 ce ec 50 57 78 f0 b3 17 5f 56 cb b0 70 ce 3b eb a7 fe 80 e3 27 04 1b 07 f3 5d ce dd f2 8d 6d c2 72 0f be 57 2c 7e 21 13 52 3c a3 b8 aa 39 a7 e1 a5 94 23 c6 e8 49 fd 99 65 a1 94 7c 49 e7 4d 36 42 86 9a 68 44 0e 25 53 4d a5 01 78 26 cb a5 62 bf ef a5 dc 99 92 6c e3 1e e4 59 b3 1a eb d2 92 12 7c 2a 17 87 5b 16 5f 6f 84 9d b3 aa 36 b6 a5 b1 d5 99 36 fd aa 0e b7 0c 9c ae 70 ff 87 b7 e7 98 3e 2b 47 ef 9b d1 68 a0 b2 9c 9f b4 a3 c0 7c 1d 36 8e 7c 68 fe b8 c9 d1 e9 20 25 bb 7e e7 ab a6 3d 5a 1d 66 d8 25 51 69 96 a3 48 da d1 bf 24 04 b9 e7 a8 be 8c ad 8d c2 c3 b4 ac b4 fe 86 31 b2 Data Ascii: )dm_ %l,8qE)VJ[C9PWx_Vp;']mrW,~!R<9#Ie\|IM6BhD%SMx&blY\|*[_o66p>+Gh\|6\|h %~=Zf%QiH$1
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 22 de 5e bf 1a 70 ce a2 51 a4 ca 21 2a 7c 42 d6 c7 b6 5f 68 41 3f 8f 09 cd 30 56 1a a0 58 3e bc fb 3a eb 30 2c d8 64 45 81 88 72 5b 96 9f 86 50 16 8c f5 05 97 fe 43 70 d2 f9 b2 67 a8 ba 16 ee f8 e0 66 5c 7b 54 c9 f2 61 13 c9 1e 28 8b d8 d0 65 e9 27 c9 35 f8 24 90 59 1e 16 7f b9 76 86 cd f6 be 7a af 24 d5 1c a8 ab ce b6 f7 ef 1f aa 2a 43 c1 62 70 4e f2 06 2b 97 56 64 2d 2e 4b 63 73 5b 2e 8e 08 d5 13 07 84 96 68 ea 35 46 e6 71 ad f8 a5 45 7b 7c 6a ac 6b e2 f6 68 5c 7a 69 0f 4d 73 96 07 f0 9c e1 04 a7 7c 19 5d c6 1c 65 c6 55 4a 84 dc 48 47 5b 19 0f 65 e2 36 85 2d f3 a6 38 9d 7f 98 20 f6 cb 58 d5 e3 2f 34 70 d6 04 64 aa bb a7 ec ab ba 39 86 ee 74 2c 74 0b 53 42 cc 87 4b f7 a9 a5 42 14 05 02 5f c2 87 7e b3 cc 4b 8b 22 38 39 37 74 f1 39 6e 2e 0c 4b 96 3f 3e c6 Data Ascii: "^pQ!\|B_hA?0VX>:0,dEr[PCpgf\{Ta(e'5$Yvz$CbpN+Vd-.Kcs[.h5FqE{\|jkh\ziMs\|]eUJHG[e6-8 X/4pd9t,tSBKB_~K"897t9n.K?>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50160	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	1723	OUT	POST /_/PlayStoreUi/data/batchexecute?rpcids=vyAe2&source-path=%2Fstore%2Fapps%2Fcategory%2FPRODUCTIVITY&f.sid=-8008743000736633856&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=158021&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 33394 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535620.0.0.0; _ga=GA1.1.702310893.1713535574
2024-04-19 14:07:02 UTC	16384	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 25 35 42 25 35 42 25 32 32 76 79 41 65 32 25 32 32 25 32 43 25 32 32 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 38 25 32 43 25 35 42 32 30 25 32 43 35 30 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 39 36 25 32 43 31 30 38 25 32 43 37 32 25 32 43 31 30 30 25 32 43 32 37 25 32 43 31 38 33 25 32 43 32 32 32 25 32 43 38 25 32 43 35 37 25 32 43 31 36 39 25 32 43 31 31 30 25 32 43 31 31 25 32 43 31 38 34 25 32 43 31 36 25 32 43 31 25 32 43 31 33 39 25 32 43 31 35 32 25 32 43 31 39 34 25 32 43 31 36 35 25 32 43 36 38 25 32 43 31 36 33 25 32 43 32 31 31 25 32 43 39 25 32 43 37 31 25 32 43 33 31 25 32 43 31 39 35 25 32 43 31 32 25 32 43 36 34 25 32 43 31 35 31 25 32 43 31 35 30 25 32 43 31 Data Ascii: f.req=%5B%5B%5B%22vyAe2%22%2C%22%5B%5Bnull%2C%5B%5B8%2C%5B20%2C50%5D%5D%2Cnull%2Cnull%2C%5B96%2C108%2C72%2C100%2C27%2C183%2C222%2C8%2C57%2C169%2C110%2C11%2C184%2C16%2C1%2C139%2C152%2C194%2C165%2C68%2C163%2C211%2C9%2C71%2C31%2C195%2C12%2C64%2C151%2C150%2C1
2024-04-19 14:07:02 UTC	16384	OUT	Data Raw: 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 30 38 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 30 30 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 31 39 34 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 25 32 43 32 31 31 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 37 25 32 43 36 25 32 43 39 25 32 43 31 35 25 32 43 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 31 30 Data Ascii: D%5D%2C%5B%5B10%2C108%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C100%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C194%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10%2C211%5D%2C%5B%5B1%2C7%2C6%2C9%2C15%2C8%5D%5D%5D%2C%5B%5B10
2024-04-19 14:07:02 UTC	626	OUT	Data Raw: 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 30 38 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 30 30 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 31 39 34 25 35 44 25 32 43 25 35 42 25 35 42 31 25 32 43 35 25 32 43 37 25 32 43 34 25 32 43 31 33 25 32 43 31 36 25 32 43 31 32 25 32 43 31 38 25 35 44 25 35 44 25 35 44 25 32 43 25 35 42 25 35 42 32 25 32 43 32 31 31 25 35 44 Data Ascii: 13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C108%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C100%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C194%5D%2C%5B%5B1%2C5%2C7%2C4%2C13%2C16%2C12%2C18%5D%5D%5D%2C%5B%5B2%2C211%5D
2024-04-19 14:07:02 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:02 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:02 UTC	15	IN	Data Raw: 38 30 30 30 0d 0a 29 5d 7d 27 0a 0a 33 36 33 Data Ascii: 8000)]}'363
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 37 37 35 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 76 79 41 65 32 22 2c 22 5b 5b 6e 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5c 22 71 67 49 72 45 69 6b 51 41 4f 49 45 4a 41 6f 69 43 68 78 30 62 33 42 7a 5a 57 78 73 61 57 35 6e 58 32 5a 79 5a 57 56 66 55 46 4a 50 52 46 56 44 56 45 6c 57 53 56 52 5a 45 43 30 59 41 77 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 5b Data Ascii: 775[["wrb.fr","vyAe2","[[null,[[null,null,null,[\"qgIrEikQAOIEJAoiChx0b3BzZWxsaW5nX2ZyZWVfUFJPRFVDVElWSVRZEC0YAw\\u003d\\u003d\"],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[[[[
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 74 2e 63 6f 6d 2f 55 67 71 71 48 63 4e 77 4b 75 66 32 6a 65 6c 70 54 2d 51 47 55 74 56 59 67 72 74 65 58 4e 57 32 62 55 61 45 71 78 55 61 78 6a 79 49 46 4b 66 56 70 62 6e 44 4a 76 6e 33 69 44 72 56 6e 71 6a 31 38 69 51 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 36 33 36 2c 32 33 39 35 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 6e 50 36 63 54 52 4d 2d 44 55 42 63 52 74 41 31 71 4d 67 54 50 70 54 77 4c 5f 5f 4a 5a 32 38 78 65 46 68 46 4c 70 75 6d 5f 62 5f 44 69 79 66 52 69 44 77 6d 74 66 43 45 34 4a 54 6e 72 64 67 39 45 54 4f 56 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 36 33 36 2c 32 33 39 35 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 Data Ascii: t.com/UgqqHcNwKuf2jelpT-QGUtVYgrteXNW2bUaEqxUaxjyIFKfVpbnDJvn3iDrVnqj18iQ\"]],[null,2,[1636,2395],[null,null,\"https://play-lh.googleusercontent.com/nP6cTRM-DUBcRtA1qMgTPpTwL__JZ28xeFhFLpum_b_DiyfRiDwmtfCE4JTnrdg9ETOV\"]],[null,2,[1636,2395],[null,null,\"
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 34 59 2d 4b 7a 38 71 4e 77 79 75 68 7a 47 48 6f 65 44 30 6f 34 38 49 65 66 54 6e 65 79 74 57 4a 36 2d 31 37 4a 41 74 66 2d 32 57 41 68 67 44 37 39 62 61 49 41 64 59 41 76 43 7a 6e 6f 42 46 63 64 66 37 50 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 2c 5b 31 37 32 38 2c 31 30 38 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 38 4d 39 65 6a 66 65 67 4b 64 77 71 6b 53 52 77 74 68 63 62 76 6d 44 68 46 6d 61 6b 44 74 48 75 68 6f 31 6e 6a 38 44 4d 32 6d 66 79 2d 61 4e 35 70 43 45 39 56 52 31 37 49 55 33 70 48 52 6b 33 33 30 49 5c 22 5d 5d 2c 5b 6e Data Ascii: ttps://play-lh.googleusercontent.com/4Y-Kz8qNwyuhzGHoeD0o48IefTneytWJ6-17JAtf-2WAhgD79baIAdYAvCznoBFcdf7P\"]],[null,2,[1728,1080],[null,null,\"https://play-lh.googleusercontent.com/8M9ejfegKdwqkSRwthcbvmDhFmakDtHuho1nj8DM2mfy-aN5pCE9VR17IU3pHRk330I\"]],[n
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 75 6c 6c 2c 32 2c 5b 31 37 32 38 2c 31 30 38 30 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2d 6c 68 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 74 65 67 6b 5a 63 6c 31 4c 35 6b 6c 79 34 75 4b 70 35 74 6c 30 31 66 73 48 7a 48 72 65 6a 33 5f 6e 39 74 34 4c 42 4f 43 2d 47 63 7a 53 69 4d 52 39 68 6c 71 6c 32 64 46 50 42 43 59 7a 6b 4d 37 42 77 5c 22 5d 5d 5d 2c 5c 22 50 44 46 20 52 65 61 64 65 72 20 2d 20 50 44 46 20 56 69 65 77 65 72 5c 22 2c 5b 5c 22 34 2e 37 5c 22 2c 34 2e 37 30 36 38 34 39 5d 2c 5c 22 50 72 6f 64 75 63 74 69 76 69 74 79 5c 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 5b 30 2c 5c 22 55 53 44 5c 22 2c 5c 22 5c 22 5d 5d 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5c 22 42 75 Data Ascii: ull,2,[1728,1080],[null,null,\"https://play-lh.googleusercontent.com/tegkZcl1L5kly4uKp5tl01fsHzHrej3_n9t4LBOC-GczSiMR9hlql2dFPBCYzkM7Bw\"]]],\"PDF Reader - PDF Viewer\",[\"4.7\",4.706849],\"Productivity\",null,null,[null,[[0,\"USD\",\"\"]],null,[null,\"Bu
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 75 6d 65 6e 74 20 76 69 65 77 65 72 20 61 6e 64 20 65 64 69 74 6f 72 5c 5c 75 30 30 33 63 2f 62 5c 5c 75 30 30 33 65 20 74 6f 20 73 75 70 70 6f 72 74 20 79 6f 75 72 20 77 6f 72 6b 20 61 6e 64 20 73 74 75 64 79 3f 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 57 68 79 20 6e 6f 74 20 74 72 79 20 74 68 69 73 20 73 69 6d 70 6c 65 20 61 6e 64 20 65 66 66 65 63 74 69 76 65 20 50 44 46 20 52 65 61 64 65 72 20 5c 5c 75 30 30 32 36 61 6d 70 3b 20 56 69 65 77 65 72 20 2d 20 5c 5c 75 30 30 33 63 62 5c 5c 75 30 30 33 65 41 2b 20 52 65 61 64 5c 5c 75 30 30 33 63 2f 62 5c 5c 75 30 30 33 65 3f 20 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 54 68 69 73 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 20 64 6f 63 75 6d 65 6e 74 Data Ascii: ument viewer and editor\\u003c/b\\u003e to support your work and study?\\u003cbr\\u003eWhy not try this simple and effective PDF Reader \\u0026amp; Viewer - \\u003cb\\u003eA+ Read\\u003c/b\\u003e? \\u003cbr\\u003e\\u003cbr\\u003eThis professional document
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 67 65 74 20 50 44 46 73 20 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 2d 20 41 64 64 20 62 6f 6f 6b 6d 61 72 6b 73 20 74 6f 20 50 44 46 20 70 61 67 65 73 20 66 6f 72 20 66 75 74 75 72 65 20 72 65 66 65 72 65 6e 63 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 f0 9f 93 94 20 5c 5c 75 30 30 33 63 62 5c 5c 75 30 30 33 65 53 6d 61 72 74 20 50 44 46 20 52 65 61 64 65 72 5c 5c 75 30 30 33 63 2f 62 5c 5c 75 30 30 33 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 2d 20 50 61 67 65 20 62 79 20 70 61 67 65 20 61 6e 64 20 63 6f 6e 74 69 6e 75 6f 75 73 20 73 63 72 6f 6c 6c 69 6e 67 20 6d 6f 64 65 5c 5c 75 30 30 33 63 62 72 5c 5c 75 30 30 33 65 2d 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 61 6e 64 20 76 65 72 74 Data Ascii: get PDFs \\u003cbr\\u003e- Add bookmarks to PDF pages for future reference\\u003cbr\\u003e\\u003cbr\\u003e \\u003cb\\u003eSmart PDF Reader\\u003c/b\\u003e\\u003cbr\\u003e- Page by page and continuous scrolling mode\\u003cbr\\u003e- Horizontal and vert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50162	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	1648	OUT	POST /_/PlayStoreUi/browserinfo?f.sid=-8008743000736633856&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=258021&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535620.0.0.0; _ga=GA1.1.702310893.1713535574
2024-04-19 14:07:02 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 32 25 32 43 32 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C2%2C2%5D%5D&
2024-04-19 14:07:03 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:03 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:03 UTC	15	IN	Data Raw: 35 64 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 Data Ascii: 5d)]}'[[["f
2024-04-19 14:07:03 UTC	84	IN	Data Raw: 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 32 33 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 33 2c 22 2d 35 39 39 33 30 30 33 38 38 36 36 30 33 38 32 35 38 39 39 22 2c 31 30 34 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 33 5d 5d 5d 0d 0a Data Ascii: .mt"],["di",23],["af.httprm",23,"-5993003886603825899",104],["e",4,null,null,93]]]
2024-04-19 14:07:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50163	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:03 UTC	1099	OUT	GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:03 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 962 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:03 GMT Expires: Sat, 20 Apr 2024 14:07:03 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:03 UTC	726	IN	Data Raw: 52 49 46 46 ba 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 71 03 00 00 2f 3f c0 0f 10 77 06 31 92 6c d5 4a 9f ff 3f 0e f9 a7 e8 ee 70 ee 59 2c 08 48 91 24 39 92 bc e6 b4 42 72 20 8e ff f3 c0 e8 9e e9 80 d8 48 92 22 29 ea 9e c9 7f 1b 99 f9 67 ba 1c c5 b6 5b 37 47 52 fe db f0 08 80 ac 03 a4 c8 4b 21 04 6a 35 01 85 92 c0 89 09 81 0b 89 c2 8d 40 22 51 08 24 02 0b a2 44 81 28 6c 40 c4 44 eb 83 05 e1 b2 d8 52 d2 72 08 0c 29 81 96 14 42 54 08 41 18 5c d8 88 0a 17 42 d8 21 84 a8 b0 11 42 d4 46 08 85 f8 5f 21 84 42 88 5a 2c 9b c1 90 c1 50 0b a1 a8 45 bf 0f 77 6c 8e 38 7c be 50 47 9c ec 2b 35 71 b6 6e 1c bb 94 b7 3a 9c 73 06 c3 de 79 a2 ee a3 44 89 e8 37 da 68 fc d1 d1 46 63 a0 31 f0 43 97 8c 37 df ef 8d c7 77 7d ae 4f 76 Data Ascii: RIFFWEBPVP8X??VP8Lq/?w1lJ?pY,H$9Br H")g[7GRK!j5@"Q$D(l@DRr)BTA\B!BF_!BZ,PEwl8\|PG+5qn:syD7hFc1C7w}Ov
2024-04-19 14:07:03 UTC	236	IN	Data Raw: 32 45 3d a5 02 28 55 40 aa 00 cc e2 79 02 f8 a6 f2 5c 00 df 25 1e 2f af 67 f1 8f 9f 5f 8b 04 70 da 55 79 27 80 0f 12 79 ba 16 ff d7 4c e5 ad 00 48 29 cd 80 e3 2f b8 d2 1b 01 7c 96 24 27 10 d1 95 5c 2d 37 af d3 8d bb 4f 23 0c 4a f9 02 70 25 1e 77 89 88 6b f1 38 11 93 fb f1 6b 02 17 b9 c4 65 8a 81 b9 4c d1 87 3f 16 c0 03 66 cb c7 f7 af 6e 0b e0 9c 6b 8d fc ac c7 cc 28 8c a6 d0 ef 5e 84 01 28 34 a0 2c 23 33 85 ab 94 65 64 02 c8 79 d9 9e 49 cb 32 32 53 b8 26 c3 7f 3b 8b 31 2f 2e 9a 5a e6 d5 8e a6 ba 79 35 a2 a1 d6 a6 b5 a1 a8 ab b8 66 51 d5 e8 a8 62 6c 0b 73 5a c6 55 0a f9 03 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: 2E=(U@y\%/g_pUy'yLH)/\|$'\-7O#Jp%wk8keL?fnk(^(4,#3edyI22S&;1/.Zy5fQblsZUEXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50165	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:03 UTC	1100	OUT	GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:03 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 896 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:43:14 GMT Expires: Sat, 20 Apr 2024 10:43:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 12229 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:03 UTC	722	IN	Data Raw: 52 49 46 46 78 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 30 03 00 00 2f 3f c0 0f 00 05 25 da b6 8d cd d5 6a 25 79 b6 dd b5 d5 b5 fd 5a b6 6d c4 b6 6d db b6 8d b2 5d 15 3b f9 8d aa f7 ef c6 bd df f7 dd ff af 5e 5a 11 fd 9f 00 5d c0 d8 52 b7 7b f3 ce ea 54 ab 29 fb 03 fb 17 79 ad 22 f4 1e 7e 9f 3e 91 7b 95 98 ef 8e 9c 31 e6 23 cc bc 5c ab 06 98 19 93 99 5c 0c 30 a5 d7 77 3f 0f 5e 7b 32 57 62 c0 6d 67 e4 1d c1 e7 1b 65 b9 f1 1b d0 2c ef 03 f8 ff 3b 93 03 87 80 e3 f2 3c f6 1e c0 35 b3 8b ea 6b 77 f6 03 b8 33 99 b5 4c 4f 18 2e 7b 6a 30 e6 3e d9 9b c7 00 77 67 a9 fc 17 80 63 b6 95 98 f3 e4 b7 18 e8 99 8d d8 97 58 65 96 de 0a d0 39 2a ff f9 40 bd bb c3 d8 7f 34 7e 03 78 ae 41 d6 74 d4 43 03 e0 07 67 27 00 a6 1f 80 ae Data Ascii: RIFFxWEBPVP8X??VP8L0/?%j%yZmm];^Z]R{T)y"~>{1#\\0w?^{2Wbmge,;<5kw3LO.{j0>wgcXe9*@4~xAtCg'
2024-04-19 14:07:03 UTC	174	IN	Data Raw: c7 95 c5 9e 40 b1 af f9 98 2b 65 3d 62 fc 5e a1 ec de 0d 8c 69 f6 d8 87 39 38 25 fb 50 e8 99 51 b6 93 77 01 f4 db 59 5b 5f 34 e7 7a 80 f7 8e c9 f3 28 70 48 d9 cf fc 8d ff 03 f2 4e 03 bf 2a 27 cb de f0 13 91 f7 e9 2b 81 58 6e 48 27 d7 0e fe f9 bb 5e 53 00 16 a7 2c d1 e9 00 d5 ca f1 3c cc 8f c7 cc 18 f9 36 66 a5 72 fe c4 d3 f8 7d 2f a4 d6 98 f7 85 c7 1f 65 6a ad a9 ea 5d 9b f7 d4 fd af 0b 18 01 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: @+e=b^i98%PQwY[_4z(pHN'+XnH'^S,<6fr}/ej]EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50164	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:03 UTC	1572	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7701 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=3a6l25apk2qh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahQjhgtqGjilS4ufRwoRKvfYBGNt9kD399GwGFmwPnaNTM7QZnKPtVvsqIG8ITSC3HfL-7686rnNg2vGfg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:07:03 UTC	7701	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 34 7a 39 44 33 45 6e 6b 61 61 58 65 6d 69 6f 67 67 68 63 76 67 65 39 30 72 65 79 36 44 69 36 53 61 4e 48 56 78 6c 4d 75 76 4b 71 6c 37 39 5a 73 58 6b 67 4b 47 48 5f 57 51 74 5a 4b 35 4f 7a 79 47 32 68 4b 71 62 53 37 7a 6d 36 69 45 4e 42 75 4c 5f 41 49 4c 6d 51 6e 38 4e 6d 39 41 55 6d 59 72 53 5a 5a 42 67 4e 36 4e 70 31 65 35 7a 50 67 7a 75 74 75 2d 2d 4b 49 75 79 39 4e 61 6e 73 5f 50 78 67 6e 65 77 6c 67 78 79 4f 73 64 5a 43 4d 53 69 4e 43 38 6b 49 73 33 49 43 30 67 31 79 44 4c 34 35 66 65 35 30 2d 6c 51 48 5a 55 4b 43 38 72 7a 32 4d 43 36 56 79 31 57 4e 55 63 55 4c 77 52 54 2d 54 54 36 78 4b 7a 53 2d 45 73 56 65 5a 57 65 30 4c 38 32 5a 68 76 67 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA4z9D3EnkaaXemiogghcvge90rey6Di6SaNHVxlMuvKql79ZsXkgKGH_WQtZK5OzyG2hKqbS7zm6iENBuL_AILmQn8Nm9AUmYrSZZBgN6Np1e5zPgzutu--KIuy9Nans_PxgnewlgxyOsdZCMSiNC8kIs3IC0g1yDL45fe50-lQHZUKC8rz2MC6Vy1WNUcULwRT-TT6xKzS-EsVeZWe0L82Zhvg
2024-04-19 14:07:03 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:07:03 GMT Expires: Fri, 19 Apr 2024 14:07:03 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOajQ8yTbYmfNthCqeCUXSA62-OZxgYCryckT7TvnHeCrYgvj_ZEKKw3MoqyxiyWewig5FlXNz8xdPD8vxvg;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:07:03 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:03 UTC	559	IN	Data Raw: 61 36 36 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 48 43 6e 42 72 57 52 69 79 6d 79 4c 59 50 61 64 46 6e 5a 4c 37 48 4b 51 59 57 44 39 4e 74 4a 68 31 76 32 7a 76 52 51 67 52 76 54 63 71 4f 69 73 73 42 39 68 61 4e 5f 5a 67 36 4c 63 6f 53 35 5f 48 30 6a 56 31 73 55 72 6b 69 42 46 43 4d 62 77 45 6c 6c 58 30 79 44 7a 77 33 47 58 43 78 4a 70 41 4b 77 61 79 71 6a 6e 39 44 2d 79 6a 62 44 31 61 71 74 42 68 73 37 34 63 48 77 5a 39 67 38 6b 71 7a 30 71 6a 64 79 48 52 30 7a 50 4a 41 41 34 46 31 56 62 6c 53 77 7a 78 5a 4a 6b 30 74 42 51 6f 6e 77 43 33 47 63 6b 37 50 30 6d 70 57 34 51 74 6a 4c 35 6c 52 30 62 31 47 6d 2d 45 67 4b 31 72 34 4e 5a 4f 63 44 36 78 73 4c 6a 6a 68 73 72 64 5a 4a 6f 70 78 62 77 31 49 68 6b 6e 35 74 37 32 48 Data Ascii: a66)]}'["rresp","03AFcWeA6HCnBrWRiymyLYPadFnZL7HKQYWD9NtJh1v2zvRQgRvTcqOissB9haN_Zg6LcoS5_H0jV1sUrkiBFCMbwEllX0yDzw3GXCxJpAKwayqjn9D-yjbD1aqtBhs74cHwZ9g8kqz0qjdyHR0zPJAA4F1VblSwzxZJk0tBQonwC3Gck7P0mpW4QtjL5lR0b1Gm-EgK1r4NZOcD6xsLjjhsrdZJopxbw1Ihkn5t72H
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 39 35 46 76 71 2d 65 68 4f 6e 4a 6a 59 6f 63 31 6b 4a 32 71 77 76 74 45 70 73 49 76 36 31 50 71 34 4b 76 33 55 6b 6e 5a 4e 48 44 45 6d 6b 77 59 51 74 31 75 58 48 51 59 58 51 5f 50 63 55 66 59 68 72 4d 6d 72 70 74 64 44 6d 6d 59 66 44 34 6e 32 72 46 56 47 61 6a 48 76 39 4a 75 42 38 4a 35 45 73 75 32 37 5f 58 5f 33 4c 45 47 50 6d 65 6f 62 69 37 37 77 4c 5a 54 5a 6b 47 62 6f 73 44 59 39 6a 6b 42 74 6e 30 6d 65 7a 75 56 6b 69 35 69 4e 6c 39 30 6b 37 4d 6b 47 34 6a 43 77 48 49 6b 54 72 53 45 56 4a 4e 64 4b 36 42 69 6e 31 67 6c 58 39 4b 32 61 44 4a 68 49 4c 73 6f 35 56 39 33 66 5f 75 69 65 41 4a 39 4a 41 31 76 62 44 46 58 4c 54 32 75 6d 67 47 6c 62 2d 4c 66 63 76 39 68 6b 62 63 61 68 75 47 61 68 33 67 46 6d 63 6e 62 67 42 36 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e Data Ascii: 95Fvq-ehOnJjYoc1kJ2qwvtEpsIv61Pq4Kv3UknZNHDEmkwYQt1uXHQYXQ_PcUfYhrMmrptdDmmYfD4n2rFVGajHv9JuB8J5Esu27_X_3LEGPmeobi77wLZTZkGbosDY9jkBtn0mezuVki5iNl90k7MkG4jCwHIkTrSEVJNdK6Bin1glX9K2aDJhILso5V93f_uieAJ9JA1vbDFXLT2umgGlb-Lfcv9hkbcahuGah3gFmcnbgB6",null,120,n
2024-04-19 14:07:03 UTC	855	IN	Data Raw: 6d 52 43 51 6c 42 56 56 46 68 6f 52 57 39 42 4d 54 6c 61 65 6d 56 42 56 57 4a 6b 4c 32 4e 43 64 45 31 71 64 56 6c 72 51 6d 78 6a 54 32 6f 30 4d 6a 52 4b 5a 31 4a 69 5a 33 52 58 5a 45 4a 57 5a 6a 56 74 4b 7a 6c 57 57 57 74 30 52 45 4a 30 62 30 31 49 5a 54 42 72 62 33 64 31 65 56 5a 52 52 69 39 55 65 55 78 76 59 30 56 36 54 6d 39 4b 4d 54 5a 78 61 7a 46 7a 56 48 55 32 64 47 77 78 64 32 6c 79 63 47 4d 79 55 53 38 78 61 48 5a 72 57 48 64 46 54 32 56 53 5a 45 52 51 57 48 42 6c 4e 53 74 57 61 6a 6c 79 54 31 70 31 55 58 5a 5a 59 6c 46 32 4d 6a 46 55 53 6d 6c 6f 4e 55 46 69 55 6b 6c 53 65 6b 4e 4f 53 56 56 46 54 55 70 42 54 55 38 35 57 44 42 51 4e 6e 51 7a 4d 31 68 42 65 43 74 59 52 6d 46 6b 62 6a 6b 31 55 55 68 43 56 6d 31 70 5a 6c 4d 7a 64 45 35 33 56 6c 46 6a Data Ascii: mRCQlBVVFhoRW9BMTlaemVBVWJkL2NCdE1qdVlrQmxjT2o0MjRKZ1JiZ3RXZEJWZjVtKzlWWWt0REJ0b01IZTBrb3d1eVZRRi9UeUxvY0V6Tm9KMTZxazFzVHU2dGwxd2lycGMyUS8xaHZrWHdFT2VSZERQWHBlNStWajlyT1p1UXZZYlF2MjFUSmloNUFiUklSekNOSVVFTUpBTU85WDBQNnQzM1hBeCtYRmFkbjk1UUhCVm1pZlMzdE53VlFj
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 31 36 36 35 0d 0a 35 45 51 54 42 48 53 33 42 45 63 6e 64 53 63 56 56 70 59 6c 6c 69 64 33 45 34 64 6b 68 71 4e 46 4e 77 4e 6e 6c 70 4d 69 38 79 56 31 64 76 4f 48 4d 78 53 44 56 56 5a 31 5a 72 64 6c 5a 76 57 45 39 4f 5a 79 73 77 52 45 74 53 51 55 70 32 63 6d 31 56 64 47 39 70 52 6e 64 43 63 57 56 59 56 55 64 76 5a 45 56 76 59 55 70 48 63 31 56 52 64 48 70 50 56 47 31 32 57 57 59 77 64 7a 49 76 56 47 74 57 56 33 6c 5a 57 48 51 72 56 6d 64 77 61 57 38 78 65 57 46 43 4d 7a 56 50 5a 32 6c 44 63 58 68 4f 64 6d 39 6c 4f 57 4d 77 61 54 56 68 59 55 5a 44 4e 6e 55 7a 51 58 64 79 59 6b 46 53 62 56 5a 43 4c 32 70 58 54 7a 64 70 64 6d 5a 77 64 46 46 72 4f 48 5a 79 52 6d 52 7a 4f 47 39 61 63 57 45 79 4e 48 4a 72 62 32 46 44 52 47 4a 70 4e 47 35 6b 4d 58 4e 70 52 47 5a Data Ascii: 16655EQTBHS3BEcndScVVpYllid3E4dkhqNFNwNnlpMi8yV1dvOHMxSDVVZ1ZrdlZvWE9OZyswREtSQUp2cm1VdG9pRndCcWVYVUdvZEVvYUpHc1VRdHpPVG12WWYwdzIvVGtWV3lZWHQrVmdwaW8xeWFCMzVPZ2lDcXhOdm9lOWMwaTVhYUZDNnUzQXdyYkFSbVZCL2pXTzdpdmZwdFFrOHZyRmRzOG9acWEyNHJrb2FDRGJpNG5kMXNpRGZ
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 77 54 58 4a 6a 63 31 70 50 64 57 74 56 59 6e 56 5a 61 45 67 7a 4d 7a 64 71 62 33 68 53 57 54 64 6a 5a 79 39 50 5a 54 4a 61 63 56 52 5a 56 6e 68 7a 4b 32 74 4f 56 45 70 7a 61 57 78 71 4d 6e 4e 4d 54 30 4a 73 64 31 6c 74 4f 57 74 77 54 33 52 69 4c 30 35 47 54 7a 56 42 4f 57 68 49 59 57 4a 53 63 56 4d 72 64 7a 42 43 63 6b 74 58 4f 57 70 35 62 30 68 71 65 56 59 76 61 44 4a 68 53 69 39 56 64 6a 64 57 61 46 4e 59 61 58 4e 34 56 6e 52 43 64 48 56 58 4e 6b 4a 75 61 31 42 36 56 32 38 79 56 31 4e 78 4b 31 46 76 53 58 56 4a 51 6a 56 74 64 45 6c 77 56 6a 6c 6d 57 56 52 77 59 58 52 35 52 6c 70 35 4d 6b 78 56 4e 6b 4e 4b 63 6b 5a 47 56 48 4d 34 64 43 74 4a 63 44 5a 58 59 6b 5a 70 4b 31 6c 4b 51 6d 4a 61 55 6c 5a 71 62 45 55 32 4f 46 4a 45 64 33 52 70 51 57 4a 36 52 6b Data Ascii: wTXJjc1pPdWtVYnVZaEgzMzdqb3hSWTdjZy9PZTJacVRZVnhzK2tOVEpzaWxqMnNMT0Jsd1ltOWtwT3RiL05GTzVBOWhIYWJScVMrdzBCcktXOWp5b0hqeVYvaDJhSi9VdjdWaFNYaXN4VnRCdHVXNkJua1B6V28yV1NxK1FvSXVJQjVtdElwVjlmWVRwYXR5Rlp5MkxVNkNKckZGVHM4dCtJcDZXYkZpK1lKQmJaUlZqbEU2OFJEd3RpQWJ6Rk
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 4e 6d 62 6c 70 48 52 45 35 44 65 56 68 44 4e 6a 46 54 51 57 4e 78 51 6e 46 32 64 44 5a 75 4e 47 5a 4f 63 30 39 74 55 47 5a 36 56 6b 4d 7a 65 6b 31 34 4f 54 41 76 56 6c 4e 72 4d 46 46 4f 51 32 4e 5a 4d 44 49 77 4e 44 4e 6b 5a 54 52 76 64 32 55 32 59 30 70 4d 55 54 6c 6e 4f 46 52 36 65 56 70 79 52 33 5a 36 57 44 42 33 54 57 64 79 56 7a 56 50 63 56 56 51 65 45 35 6b 65 6e 4e 61 61 45 74 76 59 7a 42 73 4e 6a 4a 49 64 6d 51 7a 64 79 73 77 54 44 68 54 5a 30 49 72 51 69 39 31 4d 6e 5a 75 61 6b 64 78 52 48 4a 59 55 56 64 45 5a 56 4e 72 4e 46 6c 6a 4f 47 46 73 55 6e 56 4d 64 6d 63 72 5a 48 46 42 56 33 51 78 4b 7a 4a 57 64 43 74 32 61 6a 52 42 51 55 70 6d 56 30 5a 4b 65 53 39 4f 53 47 31 4a 4d 57 38 78 53 45 70 50 61 6c 63 35 57 47 70 6b 64 55 31 4c 55 7a 42 34 4b Data Ascii: NmblpHRE5DeVhDNjFTQWNxQnF2dDZuNGZOc09tUGZ6VkMzek14OTAvVlNrMFFOQ2NZMDIwNDNkZTRvd2U2Y0pMUTlnOFR6eVpyR3Z6WDB3TWdyVzVPcVVQeE5kenNaaEtvYzBsNjJIdmQzdyswTDhTZ0IrQi91MnZuakdxRHJYUVdEZVNrNFljOGFsUnVMdmcrZHFBV3QxKzJWdCt2ajRBQUpmV0ZKeS9OSG1JMW8xSEpPalc5WGpkdU1LUzB4K
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 30 30 77 4c 30 4a 6c 55 6d 39 4f 61 57 39 68 52 30 70 4b 65 6c 42 61 62 69 38 77 64 45 5a 4c 4f 45 45 78 63 57 5a 6d 4d 6b 6f 30 51 55 6c 75 4d 31 4e 6e 53 48 5a 56 52 6b 45 35 57 48 59 32 51 6b 78 56 64 6d 4e 56 62 30 49 35 54 54 4e 34 4d 47 70 6e 63 33 64 58 51 30 6c 52 54 6e 6c 52 5a 58 6c 32 54 69 73 76 54 46 68 6f 64 44 4a 70 64 45 74 6a 63 6a 68 72 51 31 45 72 53 56 4d 33 65 57 78 6e 57 6e 46 6a 56 54 4a 49 54 33 41 34 64 54 63 76 59 31 46 4a 5a 57 70 78 56 6c 64 50 4e 30 56 79 56 46 6c 58 54 57 31 34 4e 6d 46 4b 53 33 5a 6a 52 32 64 71 57 56 52 74 54 58 55 72 65 48 6c 79 5a 6b 4a 31 65 57 70 4b 55 6a 6c 46 63 54 49 76 56 56 64 6c 56 57 52 49 61 6d 70 48 54 30 68 72 64 30 5a 5a 53 55 38 30 4e 47 68 6e 55 48 56 4d 5a 6c 4a 43 65 57 35 4f 64 57 70 56 Data Ascii: 00wL0JlUm9OaW9hR0pKelBabi8wdEZLOEExcWZmMko0QUluM1NnSHZVRkE5WHY2QkxVdmNVb0I5TTN4MGpnc3dXQ0lRTnlRZXl2TisvTFhodDJpdEtjcjhrQ1ErSVM3eWxnWnFjVTJIT3A4dTcvY1FJZWpxVldPN0VyVFlXTW14NmFKS3ZjR2dqWVRtTXUreHlyZkJ1eWpKUjlFcTIvVVdlVWRIampHT0hrd0ZZSU80NGhnUHVMZlJCeW5OdWpV
2024-04-19 14:07:03 UTC	721	IN	Data Raw: 56 45 4d 77 55 44 42 44 57 6e 64 79 55 6c 70 58 4f 48 56 4b 54 47 52 68 4d 7a 56 53 4f 46 42 74 55 30 70 47 57 6e 64 54 64 57 78 4a 62 58 49 31 57 56 51 78 4d 6e 70 7a 51 54 64 4a 53 6d 78 77 61 57 39 4d 51 6b 64 54 63 33 5a 73 4d 6a 5a 6c 4c 31 56 72 5a 6d 6c 50 61 57 78 6d 4f 48 41 30 51 6b 30 72 62 45 5a 70 51 55 64 4a 62 44 46 71 55 32 77 34 61 57 31 58 62 48 6c 78 62 54 4d 76 61 47 70 56 53 6d 39 53 4b 7a 4e 74 57 54 6c 55 63 31 4a 4b 62 32 78 54 5a 31 5a 57 54 6d 5a 6d 4e 6c 64 73 57 56 70 48 59 32 35 78 4b 32 64 4e 62 48 46 5a 63 48 5a 5a 51 56 52 52 65 57 63 72 61 57 4a 35 54 58 42 34 4f 46 63 34 53 30 35 6d 57 56 42 6b 63 45 46 78 63 32 5a 77 54 48 52 31 61 6b 6c 48 51 57 51 72 63 45 70 6e 56 54 4a 77 4d 45 46 69 59 30 6c 76 52 47 70 36 64 6a 4a Data Ascii: VEMwUDBDWndyUlpXOHVKTGRhMzVSOFBtU0pGWndTdWxJbXI1WVQxMnpzQTdJSmxwaW9MQkdTc3ZsMjZlL1VrZmlPaWxmOHA0Qk0rbEZpQUdJbDFqU2w4aW1XbHlxbTMvaGpVSm9SKzNtWTlUc1JKb2xTZ1ZWTmZmNldsWVpHY25xK2dNbHFZcHZZQVRReWcraWJ5TXB4OFc4S05mWVBkcEFxc2ZwTHR1aklHQWQrcEpnVTJwMEFiY0lvRGp6djJ
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 65 62 38 0d 0a 4c 57 58 70 71 56 44 56 36 4e 58 70 4d 52 6a 4a 42 56 58 63 32 54 56 68 46 51 54 46 31 62 7a 4d 77 51 58 52 30 65 46 4e 4a 65 6c 52 6e 51 55 35 49 64 7a 45 32 61 46 67 77 56 48 49 76 56 6a 51 72 55 55 5a 53 54 6c 56 73 51 55 4e 47 5a 47 70 34 63 6d 70 4a 4d 6d 6c 71 54 31 56 4b 5a 45 6c 75 55 58 5a 48 56 44 4a 42 4b 31 4a 48 54 48 4e 6e 65 44 5a 53 55 6b 45 7a 4e 6a 52 31 57 47 4a 53 62 56 41 30 4d 32 5a 44 53 7a 5a 6f 4f 46 5a 45 62 33 67 76 56 6d 46 4b 57 6e 64 75 57 56 46 36 5a 6a 4e 43 61 6c 70 44 52 46 64 6b 53 31 52 4e 56 45 39 61 4e 32 68 4b 4e 6a 49 32 4e 32 4a 58 63 30 6c 43 64 56 4e 6d 53 46 68 42 5a 32 35 32 64 57 74 59 59 6d 78 69 4e 6b 74 6b 61 30 35 79 4b 32 68 76 56 30 35 59 56 45 64 4c 56 6c 64 51 61 58 4e 59 55 48 70 4c 57 Data Ascii: eb8LWXpqVDV6NXpMRjJBVXc2TVhFQTF1bzMwQXR0eFNJelRnQU5IdzE2aFgwVHIvVjQrUUZSTlVsQUNGZGp4cmpJMmlqT1VKZEluUXZHVDJBK1JHTHNneDZSUkEzNjR1WGJSbVA0M2ZDSzZoOFZEb3gvVmFKWnduWVF6ZjNCalpDRFdkS1RNVE9aN2hKNjI2N2JXc0lCdVNmSFhBZ252dWtYYmxiNktka05yK2hvV05YVEdLVldQaXNYUHpLW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50166	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:03 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535620.0.0.0; _ga=GA1.1.702310893.1713535574
2024-04-19 14:07:03 UTC	4267	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 32 33 30 38 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535623088",null,null,null,null,
2024-04-19 14:07:04 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:04 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:04 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 32 34 30 35 31 22 5d 0d 0a Data Ascii: 1a["900000","1713535624051"]
2024-04-19 14:07:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50170	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1100	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1162 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:11:45 GMT Expires: Sat, 20 Apr 2024 12:11:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 6919 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	722	IN	Data Raw: 52 49 46 46 82 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 3a 04 00 00 2f 3f c0 0f 00 e7 27 21 92 24 47 92 62 f9 93 3a 42 5a df ed 4c fa 89 7f 0e 92 22 49 92 24 49 bd 8f e7 b2 5a fe 38 96 c1 d9 1d 26 21 92 24 47 92 a2 9f 3f a7 47 a4 f5 ff 4c a7 cf 7f ca ca 1f 09 15 68 e9 1d 11 86 0a 88 40 2a e0 3f 7b 8d 98 a9 04 b2 9b b0 30 44 05 a0 02 1a 02 95 00 44 30 42 0c 41 f4 39 e6 da 63 88 86 84 dd f8 b2 d8 0d 04 cf 40 20 a1 4f f6 44 43 40 84 3e d9 93 40 2a a1 6f 06 9b 76 cc 25 c4 50 f4 4d 3b 6c 16 d0 d8 d1 20 fb 4c 68 b1 ac ab 0b e9 81 30 ce bb 16 8d be b9 74 1c bd 2a c4 80 06 b4 74 e9 62 34 26 c1 d8 0d 08 70 00 18 5d 84 07 33 20 84 80 96 cb e2 9b 99 99 96 0e 02 c2 60 fa 1e e7 2e 03 34 a4 83 9c 7b cd ac a9 c0 c2 66 11 ba Data Ascii: RIFFWEBPVP8X??VP8L:/?'!$Gb:BZL"I$IZ8&!$G?GLh@?{0DD0BA9c@ ODC@>@ov%PM;l Lh0t*tb4&p]3 `.4{f
2024-04-19 14:07:04 UTC	440	IN	Data Raw: 86 ec 17 b8 2c b5 f6 b5 c1 c0 7a 63 00 ec e5 a8 e0 1a ed be 9d 75 f8 1e 53 ce 49 85 ca 99 86 6a a0 c7 9c 14 40 77 d3 52 18 11 b1 36 c6 68 a6 72 a6 76 3c 70 a4 fb 71 7d 00 2b 84 88 52 16 4e 89 88 45 84 89 88 58 44 84 4b 56 eb 47 a2 fb 6a 1b 26 01 d8 c7 11 51 fa d9 43 cb 1e fe c5 d4 f0 eb 37 df fc ff 47 b6 99 f8 cd bb e6 ce bd fb 71 2e 95 fe 0b bd 52 71 17 00 18 ec 1b 88 48 ee 54 89 52 fb 59 7d 6a a2 54 d5 8e ba 59 2e 49 12 55 f5 bb 2d 95 1d 8d 15 c6 cf 06 d0 47 98 f2 e6 26 33 5e da 55 4d b7 b9 e4 fd 6f 8e 51 bb 58 99 96 2c 5d fb d6 5a 2e d9 08 dc 2b 53 01 f4 fc 81 29 4b 2d 30 be d3 ce 3e a7 de 95 b0 93 fa 5e 4f 53 ab b4 30 95 5a 5f 83 cc 91 c2 d4 da 22 ab 93 c9 3e a7 de 66 b9 3e b9 cf 4c 4b 96 7f f8 de 17 69 a9 c8 fd d5 05 58 ef af c0 d4 5a 72 fa 2d 7f a8 Data Ascii: ,zcuSIj@wR6hrv<pq}+RNEXDKVGj&QC7Gq.RqHTRY}jTY.IU-G&3^UMoQX,]Z.+S)K-0>^OS0Z_">f>LKiXZr-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50172	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1100	OUT	GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1124 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:57:41 GMT Expires: Sat, 20 Apr 2024 12:57:41 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4163 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	722	IN	Data Raw: 52 49 46 46 5c 04 00 00 57 45 42 50 56 50 38 20 50 04 00 00 d0 16 00 9d 01 2a 40 00 40 00 3e 61 28 8f 45 a4 22 a1 14 06 fc 40 06 04 b2 80 62 f4 c3 2c 20 66 93 d3 bf 27 f8 ac c4 0b e1 5f 4e fe e3 f9 55 f9 25 ac 27 fc 97 fb 2f e5 6f 00 4f 1e fe a5 fe 3b f2 df 98 0e f4 1f ce ff d7 79 39 78 03 7c af fd 37 b0 07 f2 7f ef bf f1 7d 92 ff 89 ff 6b f7 33 ec fb f2 df eb 3f f1 3f c8 fc 01 ff 1d fe 85 fe 97 f3 87 fc 47 cb 37 ac bf da 5f 62 3f d3 94 e3 22 fd a6 bf 15 27 0f 9f 9f 3b 8f e5 2b d4 d3 72 7a cd 37 ff 3c 4e 75 74 fa 27 36 bc ef a7 98 a9 7f b3 0b 9a 62 ec 69 24 ca 66 47 72 f6 45 87 d1 5f f5 5f 03 e1 a8 b5 8d 7a 57 26 f1 2b 66 40 00 fe fd 28 d2 f2 3b 08 6e c3 95 69 10 45 de f5 e5 5d d1 9c a6 a1 73 83 5a 86 e9 ba bb f8 8f e6 d4 fc df bf d7 09 3b 59 88 2e 35 de Data Ascii: RIFF\WEBPVP8 P*@@>a(E"@b, f'_NU%'/oO;y9x\|7}k3??G7_b?"';+rz7<Nut'6bi$fGrE__zW&+f@(;niE]sZ;Y.5
2024-04-19 14:07:04 UTC	402	IN	Data Raw: 2d 54 57 25 bb 8d 60 db 30 ee c5 44 a9 a5 a2 92 a7 00 8f f9 14 83 12 2f d8 58 20 21 3d 6b 29 b2 78 1e c2 fe 16 f2 5b 16 b6 f6 9c 61 10 f3 f8 5b 8b 2c 5e d5 c4 7a 78 88 22 44 b8 d0 e5 57 2e 84 eb 0a da a9 53 8a 77 87 33 d4 c6 0e ea 0d 54 d2 d6 c3 a1 a9 7f f3 96 be 79 d2 e1 ca 89 56 27 f8 60 dc 80 fe 5f bb ff c9 86 f0 11 ea 56 1f 8e 5b cd 47 a7 f4 1a 04 19 9a d6 e9 e5 ad d5 67 e4 7a ca 72 e4 9e 37 d1 c5 ff 63 b6 1a c1 5a 8f ae 33 bb 7e e6 ab 0b 07 d9 c1 d0 eb 6a 35 6d fb e5 39 fe b0 f8 a4 e0 08 73 9c cb 7c 19 61 4e ab 51 2d d4 3e c9 9a 8f c7 43 d2 45 ab f4 ba 33 86 a7 8e b9 88 16 ef 14 d5 f8 e1 39 ac 06 76 b9 5c 31 5e 2f e1 c2 c1 ce ef a1 7b 1f e1 f0 26 67 7f 7d b1 15 0b 6a de 25 81 88 f4 ad 53 e7 c2 2b fd 5a b5 95 94 7d 85 d4 db 95 c2 be 24 63 c8 25 f5 24 Data Ascii: -TW%`0D/X !=k)x[a[,^zx"DW.Sw3TyV'`_V[Ggzr7cZ3~j5m9s\|aNQ->CE39v\1^/{&g}j%S+Z}$c%$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50167	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1100	OUT	GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2544 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:04 GMT Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	725	IN	Data Raw: 52 49 46 46 e8 09 00 00 57 45 42 50 56 50 38 4c dc 09 00 00 2f 3f c0 0f 10 4d 28 68 db c8 f9 dc f8 d5 f2 27 fc 0f 22 a2 ff 13 c0 3f 21 4d 65 06 98 91 09 20 3d 71 94 69 90 44 3a 33 24 3d 5f 2f 0c b2 8d 54 7f ca 11 7c 1e e2 20 14 b4 6d 23 87 7c ff c1 08 43 46 92 04 d5 cf f9 cb 3d 41 13 dc 3f 42 ff 85 04 09 76 87 60 bb 7d 97 fa 7d 87 a8 df 01 10 11 ca 37 27 8d 12 44 f4 68 3a 48 4a 34 8d 71 90 bf 1f f1 02 a0 24 0e 03 69 db 34 fe 6d ef d7 10 11 13 50 69 c2 6a c4 b0 1c d1 db 8e ac 6d ab 6d 2b f3 f8 b9 b8 3b 44 96 4a 0f 4e 1b 68 01 39 bd a1 03 b4 80 26 dc 1e e0 ee ee ee 1c 5b 33 58 6b 9f bd d6 95 7c a0 91 cb 57 7f cd 64 36 80 3a d9 aa 55 f5 23 99 43 e6 ee 4e fa 23 a9 c3 2e b2 2f 24 72 56 4d bc 0b ee 4e 03 76 91 d3 0a c8 91 24 29 92 3c 16 ee 24 e0 d3 5f 3a c6 17 Data Ascii: RIFFWEBPVP8L/?M(h'"?!Me =qiD:3$=_/T\| m#\|CF=A?Bv`}}7'Dh:HJ4q$i4mPijmm+;DJNh9&[3Xk\|Wd6:U#CN#./$rVMNv$)<$_:
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: fc d2 0e d0 f4 e3 f1 47 4a 33 03 40 8f 41 b7 10 d0 68 1e f6 c9 72 10 03 25 91 08 71 00 00 17 bf 73 fd e6 5a f8 ff 65 00 34 36 80 b0 02 94 c7 a1 23 be 4d 53 72 6d fe 21 9f 2c 09 b5 10 0c 00 ba 20 16 ce 00 78 e9 2d f1 02 9c 01 67 60 44 bb 0f 44 8b a3 67 d6 16 b7 24 cb 83 3f 6a 59 00 96 62 ed a7 50 fb 86 9b c0 fc 00 a1 a2 e8 b2 b1 f8 04 38 76 41 6b 6c 61 9d e4 03 df 6b 79 0b f0 20 00 b7 78 fc c1 2b e2 66 b0 70 88 50 39 e8 d2 65 c1 09 d8 e3 17 88 a6 b4 b5 2c d6 3c e0 bd 74 bc 2c bd 88 89 5c c0 26 00 bc ae a3 3b e0 e6 b0 30 5c 2c ba 68 fe 05 e0 d8 25 18 2d 4c b6 f7 7b c3 0a b3 21 2e de 50 f3 0e f2 03 ea 57 da 86 c2 ba ab 7d a2 a4 43 a7 a0 d1 74 63 50 70 9f 1e ac 42 93 0a d0 00 0c 93 33 1f 0b 95 61 c7 01 f7 76 6f 55 d7 ec 74 80 41 00 40 32 65 5a 46 c1 f6 01 a0 Data Ascii: GJ3@Ahr%qsZe46#MSrm!, x-g`DDg$?jYbP8vAklaky x+fpP9e,<t,\&;0\,h%-L{!.PW}CtcPpB3avoUtA@2eZF
2024-04-19 14:07:04 UTC	564	IN	Data Raw: 1d 18 cc 70 35 98 da 80 29 8b ca 80 0d 59 05 fa bb 39 63 30 60 6e 12 4e 9c 52 df c6 ad 1e 9f c0 ad ef 8f 9c b0 97 1c 2d ca 58 6b ad 61 38 00 4c b1 43 13 ba 8a e1 99 07 ce cb 77 0b 46 8d e6 01 0b 30 15 28 e6 aa dd 0b 09 e3 99 5b bf 34 3b 8c d9 21 2a b7 b9 3d 78 65 d6 e7 5f c7 ca 59 31 6b a8 47 45 09 a1 6a 1b 53 58 dc 60 e8 16 86 f0 29 61 fc 8f a6 a3 5e 04 c6 fe cf c4 55 61 d4 12 5c 4a e8 98 b1 42 f9 d9 cf b8 69 6b 1f 9d 89 fa ab 7f fc 23 c5 a2 b4 99 9a cd b0 19 b1 69 a1 99 ef 2b 67 95 c4 aa 90 2f e0 03 12 c9 fd 28 5a b0 16 a2 c4 31 93 da 1f f8 2d 67 c4 e9 c6 fb 6b f7 4f ed 8c aa 3f c4 47 9d eb b0 df 26 1a 8d a1 d1 09 dd a2 f1 7f 06 2a c0 96 44 92 5a 13 60 c1 8c 68 89 08 f1 bf bf 24 99 39 97 1c 45 20 98 62 8a 29 cc ff 9a 4e 61 28 06 be 14 84 4f 03 2e 94 08 Data Ascii: p5)Y9c0`nNR-Xka8LCwF0([4;!=xe_Y1kGEjSX`)a^Ua\JBik#i+g/(Z1-gkO?G&DZ`h$9E b)Na(O.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50169	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1100	OUT	GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:04 GMT Server: fife Content-Length: 870 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	734	IN	Data Raw: 52 49 46 46 5e 03 00 00 57 45 42 50 56 50 38 4c 52 03 00 00 2f 3f c0 0f 10 2f e5 20 92 24 45 ca bd 3b 9d 6f fc 3d 30 c3 4c 3f 89 70 dc 48 92 22 c5 ee f1 8b fd b7 ed 9c e0 9b db 74 10 49 92 22 e5 ec 9f ca d7 fe 1a 98 61 a6 5d c7 b6 ad 26 2b ee 9e e0 d4 c0 d0 7f 23 54 91 5f 1c 84 04 49 24 e9 0e 90 1e 29 4a 4c 48 a8 0d 6a b4 68 10 20 40 8a 33 22 54 d8 23 43 1a 73 8d 88 88 88 48 f1 d5 2f 20 22 22 da a8 46 f5 d7 c6 df 43 1b 29 22 4a eb 46 69 22 a2 6a 11 6d 54 2d 22 a2 8d aa dd fb 28 ed f0 bf 6a a3 6a 4f 3f ce 5f 03 94 36 22 22 22 70 0b 7f 12 20 41 40 7e f8 e0 bf 71 ba 3f fc a2 7e cc 25 af 48 91 36 93 c5 c4 50 26 cb 6c 67 9e 36 03 43 59 6c 86 52 c7 97 14 b7 c7 c7 f1 fb 56 da f8 b7 e7 f7 eb d1 4f 1f 96 e7 78 79 ac c6 bd 8f 36 ce 3d 3c 7c b5 20 8e dd ac 3b d8 38 Data Ascii: RIFF^WEBPVP8LR/?/ $E;o=0L?pH"tI"a]&+#T_I$)JLHjh @3"T#CsH/ ""FC)"JFi"jmT-"(jjO?_6"""p A@~q?~%H6P&lg6CYlRVOxy6=<\| ;8
2024-04-19 14:07:04 UTC	136	IN	Data Raw: a0 f2 38 11 6a 65 02 1c 26 a9 a2 9f 65 81 26 2e 46 98 99 04 ea d0 13 00 b8 ee 51 ce a8 eb d7 35 42 a5 74 97 99 45 3a 40 0c 0b 47 72 4b 4b 0a 01 00 4e 12 3a a2 ac 63 b4 e7 86 0e 28 73 6e b2 40 a4 1a 80 62 53 c2 53 25 94 cc 84 88 28 3c 0d a1 84 9a 0a 81 de 12 9a b2 fc 3f a3 25 e7 16 5c 58 d2 db e7 c2 aa de 0e 17 76 eb 05 fa ec 0b af 5f c3 66 eb 42 db 03 6b dd 12 b6 6c 67 60 ed eb 76 cd db 33 b7 67 43 40 0d Data Ascii: 8je&e&.FQ5BtE:@GrKKN:c(sn@bSS%(<?%\Xv_fBklg`v3gC@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50168	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1100	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 238 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:06:03 GMT Expires: Sat, 20 Apr 2024 12:06:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 7261 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	238	IN	Data Raw: 52 49 46 46 e6 00 00 00 57 45 42 50 56 50 38 4c da 00 00 00 2f 3f c0 0f 10 9f a0 28 92 14 67 08 6f fc ab c0 0c 16 ce 43 0e 36 14 32 92 24 55 16 66 45 4e fd 2c ce e4 1d 04 6d db c6 d2 f8 a3 1c 8d 7f 31 c8 36 52 4f e3 fc ce e3 cd 3f c0 4f 5f 33 67 93 e3 74 60 ce 11 ad 42 a8 f6 93 1f 90 97 a7 ad 85 3c e7 cb f5 81 71 24 c9 69 c4 2c 99 f2 0f 96 7d 5a b3 5f 11 fd 67 e4 b6 6d 24 aa 9d 7d e6 38 e8 1b d8 ff 98 2b 79 bf 68 90 7c ca 04 a1 b3 40 25 93 f4 0d 70 64 a2 76 1c 47 9b c6 c1 e6 71 ac c5 38 d4 72 1c 69 35 0e b4 1e 47 19 fa 55 9d 01 20 8e 8d 22 40 75 8f 49 13 02 d3 9c 90 be 16 25 e4 6e 42 81 2f 2b 42 9f fe b5 85 43 5f d3 17 a4 04 e5 eb 47 be 76 fc 7f f7 5b 2b b5 0a 60 d9 9b ea 24 8f 58 f8 56 1d 16 c7 7e c7 18 Data Ascii: RIFFWEBPVP8L/?(goC62$UfEN,m16RO?O_3gt`B<q$i,}Z_gm$}8+yh\|@%pdvGq8ri5GU "@uI%nB/+BC_Gv[+`$XV~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50173	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1099	OUT	GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:04 GMT Server: fife Content-Length: 2666 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	733	IN	Data Raw: 52 49 46 46 62 0a 00 00 57 45 42 50 56 50 38 4c 56 0a 00 00 2f 3f c0 0f 00 09 06 6d 23 39 d2 b4 dd bd c6 1f f0 3f 88 88 fe 87 ce 41 55 95 04 d8 33 4b c7 2f 1c b2 2d 92 33 2d cf ef a1 37 a7 00 74 37 3e f4 59 b0 69 24 c9 51 e9 22 7f 37 fc 91 be cb 9e 84 d2 b6 91 24 df 8b 07 1e 9c fe 0b 3c cc b6 91 24 45 e5 1d d3 ff 9b 98 7f 74 17 42 ff 13 01 41 d4 80 50 10 01 15 00 09 98 17 d1 8b 00 04 48 c5 d4 1f 08 81 60 de df bd 5d 60 2b c5 d4 ff d2 e7 ef 13 36 00 85 09 84 c2 af f8 c5 41 90 6d b3 fa 63 ff 10 11 31 01 e9 93 90 db 29 d3 a7 a2 a5 eb b7 d9 36 5b 92 64 db 72 4f be 55 69 1d 5a 7f 05 5a 86 56 c2 09 f7 bc a0 25 78 24 28 ee c7 07 67 4c 02 eb ab c3 94 70 60 50 a1 41 df ef 17 93 a1 01 c7 e0 52 82 e4 0a 26 86 53 2e 46 08 d2 28 86 41 db 36 82 92 3e a7 c7 f1 e4 9f ce Data Ascii: RIFFbWEBPVP8LV/?m#9?AU3K/-3-7t7>Yi$Q"7$<$EtBAPH`]`+6Amc1)6[drOUiZZV%x$(gLp`PAR&S.F(A6>
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 99 e9 1d 38 6e 8d df cd ee 41 41 e1 e0 8d 91 71 a3 d9 dd 3c 81 84 5c bd 08 60 1c 6a a6 ef 80 b0 85 ad f9 55 82 03 48 48 ce d0 90 a0 91 11 32 05 52 87 96 ea 92 da 3b a3 5b b3 d2 89 f0 c6 70 1c 84 51 96 da 23 00 57 80 7a 09 81 e4 d1 93 07 92 86 d2 67 24 0f 32 14 17 de 14 20 0c 51 14 25 12 c3 ab bd 45 82 79 01 54 d1 a4 c9 dd 21 d4 43 8f 2c 4a 4f fc a2 87 5e 42 04 c2 c1 ac 00 e4 90 db 57 68 51 a2 b4 85 76 2e ee be 5b 88 de 02 7a 3c 3a d4 d1 03 38 85 61 6f a8 09 72 07 03 c1 5a 63 d2 4b 81 a8 e8 15 6d 12 72 21 2f 01 5d 43 76 3a eb 69 04 b5 88 10 23 cd a0 c8 a1 ab 5b e5 76 b3 ca 24 7a 89 76 4e 35 4c 35 85 90 5c cc d7 a8 35 63 da e4 b1 6a d2 2b 40 50 72 06 13 dc ed 0e e6 59 7b c8 d7 32 49 a2 0a 26 b9 66 2c df a3 7f 07 f6 7d 50 6b 1d a0 26 1b b3 e3 5e 73 93 ef 29 Data Ascii: 8nAAq<\`jUHH2R;[pQ#Wzg$2 Q%EyT!C,JO^BWhQv.[z<:8aorZcKmr!/]Cv:i#[v$zvN5L5\5cj+@PrY{2I&f,}Pk&^s)
2024-04-19 14:07:04 UTC	678	IN	Data Raw: 39 0f b2 27 79 bc 8b 64 bb 7e a8 a3 7b fb f6 fe 21 d7 4d 48 df 97 76 a5 fc f5 d7 1f 0c 70 7c 0b d7 39 6e 36 f8 fb 4e 98 13 a2 e9 f2 32 96 bc a4 e7 9a 24 4f 44 9c ef 55 c8 d1 b2 e7 b0 b6 31 fe 6a 7b 36 77 4b 15 fd e3 39 7e 75 fd d5 55 53 97 2c 2f 5c 56 3d 5e bf 76 bd 71 c1 ff a4 25 67 ab c9 62 0a a6 40 45 d5 1e 55 bb 23 b2 92 6e dc c6 d6 c8 38 13 e3 ff bf 51 f5 ba 3d 36 2f 09 d6 2f 60 c7 22 dd e9 4f 1b 9a ff 19 9b 83 85 91 ee ba ed 7a 71 33 65 87 dc 6e c9 8a 48 bb 5f 79 3e 91 db 52 53 4a 4c 6f 66 1c 57 dc af 5b a0 19 b5 3d 6b fc ed df 9f 9f 4e 4f cb a3 c6 c8 9f e4 e5 cd c5 d8 a7 cb 49 d5 43 b4 d2 7b dc 9e 07 df 7a 56 42 0b 8e 1e b8 c3 bb 72 c7 53 bd ed 7e b8 e5 e6 eb 07 f2 7f 25 cc 77 db 63 13 2f 6f 2b d7 6d d7 5d 8c 28 93 ec 92 0c e7 41 61 01 d0 b0 60 13 Data Ascii: 9'yd~{!MHvp\|9n6N2$ODU1j{6wK9~uUS,/\V=^vq%gb@EU#n8Q=6//`"Ozq3enH_y>RSJLofW[=kNOIC{zVBrS~%wc/o+m](Aa`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50175	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1100	OUT	GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 696 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:13:29 GMT Expires: Sat, 20 Apr 2024 11:13:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 10415 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	696	IN	Data Raw: 52 49 46 46 b0 02 00 00 57 45 42 50 56 50 38 4c a4 02 00 00 2f 3f c0 0f 00 d7 05 29 92 24 47 52 d4 da 2e 7f 1c 8b eb 9e f2 a7 7b ca 69 40 8e 24 49 91 14 cb a0 bf 72 cc fb 64 3c e8 ca 70 14 49 92 a0 64 1f b2 f0 af 88 d7 1d b0 35 ff c1 26 a0 00 32 02 b3 15 22 44 40 8e 84 49 40 b2 a6 62 49 46 a1 83 46 ff 80 a4 6e 00 53 9b e5 a8 83 00 92 04 94 80 a4 4e 04 52 37 0d b8 7b 29 dc a6 f3 7d fe 01 19 61 4d 22 30 e7 3f 99 95 24 92 80 04 24 3a a9 48 18 a2 03 52 27 0b 91 a4 0c 49 12 50 37 4c 6d d6 43 4d 32 ce 72 44 30 23 24 d9 24 22 8c 30 18 30 af f9 e5 67 da 48 30 85 84 21 c7 43 a3 62 64 c2 30 87 a3 df b9 fa 7f d7 97 f3 8c 4a 3f c4 64 c0 c8 a3 ff f2 73 ff 2b 20 39 82 90 49 6e 35 13 7e 26 7f f7 09 e7 84 67 e6 6f fe b6 89 80 8b 44 00 40 16 96 2c 2c 01 4b 2e 72 c1 1f c7 Data Ascii: RIFFWEBPVP8L/?)$GR.{i@$Ird<pId5&2"D@I@bIFFnSNR7{)}aM"0?$$:HR'IP7LmCM2rD0#$$"00gH0!Cbd0J?ds+ 9In5~&goD@,,K.r

Session ID	Source IP	Source Port	Destination IP	Destination Port
268	192.168.2.5	50174	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 74 61 56 72 76 6c 73 53 49 30 71 50 73 2b 5a 45 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 38 65 36 32 62 66 32 38 32 37 35 30 64 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: taVrvlsSI0qPs+ZE.1Context: 98e62bf282750d7
2024-04-19 14:07:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:07:04 UTC	1075	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 32 0d 0a 4d 53 2d 43 56 3a 20 74 61 56 72 76 6c 73 53 49 30 71 50 73 2b 5a 45 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 38 65 36 32 62 66 32 38 32 37 35 30 64 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 67 Data Ascii: ATH 2 CON\DEVICE 1052MS-CV: taVrvlsSI0qPs+ZE.2Context: 98e62bf282750d7<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvfg
2024-04-19 14:07:04 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 74 61 56 72 76 6c 73 53 49 30 71 50 73 2b 5a 45 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 38 65 36 32 62 66 32 38 32 37 35 30 64 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: taVrvlsSI0qPs+ZE.3Context: 98e62bf282750d7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:07:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:07:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 35 6e 41 67 2f 69 59 7a 39 45 75 47 39 74 65 35 6d 58 76 61 55 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 5nAg/iYz9EuG9te5mXvaUw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50176	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1101	OUT	GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33182 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:39 GMT Expires: Sat, 20 Apr 2024 12:46:39 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4825 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	721	IN	Data Raw: 52 49 46 46 96 81 00 00 57 45 42 50 56 50 38 4c 89 81 00 00 2f ff c0 3f 00 09 88 11 d8 c6 6d 0e 04 0c 11 64 ba ff c0 ca d3 11 22 fa 3f 01 63 a8 20 d3 a2 79 8e 9d 04 49 9c c4 e9 91 29 eb 1c 52 ea 6e db 4f 6e e5 6e 4a 04 00 bb 65 fb b2 dd 59 00 17 58 6f d8 ad ee 4f c6 a5 4a b3 77 17 80 16 30 fb 4d 39 b8 ab d2 4f ef 16 60 15 de ef 5f 64 b3 85 bf 4b 97 51 92 f4 06 80 6c 27 e7 54 49 52 55 95 70 e9 8d 20 75 c2 f4 07 54 11 80 6e d2 d2 9b a4 41 7a 46 4a 15 00 5c d2 89 24 99 53 ed c4 65 2a 34 9b 7c a7 37 b2 4f 12 7b 66 a6 8a 24 f4 9e b6 25 c9 9d 13 9f 99 0c ef 92 d8 92 00 e0 d2 49 c7 98 89 38 34 25 35 09 2c 6e 49 dd ad 14 49 3d 23 92 00 fe 5e f8 b6 d4 dd 48 73 28 04 5f d7 a5 e8 b0 3b 43 8e 16 bf 7b ed e3 ee d6 d8 83 ff 5c 60 c6 1d 7b 66 f8 c3 eb f5 c2 df 12 ea d3 Data Ascii: RIFFWEBPVP8L/?md"?c yI)RnOnnJeYXoOJw0M9O`_dKQl'TIRUp uTnAzFJ\$Se*4\|7O{f$%I84%5,nII=#^Hs(_;C{\`{f
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: af bc 33 45 46 08 21 0c 32 16 c0 c3 05 c3 56 00 58 44 fe 1f df 8f e1 63 f8 f2 02 0a 01 f2 98 57 40 f2 c4 36 e7 fc 00 c0 70 44 06 34 8d 58 2c 63 f1 b0 78 79 79 7c fd c6 81 7f 4e b7 c3 65 c8 10 e7 96 cd 06 c3 26 02 40 2c 96 b1 c5 22 f2 c3 0f ff c8 c7 eb fc 35 7c 7c ff af f4 f2 9d 94 21 c7 34 c3 05 3e 34 97 b0 5a 3f c1 c9 d6 7f 5f 0d 0c 87 e0 93 39 b2 5a b7 5a ad 56 2b e0 be f8 ef 39 49 63 c0 17 29 e0 f2 12 11 39 4a ad 56 6b 0e 63 c0 80 e1 46 00 44 00 18 30 0c 1b 6c db 11 b1 c0 c8 06 82 01 40 04 3e 3d c4 66 91 22 22 06 5c 07 00 e4 18 6e 82 88 c8 4c c4 10 81 0d 00 32 02 50 00 82 3b 39 10 d8 04 36 38 09 ae cb d8 ef f3 e4 0d 08 00 88 18 22 42 89 00 10 00 22 0e 2c 63 8b cd b1 59 00 d9 1b 22 b2 13 f8 08 1f 6e 00 0c c3 00 6c 30 08 30 6c 80 01 d8 00 c3 ed 3e 00 c0 Data Ascii: 3EF!2VXDcW@6pD4X,cxyy\|Ne&@,"5\|\|!4>4Z?_9ZZV+9Ic)9JVkcFD0l@>=f""\nL2P;968"B",cY"nl00l>
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: b8 51 f3 76 fd 62 1f b5 ab 93 ea 61 ab f3 b1 be e6 4c a8 33 ac 21 7a c4 fd 55 19 37 ac 8f 92 6a de 1e 7e ff 89 f9 99 95 d6 8f ac b1 a1 92 da a3 a6 0d b8 a0 c5 1e ee 48 08 6c 0d f7 56 84 d0 fa 3b e9 9d 0c be 1a 1a 39 25 fb fd a9 8a 92 3b d2 50 b0 db d6 1e 67 61 56 94 df b3 ef 76 ec 76 1e a5 ec d3 9b ca 03 e9 74 cb b4 28 27 2d 56 b1 b7 f5 f1 4c ec 76 92 33 21 5f f0 dd ed 9a f0 66 64 da 89 85 cc a0 6a d5 a9 b4 5e cf cc b3 b7 5a 8c 7c cb dd c1 1d b3 30 ec 29 77 90 e4 bd e0 33 73 0c 0f c7 fe 11 09 e9 f6 61 08 64 ae 76 4d 63 ff 38 74 ef 46 bd f8 a4 18 3d 1a 79 ef 8e d2 e9 9a fb 4b 7a 74 7d 3d 5f de 7b 23 32 66 14 de c8 44 14 d9 1e 3f c8 8c aa 05 4b b9 66 62 a9 fd 3c d8 f6 86 52 be 9d 32 a5 64 59 90 b9 d8 7b 6f 50 26 d1 62 26 24 19 08 bb 9d f2 ae a9 f4 b8 c8 b7 Data Ascii: QvbaL3!zU7j~HlV;9%;PgaVvvt('-VLv3!_fdj^Z\|0)w3sadvMc8tF=yKzt}=_{#2fD?Kfb<R2dY{oP&b&$
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 2f ee db ad 24 59 d9 8d 55 e5 f9 94 1a fa 1b fd 43 a1 28 a5 8b 76 fd 55 34 64 0c 69 a7 da 3b 9f e8 26 ed 6d 3c 4a bb 25 cf d7 25 90 eb f7 86 7a 90 e9 3a f6 33 73 3d f7 56 9e 9e 58 99 df f8 99 23 ad 4c 4f 99 1e 66 be a6 5a 85 cc 4b e6 8e 4b 6b 5a 87 fc fe dd ee 5f d3 c8 68 41 77 13 22 ee 70 4b c8 fe e4 09 d9 1b 0b dd fd 60 6d ba 34 dd 6f 9d 86 4f 0c af 1f 28 3e 13 4f e9 c7 da 88 d1 76 4a ef 6c 4b 22 33 cb 8b 84 ee 6d 60 ad 4d 89 e5 49 dc 3b 93 9c ec 9d 79 26 01 a5 ce a5 2c ec 2d 16 39 82 7a 70 bd 5f af 14 a8 a5 58 16 44 26 2c a0 28 be ae b2 d0 46 a5 50 44 44 b2 35 80 c5 7c 6b 80 a4 30 08 10 18 02 a2 85 a1 fd 96 3f 79 7d d4 c8 ce 46 f4 56 7f ac 16 d8 23 25 d2 b3 2d e4 eb 8c 4e ba db 3b c9 0d 77 90 ef 4e d9 fb 01 59 a9 92 c4 a9 9f 1c 89 13 f1 46 59 b8 41 6b Data Ascii: /$YUC(vU4di;&m<J%%z:3s=VX#LOfZKKkZ_hAw"pK`m4oO(>OvJlK"3m`MI;y&,-9zp_XD&,(FPDD5\|k0?y}FV#%-N;wNYFYAk
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 14 35 0c cf 47 43 f9 93 d6 4d f7 ed 37 c8 cc e5 3a 4a b6 37 ad 2f bb 5a dd f3 81 56 14 69 f4 80 99 d2 e3 1c b9 cb c7 74 1c c9 60 a7 ad 3a 2f b2 c6 86 4a e5 54 55 37 1c 80 70 01 e7 f1 57 e0 4d 49 ae 5c 9a ef ad 47 84 a1 f8 6c af ff b1 c3 e6 30 4c 1f 0d dd 5b 19 43 73 af 15 01 05 3d 68 59 d9 ff dc 4d c3 8d 8c 34 3d cc 4a 3b 69 fd 95 cd 64 64 e5 83 59 9d cf 57 9f 4e d7 d1 7b 27 56 fd 25 6b 1b 9b dc 9e a3 5f 04 86 eb 82 bd bd 66 0f ec 93 70 52 ac db 62 6f 99 01 6a c0 42 57 77 d3 b4 de e3 d4 d3 c3 a4 23 e0 71 55 5d 65 77 37 6d 04 f7 26 53 35 dc ae 5b e8 76 5d 81 4c 8c cb c9 6d 8f 46 9a a4 dd 8f b2 90 6d c8 8b 6d ec 86 ad 36 db b7 3f e7 62 ed 4d a6 d5 1a 1e 92 82 4b 25 f4 d8 19 99 e1 9b e1 aa 60 32 f8 4e d1 81 00 f6 fa 3f 3f fe 31 18 a6 4f e8 e6 bb 9e fe 62 fd Data Ascii: 5GCM7:J7/ZVit`:/JTU7pWMI\Gl0L[Cs=hYM4=J;iddYWN{'V%k_fpRbojBWw#qU]ew7m&S5[v]LmFmm6?bMK%`2N??1Ob
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: e4 17 a4 64 94 92 55 02 56 89 bc 97 6b 3e 57 8b 6e e8 4d 4b 74 0f ee b9 6a ec 3c 5b 16 76 d6 48 0f b0 49 86 6b b2 87 9f 59 e9 e7 ae 0f 3c 5f d5 af cb 7a a7 87 ff 62 e0 fa dc 36 84 c7 0b eb 15 fd 82 96 cc 30 c4 6e 65 2c dd 31 bd 0e c4 94 5c 2c 8d 5b 64 dd f3 c1 c7 1a fb 9d 75 8f 33 da 40 8d d3 f3 b7 7e e6 bd 78 ec be 41 6d 1d ba d2 6b da ab 69 85 d6 ed ee f9 eb 87 bf fb e8 eb 47 5f df fd 0f ff 79 ba 37 fd 46 91 63 73 2e 46 23 c8 53 a9 36 6d 96 c8 86 8f ff 1f 55 a9 f4 03 8c 67 5d de ac 0f 54 7b c9 15 d7 4a be a7 ef b9 c6 f7 64 7d 58 5f da 0c fc 86 41 55 59 b0 3c 4c 7c b8 79 bc f7 be 57 77 77 f3 68 6e 8f 33 e9 ab 01 32 3a 1e f3 2b 8b 74 4d 5b fe e6 14 0d 5c 84 83 0e f5 0a 61 4c 5f cd 68 6d ae 33 b6 b6 40 2d db ae e1 e7 ba 60 32 25 23 2a 17 0b 14 03 05 c1 60 Data Ascii: dUVk>WnMKtj<[vHIkY<_zb60ne,1\,[du3@~xAmkiG_y7Fcs.F#S6mUg]T{Jd}X_AUY<L\|yWwwhn32:+tM[\aL_hm3@-`2%#*`
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: bf 0e 95 62 27 96 9f 19 8f 2a b7 45 0e 03 f7 13 76 52 fc f0 e4 4e 2f f6 36 08 b2 68 22 7b a5 e0 79 8a eb 54 04 d4 a1 cb 24 71 76 0f c0 90 4c 40 55 a4 aa 42 1e 02 5a ac ca b1 ce b3 1c 01 b0 c3 1a 97 37 e1 be 80 6c 91 6f 79 21 c7 96 ba 2f e8 a9 d3 cf 5c 16 55 be 79 d6 33 d5 96 06 8c 8b 42 92 0b 93 a5 14 24 7c a9 dc 82 ec e1 90 7e 5d 6b 75 a6 d0 8e ce 13 a3 81 14 62 e3 b4 25 77 1b 6a 83 5d 12 85 87 8c b0 2b ca 33 b2 c3 92 2e ff ed 76 dc 5e f3 f1 ae 75 19 43 78 a8 cb 7b ce 9c 1f 4e 6f 1d c8 2c 9d 8c 46 32 f3 9d 8b 22 2e 0f 4f 7f 4b ed 67 76 ae 37 35 d0 28 da e3 8f 97 e2 e9 4e 74 41 c4 8a 45 1c 07 22 e8 75 5b 60 d0 0d e7 30 a7 b5 a0 ad d3 e3 e0 2d b0 89 71 af 8f f1 e6 93 02 10 94 24 ab ab 19 c0 8e 5b 3b e9 47 77 d9 57 f6 78 ce ec 71 ea 6f d6 a3 9b 39 b6 ba 52 Data Ascii: b'*EvRN/6h"{yT$qvL@UBZ7loy!/\Uy3B$\|~]kub%wj]+3.v^uCx{No,F2".OKgv75(NtAE"u[`0-q$[;GwWxqo9R
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: be 49 d7 d1 06 68 6d e9 f1 4f be c6 85 14 47 e6 27 ac 67 d1 10 35 94 f0 5c 49 50 5b 0a 6e c7 5b e4 bc 83 48 38 e2 dc 01 31 09 19 ad a9 60 80 cf fe ee 13 ec 8a 87 13 34 ef 01 20 40 d4 05 68 9e 22 ef 45 2d 80 72 ca d3 bf 50 55 b2 f7 be bc e7 6a 38 66 68 b0 38 d6 7f 1a ff fd 46 62 f7 c0 d6 97 7c f6 76 94 e5 03 f2 65 3d a2 98 02 46 df e7 49 4c a8 b3 05 70 8e 4b 9b d8 e7 dc eb ff a4 4a 1c 05 e5 1a 40 53 e7 82 f4 30 16 00 51 b8 dc 14 c1 aa 5a 37 f6 58 fc f7 c8 e8 1e 39 dd e3 a8 b9 96 75 15 f9 e5 f5 34 ea 8c 1c 49 d2 30 33 7d 9b b7 c7 2a a8 81 a4 e8 5d be 32 01 2c 12 05 c0 32 31 0b 48 4e af 62 80 2f 95 3a ee 20 e0 01 d3 c9 f8 04 83 69 1e 14 00 08 00 d0 3c 15 79 0a 94 c1 4e 7f 75 25 37 b6 a8 b7 21 c1 7f fa fc dc 3d 3c 1c f6 ee ec d2 8d b4 fd 2b cf 04 0d 1a 6b 5f Data Ascii: IhmOG'g5\IP[n[H81`4 @h"E-rPUj8fh8Fb\|ve=FILpKJ@S0QZ7X9u4I03}*]2,21HNb/: i<yNu%7!=<+k_
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 6b 3e b5 0d 0c 27 70 c9 e1 3a 92 4a 06 40 f0 80 a4 15 41 85 83 01 35 5b c7 df 64 02 04 10 c8 92 da b5 32 9f f2 6d ff 31 b0 e9 54 13 2e 7d fe a9 ff f0 09 e0 2b bc b0 2f 8e 88 b3 64 bf 35 9f 64 da e7 c4 71 cd 6f 2c 0b 25 f3 f5 73 a4 99 3c d3 35 42 74 9e 35 23 4e 1f 2b 09 83 3b 6a 5d 40 b9 9b cb 31 45 f8 e2 74 f9 54 9e 25 57 fb dd 44 d4 f4 b1 86 ac fd a5 53 09 96 62 99 a2 78 1b 8b dc 60 05 04 d5 45 82 2a f7 93 02 66 90 99 0a 4c 8c 0b d5 c9 f6 e7 a6 db de 85 df 05 7f e5 7b e1 41 88 27 80 8e 76 7c 13 a7 3a a4 56 5a 2b 26 29 5f 97 7a b0 2c 0f 53 f2 ac 15 6b 91 c9 13 2e 4f 37 ce 6a 91 58 2b e4 00 8a 83 52 2c 36 ac 3e f3 59 dc 61 ec 3b 3a db 36 4b 77 d4 3c 24 7b 30 da 90 35 b6 81 c2 41 5b b8 de a3 89 f9 35 ca 2f a4 e8 45 42 5f 7a f7 fc 9f 22 0b 32 41 31 7a 94 81 Data Ascii: k>'p:J@A5[d2m1T.}+/d5dqo,%s<5Bt5#N+;j]@1EtT%WDSbx`E*fL{A'v\|:VZ+&)_z,Sk.O7jX+R,6>Ya;:6Kw<${05A[5/EB_z"2A1z
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 7e be 3c 5c 58 58 58 4a 3b 21 c7 a9 85 56 09 9b e3 6b 77 e8 15 2c 5f b3 f7 81 cb 6f c1 6e ae b8 f1 71 1f 0e fa 6d df 56 cf 6a 76 00 17 05 9c 44 40 90 ac 1d c1 00 7a a3 fc b3 eb 7e 97 e4 85 0e 7e 78 ee d4 fa 46 b1 e1 74 78 eb db 54 1b 02 be 50 ef 35 72 11 a8 b8 3e c9 dd 06 41 ee b2 f3 cd 62 f9 66 66 b9 3e e7 c5 c8 07 1d ec 9e b2 32 f6 2d ce ad d4 e7 19 7e 3b d4 08 7c ae 35 ee a0 d6 ef 9a c6 bd 76 59 b0 27 a1 23 6e 7d 04 cd da 63 19 9e 0b 1b 69 ac c3 d8 5d 03 30 31 5a e5 66 00 ff a9 2b 1e bf 93 db bb 3f 07 86 c5 d7 ac eb f3 7b 84 eb 5b 76 70 f8 d8 ff 1f 02 fe 19 66 ec 24 29 33 17 b1 82 54 b9 ab 37 61 59 8f 8a bc 84 f9 51 fd e2 91 a1 03 48 ee d3 22 a6 4f 95 34 2a ac 29 c7 3e 56 2d 8f 9f ed 33 c5 88 1b 5b 83 dc 36 4d 8c c8 6e a8 2a 7f aa fb 65 d1 1a b0 8c 93 Data Ascii: ~<\XXXJ;!Vkw,_onqmVjvD@z~~xFtxTP5r>Abff>2-~;\|5vY'#n}ci]01Zf+?{[vpf$)3T7aYQH"O4)>V-3[6Mne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50177	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1101	OUT	GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10942 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:24 GMT Expires: Sat, 20 Apr 2024 12:46:24 GMT Cache-Control: public, max-age=86400, no-transform Age: 4840 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	721	IN	Data Raw: 52 49 46 46 b6 2a 00 00 57 45 42 50 56 50 38 4c aa 2a 00 00 2f ff c0 3f 00 09 46 6e 23 49 51 55 35 3d 40 0d ff 7f f0 da ac e7 88 fe 4f 00 fe b5 00 64 5c 30 4b 00 62 ac e3 16 2f 20 01 4c f4 45 ba 4a 57 e9 2a 5d a5 2d 97 d8 f6 81 a1 4a 7b 2e 21 b9 43 96 6d 2e 75 e3 38 8e 24 35 4d 35 18 c7 88 04 24 0d 53 4d 8b c8 04 ba a4 09 b5 11 81 b5 84 ea cc ce de bb 70 e1 0a 97 9a f4 05 36 6c 1b f6 a1 04 90 00 72 63 73 23 01 24 4e 2e 7d ab af de 33 2f bb 7e 01 39 92 24 45 92 db e1 d0 a3 ec 5e 7c 57 07 fa 8b 88 53 dd bd b3 12 40 91 24 c9 91 e4 ab 17 26 5c 18 ff 7f dd 8a 53 e8 0c 8e 24 49 8a 24 5f 06 09 35 0c 71 f9 58 bb ff bf ea ec ac ff 0c dc 36 52 d4 39 cc 51 16 ee 13 38 43 51 e8 30 c7 31 7e 86 92 23 5c 04 60 05 4b 75 f8 37 df 3e bf c5 2f 3f df 54 97 a4 ba 00 60 d5 e1 Data Ascii: RIFFWEBPVP8L/?Fn#IQU5=@Od\0Kb/ LEJW*]-J{.!Cm.u8$5M5$SMp6lrcs#$N.}3/~9$E^\|WS@$&\S$I$_5qX6R9Q8CQ01~#\`Ku7>/?T`
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 86 7b cf 04 2d d8 b6 dd b6 0d c0 a2 06 6b dd 83 f7 50 f8 20 29 f9 b5 34 ff df 22 49 ca f3 3c 99 59 2d 3b 3d 3e eb be 8b bb 3b bc 04 e7 1d 70 e5 05 f0 16 08 6e 9c dc e1 c6 c9 dd dd 1d c6 dd 5d da aa 2a 9f 07 e9 ca 9e ad 89 bd ff b0 39 e2 19 49 22 0f ee 6b 15 1d 49 e4 21 d1 93 76 4c 4c 24 3a 47 bc 70 9e 13 ee 50 91 68 62 a7 21 3a b0 8a c4 ed a8 1d 2b 89 bb af 54 e0 ee ce 90 17 3a d8 ff 1f 92 a4 ef f7 57 d5 ff 6a bb 7b 7b d6 46 f7 d9 b6 7d 91 32 3b f6 5d 76 97 19 91 6d 84 1b d9 b6 cd b1 7a d4 a8 ae fa ff e8 46 b6 ad da 76 c6 98 fb dc 77 df 67 12 47 c0 9e 4a 9e 3c f6 14 8e c2 51 08 ca 41 16 c6 c0 16 33 bd 7b ce 9a c1 88 6d 23 45 99 e5 a3 ee 1e f3 ff 27 0f e5 cc f9 04 8e 40 ce 17 cf e5 05 70 31 c5 04 50 22 9e cb e7 3a 90 83 50 70 a9 8a da 94 a3 5c 44 57 db 59 Data Ascii: {-kP )4"I<Y-;=>;pn]*9I"kI!vLL$:GpPhb!:+T:Wj{{F}2;]vmzFvwgGJ<QA3{m#E'@p1P":Pp\DWY
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 94 c9 d4 93 81 8a 63 db b6 9d a6 09 bd cf 25 d7 b3 c6 e5 cb 13 51 e8 f6 f4 2e 24 09 a0 3c 08 c1 31 83 a2 8c 66 76 ea 40 26 49 92 a8 01 f4 3f 17 e7 8c 71 f9 f9 49 53 9c 5d 28 7b e1 4a 1a d2 d6 66 b0 68 c0 46 39 69 2c 1a 74 ad 42 ad a7 8a de e7 52 09 fa a5 fc 06 34 ef 97 49 ee 4a 6e 14 c0 51 0b ba 61 0a ca 6a af 7a 0d f1 00 12 85 9d d5 73 07 84 42 b9 5c 44 de 03 57 92 24 20 0e ed cb a7 b3 89 57 5e bc f7 2c fb af f7 44 82 24 01 bd cf 25 78 00 a7 44 d6 ce 50 f2 50 82 b5 94 dc 95 24 b0 6d 14 47 ba f5 8b c3 04 94 d9 3e db 76 67 b9 02 db b6 ed 84 de e7 92 1d d8 03 db 82 05 3d 93 c8 31 4c 1f 5c 29 88 69 fb c9 39 c2 fb a2 ec 36 6a b1 f3 37 96 66 90 29 00 7a 9f 8b c7 ce c6 2b 57 0c 02 43 0e ce 55 7b e1 4a f2 67 67 db e7 66 8b db 05 85 e5 25 44 d2 7a 09 f9 6e d6 00 Data Ascii: c%Q.$<1fv@&I?qIS]({JfhF9i,tBR4IJnQajzsB\DW$ W^,D$%xDPP$mG>vg=1L\)i96j7f)z+WCU{Jggf%Dzn
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 6b 6e 9f 4b 4a 97 3a 46 41 b1 c8 eb f2 0b 93 53 9e 96 2b 2c 25 85 cb 29 6b e8 02 f7 95 44 2f 3c 17 25 8f 30 b7 cf 25 b5 cb 2d 32 0a 0f 0a 11 81 c9 e5 34 b9 6b 1d 47 98 f7 24 6f 33 c2 47 56 43 cd fb 9c 0b 16 35 2c a6 4c 51 87 1a da bd ab 34 b9 a8 95 64 b3 33 e0 22 a4 f6 b9 24 75 09 c3 02 e2 bb 4c d2 17 77 68 1a 97 47 1d ac b0 27 bb bd 64 44 05 de b7 5c e2 0e 5b 80 29 38 0a 91 06 a4 42 96 5e ba 77 15 68 f8 9d c7 7e ed e0 c3 e1 ca 92 19 6a 58 e3 da 3e 97 74 ae 25 de 2e 69 e8 9d 2a 14 c9 5d 2b 15 e6 3d c9 1d 3c bb ba a1 ac 7d ce c5 a2 ca 88 13 56 5e 03 4f 7a 17 ee 7b aa 77 32 15 33 51 4f 9f 73 51 43 83 e3 ba 82 e1 42 55 02 eb 42 21 bd 8b 52 e6 44 6f e3 c5 59 44 2e 4b 9f 73 71 59 fb c2 14 e4 14 3b 14 2f 42 90 dc e5 6f ee 30 27 5b d0 f1 a5 e7 b9 ec 0c 8c 3b 30 Data Ascii: knKJ:FAS+,%)kD/<%0%-24kG$o3GVC5,LQ4d3"$uLwhG'dD\[)8B^wh~jX>t%.i*]+=<}V^Oz{w23QOsQCBUB!RDoYD.KsqY;/Bo0'[;0
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 27 62 66 60 61 2e 3d c9 cd 81 12 ac 15 0f e2 59 22 db 26 eb d0 55 26 65 75 d5 58 2f 31 57 15 b4 64 73 d1 05 bc c1 ad b2 15 ea 12 c9 25 7d 6e 4b a4 35 5a 64 1d 05 67 e5 6a 0a 74 e9 92 df c4 1b 72 5e 50 d5 64 ff 42 75 19 75 f3 ce 48 1b 72 49 9e 9b c5 7b 61 ac 99 2c 94 40 d7 b1 6b f1 86 97 58 cc cc dc d7 54 77 bc 18 b0 ae 6b c3 5b a2 72 8b e5 92 3c b7 65 42 71 b1 76 26 35 1c 8d 86 b4 30 75 ed 32 f0 1c 7d 7b 51 9d 26 25 d5 c0 bb 3d 0f cf cf eb d4 b8 c6 5c 9d 89 29 cc 25 7d 6e 67 8e cb 1b a0 42 43 b7 2e 5b b4 61 90 dc c1 7d 11 8e 3f 9b ec 55 47 70 6f a2 14 c0 db e7 d2 b9 0b d9 2a 03 41 b4 a3 77 ea f2 c0 e3 f9 cc 9f a2 4e 32 65 ce 2b c1 57 8d 55 de ab dc b4 61 5c de d0 24 ae 3c e7 b9 9c d3 72 52 dd 81 67 06 87 e8 27 dc 67 34 c8 a5 37 b9 19 1a c9 a8 34 e4 05 a5 Data Ascii: 'bf`a.=Y"&U&euX/1Wds%}nK5Zdgjtr^PdBuuHrI{a,@kXTwk[r<eBqv&50u2}{Q&%=\)%}ngBC.[a}?UGpo*AwN2e+WUa\$<rRg'g474
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 47 cb 84 90 86 e3 47 2c d1 eb ad 70 23 f3 bb 49 56 ef f3 ec 72 f1 ec f7 ae ce 23 07 29 7d 39 f1 1f 59 9c 20 96 52 de 6d dc 57 8c 9c a1 40 4a a8 cc b3 ac 70 96 a6 a1 88 cc 27 78 45 a3 b9 24 cf 6d ac 98 f0 68 70 55 ea 2e 7c 5b 44 de a5 eb ce 5b 31 50 cd fe 4d 99 4c 34 94 f6 08 4d 6c 5a 04 8d 84 32 52 ca 24 35 32 cc 31 e7 66 e7 9f 75 4f db c3 2b 13 ef 0d 4c cd 70 ef 97 11 d5 4f f4 22 ca 76 04 49 32 2d 21 5b d0 5c 42 bb 04 a6 4e 88 d0 1c 0b 65 6a a9 ed da 94 4b f2 dc 36 c8 c1 7e dc d9 21 7a dd 20 bc b0 d1 b5 ab 30 1b 8a d4 9a 72 eb 42 2b ae 2d b2 9c 6c 82 4c fa f7 5a 4b 44 86 70 40 5d 96 5d 78 79 ae ff d4 a0 00 ff 2f 93 f3 4c 10 08 76 93 79 9f e6 a7 ee 50 c1 4b 20 fb b4 78 a6 fc 78 de 78 11 c2 5a aa e7 11 17 de 76 6e 2a 87 d9 b5 bf 5d 45 5f 2a 87 1a d4 ba 91 Data Ascii: GG,p#IVr#)}9Y RmW@Jp'xE$mhpU.\|[D[1PML4MlZ2R$521fuO+LpO"vI2-![\BNejK6~!z 0rB+-lLZKDp@]]xy/LvyPK xxxZvn]E_
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: e7 fc df e2 fe 8d ae ce 9d 6e 7b 5e 11 dc eb b6 d7 dd e1 dd b1 7b 3e 58 72 ea f5 eb ad 7c b1 a5 32 4d 5d bb 26 7c 7e 40 b3 7e 9e c1 2c 4d d3 7e 73 6a b5 dd f2 67 8e c0 92 2f 87 1f 7f bc ff d2 4a 29 80 f4 64 28 a5 9d d8 98 4b fa dc 34 6a 02 35 54 ae a1 22 d5 29 5c bb fd 4f d7 c7 9e ef 76 0e ff 7f b4 d7 3f 32 22 5a 2e 3a d9 00 f3 1d 67 1c c6 28 39 58 49 2a 95 41 a4 12 1e f3 e4 a8 b0 14 c7 11 1d 78 07 31 ae f2 e1 65 34 03 33 3e 5c cf e6 55 05 7f c4 50 bf 44 b0 18 0c 6c c2 a1 9a 5a 15 7e fe 3c 63 0a 3c cc a3 53 7a 94 67 e9 3c f5 ef 77 ff 5d 7d de 56 6b 9f 4b f7 2e 09 c1 c1 54 9c a3 2f 06 4a c1 02 dd 94 c2 35 61 8a 72 34 5c 3e 3a 87 5e d6 27 f6 72 54 d1 4c c6 1e 51 64 d1 22 62 30 01 a4 cc 28 93 71 4c 45 90 c8 ae f4 68 0b 0a 52 8a 50 86 c2 90 70 85 03 9c fc 48 Data Ascii: n{^{>Xr\|2M]&\|~@~,M~sjg/J)d(K4j5T")\Ov?2"Z.:g(9XI*Ax1e43>\UPDlZ~<c<Szg<w]}VkK.T/J5ar4\>:^'rTLQd"b0(qLEhRPpH
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 73 d7 08 1e e7 3f 70 f7 ca 8e 7d 3f 4a ca 95 fa e3 55 c0 a9 36 dd 37 22 e8 9e 14 a9 31 2c 86 10 b1 8a 9c 4f cd 09 a7 70 08 55 db e7 92 ce e5 f5 c9 14 b4 41 15 e3 51 e1 ac 35 63 24 74 9d c4 5d 97 2c 7f 1a ee 29 29 16 d5 15 53 24 97 b7 65 aa a7 df f3 e0 52 80 5b ff f8 ec f6 17 60 65 ef 65 ca 15 e9 19 36 dc fb 69 db 2c 34 6e 75 86 55 af d5 a4 04 e4 43 bd 9d ca 49 9e db e7 92 ce 55 33 1b 30 72 c8 8c 55 8e 4b 08 d8 c2 04 dc 81 4c 4d ea 9a 9f 39 c1 07 fd 7f 5a 53 d0 cb f0 fe 5e e1 df b6 2c d8 db d2 d9 32 4e 51 e1 8a da 09 34 98 13 dd 75 41 cf 5c 65 d3 e5 ac 4f e7 68 7a 75 d2 65 d1 dd d5 71 50 12 72 74 79 d0 a3 f5 7e d4 43 a8 a7 91 53 a1 f6 3a 17 46 b1 81 e4 c9 34 3d e5 54 9f 9c 2f 20 b4 33 fb 78 17 ae 7b 3a 17 d3 fd 69 27 7c 12 55 73 9c cc 28 c3 1a 5c f5 df 72 Data Ascii: s?p}?JU67"1,OpUAQ5c$t],))S$eR[`ee6i,4nuUCIU30rUKLM9ZS^,2NQ4uA\eOhzueqPrty~CS:F4=T/ 3x{:i'\|Us(\r
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: b9 53 02 77 bf 73 31 58 26 94 59 ac 99 82 71 23 7e fc 37 b3 7b 6b d7 f0 e4 f2 56 ae ad c1 35 0b cf 4e 05 22 78 25 09 1f 74 cd 2e 72 98 1b dc 0b 65 dd da e7 92 da 95 a1 52 98 5b 8c db 77 e5 f2 33 5d 95 37 a1 d8 59 a3 ae 59 74 32 19 5b 05 d9 58 8b c8 79 8f ba 0b 15 67 16 ee b7 f6 b9 24 74 d5 c0 06 c4 05 81 8d a4 ae 95 5c eb 57 1e df 06 ce 99 ed d1 79 b4 f3 e6 df 25 d9 46 a5 2a 0a fe af 7e ee e9 fd 73 ee 1e 5c 7d 97 46 5d b1 3e fa e5 6d 21 f3 d6 3e 97 d4 ae 1e 8f eb 7b fe f9 57 fd 81 63 7e cd 2a a7 63 08 a6 19 31 57 65 de 9e 2d 02 ff 5a af 7f f8 e8 55 97 d0 e5 0d 2f d2 7c 6e e4 8f ac bf 7c f7 16 53 cd ed 73 49 ec 0a b3 88 8f cb bf c8 fa 4b 67 2e 3f cb b5 92 3d fb f2 a7 3f 3f e1 73 da 90 64 ec 95 ef 5f 18 a0 b4 cb 3f fc 37 a1 ab f1 fc 80 6f da 5f 1f e2 fe 59 Data Ascii: Sws1X&Yq#~7{kV5N"x%t.reR[w3]7YYt2[Xyg$t\Wy%F~s\}F]>m!>{Wc~c1We-ZU/\|n\|SsIKg.?=??sd_?7o_Y
2024-04-19 14:07:04 UTC	181	IN	Data Raw: 94 a2 4c 99 ea 94 8c b4 d5 2b 93 10 28 5b de b9 5d 2e 57 25 18 97 6f e8 a9 35 53 c9 62 9d e4 7a bd 6c ae 8c 18 97 37 61 5c 9a c6 e5 83 fe 7a c7 c8 97 cb 75 b7 e0 b4 64 c0 28 20 54 83 58 0e 5e a9 8c 35 a3 97 cc 35 0a cf 86 98 87 c6 9f cb 1f 83 f3 f6 9d eb e5 72 9d a2 89 b7 0d a5 32 02 77 b2 1c 97 8f 9d a7 5e 36 97 a9 e8 85 ca 88 9a 14 02 2c 16 8e db 5f 3c 57 d3 ff 97 5f 70 5e 3e a9 f4 39 d3 e5 73 39 c0 84 62 d1 f3 f2 c9 29 1e ec b7 2f 9d eb 9c d9 50 22 f3 c5 72 5d dc b9 a3 f5 e0 94 d8 59 49 61 2d 17 d3 e5 40 83 21 b0 5c 4c 97 5f fa f7 01 Data Ascii: L+([].W%o5Sbzl7a\zud( TX^55r2w^6,_<W_p^>9s9b)/P"r]YIa-@!\L_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50178	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1101	OUT	GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3346 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:38:51 GMT Expires: Sat, 20 Apr 2024 12:38:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 5293 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	722	IN	Data Raw: 52 49 46 46 0a 0d 00 00 57 45 42 50 56 50 38 4c fd 0c 00 00 2f ff c0 3f 00 e6 50 dc b6 8d 23 ef 3f 76 fa d5 6f 44 4c 00 af af 75 19 13 76 24 a4 39 13 8f 31 02 8c d0 bb 1f 09 64 54 23 60 52 c8 07 cd f2 ba 1a fb 4e 3a d2 b6 2d ba 94 83 93 b9 bb bb bb 5b 53 45 e4 ee ee 0e b9 87 ee 0e c7 0d 77 3f 6e 33 c7 cf 19 77 77 77 39 d6 68 cb 3b ff d7 2f ee a1 93 39 69 0f 12 4f 8a c3 22 88 59 c1 40 46 11 6a a3 8d 6e c0 f9 33 34 a2 88 88 89 58 80 4b ee d2 3b 98 2d 60 3b 70 36 30 a4 d4 8f 45 6c 80 46 7a 0b f8 59 0a 3b 20 eb e8 43 53 aa be ec 8f 66 0f a4 53 72 6d db 3a b6 e7 54 7f 8f d8 b6 93 6b f0 4d b8 4c 9d d6 76 ba d4 4e 6d db bd 9d 2a df 3e af 3e 7f cf fb 1d 49 80 24 c9 b4 ad 7e b6 6d db ef 9c 67 db e6 b7 6d db b6 6d db b6 ff b3 6d db f6 99 fe 4f 00 dd e8 ff 17 5b 59 Data Ascii: RIFFWEBPVP8L/?P#?voDLuv$91dT#`RN:-[SEw?n3www9h;/9iO"Y@Fjn34XK;-`;p60ElFzY; CSfSrm:TkMLvNm*>>I$~mgmmmO[Y
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: b7 a4 97 92 ce 52 a9 72 f1 d5 77 dd d6 7b 06 25 df 6e 3d 5e 7a 6e d4 d3 da 6e 00 68 6c d0 e0 ab 51 70 49 f5 cc 57 1a 0a a1 cb 97 95 af 14 5b a5 e2 23 b0 43 61 fc b8 de 89 21 a5 36 f0 6c 66 50 28 bf f8 5d a1 05 4b 98 09 c6 c7 47 b6 54 64 0d 3a f2 2f 0a e7 47 91 37 46 94 d8 a4 df c7 01 87 01 a1 33 c6 bc ac 0e ab 56 75 45 1e 28 a4 b2 20 6f f5 d7 a4 9f 67 bb 41 a1 d6 5c dd 55 a7 f5 3e a6 b0 2e a8 58 74 74 57 84 bf 3c c0 b8 ed a9 ff 9f ce ea bc 52 2c b9 28 b4 3c 13 ad 26 52 67 e5 f6 0d 1f 71 c0 f1 93 26 8d 8d 93 56 ef 5f 43 8d cf e5 35 bf 54 d4 f8 54 96 3d 18 21 c8 46 8b c2 6b 8d 7a 5c 92 6a fd ac 89 39 7c da 97 ac 7c 88 f5 25 a7 36 6d bc c8 70 fd 15 89 45 6e 7d e1 8d 23 45 fb b9 e2 e9 05 d0 b2 a6 c3 49 4e 4e 3d 1a be ef 80 17 99 06 cc 0b 0e 5e 1f 1d bc 21 66 Data Ascii: Rrw{%n=^znnhlQpIW[#Ca!6lfP(]KGTd:/G7F3VuE( ogA\U>.XttW<R,(<&Rgq&V_C5TT=!Fkz\j9\|\|%6mpEn}#EINN=^!f
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: c5 a5 84 60 1d e6 ea 6f 50 04 56 1a 74 a4 a2 3c 83 7f 7d 02 80 7a 03 5e 23 18 26 52 35 3f 19 00 f1 48 e4 a0 e2 88 de f7 7e 01 40 17 26 0c 92 48 d6 f7 b0 2d 40 1c a8 ea b4 58 e4 24 a4 64 92 61 e1 b8 d8 0b 86 af 04 19 9d 1c 95 c7 f4 7f fd 0b 29 7e 90 44 b4 09 df 8f 01 0e 03 e1 b6 46 3f 6f 18 be bd 10 50 8f 40 c1 61 2e d1 b0 cb 4a db 40 2c 6c 36 90 18 c6 f3 be 07 d4 3e 50 c5 1a c9 86 25 53 8e c8 0d 08 7b 73 f9 05 86 35 2b c6 34 38 b9 6e 3e 88 f4 49 74 ec 00 00 66 80 10 4f 45 e1 98 39 f3 24 98 11 d9 62 a6 72 12 f1 26 7c ad 44 82 8b b8 c3 f6 71 14 bf 76 e7 c1 a0 50 02 33 00 84 b7 ea 7d 20 1e 0e be 9c 04 a0 c3 a4 c5 06 f5 3d 68 54 b1 c8 b0 f0 2a 30 5a 55 6d 26 1f f6 de ef 5f 08 9b d1 6d bd 51 d5 a1 32 a5 51 d9 06 c8 48 6c 31 65 11 c1 07 29 c1 88 5f 0e 93 34 23 Data Ascii: `oPVt<}z^#&R5?H~@&H-@X$da)~DF?oP@a.J@,l6>P%S{s5+48n>ItfOE9$br&\|DqvP3} =hT*0ZUm&_mQ2QHl1e)_4#
2024-04-19 14:07:04 UTC	114	IN	Data Raw: 8a e0 aa f6 cd 34 de 96 e8 3e fd a4 5a 9e 4e 51 cc c7 58 71 bb 60 1b 4c 02 a6 1b a5 ed 2e 45 f3 fd 65 ed c9 1d aa c1 84 bc cd 0c 3b 52 50 de de 3c 44 51 5d cf f3 4a da e3 bc aa 6d ab ba 6e 18 86 ae ab 6a 5e d5 2a 65 8f 1b 79 25 c5 78 43 2f ab e9 c9 55 fc 47 19 fb 52 d6 be 1e 5e d5 7f d5 f0 a4 46 5e c1 07 ed e5 ff bd fc bf 97 ff 77 bf 12 00 Data Ascii: 4>ZNQXq`L.Ee;RP<DQ]Jmnj^*ey%xC/UGR^F^w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50179	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1100	OUT	GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:04 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:04 GMT Server: fife Content-Length: 48232 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:04 UTC	732	IN	Data Raw: 52 49 46 46 60 bc 00 00 57 45 42 50 56 50 38 4c 53 bc 00 00 2f ff c0 3f 10 4d 48 0c c0 36 6e a3 00 7c 44 10 ee fe 03 cb be 5b 21 a2 ff 13 60 e3 dd 99 07 93 35 59 da c5 27 cd 01 26 98 01 b6 24 cd 48 bb 67 37 59 55 d4 40 3a 87 23 ed 6e 95 76 b5 bb aa dd a9 12 4d a9 07 09 00 81 41 d6 9b 76 47 12 b5 a1 a6 6f 30 6c e3 73 75 2e 26 38 34 6d 82 c6 bf 5a 71 09 c8 43 fb ef 8f 20 03 55 15 11 06 dc ad 15 95 99 49 e3 f5 21 aa 24 05 00 6e 6b f7 7f 48 b2 2a 24 d8 96 a4 a5 94 dc 2f 5f 71 01 ae 97 89 66 7d 3d e4 73 4e 84 22 c2 1c 69 73 02 d4 75 80 78 6c e4 2a 04 00 0a 69 30 d1 94 0d 00 7f 4f 44 20 69 00 30 47 12 20 89 3c b8 9f e7 01 e0 bb 8a 6e 65 e7 24 49 bc 3f 0f 6e 92 55 45 b6 66 26 93 19 0c 74 6f 4b 2f f3 e6 ba 90 99 87 00 ba 4b f1 92 ac 8b 95 2f 1c d0 00 5a 62 06 90 Data Ascii: RIFF`WEBPVP8LS/?MH6n\|D[!`5Y'&$Hg7YU@:#nvMAvGo0lsu.&84mZqC UI!$nkH$/_qf}=sN"isuxli0OD i0G <ne$I?nUEf&toK/K/Zb
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 83 17 ce d2 f5 31 63 1b 25 a4 11 f0 50 77 75 57 77 fd 83 d3 f5 4c d6 58 5e c8 1a a5 cc 17 b7 e3 c7 3f 95 6c 90 12 52 1a 11 60 0c 20 c3 60 80 94 2c b2 b2 fe 36 97 9f 77 df b8 76 ff ed a1 7f 05 1a c9 5d bd ba cb bf fd 20 40 04 c0 00 63 72 f5 42 29 a5 34 66 76 03 00 be ef f8 bf 57 b6 6c a3 57 7a a5 94 63 40 30 00 80 e4 43 3e bc f0 4b d2 1a 2b 2b a5 4f db 32 ef 3c 7b 25 df f7 d0 f5 e1 34 25 cb f2 52 fe 0c 10 31 27 63 32 e7 34 1b cf f5 ef fb 94 3e 88 37 bc e2 55 b2 14 5c f2 ef 09 6e 1d 24 6f f2 36 11 11 65 fd f4 da f7 38 b3 cf 3e 91 32 69 fd 7b 02 23 06 80 81 e4 26 f3 c2 6d 6e 32 19 c6 2b 1f ef 5e be bc c2 fb fc 0c 28 c9 eb 31 80 e0 64 e4 85 5d 26 37 99 94 18 be f3 f1 67 3e fe d4 db 9f 00 bc 80 af 89 2c 93 74 3f 18 91 01 30 13 bc 70 9d 9b 0c 43 c9 db d7 de bf Data Ascii: 1c%PwuWwLX^?lR` `,6wv] @crB)4fvWlWzc@0C>K++O2<{%4%R1'c24>7U\n$o6e8>2i{#&mn2+^(1d]&7g>,t?0pC
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 70 b7 c4 59 38 24 33 97 3d c2 dd dd dd 5d 02 27 70 18 56 e3 6c 9c 33 f5 86 6d db b1 37 fa ff 6d fb 71 e1 be ef 78 9a 36 4d 91 b6 33 9d 76 8c c7 b6 6d db b6 6d db 36 df 7d 8c 77 b6 3f 9f b1 3d ed 93 22 68 92 3b 17 ce 73 c7 fc ff ff 39 49 92 5e af cf f7 17 c8 8c 54 b9 a6 7a 6c db d6 6d e6 b6 fc 23 7c dc 93 75 b6 6d db b6 ed 6d bb 2a 9d 59 e9 88 f8 be 05 04 45 fe 8f 36 01 7a ec ff 5f 6f 4b 53 f6 39 55 85 bb bb 4b e4 92 32 00 87 08 52 a2 26 73 87 8c 09 b8 13 75 47 78 44 e8 ee ee ee ee 0e 4f dd b3 83 b3 ef bd a7 2d 7f cf 02 87 b4 99 00 13 78 d2 27 fd e2 bf 04 fb a7 1d 7e db d2 4e b1 94 98 b5 2a dd 58 aa 15 fe 71 be 38 ec 21 b0 d1 21 68 a5 b8 bb 6c 9c 8d 53 11 6b 55 fa c7 a9 f4 09 bb 52 74 0a ee 4e 7a 09 db 25 a4 d3 ef 08 08 3b c6 5d d3 27 6d 4b b1 5f fa 9f c7 Data Ascii: pY8$3=]'pVl3m7mqx6M3vmm6}w?="h;s9I^Tzlm#\|ummYE6z_oKS9UK2R&suGxDO-x'~NXq8!!hlSkURtNz%;]'mK_
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: d5 88 e5 34 dd 4d 93 6a 6f 76 37 99 78 b3 62 a3 23 8d bb 66 da 78 33 2c fc 84 de 08 2a f0 7a dc b5 88 13 7c be a2 ad b2 95 ad ac b7 d5 e1 0c 08 ef 7f a1 0a 0a 02 28 df 55 1c 4f d3 25 29 9b ab 0a 7b f1 b4 70 e6 02 79 d0 ac 80 ca eb 9f e5 54 1a b1 81 34 96 e8 10 9f 23 0f aa 58 46 d8 45 bd 3c aa 74 87 be 6f ca 75 6c 4c 23 2c 03 57 dc ca 28 95 2c 31 8e 3b 75 0d 54 d3 18 f3 92 fb ce 8f 7a ea 76 d3 02 91 8b 71 f3 46 b5 51 89 cf 5a 9f c6 6e 4e 4c 9d a5 f3 13 b3 ee 83 aa 5b c7 fc 72 32 68 fd ef bc 3a 78 cc 9d c7 9b 7d f5 95 de c6 8d f3 b1 3e 7f ad 38 17 e7 d9 c6 53 91 bb 19 4d 16 79 b5 7d 31 ea 47 6f 77 f8 ac 41 d1 2a 3d 19 f4 03 dd 39 f6 b8 ba 71 82 3f 93 ce e1 1d 42 4b 32 3e fa 95 79 1f f6 41 2f a4 36 5b 28 51 54 cb 4f 94 cb 56 d9 cb e9 d1 f4 fc 0c 2f b6 17 03 Data Ascii: 4Mjov7xb#fx3,z\|(UO%){pyT4#XFE<toulL#,W(,1;uTzvqFQZnNL[r2h:x}>8SMy}1GowA=9q?BK2>yA/6[(QTOV/
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 6f 52 c5 f0 3a 97 81 74 49 9e fd 81 c3 61 31 6f 22 8a 63 f9 e8 2d 1c 72 5c c2 42 ac 6b 92 2e 0a be 27 aa e1 65 d2 89 8f 97 ed 23 0d 2a 2e 76 31 74 76 aa a7 31 9f fc 9b 88 8d c5 da 38 f6 67 ce 93 f6 1c 47 9b e7 01 f4 a0 c9 e7 3f d2 7c 6f c5 f6 cc 53 b3 c9 a6 62 76 7a 41 da 39 7a f3 8c 56 9f d5 30 43 9b bd e2 4b 8b ec a1 74 24 80 e6 64 66 ba 6d 7e bb 21 88 b7 22 eb a0 0c 3e eb 43 1a 46 fc a4 fc ce ff 8d d8 b8 23 b4 ce d8 1e 78 66 1b 4b c6 61 24 78 34 4b fb 78 02 93 cb 14 87 f6 03 97 0f b3 fa d3 c2 d8 8d 3f 3e 51 42 d7 27 be 14 ba e3 a7 bc be e6 e6 76 11 ad bc c1 ab f5 2b 34 12 21 fa 1e 0d d4 9d 9b 54 c7 97 a7 fb 3f e1 a4 6f 57 d3 f9 c9 fa e9 f8 c6 72 5b c6 a5 f8 d2 fa 91 9e a2 8b d1 38 3f ff c8 db d9 b0 90 62 8c e9 12 cd c6 3c 61 3d 98 e6 8f e6 c9 c4 ac ad Data Ascii: oR:tIa1o"c-r\Bk.'e#*.v1tv18gG?\|oSbvzA9zV0CKt$dfm~!">CF#xfKa$x4Kx?>QB'v+4!T?oWr[8?b<a=
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: c1 10 2b 14 1d 22 9a 12 a8 ad b5 42 58 67 35 1b fc e5 6e 6a 8a a9 bb c0 3e ef 1f 4f ed ce 32 62 b6 3e c0 da 4e d1 f0 dd 84 68 7b d9 c8 31 16 69 1c bf 45 85 4f 31 ae 85 66 7f 37 0a 3d 7d 34 88 ba b0 e4 f5 58 8e b1 e8 6c 1c c7 33 fc d2 9b 6d 7f de 9f 6b 33 65 e4 c3 ae b3 77 4d 44 26 8f 46 cb 71 db c9 77 88 56 6c ef ff 08 0f 9a 63 54 ca c2 88 45 f1 08 9b ac 83 ae c3 4c d0 c9 af f5 2e 3e d5 ad 6d a8 f0 a7 2d 59 55 c1 f2 7e 23 36 15 26 ba 7f b7 d7 79 2e 3e ed c9 d9 74 36 6b ee cd 6f 67 13 4b c5 2c 62 b5 6d cc 5a a0 2a cb ff ca 97 e2 02 a5 6f ac 28 66 8d b3 49 53 2b c3 fe 58 bf c4 13 f9 a0 a3 79 13 cb de 92 f5 cf fb e6 8d cc b6 7b 33 3f aa d7 9c ee 51 6c 34 1b 15 25 c6 cf 61 e4 2b 44 4e 95 57 fe a4 37 e3 38 6e 5f ea 7d 6c a2 d1 d9 2f f5 5f 7c d9 6f fa fe 5d 58 Data Ascii: +"BXg5nj>O2b>Nh{1iEO1f7=}4Xl3mk3ewMD&FqwVlcTEL.>m-YU~#6&y.>t6kogK,bmZ*o(fIS+Xy{3?Ql4%a+DNW78n_}l/_\|o]X
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: cd af f1 45 ff 5c cd dd 5e 56 a1 00 aa 00 5a 48 be 9a 44 47 a1 af 1b 05 cb b9 23 4c 04 f3 3a e0 81 bd 46 d0 e6 0c 06 ba 29 9e bc 1b f6 21 cf 33 e8 e8 48 88 a0 d0 da d8 d7 15 24 0a ac eb 6f cf 2d 6e b5 bb 72 36 9e dd ef 32 9d 98 ec 3c f9 d9 3a 9c 79 d4 66 eb c6 18 c7 c2 3a 22 9d be ed e7 8d b4 bf 34 9d 75 14 30 de 2c 9a 7f 2d 8f 5a 6f cf 7f a4 ec fb 49 cc 30 f4 62 3a 17 97 75 51 8c 54 84 04 ba a5 4e a0 fe d8 19 01 c7 71 48 81 c0 75 5c f1 05 f4 50 5c 09 0e f5 47 f2 8a 34 44 c4 be 4f 30 83 41 2c 37 84 98 e2 93 37 b3 45 6b 2e c5 53 ce 8b d7 54 d9 47 54 9f b6 89 eb 8a 06 47 b0 a1 c0 4a ea 9a 97 73 7e f7 5c 00 74 56 dc a5 ca 16 86 20 bc 27 ec 1f 3a 50 f9 3e 68 ca 1d 82 85 cd 1d 7d 2f dd 30 26 df c6 93 c1 4b 67 de 13 7e ee 43 16 54 36 1f aa 9f 86 73 7c f4 50 23 Data Ascii: E\^VZHDG#L:F)!3H$o-nr62<:yf:"4u0,-ZoI0b:uQTNqHu\P\G4DO0A,77Ek.STGTGJs~\tV ':P>h}/0&Kg~CT6s\|P#
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 72 b9 3e cd 5e 7d bf 65 f9 c6 a7 75 da dd 47 8a 6b 48 b0 8c 23 b2 01 4b 44 42 b7 f6 e5 6f 69 97 eb ee b2 e7 0c 39 fb a1 fb f9 cc 57 ab 64 95 f4 19 ea 0f 30 89 7a 43 30 02 86 b4 70 d4 c2 d2 4e 4f ff 06 5a 85 02 dd ea 0a 7f 18 6f 17 48 b1 08 b4 de a4 2c da 6d f3 ae c7 fa fe 97 2a db 71 e1 90 e0 91 f5 36 d9 d4 3c dc d6 4f 67 bf c2 78 c4 4f 17 4b 8c ac 46 86 e5 7a 4c d8 a6 7a a2 d9 a3 36 15 e6 7b 31 41 8a 11 ab d2 5d 22 b2 d5 6d 7f 4d 2b 4c b6 79 f3 ee 7a 92 2b a4 30 4d 17 ff 92 cc a3 c9 7a 14 39 36 f3 78 12 a4 9d ee 02 48 d2 e0 ae 19 a0 ce 73 31 58 13 4f 0f 24 19 f6 85 5a 2c 87 3c 19 66 89 ff 74 6a 14 4d 4f 96 ca c0 57 73 e6 71 6e d9 46 73 d6 33 bb b9 de 31 00 d9 02 12 b7 f9 e5 51 93 6f d3 90 b3 65 26 ac 06 1e 24 3f bc 13 92 1d 73 60 1a c8 fe 75 2b 1c 89 1a Data Ascii: r>^}euGkH#KDBoi9Wd0zC0pNOZoH,m*q6<OgxOKFzLz6{1A]"mM+Lyz+0Mz96xHs1XO$Z,<ftjMOWsqnFs31Qoe&$?s`u+
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: 72 46 4e c6 8b ed e9 09 c0 f4 58 fb 0e a6 e2 3c 09 cf f6 30 1c e5 4b 57 aa 6b 0a e8 26 af da 23 92 0d 23 83 97 0d 42 9b 48 02 ac 7f 52 f9 f5 02 e1 a2 ac c7 b1 5e 0f 5f 05 07 77 31 e7 6c 9d 27 19 6f 7a 8b b3 fa e7 fe 7e f4 74 b9 47 f8 5a 92 ae 96 9a e5 f3 8b 07 a8 26 cf 89 81 b2 29 bd 2b cf b1 0b fd 06 2e 05 60 12 23 cf 56 6c 4d 73 62 70 c9 20 1a 3a 5d c0 2d 47 0e 09 6f e8 6e 98 db 04 1e a9 c2 77 ab 89 c7 ef 1c d1 73 4d c1 1b ba 48 56 23 96 2f 1e c1 cc 80 3c cc 57 87 71 0d 99 0e 9f d8 a8 46 b1 c0 21 ee 7b 78 75 7e fb e2 c3 7b 94 8b 41 a5 1c 36 97 5e 4f 45 94 dd bd 9e b2 c6 57 cb b8 62 70 12 cb 45 aa dd db 87 b1 ef 81 92 2c 71 7e ac fd e6 97 a4 db 48 8f 23 ff 7a 61 f3 bb a0 35 51 c9 19 b5 22 42 3d cc 96 18 66 6f 9d 93 d9 d2 d6 02 50 a0 7e 27 60 36 5a 2d e3 Data Ascii: rFNX<0KWk&##BHR^_w1l'oz~tGZ&)+.`#VlMsbp :]-GonwsMHV#/<WqF!{xu~{A6^OEWbpE,q~H#za5Q"B=foP~'`6Z-
2024-04-19 14:07:04 UTC	1255	IN	Data Raw: de 2f d2 d4 af ec df b2 48 b9 14 53 a1 49 fd 7c 0c 92 ae 3c e3 b1 a2 b6 54 0e e9 e0 fe 9e 6f c4 f0 70 6c 77 df 41 c9 17 3d 09 bb 28 83 99 89 d9 51 3b 3d b6 ca 55 16 f4 70 95 f8 76 18 40 a9 d3 65 96 20 17 a5 89 75 23 3c 3f c6 c1 22 25 24 61 ba d7 a6 1b 07 21 fc df fe a2 ef 67 7d 94 d1 10 3c e5 0f cb b6 8c 7b 48 c4 da bc e4 3f ab ce 2a 98 44 e0 3a 61 92 2e c8 6a 94 6c e1 77 88 62 66 ea 8f 3d 58 e5 bd a4 a9 60 0b 31 1d e7 60 19 b7 64 2a 4c 91 99 78 f4 03 ac de 65 ce 42 c7 2a b1 f3 75 4d c4 cd e1 1a 2a b1 4a 91 9b a4 d5 dd af f9 a8 68 45 1b cd be de c9 53 77 ee 70 12 89 27 19 38 f1 66 2e c8 88 54 a8 43 b3 cd d4 82 ca 5b 51 d1 9d 26 85 e6 23 74 9e 66 dd 22 9d c5 4d 49 e0 5a 58 6c da 0d ac af 07 1a a3 f2 e4 1e 33 cb 6a c6 30 3b f2 ec da f9 da 35 88 a6 fd 05 40 Data Ascii: /HSI\|<ToplwA=(Q;=Upv@e u#<?"%$a!g}<{H?D:a.jlwbf=X`1`dLxeBuMJhESwp'8f.TC[Q&#tf"MIZXl3j0;5@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50182	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	523	OUT	GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 962 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:35:49 GMT Expires: Sat, 20 Apr 2024 12:35:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5476 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	723	IN	Data Raw: 52 49 46 46 ba 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 71 03 00 00 2f 3f c0 0f 10 77 06 31 92 6c d5 4a 9f ff 3f 0e f9 a7 e8 ee 70 ee 59 2c 08 48 91 24 39 92 bc e6 b4 42 72 20 8e ff f3 c0 e8 9e e9 80 d8 48 92 22 29 ea 9e c9 7f 1b 99 f9 67 ba 1c c5 b6 5b 37 47 52 fe db f0 08 80 ac 03 a4 c8 4b 21 04 6a 35 01 85 92 c0 89 09 81 0b 89 c2 8d 40 22 51 08 24 02 0b a2 44 81 28 6c 40 c4 44 eb 83 05 e1 b2 d8 52 d2 72 08 0c 29 81 96 14 42 54 08 41 18 5c d8 88 0a 17 42 d8 21 84 a8 b0 11 42 d4 46 08 85 f8 5f 21 84 42 88 5a 2c 9b c1 90 c1 50 0b a1 a8 45 bf 0f 77 6c 8e 38 7c be 50 47 9c ec 2b 35 71 b6 6e 1c bb 94 b7 3a 9c 73 06 c3 de 79 a2 ee a3 44 89 e8 37 da 68 fc d1 d1 46 63 a0 31 f0 43 97 8c 37 df ef 8d c7 77 7d ae 4f 76 Data Ascii: RIFFWEBPVP8X??VP8Lq/?w1lJ?pY,H$9Br H")g[7GRK!j5@"Q$D(l@DRr)BTA\B!BF_!BZ,PEwl8\|PG+5qn:syD7hFc1C7w}Ov
2024-04-19 14:07:05 UTC	239	IN	Data Raw: 3b 5c e2 32 45 3d a5 02 28 55 40 aa 00 cc e2 79 02 f8 a6 f2 5c 00 df 25 1e 2f af 67 f1 8f 9f 5f 8b 04 70 da 55 79 27 80 0f 12 79 ba 16 ff d7 4c e5 ad 00 48 29 cd 80 e3 2f b8 d2 1b 01 7c 96 24 27 10 d1 95 5c 2d 37 af d3 8d bb 4f 23 0c 4a f9 02 70 25 1e 77 89 88 6b f1 38 11 93 fb f1 6b 02 17 b9 c4 65 8a 81 b9 4c d1 87 3f 16 c0 03 66 cb c7 f7 af 6e 0b e0 9c 6b 8d fc ac c7 cc 28 8c a6 d0 ef 5e 84 01 28 34 a0 2c 23 33 85 ab 94 65 64 02 c8 79 d9 9e 49 cb 32 32 53 b8 26 c3 7f 3b 8b 31 2f 2e 9a 5a e6 d5 8e a6 ba 79 35 a2 a1 d6 a6 b5 a1 a8 ab b8 66 51 d5 e8 a8 62 6c 0b 73 5a c6 55 0a f9 03 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: ;\2E=(U@y\%/g_pUy'yLH)/\|$'\-7O#Jp%wk8keL?fnk(^(4,#3edyI22S&;1/.Zy5fQblsZUEXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50183	74.125.136.104	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajQ8yTbYmfNthCqeCUXSA62-OZxgYCryckT7TvnHeCrYgvj_ZEKKw3MoqyxiyWewig5FlXNz8xdPD8vxvg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:07:05 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:05 GMT Expires: Fri, 19 Apr 2024 14:07:05 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:05 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:07:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50184	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	524	OUT	GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 896 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:35:49 GMT Expires: Sat, 20 Apr 2024 12:35:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5476 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	723	IN	Data Raw: 52 49 46 46 78 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 30 03 00 00 2f 3f c0 0f 00 05 25 da b6 8d cd d5 6a 25 79 b6 dd b5 d5 b5 fd 5a b6 6d c4 b6 6d db b6 8d b2 5d 15 3b f9 8d aa f7 ef c6 bd df f7 dd ff af 5e 5a 11 fd 9f 00 5d c0 d8 52 b7 7b f3 ce ea 54 ab 29 fb 03 fb 17 79 ad 22 f4 1e 7e 9f 3e 91 7b 95 98 ef 8e 9c 31 e6 23 cc bc 5c ab 06 98 19 93 99 5c 0c 30 a5 d7 77 3f 0f 5e 7b 32 57 62 c0 6d 67 e4 1d c1 e7 1b 65 b9 f1 1b d0 2c ef 03 f8 ff 3b 93 03 87 80 e3 f2 3c f6 1e c0 35 b3 8b ea 6b 77 f6 03 b8 33 99 b5 4c 4f 18 2e 7b 6a 30 e6 3e d9 9b c7 00 77 67 a9 fc 17 80 63 b6 95 98 f3 e4 b7 18 e8 99 8d d8 97 58 65 96 de 0a d0 39 2a ff f9 40 bd bb c3 d8 7f 34 7e 03 78 ae 41 d6 74 d4 43 03 e0 07 67 27 00 a6 1f 80 ae Data Ascii: RIFFxWEBPVP8X??VP8L0/?%j%yZmm];^Z]R{T)y"~>{1#\\0w?^{2Wbmge,;<5kw3LO.{j0>wgcXe9*@4~xAtCg'
2024-04-19 14:07:05 UTC	173	IN	Data Raw: 95 c5 9e 40 b1 af f9 98 2b 65 3d 62 fc 5e a1 ec de 0d 8c 69 f6 d8 87 39 38 25 fb 50 e8 99 51 b6 93 77 01 f4 db 59 5b 5f 34 e7 7a 80 f7 8e c9 f3 28 70 48 d9 cf fc 8d ff 03 f2 4e 03 bf 2a 27 cb de f0 13 91 f7 e9 2b 81 58 6e 48 27 d7 0e fe f9 bb 5e 53 00 16 a7 2c d1 e9 00 d5 ca f1 3c cc 8f c7 cc 18 f9 36 66 a5 72 fe c4 d3 f8 7d 2f a4 d6 98 f7 85 c7 1f 65 6a ad a9 ea 5d 9b f7 d4 fd af 0b 18 01 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: @+e=b^i98%PQwY[_4z(pHN'+XnH'^S,<6fr}/ej]EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50185	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1102	OUT	GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 4318 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 d6 10 00 00 57 45 42 50 56 50 38 4c c9 10 00 00 2f ff c0 3f 10 55 e1 b1 b6 6d 99 24 47 7b 95 d7 cc cc cc 8c c5 25 ac 52 09 0a 45 75 54 5c ca a6 6c 66 e6 ee ac 66 e6 ee 30 1a 3e f8 bf ef 0f 4f 60 a3 a5 a3 0d e8 b4 9f a2 3a 29 8c 30 43 4c 8b 60 66 9b 59 32 99 29 3b 04 19 4a eb f7 64 f7 0a b4 05 56 7b b2 58 2e cb ab 10 66 88 ea 88 d6 c0 0c 1b e8 2d 48 6e 9b 02 4f 61 a9 52 ac 58 84 3c 59 4c 75 b4 04 79 b2 18 fc 12 4b 15 c2 c8 1d c8 d4 12 b4 05 de 82 5c 7e eb a4 38 5b 10 27 cd d8 80 68 0b 34 e0 09 dc f1 aa 76 f0 1a c2 52 c5 60 c6 e0 7f 4a f6 ec 63 76 30 1b 00 73 56 90 82 18 aa f9 87 ff 6d 0c 59 2c b2 64 0e cf 2c 60 cc 31 c5 7f 9c 38 0d 71 9a 76 30 e8 ce 06 24 08 00 58 46 52 9f bc b6 3b b6 e7 6c df ad ad 1b ac 8d b1 3a ec ec 44 75 bb c3 3b 87 91 e4 Data Ascii: RIFFWEBPVP8L/?Um$G{%REuT\lff0>O`:)0CL`fY2);JdV{X.f-HnOaRX<YLuyK\~8['h4vR`Jcv0sVmY,d,`18qv0$XFR;l:Du;
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 71 d3 b4 51 4d f3 c9 34 d4 e8 c7 d0 41 c4 56 a2 ff 85 6a 6e 85 d4 51 bd 84 29 8c 80 a8 b5 cc 1a 57 9b ad 27 d4 cf ea 83 4d 36 4e 10 b9 a7 6f 43 31 b7 4a 6a 67 9c 9c eb 3a 70 71 80 d8 c3 5d 05 2f 75 63 46 d5 2c d5 12 15 c3 53 0c c4 5f 30 82 b7 5b b2 95 d4 cb 3c 4a ea 47 5f e4 81 0c 5d df 98 83 03 b5 32 69 35 9c 58 03 39 ea df 4a 4b 19 75 52 f7 e1 f0 5a 20 cd dc 6a e7 9b 1a d9 f8 e1 64 80 4c 13 67 5c ae 23 d4 c6 32 6d 31 c6 b6 ea dd 52 80 5c cd 81 66 9b 0e ea a2 c3 e0 13 1f 13 64 eb ca 59 b2 25 d4 44 bb 9c be 0d 15 28 f2 f3 ba e6 70 38 b4 b0 ae 08 88 f4 6e 79 2c d6 4a ea a1 5d 4e 08 38 d7 02 6d f3 7b 72 be 82 d1 5e 6d 8f 01 e7 aa 61 87 ba b5 46 e8 ff ac 35 ec d0 67 90 e9 aa 4b 37 fe 9b bf 27 e7 c3 e8 cd 5a e4 69 9c 81 a3 ed 62 ad a4 16 3a e4 84 80 e7 48 b1 Data Ascii: qQM4AVjnQ)W'M6NoC1Jjg:pq]/ucF,S_0[<JG_]2i5X9JKuRZ jdLg\#2m1R\fdY%D(p8ny,J]N8m{r^maF5gK7'Zib:H
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: a2 52 57 c1 3f 4b 71 10 06 ae b5 81 66 2b f1 2d 26 53 21 50 b7 4e 7c 23 0a 4f d3 40 b6 c1 3f 16 de 84 20 38 e9 79 5a 23 f9 66 43 cb 95 41 ba 9e 67 0b af ec 87 21 44 cd 0a de 88 6c da 3a c4 41 be da 20 d3 8d e8 96 eb 8a 13 03 f5 40 95 d3 05 89 6f d4 97 f1 d5 1f dd 48 08 ee b0 b0 9c 04 37 03 00 83 5e 72 6e 8e c8 b6 92 38 3c 20 e3 82 49 31 08 ae 1e 63 ae 4c cd 31 82 ad 43 e2 05 24 ea d6 77 03 29 a7 8e 20 b8 a1 47 3e 1a 35 e7 0f 91 b5 09 c8 49 ef d3 f4 12 db 0f ba 81 7a e6 12 cf 89 68 df 99 20 e9 60 47 a1 ed cf a0 16 1a e3 d5 80 c4 6d 02 b2 ca 9f 02 05 a1 8d 0d 5c 31 35 e7 2e 88 16 97 e9 5b 20 eb 92 17 0a 6d 93 db 4b 8a da 1d 76 48 d4 80 71 1e 69 39 7e 4f 68 b7 0b d3 0a ff 16 12 b7 d2 a5 65 65 89 6c e9 66 8a 02 ed 92 17 12 7d a8 08 e4 9d d5 51 60 73 11 2a a2 Data Ascii: RW?Kqf+-&S!PN\|#O@? 8yZ#fCAg!Dl:A @oH7^rn8< I1cL1C$w) G>5Izh `Gm\15.[ mKvHqi9~Oheelf}Q`s*
2024-04-19 14:07:05 UTC	1075	IN	Data Raw: f3 a8 48 f3 ea 71 8b 9e de 09 a5 67 45 57 a3 80 93 55 9d 57 53 86 56 38 0d 1b 90 ea a8 bf 86 10 d0 ef dd 52 35 cc 1b f9 41 68 b8 40 47 03 d7 18 70 ae b8 b2 12 cc 2e ab 23 d5 7f 35 80 be f5 8d 25 9f 93 0a 80 82 6d d3 c0 ff a9 16 59 e2 3a 6f 7a f0 b3 47 41 aa ed fd 16 83 40 1b 54 03 e0 9e 11 01 0d c4 69 eb e0 29 b6 b8 2a 29 9a 8a 0d 48 77 a3 9f d0 80 61 e6 02 12 a9 03 fd 63 ff 48 05 b1 7e da 9c d8 63 71 e3 5a b3 fa f5 f2 3f 48 f9 3f 4d 60 18 68 83 ea 00 1c 39 cb b6 12 1d bc 51 eb 13 3b 75 2e 5c dd 79 1f af 3c 2c d2 de 7a cc 18 c0 32 73 df 6a 01 02 23 fd e8 28 21 2e db 16 bf 92 17 4b 59 8c 74 d3 5d 76 49 65 f0 84 d4 df 99 04 96 81 36 a8 1a c0 73 60 5a 88 38 0b 86 4d 85 26 ff 7a 29 9d 9a 9e e7 6b 51 27 76 2c 2c 13 d2 9f 85 40 b7 be 1b b0 b4 82 fb 56 11 e0 3c Data Ascii: HqgEWUWSV8R5Ah@Gp.#5%mY:ozGA@Ti)*)HwacH~cqZ?H?M`h9Q;u.\y<,z2sj#(!.KYt]vIe6s`Z8M&z)kQ'v,,@V<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50186	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1100	OUT	GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 41526 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:10:58 GMT Expires: Sat, 20 Apr 2024 11:10:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 10567 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	720	IN	Data Raw: 52 49 46 46 2e a2 00 00 57 45 42 50 56 50 38 4c 22 a2 00 00 2f ff c0 3f 10 4d 40 8c 6c 37 6e 33 20 a0 8f f0 01 e9 bf 60 1e be 1a 88 e8 ff 04 98 99 db db 23 22 cc ed fd a1 88 78 6e ba 97 ee 0b c6 18 c3 bb 67 44 84 6c db 6d 56 bb 35 86 5b 97 5d b6 bb 90 94 92 52 4f 6a b8 5d 57 7b 6a 9f 48 f9 52 b7 0b 60 93 29 16 ef 0b 77 01 d2 23 00 09 d4 6e d7 62 f9 93 40 20 91 ce b5 40 62 9f 20 d0 04 a4 c3 7a c8 4c 40 62 5d 72 11 92 12 24 e9 e1 28 70 7b 63 b0 8a 04 f0 e7 1d 13 10 6b e6 78 47 2d c7 4f 69 be 12 9b 9e b9 4c 80 bf 5d ed ea 00 20 81 94 a7 5e f6 3d 93 e3 a9 5f 79 3e c6 2a 04 87 b2 75 bc b0 3d f4 a6 76 63 82 60 be 50 76 d9 3b 5b ab de 31 ca d6 09 a2 ea ff 1d e3 79 24 8d 65 8c cd 78 05 60 44 48 3a 98 f9 45 55 21 99 47 98 99 9d 6e 6b 6b f6 3b dd 77 11 6f f0 d5 6c Data Ascii: RIFF.WEBPVP8L"/?M@l7n3 `#"xngDlmV5[]ROj]W{jHR`)w#nb@ @b zL@b]r$(p{ckxG-OiL] ^=_y>*u=vc`Pv;[1y$ex`DH:EU!Gnkk;wol
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 51 8f f0 87 8d 08 4c 04 81 c0 e5 0b 48 2a 48 24 72 9c 0e 4a 87 e4 00 0e 20 7a 4a 72 00 fb 50 12 89 a4 1e f9 28 66 b0 3e 43 22 2d 5d 3a 24 1b d5 84 0c 1c 40 60 3b cf 60 86 97 1d aa 4c 44 6e 47 20 d4 76 b5 5d 05 02 f5 90 a3 2d 31 a4 4a 4f 04 11 6c 0f 26 82 cd 85 cd bc 06 c1 11 04 02 81 cd bc 99 f7 5d f0 cc 39 0a a4 a5 25 eb 11 ae 0a 02 01 b9 d5 2d a5 63 cd cc 92 91 3f 48 24 55 3a 13 93 30 41 5a d2 6d 2b b6 62 3d 47 38 1a a2 a1 b8 2a 46 41 41 41 e1 6e 72 f3 51 08 54 54 00 04 2a bd 40 45 c5 af 63 ef 8f a4 75 5e c5 85 0b 0a af e2 8a 7b b3 68 1f 8f d1 5f c8 fb e3 d8 ac 75 72 f3 39 af e2 c2 85 4b e3 32 70 b1 75 b8 a3 cc ca 2f fd 15 68 8d 62 5f a5 2a 1e e1 55 1c b5 4a e3 3d 37 dd e1 11 9b d9 40 7f 89 6e c3 63 8c 2b c6 18 6f be e4 31 1e 63 fc 97 a8 d2 27 d9 91 18 Data Ascii: QLHH$rJ zJrP(f>C"-]:$@`;`LDnG v]-1JOl&]9%-c?H$U:0AZm+b=G8FAAAnrQTT@Ecu^{h_ur9K2pu/hb_UJ=7@nc+o1c'
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 00 40 12 35 8b 73 fe ff 5f 46 66 9a 0a 11 42 28 6c db 06 69 c7 7b 80 3e b0 f6 fe bf ea c8 cd f9 1f b8 0e 96 f1 61 1f f5 4d f4 59 5f 44 5f 6c 5f 07 3f 4d 9f 86 93 d9 0b e7 9c 7f b9 6f e1 ca 6a 3d 61 ba 1a 5d b9 70 c3 34 3b 1d e9 6a 65 d5 9a 7a b6 10 86 25 b9 5a 70 4a cb e0 e2 6d 18 3c e1 c4 45 2b 9c cc a8 b2 42 2e ba 61 4e 5c 5a 50 36 cc e4 a6 e0 6e 38 0b b2 b4 70 35 92 e4 46 92 1c 49 72 8f ac ae d9 b9 f7 09 78 72 9f 0a 9c b3 d9 a9 90 1d 49 92 25 29 19 59 d5 bb f7 e2 a1 03 fa 8b 81 10 08 c0 2f fc 1d ec 4e 77 25 a3 da b6 95 6c 2c 00 fd d3 10 c0 61 ca 8c 02 ee a2 30 69 03 26 9d b7 28 02 58 ac 3c f1 47 de 32 76 97 8b 55 7b fb d9 65 5e 28 2b cd 8c 31 95 13 08 10 96 57 35 e0 13 e3 b2 3e 20 5b 21 49 9f 1b d6 09 4f 7c 24 cf 54 f7 de c0 9a e8 86 ba e8 13 7a 34 84 Data Ascii: @5s_FfB(li{>aMY_D_l_?Moj=a]p4;jez%ZpJm<E+B.aN\ZP6n8p5FIrxrI%)Y/Nw%l,a0i&(X<G2vU{e^(+1W5> [!IO\|$Tz4
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 99 47 1c c7 01 1e 71 29 d9 0c db 59 ca 45 92 c7 53 93 b6 e3 65 bc 7a b7 01 9c b5 ba 75 2f 84 db 94 49 b9 dd 09 c8 6d a9 a5 aa 1f 8c b8 ac 46 ce 50 6e 30 0a 39 a4 ba b7 32 75 32 c7 1e ee 02 52 98 d1 60 56 96 7d 63 e2 69 34 73 e4 46 22 85 98 47 79 d5 0b 72 ba 81 2d 37 27 25 4e 84 da ed a6 bd e9 d4 27 d4 37 f0 18 92 f3 4a 03 a0 70 d9 7e b5 db c8 c6 f5 12 80 41 c9 6a 4b ed 24 54 ce 22 14 fa 8f f3 5b fe 68 df cb b7 82 91 ea 0d ae 44 13 c4 1c 1d 15 29 4f 60 8b b6 31 d5 76 47 aa 49 5a c2 5b 7f a3 3a 33 e8 cd 8c ac db 23 6e 3d 15 d9 d9 d1 9a 83 99 90 aa fa 13 bb 0e 57 ca 4e 36 9c f0 ba 35 5d c3 89 f5 33 c8 39 2b b0 c7 a0 a1 23 e8 64 a3 c1 b6 9d 0d 6b 29 bb b9 d1 b4 40 94 cb 97 3d 23 c5 6e 0e 53 aa 6a fb 6c b7 3a 8d 6c d5 47 54 a0 c5 6c 23 5b bd 92 ed d7 45 dd 1e Data Ascii: Gq)YESezu/ImFPn092u2R`V}ci4sF"Gyr-7'%N'7Jp~AjK$T"[hD)O`1vGIZ[:3#n=WN65]39+#dk)@=#nSjl:lGTl#[E
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 12 b3 c0 a5 2c e1 82 66 21 79 3d 2f eb 9e 87 46 b7 33 9e c7 2d 04 00 33 57 a7 68 4b 10 4a e9 42 2b 28 43 ef 12 74 e0 79 ba 18 96 0d 20 10 a3 6d 8c b7 57 67 a3 50 dc ed dc 46 c1 46 2b 34 8e a1 3e 36 ae 1b 86 14 45 c9 8d 95 50 cd 42 8c 0a 17 00 2a 64 bb a4 db b6 e1 28 96 c8 2b 8f 77 19 32 d6 8b fd c2 ba 8b b0 eb 91 e4 2c 6a 23 cb d7 62 8e b2 33 44 99 97 63 db 38 83 a4 c0 42 4c 8b 9e a4 d6 c6 0a 8c 34 d2 65 fe 59 3d 99 e9 52 39 d0 f0 6f 2f 2f a6 1b 47 4d 70 b8 06 a6 66 0b ba 28 02 44 02 84 03 94 02 a4 1c 34 d2 3b 76 69 1b be e7 6a 8c ac 99 7a 7b 3a a1 57 8b 15 83 a6 66 30 a7 5d 3a f4 dc 13 1f 73 e9 4d 48 19 6c a6 54 ab 8a 57 48 23 9d 1d 00 db 59 7d 5a bd 6c 1a 50 f6 d2 2b c2 54 07 af 86 6f 00 93 bb 62 22 8a b0 a2 02 a0 f8 39 a0 e6 1b c0 94 2d a1 66 3e 6a 49 Data Ascii: ,f!y=/F3-3WhKJB+(Cty mWgPFF+4>6EPB*d(+w2,j#b3Dc8BL4eY=R9o//GMpf(D4;vijz{:Wf0]:sMHlTWH#Y}ZlP+Tob"9-f>jI
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 46 55 bf e1 ad 0c 31 26 06 32 1c c3 ba 9c 75 6e 86 96 98 25 19 77 98 59 a3 a2 88 26 ac 0d 63 61 60 22 61 21 54 91 44 2c c2 2d 2c 52 d2 41 16 7c 6c 77 29 54 c2 d1 a5 66 c5 0f 7c 79 9a ec ad 14 f0 f5 5e fb 84 80 4e a0 08 dd 88 e0 29 ac 7e ca 9c 74 7b 71 3a 4e c6 89 b8 f0 2a b8 12 2e 8d bf 99 a0 8d 7c 79 a3 31 87 8e b6 fc b6 fa 53 ff 37 ef 0c 0c aa 95 60 b8 98 5e 84 d2 e8 a6 71 bc 67 c9 05 27 12 05 33 05 33 87 70 16 53 c1 0c 91 cd 82 dd 5c 8f 97 c7 70 66 d7 13 e5 5a a4 1c d2 09 3a 66 60 1b d6 2c af 56 ab 63 65 19 f1 3c b9 5d d0 5a 1d 3b 5c d2 ca f6 a9 57 7a 84 a3 0e 17 1b 55 68 f5 19 aa 9a 36 f7 36 b9 bf b0 05 28 51 6c 7d b9 65 c4 90 46 a5 46 a7 30 4d 2d f2 a3 31 8a 24 c1 42 6c 24 69 b9 cd 47 ce c4 6c c5 58 43 ce 1d 95 31 db 55 09 52 1a f2 07 9d 1a 8b a2 4a Data Ascii: FU1&2un%wY&ca`"a!TD,-,RA\|lw)Tf\|y^N)~t{q:N*.\|y1S7`^qg'33pS\pfZ:f`,Vce<]Z;\WzUh66(Ql}eFF0M-1$Bl$iGlXC1URJ
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: b2 e7 e4 23 b6 d6 ff 6d 81 c4 fc 56 3b 74 77 d8 7e 6e 4c 32 45 30 7f e0 e1 cc 3d b1 6c 1d 16 e8 32 1a b5 7a 0e 7a b5 9c 57 b3 a5 95 dc c0 9c cd 95 84 9c 9a 6d 7b 59 ae 2d aa 1e 26 6e 6d c8 b6 b7 c8 51 73 24 4a 76 8b 22 47 b9 d1 2a d9 5e cd b1 31 6c cf ab 43 56 c5 a3 82 19 4b 9e d2 28 88 80 36 55 b1 6d d8 58 d0 5f 01 ff 5e 73 bd 9b a5 89 b7 3f 15 ea 0f d7 e3 00 2d 3b c0 59 e4 42 4c f6 a2 af 21 d2 77 60 bb 63 9c fd 55 f2 93 7f 62 8f 0f 29 82 50 f4 ba a0 5e ec 83 62 1a fb d3 c1 40 b0 64 fc 0c 53 66 86 7c c5 c3 7e 4d 36 73 c9 f9 01 a7 3d 60 75 7b 9c 6e 8f 9c 2d 5c 7f 83 61 d1 b1 fb ae a9 56 19 52 2a ad a2 c6 08 9e e1 07 60 54 56 57 fc 27 a1 62 40 0d 07 01 54 a3 74 8e 2f d7 fb 80 ab de ec e9 f3 e7 3c 92 7f 2a a4 d7 79 e4 38 b1 78 61 13 e2 b6 38 2b d2 c6 91 9b Data Ascii: #mV;tw~nL2E0=l2zzWm{Y-&nmQs$Jv"G^1lCVK(6UmX_^s?-;YBL!w`cUb)P^b@dSf\|~M6s=`u{n-\aVR`TVW'b@Tt/<*y8xa8+
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: ea 94 30 1a 39 c0 d0 a3 21 3d 30 60 b4 c0 0b b0 c7 15 aa 32 94 4e 92 33 4d dc 26 92 f6 08 24 b1 19 bf 2e 3a f9 70 6c 3e a8 43 dc f9 20 01 c0 07 dd b3 69 f7 2f 58 24 0a b0 98 46 22 10 d1 fa 84 21 4c d4 0e 7a c0 40 8b 01 0c bc 81 f1 30 d0 8b 36 61 99 81 f1 06 11 47 0e 9b 88 47 30 71 ef 08 98 3c 0b 4a c9 fa f6 bf e4 ff ea eb 97 1f 3d 3e fe e8 91 c3 ff 7f 87 d9 ff fa a7 a6 bf fe 81 f5 9b df 90 3f ff 29 f9 eb 5f 6b fe e3 df cd ff d5 ef 1c ff cb bb 1d f9 ab d1 82 7d 6b e6 0d 4f 40 d4 24 91 6b 56 7a 28 48 2d 87 ab 5f 69 cf f9 64 18 30 85 e4 13 b7 5a 97 5d f0 a1 2e f2 28 66 51 6c 24 84 d0 c3 9c 51 aa cf 44 64 03 ad 8d 46 56 1c 54 1b fb 23 dd 63 11 76 58 05 65 7f a8 f8 51 5b 72 80 86 b0 21 da ba 87 22 15 3a 69 eb ac 08 88 48 b4 8a 45 92 94 63 d9 1e b0 1f 49 78 7e Data Ascii: 09!=0`2N3M&$.:pl>C i/X$F"!Lz@06aGG0q<J=>?)_k}kO@$kVz(H-_id0Z].(fQl$QDdFVT#cvXeQ[r!":iHEcIx~
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 2d 3b 83 76 76 30 6d 14 33 33 85 99 f9 e8 4e d6 26 a7 93 86 61 6a 6c d7 63 3a 98 ed f6 48 c0 19 86 2d dc ef 6b 6d 89 1d d2 b3 da 49 36 e4 8f 0f dd 04 62 1d 8b 35 84 02 17 2c 2e 98 02 04 ad 57 c4 c5 7d 6a ab 60 73 3b 71 2c b7 4f 49 06 96 12 5f a9 41 13 e8 af b8 f3 be 9a ba fa d8 cf 9d ef 6c 2c 6e d4 5b dc 1e f4 50 54 a7 79 b2 2d 49 17 e4 77 e7 71 3e 6e 98 90 48 3a 25 b7 b1 a4 e4 55 4c 90 41 ea 68 ca 3d ce 25 fb 27 30 97 ec 63 b5 20 27 ec e1 36 57 03 87 2b 2c d6 5f 33 b8 c1 53 20 73 af 72 a9 18 4a 81 10 a6 85 50 e0 09 2d ea 3d e7 bb df d3 2e 8e 56 dc d9 be df 31 62 ee 1b f7 af 70 ef 85 98 d1 00 a6 5b f5 61 e2 8b 00 aa d8 9f 31 88 2b 07 45 2c ba 80 81 19 c6 f7 c7 b8 69 fc ab 01 50 af 41 a9 2a ac c6 8d c8 95 1c 8d 74 fd 58 48 9c 10 57 88 49 c0 89 92 24 03 c9 Data Ascii: -;vv0m33N&ajlc:H-kmI6b5,.W}j`s;q,OI_Al,n[PTy-Iwq>nH:%ULAh=%'0c '6W+,_3S srJP-=.V1bp[a1+E,iPA*tXHWI$
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 32 01 df bd 87 e7 93 46 73 01 4e 94 aa fa fb 5e 92 0f 3c 95 e4 2e 7e 95 db ec c4 f3 f0 6d e9 a1 b4 74 1d ef 0d aa 6f 97 e1 fb e2 3d bc 7d 63 e4 e4 37 cf 94 e4 eb 04 dd 52 8c 4c 52 c6 eb 2b 6f fe 6b 47 1d 93 7c 1a be fe 9c 1c 17 e0 83 8e 0b af 5e bf 70 e6 d2 19 ee df 4f a1 fb 3f 55 b3 0f 47 b0 c2 27 ec c9 27 3c 53 7b ef 95 de e4 c8 f9 b7 ce 5c 90 bb fc bd b7 fe f5 c3 ec 1b b3 7a 90 cb 0e 3d 19 f6 44 47 f4 c7 07 db b4 da ee 14 18 ec 4a e4 df 32 6f b5 a1 8e 75 9a c3 8f a8 20 83 39 a2 aa 15 23 8b d6 d3 c4 59 a4 5e fd 32 39 a5 ad f2 21 73 da 21 c9 8a 53 cb 8a 9c b2 b2 2d 27 18 29 8f 91 62 6d 6b 53 57 ed d4 3f 99 65 f4 ca 6e 2f 27 eb 19 e8 0e 23 84 88 ff 56 db 7c be fa 83 3e 40 7a 56 e1 3f 8b 48 90 7d f4 83 39 a2 52 a8 70 14 5c 28 c0 27 5d 6e fd 16 5c 00 ed eb Data Ascii: 2FsN^<.~mto=}c7RLR+okG\|^pO?UG''<S{\z=DGJ2ou 9#Y^29!s!S-')bmkSW?en/'#V\|>@zV?H}9Rp\(']n\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50188	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1102	OUT	GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 2940 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 74 0b 00 00 57 45 42 50 56 50 38 4c 68 0b 00 00 2f ff c0 3f 00 1e 7b ff ff a9 6d 23 3d ff 87 53 f2 8c 02 05 87 b1 90 94 c2 6e 4a 61 76 c3 2e 26 f2 57 33 3f fd b5 7b 4c f3 72 97 79 b7 dc 39 a6 dc 6b 8e 61 0e 16 8f 19 7c e4 65 5e fd 96 b2 bc 2b 81 b6 6d d3 ad 4e 6d 3b b6 9d f4 db b6 6d db b6 6d db 46 6c d5 b6 6d db 76 ff fb 2f 89 6d 24 47 92 14 75 26 d6 9b 9b db ac ce e8 ac 7f 99 28 f6 f5 31 ff f9 98 ff e8 4f c0 95 38 61 97 82 b3 65 25 71 3d 76 29 13 48 c4 16 b0 e9 49 6d 8f bb 35 47 22 07 13 46 52 86 53 86 93 8e c7 1e 8e e8 d1 ec ba 96 9e b2 19 ac b0 0e 98 31 4a c0 f6 02 f6 bd 1f 4d cf 0d e6 46 56 d1 64 41 af be 76 cd 26 10 5e 85 98 7c bc d9 f4 fc 81 18 0e a7 f9 a6 ce df c5 94 45 99 30 06 49 d9 6d a5 0f 25 73 1e ca a8 36 83 c4 c7 de 3b d9 08 1d Data Ascii: RIFFtWEBPVP8Lh/?{m#=SnJav.&W3?{Lry9ka\|e^+mNm;mmFlmv/m$Gu&(1O8ae%q=v)HIm5G"FRS1JMFVdAv&^\|E0Im%s6;
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 85 22 8c b1 2c 4b 6d d1 31 9a 05 61 aa d8 38 67 47 d2 e3 a9 f6 2e 48 60 08 5d 12 e1 e6 dc 95 f6 57 30 3a c5 f7 90 8a f0 ea fc 83 f2 d0 f2 2c 5b 41 6b e9 61 b2 d5 30 0f b5 e9 29 01 87 d2 94 65 f5 32 86 f0 55 e1 e5 1c d4 f6 87 f8 d8 e9 36 55 c0 05 f0 fe 64 a1 95 50 5b 26 b4 b9 21 08 8f 9e f3 75 b4 23 69 b0 d5 78 40 d2 e8 0c 5a ed ba c9 10 0e 7e 17 be 67 23 10 fb 3f c0 18 88 a7 d3 da bf 61 08 a0 80 fd 19 cd cc b9 41 53 22 92 0b 65 c0 10 c6 73 56 28 24 ed 27 60 6b f7 bd 57 89 e4 c1 6e 31 86 f6 17 12 ed 1c dc be 40 65 ed 9d cc d6 e3 36 92 70 cb c5 02 91 cd 56 fc 3e ca 8e 67 c3 38 f8 45 f8 d3 58 74 1c 8b c5 b0 f7 c5 0a de b9 1f 77 fc 82 31 53 66 68 2c 3a 72 83 f8 87 d0 85 72 5b 9c dd ca 5b a7 b0 d9 fa 38 43 b8 cd 46 74 8d f2 61 e1 4c 61 d1 f1 09 0c 6d 8f 25 76 Data Ascii: ",Km1a8gG.H`]W0:,[Aka0)e2U6UdP[&!u#ix@Z~g#?aAS"esV($'`kWn1@e6pV>g8EXtw1Sfh,:rr[[8CFtaLam%v
2024-04-19 14:07:05 UTC	952	IN	Data Raw: 2c 99 bf 38 9e 33 92 3a 94 74 3c e6 53 a7 f5 ad 91 94 2f 4f e6 cf 94 ad 71 08 11 92 c2 2b 99 d1 2c 15 a1 75 24 57 69 23 f4 c9 b5 84 96 14 de 66 38 f8 59 4b 68 49 e1 d9 b7 29 5b 6f 4b aa 16 eb fb 3b e6 2f 76 e9 07 35 29 3c 49 0b 60 b2 58 3f a8 49 e1 05 7c 7b 48 ad dd 22 27 85 57 b2 ad e7 b4 83 9e 71 04 02 55 ee f9 91 66 8b a0 5b b1 02 ae 39 1a ae 17 51 a4 f0 74 a8 41 5b ce 2c f7 51 c4 74 89 d1 ea 14 a9 5b 5e d0 69 e1 53 78 9a bc db a4 ed 41 6e 58 1f a0 29 3c ad f4 fd 72 bb 91 14 7d a0 6a 1c c1 af cd 73 da bc 49 ba c6 11 48 bc fd bb 26 60 53 78 ba 3d d1 13 43 ae d7 68 87 70 eb 96 a8 60 69 9f cb 9c 64 ab a9 e1 3f ba d9 80 59 b3 8a 9e cd a7 6e e7 d3 f9 23 e1 4c 8e da 9e 4a 8c 6e b3 a5 28 da 7c ea f5 b6 76 df 65 82 54 06 81 40 af d9 52 14 d1 25 be 47 a7 ad 47 Data Ascii: ,83:t<S/Oq+,u$Wi#f8YKhI)[oK;/v5)<I`X?I\|{H"'WqUf[9QtA[,Qt[^iSxAnX)<r}jsIH&`Sx=Chp`id?Yn#LJn(\|veT@R%GG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50187	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1101	OUT	GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 7576 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 90 1d 00 00 57 45 42 50 56 50 38 4c 84 1d 00 00 2f ff c0 3f 00 09 48 92 e4 c6 8d a2 d1 80 01 04 f0 ff 0f 73 9f f5 1a d1 ff 09 c0 ff d2 7d a2 97 48 b8 cb 00 d5 1b 24 a1 ee 31 20 f4 8c 18 3f 1e 01 80 96 7a b4 f6 c1 32 95 5b b2 21 e2 80 0d 72 ab 3c c2 92 a4 c8 41 d5 02 6a f9 a6 34 93 2f 44 3c 1e a5 18 df 98 11 d3 3e 01 50 80 54 27 ee 2c a5 aa 66 7d 4b cc 6e 4c 7b a8 30 99 34 79 a0 c4 34 22 02 00 79 04 9d 61 c2 1b 50 d5 41 23 b2 ef 6c 76 bf fa 63 2f a0 48 92 ac da ca 78 8a 4f 3c 66 b8 b4 ff 75 3d f9 15 da 7b c8 3d ab c6 6d db 88 53 91 b1 d7 ff df 78 8e 41 01 47 92 24 45 92 77 55 93 ad 34 e2 ee 1e 33 9f c4 f8 ff 27 a1 d0 ff 09 50 0f f1 49 92 d4 3d 67 f0 c5 9b 6a 04 41 62 cb 1e d4 27 28 00 30 8d bb 18 65 2d cb 08 82 05 00 cb 9a bd fb 08 06 9d 55 1e Data Ascii: RIFFWEBPVP8L/?Hs}H$1 ?z2[!r<Aj4/D<>PT',f}KnL{04y4"yaPA#lvc/HxO<fu={=mSxAG$EwU43'PI=gjAb'(0e-U
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 20 06 68 34 bf b5 c6 a4 26 6b db 88 03 50 cb 3f da a5 16 d6 8a c4 02 92 24 49 52 6c 27 b3 aa 07 c4 bc e3 15 f3 4a 57 d6 09 74 00 9d 80 99 99 3f 4a ea 99 ee aa 94 5b db b6 aa 2d 6b ed 7b df af fd 38 10 51 00 44 e4 d4 e0 b1 77 41 6e b5 f1 67 c8 93 1d 13 20 01 26 f9 7f 92 ff 27 f9 5f c7 6b 29 6f 24 d8 40 ac 89 70 35 85 8d 94 37 e2 6f a6 cc c3 6d 89 a8 97 2b 00 dc 34 74 92 e4 26 2d 8e c6 d1 64 24 d0 38 95 36 b1 78 62 71 27 52 3b 8e ba 5d a0 00 d1 b1 14 8e a4 b0 37 07 36 e6 ff f5 78 9b c3 cb 63 e3 30 78 4c 1c 56 0e 13 87 ce a1 31 84 83 08 00 86 92 20 24 11 97 a8 91 88 8a 04 1f 2e 11 11 a9 10 b9 95 45 76 16 83 f3 19 95 42 c3 6c ba 33 f4 2e 4b 40 e1 d2 e9 44 f7 7f ae de ea b3 2f ae f5 ea 0e df 99 5d 23 38 53 8b 3f 80 ee a2 1e 82 2f 12 15 09 7f 2f 40 b5 8f 33 79 Data Ascii: h4&kP?$IRl'JWt?J[-k{8QDwAng &'_k)o$@p57om+4t&-d$86xbq'R;]76xc0xLV1 $.EvBl3.K@D/]#8S?//@3y
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: c7 c2 80 4a 26 5f 6f c5 9c 1e a2 a1 f3 8b 74 03 d6 62 ac 62 80 40 53 d2 0e b6 8d cf e4 8c 6a 23 45 0e f9 82 e4 52 9b 08 c9 64 1a cf c7 95 86 40 a8 32 1a b4 c7 6a d8 95 60 99 ae a7 36 64 61 59 f8 e0 da 41 9f 03 b5 73 16 39 a9 81 22 59 eb e4 0e 7a c6 b9 3d 4e db 13 01 39 62 46 60 f8 b3 39 4b 05 fd fa 9b 76 ae d5 23 41 b2 a5 b9 1c c9 e3 35 06 69 92 98 00 89 09 09 26 40 9a 80 4c f2 41 9a 58 c8 a4 eb d7 e6 6a 54 16 81 62 8a ca b4 ef ab ce 5a 07 8d 8b 71 21 c4 14 81 1d 0c 09 11 06 a9 a9 4c af c9 71 5f 80 08 8b a4 5b 3a 01 5c d8 d3 bd 7f c0 23 2c d3 5a 00 25 63 59 16 06 61 85 73 97 01 8b c8 60 94 45 be 9e 0f d5 88 63 98 ba 8c 8c bb cc 33 2e 46 ca 88 0a b2 63 1c 33 b5 01 21 a9 56 33 bd 06 bc 34 b4 18 27 5f 68 10 83 4b ff 16 62 a4 37 fb 3e 2e 65 35 20 73 e5 49 e2 Data Ascii: J&_otbb@Sj#ERd@2j`6daYAs9"Yz=N9bF`9Kv#A5i&@LAXjTbZq!Lq_[:\#,Z%cYas`Ec3.Fc3!V34'_hKb7>.e5 sI
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 74 f8 85 f4 15 ca 1f 06 21 d8 2e 62 ea 14 71 1c d3 4a 66 36 44 08 1e 0e 31 9a ce f0 e6 4c 8a e5 4c 34 28 33 88 be cf 15 f2 40 f2 b2 6e e7 0c 85 69 80 4b 78 e0 e6 5c 18 cf 80 8c 3c ba d1 a7 df 4f 30 89 5c 7a cd 62 d6 53 51 ee 05 2f 80 9d 8b 01 02 25 a6 80 f2 66 4f 6c 16 4b 0e 2c 30 e3 8e c3 6b 04 3b c8 54 a8 da 11 29 7d 2d 52 c0 ea 0b 64 54 4d a7 a0 30 25 08 d2 40 ff fb a3 36 fc 02 b2 c6 b9 e5 f6 b6 aa 8e 12 7a 65 72 b4 31 d0 0f 15 db cf ba 83 0b 52 a8 c5 ec c4 62 80 40 89 14 c6 c7 df 7e af ef 21 79 c0 22 3d 56 f6 d1 2b ba 18 82 49 78 18 09 fa 41 65 dc 0f 12 bb 81 77 77 48 00 89 4e 90 fa 29 23 b9 95 b3 31 21 f3 21 07 ae ed 63 f4 a9 0a 35 1c da 3b 06 a8 60 6d cc da e4 13 23 77 54 a8 8d da bc f1 a7 6b f4 4f ff 78 64 3e fd a7 2b a1 c6 78 7f 87 32 41 40 42 41 Data Ascii: t!.bqJf6D1LL4(3@niKx\<O0\zbSQ/%fOlK,0k;T)}-RdTM0%@6zer1Rb@~!y"=V+IxAewwHN)#1!!c5;`m#wTkOxd>+x2A@BA
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: ad 6d 6d 40 0d 5b b2 08 ad 8e 2d 84 41 06 0c 72 c6 ea 80 5b f3 cd 23 7d d6 c9 fd a6 1a 24 d5 30 83 56 80 0b 22 83 d9 d9 02 f0 9c f3 3f 79 e1 f5 75 40 8d 12 b1 39 05 b1 02 81 e9 04 04 88 0c 42 2c e7 4d e3 dc a9 e3 d4 d1 63 ba 2f 5e 77 18 d5 a2 95 00 a1 60 67 03 42 d0 df d2 c5 8d be f0 c6 5a 85 ec 8f 6c 6b 43 2b 67 93 b1 ed 1d 20 03 28 cf b5 f5 d7 e7 9d df d7 67 d8 9f 1e 31 5f ec 40 2b 24 8c 72 18 ab b0 b3 25 2e 68 8e 39 99 f8 11 5c 00 2a 2d 83 93 d4 9d 88 65 13 32 01 d8 14 30 d4 08 73 3e 6a de ff c4 bb 80 ad 16 24 d6 89 b4 12 2a 0d 31 04 66 bb d9 b1 ce 08 eb b4 ea cf e1 0d a8 75 df b8 c6 4e 2b a4 85 e6 ea 1a 50 00 42 02 6a 64 3e 6f 40 ed 17 8a f5 06 43 19 f7 a9 06 64 74 19 b4 92 4c 98 96 b0 0c 66 bb e6 ff 56 fd 63 74 b2 d5 a6 0a 42 46 76 53 87 56 30 47 92 Data Ascii: mm@[-Ar[#}$0V"?yu@9B,Mc/^w`gBZlkC+g (g1_@+$r%.h9\-e20s>j$1fuN+PBjd>o@CdtLfVctBFvSV0G
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 65 85 01 fa 03 f0 a7 55 36 a6 6e 2d fd ad ad 6c b8 81 91 4b 3a 71 97 26 26 f7 07 d6 8d 26 8f 8a e1 60 98 90 4e d2 24 06 fb 88 52 fe 76 44 6b 67 f6 e6 18 81 3f dd 08 af 95 32 12 a1 02 b5 64 bf 7e f4 bc 65 4f d6 35 d3 35 8f 57 1c e1 c9 c4 43 78 ed 7f 1b 48 13 f3 d4 1d 95 07 78 6c ee e9 db ff f1 b7 72 9c 90 1c 6d 60 ba b6 cb 00 16 b8 cb 16 1c 61 97 e2 52 99 65 36 92 6f 9e 1d 94 73 e0 3c b8 b1 2a 5e d1 a3 80 05 1a 3f 49 ea 3d 5b 1c 59 0f 7d ef b7 bc fb 42 af f6 99 c7 ea 9a e1 8e db dd 25 f8 69 b5 67 a7 63 7d ea ad 2a e0 78 42 9a 44 5b 91 5f c1 39 c8 b1 28 ca 25 d3 91 8b da 68 a3 64 97 55 99 b9 ac ca 9b e3 f1 a7 e2 ac 7c 0c 86 43 29 9c 0a 20 34 76 5b 38 dd 0f 6f 85 de 0f 98 f6 a4 47 1c 51 f8 42 b6 7b ff 67 a3 8d 04 97 80 e4 b7 e6 68 c4 47 9e 15 97 fe 1b dc 4f Data Ascii: eU6n-lK:q&&&`N$RvDkg?2d~eO55WCxHxlrm`aRe6os<^?I=[Y}B%igc}xBD[_9(%hdU\|C) 4v[8oGQB{ghGO
2024-04-19 14:07:05 UTC	568	IN	Data Raw: 44 bd 2a 19 4a 79 be 94 3e da 46 74 00 22 6c 82 ab 2f 73 55 6e 74 3b b8 85 05 03 a4 3e 62 d5 e7 12 e1 f3 0a c3 83 5f 71 8c 60 d5 da 89 08 02 03 be aa 89 a8 22 67 c9 3d 9f 5d 69 d3 42 50 db 81 71 c2 7a ec 45 74 7f a1 d1 4c 89 d2 38 b7 87 87 d6 0c 6c 37 d8 c6 46 5b f5 a8 17 de 72 fb f3 d7 de 97 0d 8a 27 29 fd dc ed 83 97 a9 ef 2f 00 0f 25 21 65 95 4d b0 05 bb 2e 3a c0 01 04 ee b3 1a d5 db b9 64 9b 7b cb 7d 8f 80 ec e3 b9 bb 2c 9f de a2 7d 39 27 91 e0 2e 1e 43 41 78 6a f1 d3 7e 7e 9d 12 36 c0 b7 ec 31 dd b0 11 36 6d e3 2b a1 5b 5f f5 d9 ce 7b 9c fd fa ba 8b af 20 7d ab 05 d7 f1 7f 6f 5a cf 6c 14 69 99 7d 94 f3 eb e6 85 f8 f0 b7 ca 62 76 89 63 0e 47 0d 8b 98 61 13 80 8d 3f f8 e4 09 3e e8 dc af 77 99 9f f1 65 ff 41 1c 5a c9 3e be 03 3f cc eb c4 83 80 5b 21 78 Data Ascii: D*Jy>Ft"l/sUnt;>b_q`"g=]iBPqzEtL8l7F[r')/%!eM.:d{},}9'.CAxj~~616m+[_{ }oZli}bvcGa?>weAZ>?[!x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50189	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1100	OUT	GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 22360 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:41 GMT Expires: Sat, 20 Apr 2024 12:58:41 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4104 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	721	IN	Data Raw: 52 49 46 46 50 57 00 00 57 45 42 50 56 50 38 4c 43 57 00 00 2f ff c0 3f 10 4d 38 6e 24 49 91 94 55 75 58 7b fe 1b 3c 70 fc 8f e8 ff 04 80 cd a6 b6 99 fb a9 96 b4 4d 81 04 8f 43 32 53 89 4a 24 50 b2 95 45 ab 69 eb e1 66 bb 64 03 bc e1 58 92 0d d1 55 02 49 c5 ea 61 4d 27 3a 43 ab 21 69 a1 c5 6a 37 44 ab 09 49 d9 f7 e3 aa 9c 01 fb 76 e3 95 7e 5c 93 80 5f e7 24 67 c0 b6 5f 76 7e 93 7d e6 9d 83 df 06 64 26 38 40 50 42 e9 86 b0 81 80 56 59 48 02 6b 62 e4 6a c2 0e 24 92 18 a5 4a a2 75 34 4b d0 13 65 90 16 4e 34 26 24 b5 24 34 66 a1 00 4e 02 a4 6e 71 26 99 05 b0 1d c6 d6 06 68 a5 85 f9 ef 7d 57 df c7 db f2 ae 23 79 cf f1 36 58 48 70 24 49 b1 9d 30 33 fb fe 47 63 b6 3f 8c 9e a8 f5 54 6a d3 ec 7b 2b f9 02 92 54 db 6e 24 e9 20 82 e0 13 08 f1 cb d7 30 f6 bf 98 5a 41 Data Ascii: RIFFPWWEBPVP8LCW/?M8n$IUuX{<pMC2SJ$PEifdXUIaM':C!ij7DIv~\_$g_v~}d&8@PBVYHkbj$Ju4KeN4&$$4fNnq&h}W#y6XHp$I03Gc?Tj{+Tn$ 0ZA
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 71 d8 76 c9 70 fb 91 f9 c2 4c a7 43 0f c7 40 09 34 f0 7d c7 dc e9 86 88 d0 17 33 3e d3 85 c2 00 74 65 f2 47 df 33 41 17 49 44 15 c8 77 4e 00 ec 61 42 b3 43 b4 d2 61 4e 0b ec 25 8a 28 22 d9 30 ca 5c f2 3a 2f f3 ad 21 e7 f6 f9 de 5f 39 b6 92 bf 65 43 5b 6b 7b 32 d6 51 ac 23 6b 59 a2 e5 75 06 03 f2 15 29 91 95 05 68 c8 d2 58 4e b6 d6 ca 49 95 b6 a5 ad c3 ad b5 18 5a 24 81 89 b8 25 92 2f 89 18 0c 26 24 26 22 02 c9 c1 20 39 27 12 b7 24 86 bc 65 30 2c 24 48 d2 a9 75 41 00 b0 c8 00 41 82 42 01 48 d2 89 f5 99 45 06 08 f8 8b 64 67 27 9d 5c 17 84 33 19 00 40 3a d3 0a 67 32 60 2e ab 75 93 7f 30 79 fb d1 3b de 01 af ce af bb 27 f5 89 03 20 0e c7 6d 23 39 92 94 7f d8 ed 77 cf 7c 23 62 02 78 b5 95 ea 82 94 96 6b b6 13 07 76 c1 30 1d ec 3e 4e 0f b6 a9 d8 cf f8 e4 02 82 Data Ascii: qvpLC@4}3>teG3AIDwNaBCaN%("0\:/!_9eC[k{2Q#kYu)hXNIZ$%/&$&" 9'$e0,$HuAABHEdg'\3@:g2`.u0y;' m#9w\|#bxkv0>N
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 67 d0 4c 96 d6 31 2a 60 3a bc 28 da e4 b2 04 ae 66 8a ed 05 3b 05 44 81 85 59 a0 a4 29 47 b0 23 9b 88 e6 4a ca 08 57 73 d4 6f c8 ee 5b 95 72 10 c5 00 6a c2 fe 12 46 02 27 5c 61 fd f1 cf 6b 64 1c c6 1a 00 e6 92 2a 64 55 2c ae 42 83 13 20 08 15 d8 2d 60 8b 2a f8 2a 91 02 c3 6a d8 bf 22 d4 24 6b 58 62 97 87 fe 01 7c d5 61 75 1c 9a 82 e9 05 60 bb 42 76 4b 00 e1 ec 36 08 ca 60 af c4 9b 2e c7 9f 0b b3 a4 f2 af af 9c 17 98 02 94 1f b3 d4 66 7a 97 a1 23 09 bd 4c d8 13 26 c2 8a f0 98 b0 24 54 23 0f 89 4d eb 3d 69 46 46 cf 13 02 82 0f 70 9b 77 47 10 e5 57 97 67 10 b3 b9 5f b0 27 01 56 d8 a0 51 94 82 90 d7 9d 22 9e 09 88 04 61 40 2d 44 1a c0 ae 43 05 e9 32 b6 d6 5f 7d 30 3e 10 e4 ce 9b a7 be d4 8e a7 a8 ea 20 cb 3e 0e 09 e3 89 f7 9f bc d4 ec 8d 1b ce 2f 8f 5d 5e e9 Data Ascii: gL1`:(f;DY)G#JWso[rjF'\akddU,B -`**j"$kXb\|au`BvK6`.fz#L&$T#M=iFFpwGWg_'VQ"a@-DC2_}0> >/]^
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 3c b8 20 a2 ee b1 ca 97 ec b2 67 4c ab 30 a9 14 a0 5c 03 37 9d 6e 9f 9b 9d 43 3c 20 12 f9 4a 8d 81 43 ea 29 10 17 bb 80 51 22 a8 0b 34 0e 0f 45 9a d3 09 1b 05 99 51 8b ff 6a d8 5c 1c 5c 5c 5f 6f 04 c2 a8 10 34 09 34 13 0f 8f 66 a7 7d 15 34 4a 72 47 29 25 28 81 0b a7 31 82 b7 32 20 5c 44 f2 37 c2 af 7e 11 eb 9b bc e6 71 f7 a1 25 9c 11 a2 05 48 97 a2 49 6e 6c 3d 33 46 be a0 c1 a2 03 5b 07 6e bb f2 ac a1 03 00 f4 cc 8c 9e 74 1a 01 e8 a9 9d 11 e7 c7 b5 ac 41 bd b2 39 66 71 52 ea cf 97 f2 26 1d 9a ab a0 80 6b 5c 58 7b eb 60 51 33 0c 0f 88 3a 05 ef d4 9c ab b9 00 dc 20 dc 66 91 55 c2 12 09 38 5a 56 31 2a 21 dc 6d cf b9 14 65 55 d8 55 3e a6 0e 57 40 dd 29 81 d9 e0 17 c2 c5 76 ae 6c db 62 5f 14 c2 e5 8d de 78 95 5f 53 1a e0 52 d5 7c 43 08 2a de ed bc 8a 4d ad 43 Data Ascii: < gL0\7nC< JC)Q"4EQj\\\_o44f}4JrG)%(12 \D7~q%HInl=3F[ntA9fqR&k\X{`Q3: fU8ZV1!meUU>W@)vlb_x_SR\|CMC
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: a2 93 92 c8 1e f2 3f 02 4a 88 2a ee fa 8f bb d5 4c 14 77 eb d6 63 bb cd b5 a8 44 2a cd 80 72 d0 30 7c c4 69 a8 00 a1 37 b0 ab 18 4c 44 60 1a fe dc 9d 74 f3 26 77 8e 0f e6 c2 97 42 b6 c2 28 34 98 a7 7e f3 60 24 0f 53 23 34 41 93 a3 e4 6a 31 b9 cd 73 2a 37 9d e3 8b 3d 76 fa 0a 9b cd 71 9b 13 7e 29 45 b0 e9 5c 0b 69 53 09 e5 a6 91 b1 cb a2 77 d5 cc f9 5a 0f 37 dd 7a f3 e5 ff e1 08 7e 54 cb 6c 6d ed 13 11 a7 71 68 ea 69 0f df fb ba ab 6f ab ef e5 8a e3 22 cb 87 5a 2d fc cd be c7 a7 6f f9 c3 8b 6e 26 10 dc 0d af c5 f3 05 c8 e4 d8 08 6a a2 31 f6 97 e5 e2 37 66 e2 e1 40 af 6c ec b8 c0 b4 90 12 a3 5f b3 3a fd f6 4b 73 92 13 92 9c 3f 28 c1 92 66 d1 0e ae 05 1e d2 10 75 4d 98 c8 c9 07 25 65 56 fc c7 52 0d a9 cb 2b ff c7 ed 97 bb bb 9f b2 9e 95 36 e1 ae 24 51 91 f4 Data Ascii: ?JLwcDr0\|i7LD`t&wB(4~`$S#4Aj1s*7=vq~)E\iSwZ7z~Tlmqhio"Z-on&j17f@l_:Ks?(fuM%eVR+6$Q
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: e8 ab 3f 13 69 d4 03 57 48 87 c2 03 67 4c cf bb e6 6e ad ae 4d f9 d4 89 a4 fb c7 5f 2b c0 e6 ba d4 01 b0 46 7d 16 c7 bd 9f e8 2d 66 1e 6f 5c b4 bd 7a 70 c3 b6 e8 bb a2 6f 8b 6c 07 9f 48 da 84 7f 51 2d 42 2d 5e b7 93 ae c9 68 0e 2d d5 5a b8 f3 35 d2 e9 ff 7b f3 55 ff f8 fb 0a 53 cc c2 5d 73 e2 81 cb 6a f9 b8 0f 47 5b 9f 06 8c 87 e8 4a e9 03 77 7c c7 13 a9 8a ef 7e f5 5e df 8d ab f2 ae 07 c1 b6 d7 36 38 1a 75 03 c7 8f 2d 21 6e 84 00 01 35 70 d8 20 60 e7 5a 55 d0 66 82 ca 44 8c 08 cc c0 d5 4b 50 97 7f 2b 49 97 38 f5 45 db df 49 5c 40 80 aa 0a f3 db f4 d3 0d 4b bd 8e c1 d5 ba 43 e5 aa 22 ad d9 74 cb 17 78 2c 3b cd 8e cf 48 de da d7 bf 72 26 2c 8b cd 15 79 6a f2 e5 8e 6a 38 b1 3f b2 86 55 32 cf 13 dd c4 c7 92 1e d7 c3 5b dc 98 b7 5b 9d 1a 9a 3a 0a b6 f1 b8 1a Data Ascii: ?iWHgLnM_+F}-fo\zpolHQ-B-^h-Z5{US]sjG[Jw\|~^68u-!n5p `ZUfDKP+I8EI\@KC"tx,;Hr&,yjj8?U2[[:
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: e3 b5 fd 35 55 68 1e a6 93 24 2b 36 8d 02 66 4b 2a 25 f5 a7 17 b2 b9 b3 a1 b0 89 7c d5 73 da 17 ea 9b 83 c0 eb f4 b4 e6 69 3d e6 b5 68 31 c6 42 a8 f8 8a 6d f9 1b 3b f8 56 b3 1e db 16 f3 8c 93 57 9a 08 e5 74 92 60 11 4a d8 aa b4 26 74 bc f1 53 1f b8 95 de 99 4e 86 05 67 b5 81 c3 d7 32 ce 93 84 f9 a0 00 c3 b6 c7 61 e3 71 cf 65 a0 0e 84 59 3d 18 ac 15 51 94 dc c1 23 51 d0 8b 6d 9e fc fa fb 4c 72 10 52 00 42 cb 29 b8 78 1a 29 1e 9e b0 21 bf 46 af 5e a7 93 5f 23 de 7f c5 56 9d 0c 78 0e 41 24 6e 8a a1 8b f6 5e 2e 5f 44 2e 7f d9 2a 0e 9d 32 1f 2d a7 a9 7c dd fe c8 64 90 6d d7 b5 58 c5 68 be 3e bf fb c2 ad 37 1f c2 0b d5 df ba 76 fe 74 57 7f 5e 1c fa 48 3f b8 d6 b3 4d 19 68 29 2a 0a 63 66 fc e9 7c f5 2e 5e df 2a 96 f5 0e e6 86 26 57 43 96 63 42 61 1a 65 f8 13 32 Data Ascii: 5Uh$+6fK%\|si=h1Bm;VWt`J&tSNg2aqeY=Q#QmLrRB)x)!F^_#VxA$n^._D.2-\|dmXh>7vtW^H?Mh)cf\|.^&WCcBae2
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 6a 19 8c 49 af 16 a2 4c 86 20 db b9 4e f2 b1 8a b1 ba 21 c7 37 69 14 1a 40 4b 2d 79 40 58 c9 20 bf bf 54 c5 20 2c 96 9d 20 05 01 be 98 2f ff c1 b1 82 6e 58 9e 9a a7 e9 5a 26 03 cd 8a 15 2e 2a 00 02 10 0d 84 e1 4f 89 fa 5e 05 00 28 65 cb fe 97 19 de 28 97 c4 47 c2 35 f1 d7 68 7c 96 94 8b 0f aa 10 1d 10 9e 24 c6 b3 19 00 15 51 3f 62 2c df f3 3d 01 41 45 45 b7 9d 3c f9 0c 8d f3 4f 6c ba 10 00 62 aa 5e 92 09 00 08 98 f1 86 32 20 a1 d9 6b 00 05 a9 4a 88 74 6d 8c c2 a5 67 04 12 3c b3 a2 e2 31 4a c5 46 63 29 ee 34 b4 a8 16 5e 23 3e 01 65 5f ab 79 c9 ec e9 06 47 79 5d 51 e2 fe a8 c1 dd e5 9b 29 42 d3 fc 8e c3 ae 4c 74 48 bc 11 bf 2c 93 ea c7 48 5e 4a 8d f7 47 e8 5a e7 50 32 08 1d 5e 2f a9 4f 87 04 e6 9d 2f 90 39 f7 1a 43 e5 38 49 49 de d5 63 ab 22 c0 84 ea a7 b6 Data Ascii: jIL N!7i@K-y@X T , /nXZ&.*O^(e(G5h\|$Q?b,=AEE<Olb^2 kJtmg<1JFc)4^#>e_yGy]Q)BLtH,H^JGZP2^/O/9C8IIc"
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 1b 6d c8 de f8 da 1d ef d7 7d ea ae 63 5a 8c 26 5c dc 36 91 e1 c1 c3 2f 5f 7d ee a6 f1 a8 a0 ab 60 a4 9e fa 80 94 60 a1 93 98 ab 76 ca 0f fb 8f 83 11 9c 75 d0 c3 c9 f7 7d 73 d3 7c 9e d9 8e 7f 5d a5 0a 62 29 d9 5b fe 81 00 05 74 7f 00 fe 9c 9e 6e 23 77 d3 ae b4 ad 40 5d a0 76 54 ca af 26 06 66 80 b0 7e 20 fe 2d b4 57 44 41 05 c1 05 11 1f da 5d 76 d3 8c 93 a8 8d c5 71 47 33 1d 9d bc 17 d8 b6 25 e1 e7 db 56 1b b7 b9 29 2c 88 24 e6 9a 8f f5 c7 73 af 46 35 e9 55 f7 c2 ec e8 d3 db 6b 75 12 dd ec 32 f3 59 90 1b 08 31 6b 48 7b 66 7c d2 6d 75 ea 92 14 a5 a7 de 29 35 af 66 bb 1b 83 3b b7 f4 75 97 d3 e8 6f 28 06 67 85 15 91 96 66 b8 7e e1 fc c3 45 dd cd a4 49 b4 7d 34 27 eb 66 65 a1 7c c9 b0 f8 96 8f 26 33 1c 33 98 99 a9 56 d7 4c 23 f1 39 8d d0 66 a1 62 b1 f4 20 78 Data Ascii: m}cZ&\6/_}``vu}s\|]b)[tn#w@]vT&f~ -WDA]vqG3%V),$sF5Uku2Y1kH{f\|mu)5f;uo(gf~EI}4'fe\|&33VL#9fb x
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: fd 4b 5e b4 fe 1f ed 86 f3 87 5d f7 be 46 96 94 0c ae ba 8a 45 d0 3f 6a c9 a7 4e 02 02 30 dd fe a3 d7 25 45 8d 88 e6 9e 38 d9 ac 34 f5 d4 0b 9f 93 96 f7 6b 97 00 95 4a f4 24 f1 33 b1 63 6f a6 09 60 d1 da ec 16 39 19 99 84 d7 a5 d3 5c 8e ed ae ad 54 3a fa 37 ba bb 77 e9 dc 6b 83 14 bb 48 9e 52 cf dc db 75 23 15 ac 45 26 59 c5 34 09 92 9c b1 b7 1f bd 2f a9 f9 14 59 6b 58 63 be d6 7d 76 c1 75 27 37 1b d7 bf 3a 26 df d3 4b 50 e1 7b 2c 6a ea ea f4 3b 9f ba f3 1a 53 c6 a0 1e 2e 4d 54 17 e2 07 38 9f 30 ea 9a 56 10 ee 81 59 0c 40 30 c8 b6 83 f8 ee 28 78 fe de 09 a5 3c 73 cd a0 2e 30 e4 b5 bb 16 3c 2b 32 4e 8e 62 08 33 5b b8 16 b1 dd 7c b7 48 7c fa de d3 c7 db 8e de 12 b1 d5 ba fc 86 b0 cc fb a1 99 e8 7d 16 76 98 62 fb a3 3e 24 ad b4 4a 2b d5 73 56 e9 58 6d 7f f5 Data Ascii: K^]FE?jN0%E84kJ$3co`9\T:7wkHRu#E&Y4/YkXc}vu'7:&KP{,j;S.MT80VY@0(x<s.0<+2Nb3[\|H\|}vb>$J+sVXm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50190	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1102	OUT	GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 10446 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	732	IN	Data Raw: 52 49 46 46 c6 28 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 7e 28 00 00 2f ff c0 3f 00 55 e9 bd ff 7f 99 23 d9 a9 65 86 61 66 9e e6 56 73 8b 55 25 15 4b ea ee 1d 5c 1a e6 59 ec 59 1c 66 9e e5 dd 1e 66 86 9e 1d 5a 66 e6 1d 86 66 ee 9e 1e 66 3c 5b f5 7b 7e f5 a8 25 3d 75 af 99 6d 19 3a 28 33 93 cc f6 1f c0 32 33 db 4a da cc 6c 97 a1 43 83 0c cb b9 e9 31 33 5d 86 32 64 cc 24 b3 3d 47 06 19 64 66 28 b3 9d 3e 89 41 c1 64 8e 98 64 de d8 50 a6 39 c7 6c cb 20 c3 c5 cc f4 98 19 e6 f2 bd 3a 47 f7 1f 30 83 42 33 28 30 46 ec 27 91 99 d9 2e c3 3f 30 0a 96 da f0 0f 58 81 99 71 49 66 0e f7 31 f4 85 90 49 86 c8 d9 65 e8 b3 a1 33 99 21 c3 9f a9 cc cc 76 99 19 9e c4 d4 86 10 95 ec e5 7b c3 de 40 86 78 9c c9 a0 60 52 b3 5d c6 3f 40 Data Ascii: RIFF(WEBPVP8XVP8L~(/?U#eafVsU%K\YYffZfff<[{~%=um:(323JlC13]2d$=Gdf(>AddP9l :G0B3(0F'.?0XqIf1Ie3!v{@x`R]?@
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 36 d5 68 ae 58 45 b1 b0 54 2d 64 9f ed b5 dc 76 4a 88 52 a4 94 6c 37 33 44 d0 d5 5f b6 76 35 38 5c f5 60 4e 57 a3 ee 3c fa 6c cf 43 3f 6e 62 b6 14 25 23 b3 36 9c 2b b2 ea 66 77 3d ae a5 73 b6 33 70 2a 6a 4b 88 d3 69 1e 38 0e 1e fc e0 4b 2a ba 06 5a b1 2a 0d aa 9f d8 2e 5f 76 df 76 1e 47 72 03 03 a7 aa 5a 2a e6 95 fa 65 a5 5f 97 98 94 9b 61 8c 22 80 4f aa bd ec 6d 6a 70 78 ab bd c6 62 05 3d e1 a3 52 db b9 12 b2 0c 65 d6 6b 91 4a 92 a1 fb 3d 3f 2d 51 72 6b 0b 5c 41 57 52 78 0f 1e f2 79 89 a2 73 49 bb 4d 65 4e e9 e0 1f b7 bc 24 87 ab 36 87 98 a3 14 0f 82 4f f2 8b 12 b1 c8 f0 80 60 84 88 0a c7 6d 64 98 31 17 0f 6e 7e 6c 5d 84 51 cf 20 15 0f 23 af 76 8e ca 5c 5b 03 6f ce 6d 20 e6 2a 45 89 22 85 ec 08 19 49 af a2 f9 6d 8f 36 6a 1d 03 87 b7 1a 29 ca 3c 77 8d 60 Data Ascii: 6hXET-dvJRl73D_v58\`NW<lC?nb%#6+fw=s3pjKi8KZ._vvGrZe_a"Omjpxb=RekJ=?-Qrk\AWRxysIMeN$6O`md1n~l]Q #v\[om *E"Im6j)<w`
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 8c 01 a6 76 f0 c1 53 41 fc 7d bf a9 3a 96 24 c8 50 12 74 3d 01 24 48 33 03 d5 b5 20 8f 84 bf b8 b8 5d e6 29 72 72 db 00 76 02 8a ab 9f b3 d4 cb 96 4b 2a ff 2b e2 11 b9 5f 7a 6b a4 01 b1 b0 64 f9 be cf fa 6a 23 12 3f 5a 5b 05 c4 0c 9a ee a4 b3 0a 59 a4 7f 10 7c 65 45 96 7a b8 c0 9e 66 87 d7 f2 60 15 38 c9 9a d7 b9 42 4e e8 ce a8 cf a8 12 21 37 99 08 c5 8c 80 7d a0 e0 03 0c 1e 31 78 04 f4 70 d8 c3 06 0f 1b f4 84 87 0f aa 45 7a b9 97 36 da b4 44 c4 ea 7a 9e 8b e7 01 d1 44 83 2a c8 7b b9 f9 31 5b 58 40 8c 52 f2 3e 26 09 d9 f1 36 64 80 e2 c1 53 6b 03 c4 ec 39 cb 36 4e 2a a6 79 f0 7c c3 10 73 e6 1c 62 d3 5d 4b 74 b4 ca c7 96 01 25 da f2 e5 d4 72 b4 d9 7c 55 36 46 8b ac 44 e4 bd 4c 33 0f 88 0d 01 54 41 56 ae 0c fb 20 5a 1c d6 c6 16 d7 5b 50 92 49 db 54 2c ca fe Data Ascii: vSA}:$Pt=$H3 ])rrvK+_zkdj#?Z[Y\|eEzf`8BN!7}1xpEz6DzD{1[X@R>&6dSk96N*y\|sb]Kt%r\|U6FDL3TAV Z[PIT,
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 95 88 88 f1 7a 82 f8 f6 43 ec ea 94 90 cd 0c 42 31 a8 36 99 07 97 13 48 72 10 27 ae d9 67 db 49 79 11 72 12 63 b0 86 8d 7f 23 2c cc e9 34 29 df 51 79 45 b4 5e 0b cc 9e 42 52 ec 8b 71 10 a7 53 50 82 48 e0 21 19 39 c2 28 58 96 23 94 1c e4 32 3b 96 e8 48 33 03 4e 4e 8b bc b6 eb 84 38 75 c5 4e 05 59 09 34 43 10 3c 58 5d 7d d9 62 92 51 cf c4 18 3c ba b9 47 f9 ed b4 02 d8 3a fb fb a5 26 26 65 25 18 81 13 69 7d 35 8f 5f 0c 8b b3 a8 24 25 64 a6 8a 59 f1 e1 fe d4 61 5a 84 c4 c1 7e cd fc 82 30 a3 e4 f1 7d 4b 74 c0 89 c7 97 bd b2 00 e2 ed 88 6f ac e8 5d 12 9d 40 9a f5 48 8b 50 2d f2 ee f5 8f e3 49 72 10 23 af c3 95 55 90 e7 30 6b 89 41 dd 52 1e c4 ef cb 67 0b 51 02 b4 2f ba c6 a5 79 f0 ea f2 69 3b 6a aa f5 0d b0 c9 24 dc 91 6b 56 f3 4a ea 96 f1 21 c0 83 8c 51 a2 a0 Data Ascii: zCB16Hr'gIyrc#,4)QyE^BRqSPH!9(X#2;H3NN8uNY4C<X]}bQ<G:&&e%i}5_$%dYaZ~0}Kto]@HP-Ir#U0kARgQ/yi;j$kVJ!Q
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 80 89 1e 2d f6 ce 57 16 0a 79 ff 2f 42 a8 07 ba 10 93 98 a8 4f 64 54 be e7 83 41 b9 be 2f c4 30 36 7d 22 13 a7 fa 08 1a a1 00 6c 2d c3 5c 48 45 1c 14 16 a7 05 86 0e 1e 2d e4 c0 13 85 81 49 ac 31 ef 41 19 e1 8f 32 17 42 48 55 4e ad 32 d5 a3 05 22 04 04 ab 28 46 8b 10 42 61 61 b0 3c 0c cb 5c 28 0e 21 43 8f 10 c4 60 45 02 e7 1a e7 49 29 ca e5 b0 bc 42 db b3 ed 1f c2 c6 40 3f 79 b4 56 cd 33 ea ff b8 ef 48 51 7d 35 bb 6b df 12 b4 8c 6d 97 93 a2 12 b5 aa 56 b1 3f 76 d4 35 c8 b0 cd e1 f0 11 c2 b0 80 d0 7a bd 3c 28 dc fc 21 f4 d8 2c 31 31 01 d8 ec 37 f6 1f e4 30 9b 6d 5a 14 c6 32 8a 08 51 e1 51 1a 2d 82 e4 fc c6 fa 6b 08 0f 8f 62 94 a9 be 71 d4 35 14 72 85 d0 a2 e4 a8 ec a8 44 96 a1 f5 d7 00 49 12 ee 4f b2 99 a3 6c cc 85 90 21 e4 0c af 7a 75 b3 27 7c 1a 2f d5 6c Data Ascii: -Wy/BOdTA/06}"l-\HE-I1A2BHUN2"(FBaa<\(!C`EI)B@?yV3HQ}5kmV?v5z<(!,1170mZ2QQ-kbq5rDIOl!zu'\|/l
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 41 2c 57 31 e0 79 fa 44 a6 89 49 fe d4 aa 70 33 95 ac e0 6d ca 95 a1 6c 71 ff b6 e6 fd 86 c5 e7 f1 50 bd ce bd 09 00 36 db 52 10 95 99 61 67 90 4f df cb e4 c4 f0 19 59 72 de e5 4a 02 ee 03 a5 a2 06 de ce f0 c2 bd cf cf 2f 1d 33 43 b9 6c 67 af a8 8e be 44 6f 54 a9 87 d9 ff 71 5b db 00 da c0 a2 37 77 89 d6 29 6e 57 30 ab b1 5d c7 17 80 ea 4c e3 fb 96 08 d9 0e 79 90 9e f1 ec 7a d2 99 a0 85 0d 35 90 be ac 97 35 cd 9c 1c 60 85 0a 1e 44 47 01 4b 48 43 4c 94 20 49 19 6b a8 a7 6d ae 5c 60 90 49 34 cf ea cc 60 03 48 c8 ab 9f b3 2f c5 41 6c 04 a0 d2 05 91 42 66 46 1c 52 e1 71 f5 84 a7 1d 92 24 64 36 20 f8 63 d7 78 dc b1 d2 bb b9 9d 1a 36 39 79 76 c9 81 af b3 20 57 ca d6 23 2f 37 9f 88 6a 9b 59 7c 5e af 1b 3b fa 31 45 4c 47 06 09 96 84 ed b8 f4 4f c2 98 2a 65 f9 c1 Data Ascii: A,W1yDIp3mlqP6RagOYrJ/3ClgDoTq[7w)nW0]Lyz55`DGKHCL Ikm\`I4`H/AlBfFRq$d6 cx69yv W#/7jY\|^;1ELGO*e
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: ae 0a bd 7c 79 00 cf 88 e0 6e eb 6f 5f b9 82 83 56 1b c3 0c 05 54 7a 8e 53 4c ca d6 0c b4 3b af a9 c0 f0 89 83 1f 5d 94 4d b3 f0 62 58 d6 38 c2 4d 1c 60 c4 b5 bc 47 9a ee e6 f6 c1 f7 1a 01 7f d9 b5 37 68 6d 0b aa f4 d5 e0 7b d3 4c 29 59 25 a8 78 d0 f7 7d 03 0d d5 0e ad 49 9d b4 02 b3 b5 36 55 74 ae 5f 10 44 f5 05 fd 5c 76 df c8 22 09 73 df f1 09 a3 3d 44 6b 08 c5 8e 58 7b 03 76 66 df 5f be b9 bc 68 5d 36 cd b2 c1 de 1f 7b ef f3 4f 73 e7 7a 2f 1c b4 6e 7c dc 79 f4 ea b7 4e a9 3a b2 ff e3 69 cd 1a d8 05 3f 3a 42 25 96 f5 27 0e fe ba 9f 50 12 dc bc 50 e9 b1 02 d4 c1 d2 00 f7 d5 bd 6f 43 f1 04 cd 95 b2 5c 5b 63 0d e1 e7 dc 02 f0 22 fc dd d9 5d 30 72 a0 dd 8e 63 71 68 85 47 54 7f 7e 81 3b 8f 47 93 1c bc eb f2 bd 97 2a 19 44 f5 25 fb 6a 8e b4 54 09 71 9f b7 e7 Data Ascii: \|yno_VTzSL;]MbX8M`G7hm{L)Y%x}I6Ut_D\v"s=DkX{vf_h]6{Osz/n\|yN:i?:B%'PPoC\[c"]0rcqhGT~;G*D%jTq
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 59 3a 07 49 5e df ef 3d 60 1c 1c 60 91 5a d4 8a 96 1c de aa 2b f0 8c 32 b9 74 3d 6f 4e 18 71 b4 0c 55 e9 ba 16 29 19 14 52 72 7e f5 f3 fc fb 4a b8 8f bb 24 e4 ee 24 58 52 96 e6 c7 37 d3 80 1e 77 d2 1a 39 ea 63 2e 01 00 9d 59 71 4b 9d 3b 89 a2 14 8b e0 6c e4 7e 5c e0 c1 f5 e6 80 ca eb 28 df 49 10 47 74 e6 15 38 64 c4 9b 99 79 2d 0e b0 82 a2 82 57 7a ac 1c 8d b9 f6 8f 7a 74 9f 20 47 8c 74 48 89 be 64 aa ad 01 14 30 0d 9f 99 e0 45 97 ef a1 89 45 53 8b ef 7b db b7 7d db 4d 01 8a 6a 62 00 af 94 fc 4f 3b a6 57 6c 3d 4f 2e 28 da 9f c5 83 5b 1b 05 7e 57 40 d3 9e 43 d7 2b 85 93 8b 93 7b e4 df f1 21 f9 12 fd 48 42 92 10 25 24 2b eb f7 8a c8 62 22 b9 af f1 19 46 18 99 4d b3 76 3f ef 25 3e 00 e3 37 76 8e d6 a9 60 ef f0 5d 7d bb 30 17 b9 bd 95 39 14 82 9b f6 9c 6f 14 Data Ascii: Y:I^=``Z+2t=oNqU)Rr~J$$XR7w9c.YqK;l~\(IGt8dy-Wzzt GtHd0EES{}MjbO;Wl=O.([~W@C+{!HB%$+b"FMv?%>7v`]}09o
2024-04-19 14:07:05 UTC	929	IN	Data Raw: 76 58 a0 f7 f9 de 96 07 05 54 66 65 df 94 b2 6e 89 14 93 1c 16 f0 90 c0 2e 0e de 09 88 72 c1 9b 48 ce 0e 3f 1f 10 c1 c3 f9 26 72 b3 31 37 2c f1 ad 01 49 fa 6a 56 78 f2 35 e8 5d fa 49 e1 aa 17 5e 58 48 f7 d1 ed 14 50 35 9d 0b 1d e1 c0 6d b1 57 f3 4d 81 25 08 2a bc 06 19 92 66 43 42 07 a0 69 96 76 48 82 ae 40 44 be 82 ec 6b 70 38 c2 f5 34 0d bd 31 34 ab 91 a2 92 af 40 8c ba 82 6c 47 a1 23 db 22 43 d1 72 62 1c 6b a7 69 0b 49 92 34 ad 81 0e 45 b0 2c 4d 5b e8 6c bd c6 ae a1 69 4b b6 32 95 8a 48 24 69 a1 e9 7c 60 e4 32 9b 84 dd af 71 71 ac 8c 4c 5f da d2 9d a4 69 65 40 0d ad b2 94 89 58 d6 6e a7 2f 4d 43 6f 69 3e 2b 63 d3 8a 22 2d 34 cd b0 21 a2 b5 f4 4f a1 b9 eb b3 58 68 a0 ec ac 8a a2 69 5a 4a b6 58 68 0b 0d b9 3f 70 c6 63 30 eb 8c d5 c0 53 41 83 6a c0 c7 21 Data Ascii: vXTfen.rH?&r17,IjVx5]I^XHP5mWM%*fCBivH@Dkp8414@lG#"CrbkiI4E,M[liK2H$i\|`2qqL_ie@Xn/MCoi>+c"-4!OXhiZJXh?pc0SAj!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50191	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1101	OUT	GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 8188 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 f4 1f 00 00 57 45 42 50 56 50 38 4c e8 1f 00 00 2f ff c0 3f 10 55 07 db b6 8d 24 51 fd 97 bd ef 5d 74 97 45 c4 04 f8 5a ab 87 fe f9 36 75 91 a6 86 52 a1 92 62 75 7d 47 76 b0 61 96 c2 c4 c2 1b fd de ff 77 ec 97 fb 7f 47 6c 73 ec 99 bd 63 db b6 6d db b6 6d db b6 ad 6d 8e 3d 1b 63 db c6 b5 d6 6b bf ae eb 3a 8f e3 7c 9e af b3 9b 9c b1 53 b2 b4 93 4e d5 cc 55 c6 36 ab 94 56 99 2e 7f 43 a6 9a 7f 20 b6 93 c9 54 59 6b af d4 36 3a 3b a9 b8 bb 47 58 1d 5d dc 39 a9 6d 27 7b 0d ca a0 33 2a 27 9d 9d 2b d5 74 aa 62 db c9 35 b1 db a4 9e 95 6e d7 71 b2 b3 ab bc 5e 71 d2 da 2a 8d 5d bd ba 38 a9 6c 4e d2 db 49 c5 ce 53 c5 28 5d 19 ff 40 d6 3a e2 a4 b4 6d d7 b6 9d 54 d6 ae 62 bb ca 1f 60 3b a9 a6 8a 53 5d 7f c0 ab 8d cd b7 6d bf df 9d df e5 ac 60 97 41 f9 c6 5a Data Ascii: RIFFWEBPVP8L/?U$Q]tEZ6uRbu}GvawGlscmmm=ck:\|SNU6V.C TYk6:;GX]9m'{3'+tb5nq^q]8lNIS(]@:mTb`;S]m`AZ
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 18 cc 51 e5 63 ea 7d 95 4c ac 50 c5 90 3b 06 73 c6 49 9d 76 9b e2 76 6e 69 76 fe 43 ed 77 9b 82 8b 2a 2d d3 3b b7 34 41 dd 55 0e d5 33 07 95 4d 69 ec 93 a6 18 95 4d 79 a1 15 06 73 1a 2c 87 24 4d d3 7e 7e 59 73 9a 7b f8 a4 a9 86 06 2e 2f 4d d6 ca e4 3c 76 4a 95 96 fa d9 6d b6 b8 ab 1c ea 3b 27 d4 f9 df 55 ee 93 a6 1b b5 ef f6 85 43 ce f1 0f d2 84 bd dd d5 1c 51 c5 25 77 d2 8c 71 57 2e e5 de 01 87 74 4b 73 8e 95 d8 33 76 69 d2 4e c2 8e ad 56 2a 45 66 8d bb ce cd be f2 4d c9 d2 b4 4d 29 c7 bd 2f ea d8 1c 83 db bc 71 bf 2f 06 cf 95 26 6e e5 97 b2 89 c1 3f 98 39 85 fb 50 8f 7f b7 51 9a ba 75 6e 9f 47 cb 8a 67 ee 54 7e 29 6b cb 4a 69 1f 98 3b b7 b3 4e 2f 4d de 3f 59 91 d9 53 e7 be a9 8e 67 f6 f4 61 9f 66 cf c5 2b 9d e2 d2 ec a9 74 4a e3 09 9a 3d 0f 5f ae d9 b3 Data Ascii: Qc}LP;sIvvnivCw-;4AU3MiMys,$M~~Ys{./M<vJm;'UCQ%wqW.tKs3viNVEfMM)/q/&n?9PQunGgT~)kJi;N/M?YSgaf+tJ=_
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 43 f6 7f 0e a9 e1 1a 54 64 98 23 96 15 1e 17 1a 6f 8e 12 44 78 42 d5 e6 0a 7e 10 a4 65 97 bd 1d a0 03 2e 0e 22 30 25 0e cb 45 0d d6 60 32 9a 6b 9b 54 28 a1 2d 6e 39 a0 01 a5 e0 4f 6e a0 25 1b 80 a0 52 05 c2 09 1e ab 7d 88 fa 07 28 d1 a3 21 c7 e4 3b 2b 8b 2d 39 4c 58 85 b1 b4 7b bb 46 05 92 1b 61 6e bf 2b 25 82 ec 44 ea ba 0d e1 6f f8 9e 3b 86 03 84 24 13 94 72 f5 75 db c6 78 38 2c 24 97 89 0d 35 64 2e 62 d7 28 72 db bc 41 44 d0 65 17 48 b4 ab 09 a8 fe 04 c4 a4 ac e0 bc b2 45 1e 0a 75 f3 5e 9c 43 16 34 94 6a 8e 59 f1 a4 11 b7 8d af 1e 5c 42 1a 30 c7 bd 88 48 99 b0 ab 62 3c 30 7c c0 dd 97 1a 1e 4a 6b 9b 5b 90 06 dc 96 5a b9 31 73 0b 6a 42 9c 0a 4d 07 f9 80 88 78 5f 30 4c 84 10 f0 00 01 17 81 67 55 b8 24 47 df 3b e8 82 3f 77 ef ae 64 37 25 ac 0d 7f 51 fb 32 Data Ascii: CTd#oDxB~e."0%E`2kT(-n9On%R}(!;+-9LX{Fan+%Do;$rux8,$5d.b(rADeHEu^C4jY\B0Hb<0\|Jk[Z1sjBMx_0LgU$G;?wd7%Q2
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 58 26 0f e9 91 41 ff 46 3d 90 37 fe 0c a2 29 89 e4 55 ca 66 56 8f f4 b9 37 c3 42 67 28 14 af 4d b4 02 43 43 f0 6e 92 61 a5 9c db 0e 41 52 4c 51 20 0f e9 11 f4 e7 ca 0c af 28 6e ab 10 4b 42 4f 3f 6f 39 29 4f f3 cd 81 d8 a7 49 ff e9 01 ef 01 81 77 75 2a 64 02 ee 3b d8 a8 c0 af e2 06 4a b5 d9 2c 08 84 81 d5 7a 1b 4a b4 af e9 ce d1 08 30 8f da 6e 23 22 ee 3b 79 93 28 3e 8c 42 94 8f 1d 70 4b dc 63 81 c1 e6 2f 83 a1 b1 51 bd 09 23 36 54 49 60 33 02 01 51 81 70 e0 2f a8 8b e4 3b 95 fa 7f 51 81 ae b8 8a f1 9c 6e 54 c4 f4 10 86 17 78 e8 96 20 1e 01 b6 d5 b0 e2 29 01 8e 02 2e 01 3c cb ff 06 ca ce 2e b8 80 b0 f4 09 86 46 80 80 1f 6b 96 79 3c b4 cd 94 bf a4 b0 79 bc 88 98 3d ca bf ac f0 4f 26 6b 62 f5 f2 17 51 0e 0c 4f 01 97 a8 54 aa 77 33 8c cf 5f c3 fd f1 50 97 75 Data Ascii: X&AF=7)UfV7Bg(MCCnaARLQ (nKBO?o9)OIwu*d;J,zJ0n#";y(>BpKc/Q#6TI`3Qp/;QnTx ).<.Fky<y=O&kbQOTw3_Pu
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: dc 92 54 b4 9f 8b 1d 1f 8e 1d 6a c2 bf 18 b5 f4 9b 2c 29 c8 c7 98 31 5d 2e 69 fa 76 df 7f ba ef 3f 05 87 06 3b d7 30 7d 23 7f 74 65 fa 86 fd a2 53 30 47 6a fe cc 45 e8 d7 11 ff 6b 49 7d cc 5c 47 ec 5d 04 48 08 81 3d 84 30 6f 5d 15 31 d0 b3 9c e5 2c a6 d2 fc 60 23 ca 5e 43 fe 65 c4 89 d2 0b d3 08 50 1b 2b b4 c1 a1 05 0a f5 20 16 ad ca 04 5c bf 96 f4 d7 02 d8 98 53 96 b7 66 a9 7a b3 4d 00 6e 7a 72 2b 1c ae 54 7a 71 65 65 8a d5 16 3f 7b 23 29 21 18 22 85 eb aa 4f 92 25 9d 76 5e 4c f1 1f f9 d8 4a 08 65 56 c9 a1 1e d6 37 49 67 48 53 7d 9b 2a 92 10 c6 36 86 34 5f d0 f0 d0 21 48 92 9d 92 1d b5 86 fc 1f 4b f1 b5 a4 5f 0f 92 25 3b 9d bc 68 6d 04 5f b4 40 96 88 1d 46 4c 8f 34 4a c5 91 89 8d a1 48 37 92 a5 51 da d9 c1 f2 f3 88 af 21 7f 87 4d 4d 02 eb cd 4f 17 2f 75 Data Ascii: Tj,)1].iv?;0}#teS0GjEkI}\G]H=0o]1,`#^CeP+ \SfzMnzr+Tzqee?{#)!"O%v^LJeV7IgHS}*64_!HK_%;hm_@FL4JH7Q!MMO/u
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 6e 45 06 0d b6 1f 40 3e ed 46 92 64 e5 cc d2 d3 4b 71 f8 3b aa f4 f8 92 44 a7 20 15 ad cb d7 97 5f 9a bd a9 9d 18 7a 80 24 1a 18 e4 29 99 d3 a3 c4 e1 75 af 0e 34 38 fc a5 00 48 33 e8 2f 9f 11 2b fc eb 12 2e aa 04 1c 2c 13 8c 36 fe 75 35 62 6a 8c 36 d1 4d 60 e9 fb 77 74 46 b4 f0 d6 2e 4d 1f 04 f6 db bb 42 00 4c bf a2 4a f9 fd 49 83 37 b6 b3 b6 fc 13 2d d0 23 b5 b1 62 2c 10 76 e9 ae da a2 2b de 96 ce e4 9c e6 d8 bf a9 83 1d 88 9c 9e 4d 73 05 5a af a2 84 d5 1c bf 1c 94 1a c8 cd 5d 2e 47 88 7e 97 f0 d6 2f b3 88 18 32 ba ef dc 5c 71 72 89 10 b8 1b 05 bf 51 75 72 bd c9 3e 91 2f 81 2d 97 3f be 6b 0e fd 42 6e f7 36 ac 7f 74 b5 f7 36 3c 3b 77 a3 70 03 9d 88 92 23 ad 18 7c 8b 72 fe a5 bb 78 5a 86 00 bc 0d cb 2c 83 7f 45 91 36 a9 21 5c 52 33 1e 93 91 25 c0 11 b3 9d Data Ascii: nE@>FdKq;D _z$)u48H3/+.,6u5bj6M`wtF.MBLJI7-#b,v+MsZ].G~/2\qrQur>/-?kBn6t6<;wp#\|rxZ,E6!\R3%
2024-04-19 14:07:05 UTC	1180	IN	Data Raw: 9a 00 83 e6 cf 1e 52 4f 1b cd 9b ce 88 ae 11 f3 64 5c 5e f1 6c c6 02 75 c5 fc d5 05 51 cf 23 8b 16 4e 77 c9 cc 2d 13 37 80 c7 76 da 56 96 6f 43 5d ed 0e 5a 36 d6 80 a6 80 6d d5 48 45 53 70 1e dd d9 85 64 f8 6f 8f 82 7a 84 5c ff d5 4d 20 e2 37 26 fe 49 e4 4f 1e 47 06 c1 74 8a 03 07 86 4d 2d b3 7c b2 b8 7a a4 39 51 73 65 25 51 fb ee 38 4e ed 0f 1a f8 96 a5 f5 9b a9 1b 85 fb 95 05 3c e8 29 78 dd 10 ba e5 89 3e 45 21 ca 2e af 60 b3 fd 3b 12 dc 02 46 b6 21 ba 5c 20 2d 6a 94 52 9e d0 01 05 15 38 6f c8 ab fd da b2 c3 76 72 ce 3c 1a 98 4c cf 15 12 e6 0d 35 4c 77 eb 76 d8 4b 09 df 2f 32 1e 21 df b4 8e d8 0b 17 e1 df 2d cd 92 f0 ef 28 3b 08 50 50 0f 82 5d 82 74 ab b2 f3 ab e2 e5 6e 64 e0 90 ae c1 0e bb 8f 63 f4 a9 ff c0 b4 10 b1 d3 d3 b0 76 21 09 34 78 c0 01 ce 90 Data Ascii: ROd\^luQ#Nw-7vVoC]Z6mHESpdoz\M 7&IOGtM-\|z9Qse%Q8N<)x>E!.`;F!\ -jR8ovr<L5LwvK/2!-(;PP]tndcv!4x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50192	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	524	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 238 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	238	IN	Data Raw: 52 49 46 46 e6 00 00 00 57 45 42 50 56 50 38 4c da 00 00 00 2f 3f c0 0f 10 9f a0 28 92 14 67 08 6f fc ab c0 0c 16 ce 43 0e 36 14 32 92 24 55 16 66 45 4e fd 2c ce e4 1d 04 6d db c6 d2 f8 a3 1c 8d 7f 31 c8 36 52 4f e3 fc ce e3 cd 3f c0 4f 5f 33 67 93 e3 74 60 ce 11 ad 42 a8 f6 93 1f 90 97 a7 ad 85 3c e7 cb f5 81 71 24 c9 69 c4 2c 99 f2 0f 96 7d 5a b3 5f 11 fd 67 e4 b6 6d 24 aa 9d 7d e6 38 e8 1b d8 ff 98 2b 79 bf 68 90 7c ca 04 a1 b3 40 25 93 f4 0d 70 64 a2 76 1c 47 9b c6 c1 e6 71 ac c5 38 d4 72 1c 69 35 0e b4 1e 47 19 fa 55 9d 01 20 8e 8d 22 40 75 8f 49 13 02 d3 9c 90 be 16 25 e4 6e 42 81 2f 2b 42 9f fe b5 85 43 5f d3 17 a4 04 e5 eb 47 be 76 fc 7f f7 5b 2b b5 0a 60 d9 9b ea 24 8f 58 f8 56 1d 16 c7 7e c7 18 Data Ascii: RIFFWEBPVP8L/?(goC62$UfEN,m16RO?O_3gt`B<q$i,}Z_gm$}8+yh\|@%pdvGq8ri5GU "@uI%nB/+BC_Gv[+`$XV~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50194	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	524	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1162 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:56 GMT Expires: Sat, 20 Apr 2024 12:12:56 GMT Cache-Control: public, max-age=86400, no-transform Age: 6849 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	722	IN	Data Raw: 52 49 46 46 82 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 3a 04 00 00 2f 3f c0 0f 00 e7 27 21 92 24 47 92 62 f9 93 3a 42 5a df ed 4c fa 89 7f 0e 92 22 49 92 24 49 bd 8f e7 b2 5a fe 38 96 c1 d9 1d 26 21 92 24 47 92 a2 9f 3f a7 47 a4 f5 ff 4c a7 cf 7f ca ca 1f 09 15 68 e9 1d 11 86 0a 88 40 2a e0 3f 7b 8d 98 a9 04 b2 9b b0 30 44 05 a0 02 1a 02 95 00 44 30 42 0c 41 f4 39 e6 da 63 88 86 84 dd f8 b2 d8 0d 04 cf 40 20 a1 4f f6 44 43 40 84 3e d9 93 40 2a a1 6f 06 9b 76 cc 25 c4 50 f4 4d 3b 6c 16 d0 d8 d1 20 fb 4c 68 b1 ac ab 0b e9 81 30 ce bb 16 8d be b9 74 1c bd 2a c4 80 06 b4 74 e9 62 34 26 c1 d8 0d 08 70 00 18 5d 84 07 33 20 84 80 96 cb e2 9b 99 99 96 0e 02 c2 60 fa 1e e7 2e 03 34 a4 83 9c 7b cd ac a9 c0 c2 66 11 ba Data Ascii: RIFFWEBPVP8X??VP8L:/?'!$Gb:BZL"I$IZ8&!$G?GLh@?{0DD0BA9c@ ODC@>@ov%PM;l Lh0t*tb4&p]3 `.4{f
2024-04-19 14:07:05 UTC	440	IN	Data Raw: 86 ec 17 b8 2c b5 f6 b5 c1 c0 7a 63 00 ec e5 a8 e0 1a ed be 9d 75 f8 1e 53 ce 49 85 ca 99 86 6a a0 c7 9c 14 40 77 d3 52 18 11 b1 36 c6 68 a6 72 a6 76 3c 70 a4 fb 71 7d 00 2b 84 88 52 16 4e 89 88 45 84 89 88 58 44 84 4b 56 eb 47 a2 fb 6a 1b 26 01 d8 c7 11 51 fa d9 43 cb 1e fe c5 d4 f0 eb 37 df fc ff 47 b6 99 f8 cd bb e6 ce bd fb 71 2e 95 fe 0b bd 52 71 17 00 18 ec 1b 88 48 ee 54 89 52 fb 59 7d 6a a2 54 d5 8e ba 59 2e 49 12 55 f5 bb 2d 95 1d 8d 15 c6 cf 06 d0 47 98 f2 e6 26 33 5e da 55 4d b7 b9 e4 fd 6f 8e 51 bb 58 99 96 2c 5d fb d6 5a 2e d9 08 dc 2b 53 01 f4 fc 81 29 4b 2d 30 be d3 ce 3e a7 de 95 b0 93 fa 5e 4f 53 ab b4 30 95 5a 5f 83 cc 91 c2 d4 da 22 ab 93 c9 3e a7 de 66 b9 3e b9 cf 4c 4b 96 7f f8 de 17 69 a9 c8 fd d5 05 58 ef af c0 d4 5a 72 fa 2d 7f a8 Data Ascii: ,zcuSIj@wR6hrv<pq}+RNEXDKVGj&QC7Gq.RqHTRY}jTY.IU-G&3^UMoQX,]Z.+S)K-0>^OS0Z_">f>LKiXZr-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50195	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	524	OUT	GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 870 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	734	IN	Data Raw: 52 49 46 46 5e 03 00 00 57 45 42 50 56 50 38 4c 52 03 00 00 2f 3f c0 0f 10 2f e5 20 92 24 45 ca bd 3b 9d 6f fc 3d 30 c3 4c 3f 89 70 dc 48 92 22 c5 ee f1 8b fd b7 ed 9c e0 9b db 74 10 49 92 22 e5 ec 9f ca d7 fe 1a 98 61 a6 5d c7 b6 ad 26 2b ee 9e e0 d4 c0 d0 7f 23 54 91 5f 1c 84 04 49 24 e9 0e 90 1e 29 4a 4c 48 a8 0d 6a b4 68 10 20 40 8a 33 22 54 d8 23 43 1a 73 8d 88 88 88 48 f1 d5 2f 20 22 22 da a8 46 f5 d7 c6 df 43 1b 29 22 4a eb 46 69 22 a2 6a 11 6d 54 2d 22 a2 8d aa dd fb 28 ed f0 bf 6a a3 6a 4f 3f ce 5f 03 94 36 22 22 22 70 0b 7f 12 20 41 40 7e f8 e0 bf 71 ba 3f fc a2 7e cc 25 af 48 91 36 93 c5 c4 50 26 cb 6c 67 9e 36 03 43 59 6c 86 52 c7 97 14 b7 c7 c7 f1 fb 56 da f8 b7 e7 f7 eb d1 4f 1f 96 e7 78 79 ac c6 bd 8f 36 ce 3d 3c 7c b5 20 8e dd ac 3b d8 38 Data Ascii: RIFF^WEBPVP8LR/?/ $E;o=0L?pH"tI"a]&+#T_I$)JLHjh @3"T#CsH/ ""FC)"JFi"jmT-"(jjO?_6"""p A@~q?~%H6P&lg6CYlRVOxy6=<\| ;8
2024-04-19 14:07:05 UTC	136	IN	Data Raw: a0 f2 38 11 6a 65 02 1c 26 a9 a2 9f 65 81 26 2e 46 98 99 04 ea d0 13 00 b8 ee 51 ce a8 eb d7 35 42 a5 74 97 99 45 3a 40 0c 0b 47 72 4b 4b 0a 01 00 4e 12 3a a2 ac 63 b4 e7 86 0e 28 73 6e b2 40 a4 1a 80 62 53 c2 53 25 94 cc 84 88 28 3c 0d a1 84 9a 0a 81 de 12 9a b2 fc 3f a3 25 e7 16 5c 58 d2 db e7 c2 aa de 0e 17 76 eb 05 fa ec 0b af 5f c3 66 eb 42 db 03 6b dd 12 b6 6c 67 60 ed eb 76 cd db 33 b7 67 43 40 0d Data Ascii: 8je&e&.FQ5BtE:@GrKKN:c(sn@bSS%(<?%\Xv_fBklg`v3gC@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50196	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	524	OUT	GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 2544 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 e8 09 00 00 57 45 42 50 56 50 38 4c dc 09 00 00 2f 3f c0 0f 10 4d 28 68 db c8 f9 dc f8 d5 f2 27 fc 0f 22 a2 ff 13 c0 3f 21 4d 65 06 98 91 09 20 3d 71 94 69 90 44 3a 33 24 3d 5f 2f 0c b2 8d 54 7f ca 11 7c 1e e2 20 14 b4 6d 23 87 7c ff c1 08 43 46 92 04 d5 cf f9 cb 3d 41 13 dc 3f 42 ff 85 04 09 76 87 60 bb 7d 97 fa 7d 87 a8 df 01 10 11 ca 37 27 8d 12 44 f4 68 3a 48 4a 34 8d 71 90 bf 1f f1 02 a0 24 0e 03 69 db 34 fe 6d ef d7 10 11 13 50 69 c2 6a c4 b0 1c d1 db 8e ac 6d ab 6d 2b f3 f8 b9 b8 3b 44 96 4a 0f 4e 1b 68 01 39 bd a1 03 b4 80 26 dc 1e e0 ee ee ee 1c 5b 33 58 6b 9f bd d6 95 7c a0 91 cb 57 7f cd 64 36 80 3a d9 aa 55 f5 23 99 43 e6 ee 4e fa 23 a9 c3 2e b2 2f 24 72 56 4d bc 0b ee 4e 03 76 91 d3 0a c8 91 24 29 92 3c 16 ee 24 e0 d3 5f 3a c6 17 Data Ascii: RIFFWEBPVP8L/?M(h'"?!Me =qiD:3$=_/T\| m#\|CF=A?Bv`}}7'Dh:HJ4q$i4mPijmm+;DJNh9&[3Xk\|Wd6:U#CN#./$rVMNv$)<$_:
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 4a 33 03 40 8f 41 b7 10 d0 68 1e f6 c9 72 10 03 25 91 08 71 00 00 17 bf 73 fd e6 5a f8 ff 65 00 34 36 80 b0 02 94 c7 a1 23 be 4d 53 72 6d fe 21 9f 2c 09 b5 10 0c 00 ba 20 16 ce 00 78 e9 2d f1 02 9c 01 67 60 44 bb 0f 44 8b a3 67 d6 16 b7 24 cb 83 3f 6a 59 00 96 62 ed a7 50 fb 86 9b c0 fc 00 a1 a2 e8 b2 b1 f8 04 38 76 41 6b 6c 61 9d e4 03 df 6b 79 0b f0 20 00 b7 78 fc c1 2b e2 66 b0 70 88 50 39 e8 d2 65 c1 09 d8 e3 17 88 a6 b4 b5 2c d6 3c e0 bd 74 bc 2c bd 88 89 5c c0 26 00 bc ae a3 3b e0 e6 b0 30 5c 2c ba 68 fe 05 e0 d8 25 18 2d 4c b6 f7 7b c3 0a b3 21 2e de 50 f3 0e f2 03 ea 57 da 86 c2 ba ab 7d a2 a4 43 a7 a0 d1 74 63 50 70 9f 1e ac 42 93 0a d0 00 0c 93 33 1f 0b 95 61 c7 01 f7 76 6f 55 d7 ec 74 80 41 00 40 32 65 5a 46 c1 f6 01 a0 bc 00 62 a3 f5 82 2c 06 Data Ascii: J3@Ahr%qsZe46#MSrm!, x-g`DDg$?jYbP8vAklaky x+fpP9e,<t,\&;0\,h%-L{!.PW}CtcPpB3avoUtA@2eZFb,
2024-04-19 14:07:05 UTC	556	IN	Data Raw: 29 8b ca 80 0d 59 05 fa bb 39 63 30 60 6e 12 4e 9c 52 df c6 ad 1e 9f c0 ad ef 8f 9c b0 97 1c 2d ca 58 6b ad 61 38 00 4c b1 43 13 ba 8a e1 99 07 ce cb 77 0b 46 8d e6 01 0b 30 15 28 e6 aa dd 0b 09 e3 99 5b bf 34 3b 8c d9 21 2a b7 b9 3d 78 65 d6 e7 5f c7 ca 59 31 6b a8 47 45 09 a1 6a 1b 53 58 dc 60 e8 16 86 f0 29 61 fc 8f a6 a3 5e 04 c6 fe cf c4 55 61 d4 12 5c 4a e8 98 b1 42 f9 d9 cf b8 69 6b 1f 9d 89 fa ab 7f fc 23 c5 a2 b4 99 9a cd b0 19 b1 69 a1 99 ef 2b 67 95 c4 aa 90 2f e0 03 12 c9 fd 28 5a b0 16 a2 c4 31 93 da 1f f8 2d 67 c4 e9 c6 fb 6b f7 4f ed 8c aa 3f c4 47 9d eb b0 df 26 1a 8d a1 d1 09 dd a2 f1 7f 06 2a c0 96 44 92 5a 13 60 c1 8c 68 89 08 f1 bf bf 24 99 39 97 1c 45 20 98 62 8a 29 cc ff 9a 4e 61 28 06 be 14 84 4f 03 2e 94 08 a7 0f 80 c8 b3 5f 36 7c Data Ascii: )Y9c0`nNR-Xka8LCwF0([4;!=xe_Y1kGEjSX`)a^Ua\JBik#i+g/(Z1-gkO?G&DZ`h$9E b)Na(O._6\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50193	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	524	OUT	GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 1124 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 5c 04 00 00 57 45 42 50 56 50 38 20 50 04 00 00 d0 16 00 9d 01 2a 40 00 40 00 3e 61 28 8f 45 a4 22 a1 14 06 fc 40 06 04 b2 80 62 f4 c3 2c 20 66 93 d3 bf 27 f8 ac c4 0b e1 5f 4e fe e3 f9 55 f9 25 ac 27 fc 97 fb 2f e5 6f 00 4f 1e fe a5 fe 3b f2 df 98 0e f4 1f ce ff d7 79 39 78 03 7c af fd 37 b0 07 f2 7f ef bf f1 7d 92 ff 89 ff 6b f7 33 ec fb f2 df eb 3f f1 3f c8 fc 01 ff 1d fe 85 fe 97 f3 87 fc 47 cb 37 ac bf da 5f 62 3f d3 94 e3 22 fd a6 bf 15 27 0f 9f 9f 3b 8f e5 2b d4 d3 72 7a cd 37 ff 3c 4e 75 74 fa 27 36 bc ef a7 98 a9 7f b3 0b 9a 62 ec 69 24 ca 66 47 72 f6 45 87 d1 5f f5 5f 03 e1 a8 b5 8d 7a 57 26 f1 2b 66 40 00 fe fd 28 d2 f2 3b 08 6e c3 95 69 10 45 de f5 e5 5d d1 9c a6 a1 73 83 5a 86 e9 ba bb f8 8f e6 d4 fc df bf d7 09 3b 59 88 2e 35 de Data Ascii: RIFF\WEBPVP8 P*@@>a(E"@b, f'_NU%'/oO;y9x\|7}k3??G7_b?"';+rz7<Nut'6bi$fGrE__zW&+f@(;niE]sZ;Y.5
2024-04-19 14:07:05 UTC	391	IN	Data Raw: 44 a9 a5 a2 92 a7 00 8f f9 14 83 12 2f d8 58 20 21 3d 6b 29 b2 78 1e c2 fe 16 f2 5b 16 b6 f6 9c 61 10 f3 f8 5b 8b 2c 5e d5 c4 7a 78 88 22 44 b8 d0 e5 57 2e 84 eb 0a da a9 53 8a 77 87 33 d4 c6 0e ea 0d 54 d2 d6 c3 a1 a9 7f f3 96 be 79 d2 e1 ca 89 56 27 f8 60 dc 80 fe 5f bb ff c9 86 f0 11 ea 56 1f 8e 5b cd 47 a7 f4 1a 04 19 9a d6 e9 e5 ad d5 67 e4 7a ca 72 e4 9e 37 d1 c5 ff 63 b6 1a c1 5a 8f ae 33 bb 7e e6 ab 0b 07 d9 c1 d0 eb 6a 35 6d fb e5 39 fe b0 f8 a4 e0 08 73 9c cb 7c 19 61 4e ab 51 2d d4 3e c9 9a 8f c7 43 d2 45 ab f4 ba 33 86 a7 8e b9 88 16 ef 14 d5 f8 e1 39 ac 06 76 b9 5c 31 5e 2f e1 c2 c1 ce ef a1 7b 1f e1 f0 26 67 7f 7d b1 15 0b 6a de 25 81 88 f4 ad 53 e7 c2 2b fd 5a b5 95 94 7d 85 d4 db 95 c2 be 24 63 c8 25 f5 24 19 ec d4 a0 48 44 ec 73 30 5c ab Data Ascii: D/X !=k)x[a[,^zx"DW.Sw3TyV'`_V[Ggzr7cZ3~j5m9s\|aNQ->CE39v\1^/{&g}j%S+Z}$c%$HDs0\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50197	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	523	OUT	GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 2666 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 62 0a 00 00 57 45 42 50 56 50 38 4c 56 0a 00 00 2f 3f c0 0f 00 09 06 6d 23 39 d2 b4 dd bd c6 1f f0 3f 88 88 fe 87 ce 41 55 95 04 d8 33 4b c7 2f 1c b2 2d 92 33 2d cf ef a1 37 a7 00 74 37 3e f4 59 b0 69 24 c9 51 e9 22 7f 37 fc 91 be cb 9e 84 d2 b6 91 24 df 8b 07 1e 9c fe 0b 3c cc b6 91 24 45 e5 1d d3 ff 9b 98 7f 74 17 42 ff 13 01 41 d4 80 50 10 01 15 00 09 98 17 d1 8b 00 04 48 c5 d4 1f 08 81 60 de df bd 5d 60 2b c5 d4 ff d2 e7 ef 13 36 00 85 09 84 c2 af f8 c5 41 90 6d b3 fa 63 ff 10 11 31 01 e9 93 90 db 29 d3 a7 a2 a5 eb b7 d9 36 5b 92 64 db 72 4f be 55 69 1d 5a 7f 05 5a 86 56 c2 09 f7 bc a0 25 78 24 28 ee c7 07 67 4c 02 eb ab c3 94 70 60 50 a1 41 df ef 17 93 a1 01 c7 e0 52 82 e4 0a 26 86 53 2e 46 08 d2 28 86 41 db 36 82 92 3e a7 c7 f1 e4 9f ce Data Ascii: RIFFbWEBPVP8LV/?m#9?AU3K/-3-7t7>Yi$Q"7$<$EtBAPH`]`+6Amc1)6[drOUiZZV%x$(gLp`PAR&S.F(A6>
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 99 e9 1d 38 6e 8d df cd ee 41 41 e1 e0 8d 91 71 a3 d9 dd 3c 81 84 5c bd 08 60 1c 6a a6 ef 80 b0 85 ad f9 55 82 03 48 48 ce d0 90 a0 91 11 32 05 52 87 96 ea 92 da 3b a3 5b b3 d2 89 f0 c6 70 1c 84 51 96 da 23 00 57 80 7a 09 81 e4 d1 93 07 92 86 d2 67 24 0f 32 14 17 de 14 20 0c 51 14 25 12 c3 ab bd 45 82 79 01 54 d1 a4 c9 dd 21 d4 43 8f 2c 4a 4f fc a2 87 5e 42 04 c2 c1 ac 00 e4 90 db 57 68 51 a2 b4 85 76 2e ee be 5b 88 de 02 7a 3c 3a d4 d1 03 38 85 61 6f a8 09 72 07 03 c1 5a 63 d2 4b 81 a8 e8 15 6d 12 72 21 2f 01 5d 43 76 3a eb 69 04 b5 88 10 23 cd a0 c8 a1 ab 5b e5 76 b3 ca 24 7a 89 76 4e 35 4c 35 85 90 5c cc d7 a8 35 63 da e4 b1 6a d2 2b 40 50 72 06 13 dc ed 0e e6 59 7b c8 d7 32 49 a2 0a 26 b9 66 2c df a3 7f 07 f6 7d 50 6b 1d a0 26 1b b3 e3 5e 73 93 ef 29 Data Ascii: 8nAAq<\`jUHH2R;[pQ#Wzg$2 Q%EyT!C,JO^BWhQv.[z<:8aorZcKmr!/]Cv:i#[v$zvN5L5\5cj+@PrY{2I&f,}Pk&^s)
2024-04-19 14:07:05 UTC	678	IN	Data Raw: 39 0f b2 27 79 bc 8b 64 bb 7e a8 a3 7b fb f6 fe 21 d7 4d 48 df 97 76 a5 fc f5 d7 1f 0c 70 7c 0b d7 39 6e 36 f8 fb 4e 98 13 a2 e9 f2 32 96 bc a4 e7 9a 24 4f 44 9c ef 55 c8 d1 b2 e7 b0 b6 31 fe 6a 7b 36 77 4b 15 fd e3 39 7e 75 fd d5 55 53 97 2c 2f 5c 56 3d 5e bf 76 bd 71 c1 ff a4 25 67 ab c9 62 0a a6 40 45 d5 1e 55 bb 23 b2 92 6e dc c6 d6 c8 38 13 e3 ff bf 51 f5 ba 3d 36 2f 09 d6 2f 60 c7 22 dd e9 4f 1b 9a ff 19 9b 83 85 91 ee ba ed 7a 71 33 65 87 dc 6e c9 8a 48 bb 5f 79 3e 91 db 52 53 4a 4c 6f 66 1c 57 dc af 5b a0 19 b5 3d 6b fc ed df 9f 9f 4e 4f cb a3 c6 c8 9f e4 e5 cd c5 d8 a7 cb 49 d5 43 b4 d2 7b dc 9e 07 df 7a 56 42 0b 8e 1e b8 c3 bb 72 c7 53 bd ed 7e b8 e5 e6 eb 07 f2 7f 25 cc 77 db 63 13 2f 6f 2b d7 6d d7 5d 8c 28 93 ec 92 0c e7 41 61 01 d0 b0 60 13 Data Ascii: 9'yd~{!MHvp\|9n6N2$ODU1j{6wK9~uUS,/\V=^vq%gb@EU#n8Q=6//`"Ozq3enH_y>RSJLofW[=kNOIC{zVBrS~%wc/o+m](Aa`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50200	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	524	OUT	GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 696 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	696	IN	Data Raw: 52 49 46 46 b0 02 00 00 57 45 42 50 56 50 38 4c a4 02 00 00 2f 3f c0 0f 00 d7 05 29 92 24 47 52 d4 da 2e 7f 1c 8b eb 9e f2 a7 7b ca 69 40 8e 24 49 91 14 cb a0 bf 72 cc fb 64 3c e8 ca 70 14 49 92 a0 64 1f b2 f0 af 88 d7 1d b0 35 ff c1 26 a0 00 32 02 b3 15 22 44 40 8e 84 49 40 b2 a6 62 49 46 a1 83 46 ff 80 a4 6e 00 53 9b e5 a8 83 00 92 04 94 80 a4 4e 04 52 37 0d b8 7b 29 dc a6 f3 7d fe 01 19 61 4d 22 30 e7 3f 99 95 24 92 80 04 24 3a a9 48 18 a2 03 52 27 0b 91 a4 0c 49 12 50 37 4c 6d d6 43 4d 32 ce 72 44 30 23 24 d9 24 22 8c 30 18 30 af f9 e5 67 da 48 30 85 84 21 c7 43 a3 62 64 c2 30 87 a3 df b9 fa 7f d7 97 f3 8c 4a 3f c4 64 c0 c8 a3 ff f2 73 ff 2b 20 39 82 90 49 6e 35 13 7e 26 7f f7 09 e7 84 67 e6 6f fe b6 89 80 8b 44 00 40 16 96 2c 2c 01 4b 2e 72 c1 1f c7 Data Ascii: RIFFWEBPVP8L/?)$GR.{i@$Ird<pId5&2"D@I@bIFFnSNR7{)}aM"0?$$:HR'IP7LmCM2rD0#$$"00gH0!Cbd0J?ds+ 9In5~&goD@,,K.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50199	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	525	OUT	GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3346 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:06:31 GMT Expires: Sat, 20 Apr 2024 14:06:31 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 35 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	724	IN	Data Raw: 52 49 46 46 0a 0d 00 00 57 45 42 50 56 50 38 4c fd 0c 00 00 2f ff c0 3f 00 e6 50 dc b6 8d 23 ef 3f 76 fa d5 6f 44 4c 00 af af 75 19 13 76 24 a4 39 13 8f 31 02 8c d0 bb 1f 09 64 54 23 60 52 c8 07 cd f2 ba 1a fb 4e 3a d2 b6 2d ba 94 83 93 b9 bb bb bb 5b 53 45 e4 ee ee 0e b9 87 ee 0e c7 0d 77 3f 6e 33 c7 cf 19 77 77 77 39 d6 68 cb 3b ff d7 2f ee a1 93 39 69 0f 12 4f 8a c3 22 88 59 c1 40 46 11 6a a3 8d 6e c0 f9 33 34 a2 88 88 89 58 80 4b ee d2 3b 98 2d 60 3b 70 36 30 a4 d4 8f 45 6c 80 46 7a 0b f8 59 0a 3b 20 eb e8 43 53 aa be ec 8f 66 0f a4 53 72 6d db 3a b6 e7 54 7f 8f d8 b6 93 6b f0 4d b8 4c 9d d6 76 ba d4 4e 6d db bd 9d 2a df 3e af 3e 7f cf fb 1d 49 80 24 c9 b4 ad 7e b6 6d db ef 9c 67 db e6 b7 6d db b6 6d db b6 ff b3 6d db f6 99 fe 4f 00 dd e8 ff 17 5b 59 Data Ascii: RIFFWEBPVP8L/?P#?voDLuv$91dT#`RN:-[SEw?n3www9h;/9iO"Y@Fjn34XK;-`;p60ElFzY; CSfSrm:TkMLvNm*>>I$~mgmmmO[Y
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 97 92 ce 52 a9 72 f1 d5 77 dd d6 7b 06 25 df 6e 3d 5e 7a 6e d4 d3 da 6e 00 68 6c d0 e0 ab 51 70 49 f5 cc 57 1a 0a a1 cb 97 95 af 14 5b a5 e2 23 b0 43 61 fc b8 de 89 21 a5 36 f0 6c 66 50 28 bf f8 5d a1 05 4b 98 09 c6 c7 47 b6 54 64 0d 3a f2 2f 0a e7 47 91 37 46 94 d8 a4 df c7 01 87 01 a1 33 c6 bc ac 0e ab 56 75 45 1e 28 a4 b2 20 6f f5 d7 a4 9f 67 bb 41 a1 d6 5c dd 55 a7 f5 3e a6 b0 2e a8 58 74 74 57 84 bf 3c c0 b8 ed a9 ff 9f ce ea bc 52 2c b9 28 b4 3c 13 ad 26 52 67 e5 f6 0d 1f 71 c0 f1 93 26 8d 8d 93 56 ef 5f 43 8d cf e5 35 bf 54 d4 f8 54 96 3d 18 21 c8 46 8b c2 6b 8d 7a 5c 92 6a fd ac 89 39 7c da 97 ac 7c 88 f5 25 a7 36 6d bc c8 70 fd 15 89 45 6e 7d e1 8d 23 45 fb b9 e2 e9 05 d0 b2 a6 c3 49 4e 4e 3d 1a be ef 80 17 99 06 cc 0b 0e 5e 1f 1d bc 21 66 87 41 Data Ascii: Rrw{%n=^znnhlQpIW[#Ca!6lfP(]KGTd:/G7F3VuE( ogA\U>.XttW<R,(<&Rgq&V_C5TT=!Fkz\j9\|\|%6mpEn}#EINN=^!fA
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 84 60 1d e6 ea 6f 50 04 56 1a 74 a4 a2 3c 83 7f 7d 02 80 7a 03 5e 23 18 26 52 35 3f 19 00 f1 48 e4 a0 e2 88 de f7 7e 01 40 17 26 0c 92 48 d6 f7 b0 2d 40 1c a8 ea b4 58 e4 24 a4 64 92 61 e1 b8 d8 0b 86 af 04 19 9d 1c 95 c7 f4 7f fd 0b 29 7e 90 44 b4 09 df 8f 01 0e 03 e1 b6 46 3f 6f 18 be bd 10 50 8f 40 c1 61 2e d1 b0 cb 4a db 40 2c 6c 36 90 18 c6 f3 be 07 d4 3e 50 c5 1a c9 86 25 53 8e c8 0d 08 7b 73 f9 05 86 35 2b c6 34 38 b9 6e 3e 88 f4 49 74 ec 00 00 66 80 10 4f 45 e1 98 39 f3 24 98 11 d9 62 a6 72 12 f1 26 7c ad 44 82 8b b8 c3 f6 71 14 bf 76 e7 c1 a0 50 02 33 00 84 b7 ea 7d 20 1e 0e be 9c 04 a0 c3 a4 c5 06 f5 3d 68 54 b1 c8 b0 f0 2a 30 5a 55 6d 26 1f f6 de ef 5f 08 9b d1 6d bd 51 d5 a1 32 a5 51 d9 06 c8 48 6c 31 65 11 c1 07 29 c1 88 5f 0e 93 34 23 02 d5 Data Ascii: `oPVt<}z^#&R5?H~@&H-@X$da)~DF?oP@a.J@,l6>P%S{s5+48n>ItfOE9$br&\|DqvP3} =hT*0ZUm&_mQ2QHl1e)_4#
2024-04-19 14:07:06 UTC	112	IN	Data Raw: aa f6 cd 34 de 96 e8 3e fd a4 5a 9e 4e 51 cc c7 58 71 bb 60 1b 4c 02 a6 1b a5 ed 2e 45 f3 fd 65 ed c9 1d aa c1 84 bc cd 0c 3b 52 50 de de 3c 44 51 5d cf f3 4a da e3 bc aa 6d ab ba 6e 18 86 ae ab 6a 5e d5 2a 65 8f 1b 79 25 c5 78 43 2f ab e9 c9 55 fc 47 19 fb 52 d6 be 1e 5e d5 7f d5 f0 a4 46 5e c1 07 ed e5 ff bd fc bf 97 ff 77 bf 12 00 Data Ascii: 4>ZNQXq`L.Ee;RP<DQ]Jmnj^*ey%xC/UGR^F^w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50201	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	525	OUT	GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 10942 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 b6 2a 00 00 57 45 42 50 56 50 38 4c aa 2a 00 00 2f ff c0 3f 00 09 46 6e 23 49 51 55 35 3d 40 0d ff 7f f0 da ac e7 88 fe 4f 00 fe b5 00 64 5c 30 4b 00 62 ac e3 16 2f 20 01 4c f4 45 ba 4a 57 e9 2a 5d a5 2d 97 d8 f6 81 a1 4a 7b 2e 21 b9 43 96 6d 2e 75 e3 38 8e 24 35 4d 35 18 c7 88 04 24 0d 53 4d 8b c8 04 ba a4 09 b5 11 81 b5 84 ea cc ce de bb 70 e1 0a 97 9a f4 05 36 6c 1b f6 a1 04 90 00 72 63 73 23 01 24 4e 2e 7d ab af de 33 2f bb 7e 01 39 92 24 45 92 db e1 d0 a3 ec 5e 7c 57 07 fa 8b 88 53 dd bd b3 12 40 91 24 c9 91 e4 ab 17 26 5c 18 ff 7f dd 8a 53 e8 0c 8e 24 49 8a 24 5f 06 09 35 0c 71 f9 58 bb ff bf ea ec ac ff 0c dc 36 52 d4 39 cc 51 16 ee 13 38 43 51 e8 30 c7 31 7e 86 92 23 5c 04 60 05 4b 75 f8 37 df 3e bf c5 2f 3f df 54 97 a4 ba 00 60 d5 e1 Data Ascii: RIFFWEBPVP8L/?Fn#IQU5=@Od\0Kb/ LEJW*]-J{.!Cm.u8$5M5$SMp6lrcs#$N.}3/~9$E^\|WS@$&\S$I$_5qX6R9Q8CQ01~#\`Ku7>/?T`
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: a2 06 6b dd 83 f7 50 f8 20 29 f9 b5 34 ff df 22 49 ca f3 3c 99 59 2d 3b 3d 3e eb be 8b bb 3b bc 04 e7 1d 70 e5 05 f0 16 08 6e 9c dc e1 c6 c9 dd dd 1d c6 dd 5d da aa 2a 9f 07 e9 ca 9e ad 89 bd ff b0 39 e2 19 49 22 0f ee 6b 15 1d 49 e4 21 d1 93 76 4c 4c 24 3a 47 bc 70 9e 13 ee 50 91 68 62 a7 21 3a b0 8a c4 ed a8 1d 2b 89 bb af 54 e0 ee ce 90 17 3a d8 ff 1f 92 a4 ef f7 57 d5 ff 6a bb 7b 7b d6 46 f7 d9 b6 7d 91 32 3b f6 5d 76 97 19 91 6d 84 1b d9 b6 cd b1 7a d4 a8 ae fa ff e8 46 b6 ad da 76 c6 98 fb dc 77 df 67 12 47 c0 9e 4a 9e 3c f6 14 8e c2 51 08 ca 41 16 c6 c0 16 33 bd 7b ce 9a c1 88 6d 23 45 99 e5 a3 ee 1e f3 ff 27 0f e5 cc f9 04 8e 40 ce 17 cf e5 05 70 31 c5 04 50 22 9e cb e7 3a 90 83 50 70 a9 8a da 94 a3 5c 44 57 db 59 b1 cb e7 6a 58 ee 54 81 63 d2 a0 Data Ascii: kP )4"I<Y-;=>;pn]*9I"kI!vLL$:GpPhb!:+T:Wj{{F}2;]vmzFvwgGJ<QA3{m#E'@p1P":Pp\DWYjXTc
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 09 bd cf 25 d7 b3 c6 e5 cb 13 51 e8 f6 f4 2e 24 09 a0 3c 08 c1 31 83 a2 8c 66 76 ea 40 26 49 92 a8 01 f4 3f 17 e7 8c 71 f9 f9 49 53 9c 5d 28 7b e1 4a 1a d2 d6 66 b0 68 c0 46 39 69 2c 1a 74 ad 42 ad a7 8a de e7 52 09 fa a5 fc 06 34 ef 97 49 ee 4a 6e 14 c0 51 0b ba 61 0a ca 6a af 7a 0d f1 00 12 85 9d d5 73 07 84 42 b9 5c 44 de 03 57 92 24 20 0e ed cb a7 b3 89 57 5e bc f7 2c fb af f7 44 82 24 01 bd cf 25 78 00 a7 44 d6 ce 50 f2 50 82 b5 94 dc 95 24 b0 6d 14 47 ba f5 8b c3 04 94 d9 3e db 76 67 b9 02 db b6 ed 84 de e7 92 1d d8 03 db 82 05 3d 93 c8 31 4c 1f 5c 29 88 69 fb c9 39 c2 fb a2 ec 36 6a b1 f3 37 96 66 90 29 00 7a 9f 8b c7 ce c6 2b 57 0c 02 43 0e ce 55 7b e1 4a f2 67 67 db e7 66 8b db 05 85 e5 25 44 d2 7a 09 f9 6e d6 00 91 a2 ff b9 28 46 85 98 29 58 43 Data Ascii: %Q.$<1fv@&I?qIS]({JfhF9i,tBR4IJnQajzsB\DW$ W^,D$%xDPP$mG>vg=1L\)i96j7f)z+WCU{Jggf%Dzn(F)XC
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: eb f2 0b 93 53 9e 96 2b 2c 25 85 cb 29 6b e8 02 f7 95 44 2f 3c 17 25 8f 30 b7 cf 25 b5 cb 2d 32 0a 0f 0a 11 81 c9 e5 34 b9 6b 1d 47 98 f7 24 6f 33 c2 47 56 43 cd fb 9c 0b 16 35 2c a6 4c 51 87 1a da bd ab 34 b9 a8 95 64 b3 33 e0 22 a4 f6 b9 24 75 09 c3 02 e2 bb 4c d2 17 77 68 1a 97 47 1d ac b0 27 bb bd 64 44 05 de b7 5c e2 0e 5b 80 29 38 0a 91 06 a4 42 96 5e ba 77 15 68 f8 9d c7 7e ed e0 c3 e1 ca 92 19 6a 58 e3 da 3e 97 74 ae 25 de 2e 69 e8 9d 2a 14 c9 5d 2b 15 e6 3d c9 1d 3c bb ba a1 ac 7d ce c5 a2 ca 88 13 56 5e 03 4f 7a 17 ee 7b aa 77 32 15 33 51 4f 9f 73 51 43 83 e3 ba 82 e1 42 55 02 eb 42 21 bd 8b 52 e6 44 6f e3 c5 59 44 2e 4b 9f 73 71 59 fb c2 14 e4 14 3b 14 2f 42 90 dc e5 6f ee 30 27 5b d0 f1 a5 e7 b9 ec 0c 8c 3b 30 ef 49 9e b9 45 0e 96 17 3e 94 79 Data Ascii: S+,%)kD/<%0%-24kG$o3GVC5,LQ4d3"$uLwhG'dD\[)8B^wh~jX>t%.i*]+=<}V^Oz{w23QOsQCBUB!RDoYD.KsqY;/Bo0'[;0IE>y
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ac 15 0f e2 59 22 db 26 eb d0 55 26 65 75 d5 58 2f 31 57 15 b4 64 73 d1 05 bc c1 ad b2 15 ea 12 c9 25 7d 6e 4b a4 35 5a 64 1d 05 67 e5 6a 0a 74 e9 92 df c4 1b 72 5e 50 d5 64 ff 42 75 19 75 f3 ce 48 1b 72 49 9e 9b c5 7b 61 ac 99 2c 94 40 d7 b1 6b f1 86 97 58 cc cc dc d7 54 77 bc 18 b0 ae 6b c3 5b a2 72 8b e5 92 3c b7 65 42 71 b1 76 26 35 1c 8d 86 b4 30 75 ed 32 f0 1c 7d 7b 51 9d 26 25 d5 c0 bb 3d 0f cf cf eb d4 b8 c6 5c 9d 89 29 cc 25 7d 6e 67 8e cb 1b a0 42 43 b7 2e 5b b4 61 90 dc c1 7d 11 8e 3f 9b ec 55 47 70 6f a2 14 c0 db e7 d2 b9 0b d9 2a 03 41 b4 a3 77 ea f2 c0 e3 f9 cc 9f a2 4e 32 65 ce 2b c1 57 8d 55 de ab dc b4 61 5c de d0 24 ae 3c e7 b9 9c d3 72 52 dd 81 67 06 87 e8 27 dc 67 34 c8 a5 37 b9 19 1a c9 a8 34 e4 05 a5 73 57 ad 43 5d e6 d8 5d 60 dc fe Data Ascii: Y"&U&euX/1Wds%}nK5Zdgjtr^PdBuuHrI{a,@kXTwk[r<eBqv&50u2}{Q&%=\)%}ngBC.[a}?UGpo*AwN2e+WUa\$<rRg'g474sWC]]`
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 70 23 f3 bb 49 56 ef f3 ec 72 f1 ec f7 ae ce 23 07 29 7d 39 f1 1f 59 9c 20 96 52 de 6d dc 57 8c 9c a1 40 4a a8 cc b3 ac 70 96 a6 a1 88 cc 27 78 45 a3 b9 24 cf 6d ac 98 f0 68 70 55 ea 2e 7c 5b 44 de a5 eb ce 5b 31 50 cd fe 4d 99 4c 34 94 f6 08 4d 6c 5a 04 8d 84 32 52 ca 24 35 32 cc 31 e7 66 e7 9f 75 4f db c3 2b 13 ef 0d 4c cd 70 ef 97 11 d5 4f f4 22 ca 76 04 49 32 2d 21 5b d0 5c 42 bb 04 a6 4e 88 d0 1c 0b 65 6a a9 ed da 94 4b f2 dc 36 c8 c1 7e dc d9 21 7a dd 20 bc b0 d1 b5 ab 30 1b 8a d4 9a 72 eb 42 2b ae 2d b2 9c 6c 82 4c fa f7 5a 4b 44 86 70 40 5d 96 5d 78 79 ae ff d4 a0 00 ff 2f 93 f3 4c 10 08 76 93 79 9f e6 a7 ee 50 c1 4b 20 fb b4 78 a6 fc 78 de 78 11 c2 5a aa e7 11 17 de 76 6e 2a 87 d9 b5 bf 5d 45 5f 2a 87 1a d4 ba 91 3c b7 ec 62 5d bc 05 32 84 ed 54 Data Ascii: p#IVr#)}9Y RmW@Jp'xE$mhpU.\|[D[1PML4MlZ2R$521fuO+LpO"vI2-![\BNejK6~!z 0rB+-lLZKDp@]]xy/LvyPK xxxZvn]E_<b]2T
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 5e 11 dc eb b6 d7 dd e1 dd b1 7b 3e 58 72 ea f5 eb ad 7c b1 a5 32 4d 5d bb 26 7c 7e 40 b3 7e 9e c1 2c 4d d3 7e 73 6a b5 dd f2 67 8e c0 92 2f 87 1f 7f bc ff d2 4a 29 80 f4 64 28 a5 9d d8 98 4b fa dc 34 6a 02 35 54 ae a1 22 d5 29 5c bb fd 4f d7 c7 9e ef 76 0e ff 7f b4 d7 3f 32 22 5a 2e 3a d9 00 f3 1d 67 1c c6 28 39 58 49 2a 95 41 a4 12 1e f3 e4 a8 b0 14 c7 11 1d 78 07 31 ae f2 e1 65 34 03 33 3e 5c cf e6 55 05 7f c4 50 bf 44 b0 18 0c 6c c2 a1 9a 5a 15 7e fe 3c 63 0a 3c cc a3 53 7a 94 67 e9 3c f5 ef 77 ff 5d 7d de 56 6b 9f 4b f7 2e 09 c1 c1 54 9c a3 2f 06 4a c1 02 dd 94 c2 35 61 8a 72 34 5c 3e 3a 87 5e d6 27 f6 72 54 d1 4c c6 1e 51 64 d1 22 62 30 01 a4 cc 28 93 71 4c 45 90 c8 ae f4 68 0b 0a 52 8a 50 86 c2 90 70 85 03 9c fc 48 10 28 29 8b 9d 3a 07 32 fc cd 8d Data Ascii: ^{>Xr\|2M]&\|~@~,M~sjg/J)d(K4j5T")\Ov?2"Z.:g(9XI*Ax1e43>\UPDlZ~<c<Szg<w]}VkK.T/J5ar4\>:^'rTLQd"b0(qLEhRPpH():2
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 3f 4a ca 95 fa e3 55 c0 a9 36 dd 37 22 e8 9e 14 a9 31 2c 86 10 b1 8a 9c 4f cd 09 a7 70 08 55 db e7 92 ce e5 f5 c9 14 b4 41 15 e3 51 e1 ac 35 63 24 74 9d c4 5d 97 2c 7f 1a ee 29 29 16 d5 15 53 24 97 b7 65 aa a7 df f3 e0 52 80 5b ff f8 ec f6 17 60 65 ef 65 ca 15 e9 19 36 dc fb 69 db 2c 34 6e 75 86 55 af d5 a4 04 e4 43 bd 9d ca 49 9e db e7 92 ce 55 33 1b 30 72 c8 8c 55 8e 4b 08 d8 c2 04 dc 81 4c 4d ea 9a 9f 39 c1 07 fd 7f 5a 53 d0 cb f0 fe 5e e1 df b6 2c d8 db d2 d9 32 4e 51 e1 8a da 09 34 98 13 dd 75 41 cf 5c 65 d3 e5 ac 4f e7 68 7a 75 d2 65 d1 dd d5 71 50 12 72 74 79 d0 a3 f5 7e d4 43 a8 a7 91 53 a1 f6 3a 17 46 b1 81 e4 c9 34 3d e5 54 9f 9c 2f 20 b4 33 fb 78 17 ae 7b 3a 17 d3 fd 69 27 7c 12 55 73 9c cc 28 c3 1a 5c f5 df 72 ee 27 be f3 9f 83 45 1d e1 79 a7 Data Ascii: ?JU67"1,OpUAQ5c$t],))S$eR[`ee6i,4nuUCIU30rUKLM9ZS^,2NQ4uA\eOhzueqPrty~CS:F4=T/ 3x{:i'\|Us(\r'Ey
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ac 99 82 71 23 7e fc 37 b3 7b 6b d7 f0 e4 f2 56 ae ad c1 35 0b cf 4e 05 22 78 25 09 1f 74 cd 2e 72 98 1b dc 0b 65 dd da e7 92 da 95 a1 52 98 5b 8c db 77 e5 f2 33 5d 95 37 a1 d8 59 a3 ae 59 74 32 19 5b 05 d9 58 8b c8 79 8f ba 0b 15 67 16 ee b7 f6 b9 24 74 d5 c0 06 c4 05 81 8d a4 ae 95 5c eb 57 1e df 06 ce 99 ed d1 79 b4 f3 e6 df 25 d9 46 a5 2a 0a fe af 7e ee e9 fd 73 ee 1e 5c 7d 97 46 5d b1 3e fa e5 6d 21 f3 d6 3e 97 d4 ae 1e 8f eb 7b fe f9 57 fd 81 63 7e cd 2a a7 63 08 a6 19 31 57 65 de 9e 2d 02 ff 5a af 7f f8 e8 55 97 d0 e5 0d 2f d2 7c 6e e4 8f ac bf 7c f7 16 53 cd ed 73 49 ec 0a b3 88 8f cb bf c8 fa 4b 67 2e 3f cb b5 92 3d fb f2 a7 3f 3f e1 73 da 90 64 ec 95 ef 5f 18 a0 b4 cb 3f fc 37 a1 ab f1 fc 80 6f da 5f 1f e2 fe 59 79 7f 6b 9f 4b 52 97 53 29 42 13 Data Ascii: q#~7{kV5N"x%t.reR[w3]7YYt2[Xyg$t\Wy%F~s\}F]>m!>{Wc~c1We-ZU/\|n\|SsIKg.?=??sd_?7o_YykKRS)B
2024-04-19 14:07:06 UTC	170	IN	Data Raw: 10 28 5b de b9 5d 2e 57 25 18 97 6f e8 a9 35 53 c9 62 9d e4 7a bd 6c ae 8c 18 97 37 61 5c 9a c6 e5 83 fe 7a c7 c8 97 cb 75 b7 e0 b4 64 c0 28 20 54 83 58 0e 5e a9 8c 35 a3 97 cc 35 0a cf 86 98 87 c6 9f cb 1f 83 f3 f6 9d eb e5 72 9d a2 89 b7 0d a5 32 02 77 b2 1c 97 8f 9d a7 5e 36 97 a9 e8 85 ca 88 9a 14 02 2c 16 8e db 5f 3c 57 d3 ff 97 5f 70 5e 3e a9 f4 39 d3 e5 73 39 c0 84 62 d1 f3 f2 c9 29 1e ec b7 2f 9d eb 9c d9 50 22 f3 c5 72 5d dc b9 a3 f5 e0 94 d8 59 49 61 2d 17 d3 e5 40 83 21 b0 5c 4c 97 5f fa f7 01 Data Ascii: ([].W%o5Sbzl7a\zud( TX^55r2w^6,_<W_p^>9s9b)/P"r]YIa-@!\L_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50202	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	525	OUT	GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 33182 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 96 81 00 00 57 45 42 50 56 50 38 4c 89 81 00 00 2f ff c0 3f 00 09 88 11 d8 c6 6d 0e 04 0c 11 64 ba ff c0 ca d3 11 22 fa 3f 01 63 a8 20 d3 a2 79 8e 9d 04 49 9c c4 e9 91 29 eb 1c 52 ea 6e db 4f 6e e5 6e 4a 04 00 bb 65 fb b2 dd 59 00 17 58 6f d8 ad ee 4f c6 a5 4a b3 77 17 80 16 30 fb 4d 39 b8 ab d2 4f ef 16 60 15 de ef 5f 64 b3 85 bf 4b 97 51 92 f4 06 80 6c 27 e7 54 49 52 55 95 70 e9 8d 20 75 c2 f4 07 54 11 80 6e d2 d2 9b a4 41 7a 46 4a 15 00 5c d2 89 24 99 53 ed c4 65 2a 34 9b 7c a7 37 b2 4f 12 7b 66 a6 8a 24 f4 9e b6 25 c9 9d 13 9f 99 0c ef 92 d8 92 00 e0 d2 49 c7 98 89 38 34 25 35 09 2c 6e 49 dd ad 14 49 3d 23 92 00 fe 5e f8 b6 d4 dd 48 73 28 04 5f d7 a5 e8 b0 3b 43 8e 16 bf 7b ed e3 ee d6 d8 83 ff 5c 60 c6 1d 7b 66 f8 c3 eb f5 c2 df 12 ea d3 Data Ascii: RIFFWEBPVP8L/?md"?c yI)RnOnnJeYXoOJw0M9O`_dKQl'TIRUp uTnAzFJ\$Se*4\|7O{f$%I84%5,nII=#^Hs(_;C{\`{f
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c3 05 c3 56 00 58 44 fe 1f df 8f e1 63 f8 f2 02 0a 01 f2 98 57 40 f2 c4 36 e7 fc 00 c0 70 44 06 34 8d 58 2c 63 f1 b0 78 79 79 7c fd c6 81 7f 4e b7 c3 65 c8 10 e7 96 cd 06 c3 26 02 40 2c 96 b1 c5 22 f2 c3 0f ff c8 c7 eb fc 35 7c 7c ff af f4 f2 9d 94 21 c7 34 c3 05 3e 34 97 b0 5a 3f c1 c9 d6 7f 5f 0d 0c 87 e0 93 39 b2 5a b7 5a ad 56 2b e0 be f8 ef 39 49 63 c0 17 29 e0 f2 12 11 39 4a ad 56 6b 0e 63 c0 80 e1 46 00 44 00 18 30 0c 1b 6c db 11 b1 c0 c8 06 82 01 40 04 3e 3d c4 66 91 22 22 06 5c 07 00 e4 18 6e 82 88 c8 4c c4 10 81 0d 00 32 02 50 00 82 3b 39 10 d8 04 36 38 09 ae cb d8 ef f3 e4 0d 08 00 88 18 22 42 89 00 10 00 22 0e 2c 63 8b cd b1 59 00 d9 1b 22 b2 13 f8 08 1f 6e 00 0c c3 00 6c 30 08 30 6c 80 01 d8 00 c3 ed 3e 00 c0 46 00 88 00 c0 30 00 50 87 84 36 Data Ascii: VXDcW@6pD4X,cxyy\|Ne&@,"5\|\|!4>4Z?_9ZZV+9Ic)9JVkcFD0l@>=f""\nL2P;968"B",cY"nl00l>F0P6
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 61 ab f3 b1 be e6 4c a8 33 ac 21 7a c4 fd 55 19 37 ac 8f 92 6a de 1e 7e ff 89 f9 99 95 d6 8f ac b1 a1 92 da a3 a6 0d b8 a0 c5 1e ee 48 08 6c 0d f7 56 84 d0 fa 3b e9 9d 0c be 1a 1a 39 25 fb fd a9 8a 92 3b d2 50 b0 db d6 1e 67 61 56 94 df b3 ef 76 ec 76 1e a5 ec d3 9b ca 03 e9 74 cb b4 28 27 2d 56 b1 b7 f5 f1 4c ec 76 92 33 21 5f f0 dd ed 9a f0 66 64 da 89 85 cc a0 6a d5 a9 b4 5e cf cc b3 b7 5a 8c 7c cb dd c1 1d b3 30 ec 29 77 90 e4 bd e0 33 73 0c 0f c7 fe 11 09 e9 f6 61 08 64 ae 76 4d 63 ff 38 74 ef 46 bd f8 a4 18 3d 1a 79 ef 8e d2 e9 9a fb 4b 7a 74 7d 3d 5f de 7b 23 32 66 14 de c8 44 14 d9 1e 3f c8 8c aa 05 4b b9 66 62 a9 fd 3c d8 f6 86 52 be 9d 32 a5 64 59 90 b9 d8 7b 6f 50 26 d1 62 26 24 19 08 bb 9d f2 ae a9 f4 b8 c8 b7 64 30 c4 bd 46 23 b3 ec 6e 5d 32 Data Ascii: aL3!zU7j~HlV;9%;PgaVvvt('-VLv3!_fdj^Z\|0)w3sadvMc8tF=yKzt}=_{#2fD?Kfb<R2dY{oP&b&$d0F#n]2
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 94 1a fa 1b fd 43 a1 28 a5 8b 76 fd 55 34 64 0c 69 a7 da 3b 9f e8 26 ed 6d 3c 4a bb 25 cf d7 25 90 eb f7 86 7a 90 e9 3a f6 33 73 3d f7 56 9e 9e 58 99 df f8 99 23 ad 4c 4f 99 1e 66 be a6 5a 85 cc 4b e6 8e 4b 6b 5a 87 fc fe dd ee 5f d3 c8 68 41 77 13 22 ee 70 4b c8 fe e4 09 d9 1b 0b dd fd 60 6d ba 34 dd 6f 9d 86 4f 0c af 1f 28 3e 13 4f e9 c7 da 88 d1 76 4a ef 6c 4b 22 33 cb 8b 84 ee 6d 60 ad 4d 89 e5 49 dc 3b 93 9c ec 9d 79 26 01 a5 ce a5 2c ec 2d 16 39 82 7a 70 bd 5f af 14 a8 a5 58 16 44 26 2c a0 28 be ae b2 d0 46 a5 50 44 44 b2 35 80 c5 7c 6b 80 a4 30 08 10 18 02 a2 85 a1 fd 96 3f 79 7d d4 c8 ce 46 f4 56 7f ac 16 d8 23 25 d2 b3 2d e4 eb 8c 4e ba db 3b c9 0d 77 90 ef 4e d9 fb 01 59 a9 92 c4 a9 9f 1c 89 13 f1 46 59 b8 41 6b 81 81 53 f7 57 e5 fa 80 1e f0 7c Data Ascii: C(vU4di;&m<J%%z:3s=VX#LOfZKKkZ_hAw"pK`m4oO(>OvJlK"3m`MI;y&,-9zp_XD&,(FPDD5\|k0?y}FV#%-N;wNYFYAkSW\|
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ed 37 c8 cc e5 3a 4a b6 37 ad 2f bb 5a dd f3 81 56 14 69 f4 80 99 d2 e3 1c b9 cb c7 74 1c c9 60 a7 ad 3a 2f b2 c6 86 4a e5 54 55 37 1c 80 70 01 e7 f1 57 e0 4d 49 ae 5c 9a ef ad 47 84 a1 f8 6c af ff b1 c3 e6 30 4c 1f 0d dd 5b 19 43 73 af 15 01 05 3d 68 59 d9 ff dc 4d c3 8d 8c 34 3d cc 4a 3b 69 fd 95 cd 64 64 e5 83 59 9d cf 57 9f 4e d7 d1 7b 27 56 fd 25 6b 1b 9b dc 9e a3 5f 04 86 eb 82 bd bd 66 0f ec 93 70 52 ac db 62 6f 99 01 6a c0 42 57 77 d3 b4 de e3 d4 d3 c3 a4 23 e0 71 55 5d 65 77 37 6d 04 f7 26 53 35 dc ae 5b e8 76 5d 81 4c 8c cb c9 6d 8f 46 9a a4 dd 8f b2 90 6d c8 8b 6d ec 86 ad 36 db b7 3f e7 62 ed 4d a6 d5 1a 1e 92 82 4b 25 f4 d8 19 99 e1 9b e1 aa 60 32 f8 4e d1 81 00 f6 fa 3f 3f fe 31 18 a6 4f e8 e6 bb 9e fe 62 fd a3 19 7a 85 0e 9d 59 99 d9 dd 43 Data Ascii: 7:J7/ZVit`:/JTU7pWMI\Gl0L[Cs=hYM4=J;iddYWN{'V%k_fpRbojBWw#qU]ew7m&S5[v]LmFmm6?bMK%`2N??1ObzYC
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 97 6b 3e 57 8b 6e e8 4d 4b 74 0f ee b9 6a ec 3c 5b 16 76 d6 48 0f b0 49 86 6b b2 87 9f 59 e9 e7 ae 0f 3c 5f d5 af cb 7a a7 87 ff 62 e0 fa dc 36 84 c7 0b eb 15 fd 82 96 cc 30 c4 6e 65 2c dd 31 bd 0e c4 94 5c 2c 8d 5b 64 dd f3 c1 c7 1a fb 9d 75 8f 33 da 40 8d d3 f3 b7 7e e6 bd 78 ec be 41 6d 1d ba d2 6b da ab 69 85 d6 ed ee f9 eb 87 bf fb e8 eb 47 5f df fd 0f ff 79 ba 37 fd 46 91 63 73 2e 46 23 c8 53 a9 36 6d 96 c8 86 8f ff 1f 55 a9 f4 03 8c 67 5d de ac 0f 54 7b c9 15 d7 4a be a7 ef b9 c6 f7 64 7d 58 5f da 0c fc 86 41 55 59 b0 3c 4c 7c b8 79 bc f7 be 57 77 77 f3 68 6e 8f 33 e9 ab 01 32 3a 1e f3 2b 8b 74 4d 5b fe e6 14 0d 5c 84 83 0e f5 0a 61 4c 5f cd 68 6d ae 33 b6 b6 40 2d db ae e1 e7 ba 60 32 25 23 2a 17 0b 14 03 05 c1 60 ca 89 97 d7 19 ec 44 39 90 f1 78 Data Ascii: k>WnMKtj<[vHIkY<_zb60ne,1\,[du3@~xAmkiG_y7Fcs.F#S6mUg]T{Jd}X_AUY<L\|yWwwhn32:+tM[\aL_hm3@-`2%#*`D9x
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 45 0e 03 f7 13 76 52 fc f0 e4 4e 2f f6 36 08 b2 68 22 7b a5 e0 79 8a eb 54 04 d4 a1 cb 24 71 76 0f c0 90 4c 40 55 a4 aa 42 1e 02 5a ac ca b1 ce b3 1c 01 b0 c3 1a 97 37 e1 be 80 6c 91 6f 79 21 c7 96 ba 2f e8 a9 d3 cf 5c 16 55 be 79 d6 33 d5 96 06 8c 8b 42 92 0b 93 a5 14 24 7c a9 dc 82 ec e1 90 7e 5d 6b 75 a6 d0 8e ce 13 a3 81 14 62 e3 b4 25 77 1b 6a 83 5d 12 85 87 8c b0 2b ca 33 b2 c3 92 2e ff ed 76 dc 5e f3 f1 ae 75 19 43 78 a8 cb 7b ce 9c 1f 4e 6f 1d c8 2c 9d 8c 46 32 f3 9d 8b 22 2e 0f 4f 7f 4b ed 67 76 ae 37 35 d0 28 da e3 8f 97 e2 e9 4e 74 41 c4 8a 45 1c 07 22 e8 75 5b 60 d0 0d e7 30 a7 b5 a0 ad d3 e3 e0 2d b0 89 71 af 8f f1 e6 93 02 10 94 24 ab ab 19 c0 8e 5b 3b e9 47 77 d9 57 f6 78 ce ec 71 ea 6f d6 a3 9b 39 b6 ba 52 d3 3c 55 96 5b 76 80 53 cd 57 5f Data Ascii: EvRN/6h"{yT$qvL@UBZ7loy!/\Uy3B$\|~]kub%wj]+3.v^uCx{No,F2".OKgv75(NtAE"u[`0-q$[;GwWxqo9R<U[vSW_
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c6 85 14 47 e6 27 ac 67 d1 10 35 94 f0 5c 49 50 5b 0a 6e c7 5b e4 bc 83 48 38 e2 dc 01 31 09 19 ad a9 60 80 cf fe ee 13 ec 8a 87 13 34 ef 01 20 40 d4 05 68 9e 22 ef 45 2d 80 72 ca d3 bf 50 55 b2 f7 be bc e7 6a 38 66 68 b0 38 d6 7f 1a ff fd 46 62 f7 c0 d6 97 7c f6 76 94 e5 03 f2 65 3d a2 98 02 46 df e7 49 4c a8 b3 05 70 8e 4b 9b d8 e7 dc eb ff a4 4a 1c 05 e5 1a 40 53 e7 82 f4 30 16 00 51 b8 dc 14 c1 aa 5a 37 f6 58 fc f7 c8 e8 1e 39 dd e3 a8 b9 96 75 15 f9 e5 f5 34 ea 8c 1c 49 d2 30 33 7d 9b b7 c7 2a a8 81 a4 e8 5d be 32 01 2c 12 05 c0 32 31 0b 48 4e af 62 80 2f 95 3a ee 20 e0 01 d3 c9 f8 04 83 69 1e 14 00 08 00 d0 3c 15 79 0a 94 c1 4e 7f 75 25 37 b6 a8 b7 21 c1 7f fa fc dc 3d 3c 1c f6 ee ec d2 8d b4 fd 2b cf 04 0d 1a 6b 5f e3 09 d4 f4 58 a9 c7 4c 3d e1 e1 Data Ascii: G'g5\IP[n[H81`4 @h"E-rPUj8fh8Fb\|ve=FILpKJ@S0QZ7X9u4I03}*]2,21HNb/: i<yNu%7!=<+k_XL=
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 4a 06 40 f0 80 a4 15 41 85 83 01 35 5b c7 df 64 02 04 10 c8 92 da b5 32 9f f2 6d ff 31 b0 e9 54 13 2e 7d fe a9 ff f0 09 e0 2b bc b0 2f 8e 88 b3 64 bf 35 9f 64 da e7 c4 71 cd 6f 2c 0b 25 f3 f5 73 a4 99 3c d3 35 42 74 9e 35 23 4e 1f 2b 09 83 3b 6a 5d 40 b9 9b cb 31 45 f8 e2 74 f9 54 9e 25 57 fb dd 44 d4 f4 b1 86 ac fd a5 53 09 96 62 99 a2 78 1b 8b dc 60 05 04 d5 45 82 2a f7 93 02 66 90 99 0a 4c 8c 0b d5 c9 f6 e7 a6 db de 85 df 05 7f e5 7b e1 41 88 27 80 8e 76 7c 13 a7 3a a4 56 5a 2b 26 29 5f 97 7a b0 2c 0f 53 f2 ac 15 6b 91 c9 13 2e 4f 37 ce 6a 91 58 2b e4 00 8a 83 52 2c 36 ac 3e f3 59 dc 61 ec 3b 3a db 36 4b 77 d4 3c 24 7b 30 da 90 35 b6 81 c2 41 5b b8 de a3 89 f9 35 ca 2f a4 e8 45 42 5f 7a f7 fc 9f 22 0b 32 41 31 7a 94 81 b7 0d 4d 77 b5 5d 04 ce 1b df 62 Data Ascii: J@A5[d2m1T.}+/d5dqo,%s<5Bt5#N+;j]@1EtT%WDSbx`E*fL{A'v\|:VZ+&)_z,Sk.O7jX+R,6>Ya;:6Kw<${05A[5/EB_z"2A1zMw]b
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: a9 85 56 09 9b e3 6b 77 e8 15 2c 5f b3 f7 81 cb 6f c1 6e ae b8 f1 71 1f 0e fa 6d df 56 cf 6a 76 00 17 05 9c 44 40 90 ac 1d c1 00 7a a3 fc b3 eb 7e 97 e4 85 0e 7e 78 ee d4 fa 46 b1 e1 74 78 eb db 54 1b 02 be 50 ef 35 72 11 a8 b8 3e c9 dd 06 41 ee b2 f3 cd 62 f9 66 66 b9 3e e7 c5 c8 07 1d ec 9e b2 32 f6 2d ce ad d4 e7 19 7e 3b d4 08 7c ae 35 ee a0 d6 ef 9a c6 bd 76 59 b0 27 a1 23 6e 7d 04 cd da 63 19 9e 0b 1b 69 ac c3 d8 5d 03 30 31 5a e5 66 00 ff a9 2b 1e bf 93 db bb 3f 07 86 c5 d7 ac eb f3 7b 84 eb 5b 76 70 f8 d8 ff 1f 02 fe 19 66 ec 24 29 33 17 b1 82 54 b9 ab 37 61 59 8f 8a bc 84 f9 51 fd e2 91 a1 03 48 ee d3 22 a6 4f 95 34 2a ac 29 c7 3e 56 2d 8f 9f ed 33 c5 88 1b 5b 83 dc 36 4d 8c c8 6e a8 2a 7f aa fb 65 d1 1a b0 8c 93 77 a7 f7 09 08 0b fc c9 1b f0 9f Data Ascii: Vkw,_onqmVjvD@z~~xFtxTP5r>Abff>2-~;\|5vY'#n}ci]01Zf+?{[vpf$)3T7aYQH"O4)>V-3[6Mnew

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50203	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	526	OUT	GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4318 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:04:55 GMT Expires: Sat, 20 Apr 2024 14:04:55 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 131 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	723	IN	Data Raw: 52 49 46 46 d6 10 00 00 57 45 42 50 56 50 38 4c c9 10 00 00 2f ff c0 3f 10 55 e1 b1 b6 6d 99 24 47 7b 95 d7 cc cc cc 8c c5 25 ac 52 09 0a 45 75 54 5c ca a6 6c 66 e6 ee ac 66 e6 ee 30 1a 3e f8 bf ef 0f 4f 60 a3 a5 a3 0d e8 b4 9f a2 3a 29 8c 30 43 4c 8b 60 66 9b 59 32 99 29 3b 04 19 4a eb f7 64 f7 0a b4 05 56 7b b2 58 2e cb ab 10 66 88 ea 88 d6 c0 0c 1b e8 2d 48 6e 9b 02 4f 61 a9 52 ac 58 84 3c 59 4c 75 b4 04 79 b2 18 fc 12 4b 15 c2 c8 1d c8 d4 12 b4 05 de 82 5c 7e eb a4 38 5b 10 27 cd d8 80 68 0b 34 e0 09 dc f1 aa 76 f0 1a c2 52 c5 60 c6 e0 7f 4a f6 ec 63 76 30 1b 00 73 56 90 82 18 aa f9 87 ff 6d 0c 59 2c b2 64 0e cf 2c 60 cc 31 c5 7f 9c 38 0d 71 9a 76 30 e8 ce 06 24 08 00 58 46 52 9f bc b6 3b b6 e7 6c df ad ad 1b ac 8d b1 3a ec ec 44 75 bb c3 3b 87 91 e4 Data Ascii: RIFFWEBPVP8L/?Um$G{%REuT\lff0>O`:)0CL`fY2);JdV{X.f-HnOaRX<YLuyK\~8['h4vR`Jcv0sVmY,d,`18qv0$XFR;l:Du;
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ae 53 1f e6 0a c4 db 97 b1 38 71 d3 b4 51 4d f3 c9 34 d4 e8 c7 d0 41 c4 56 a2 ff 85 6a 6e 85 d4 51 bd 84 29 8c 80 a8 b5 cc 1a 57 9b ad 27 d4 cf ea 83 4d 36 4e 10 b9 a7 6f 43 31 b7 4a 6a 67 9c 9c eb 3a 70 71 80 d8 c3 5d 05 2f 75 63 46 d5 2c d5 12 15 c3 53 0c c4 5f 30 82 b7 5b b2 95 d4 cb 3c 4a ea 47 5f e4 81 0c 5d df 98 83 03 b5 32 69 35 9c 58 03 39 ea df 4a 4b 19 75 52 f7 e1 f0 5a 20 cd dc 6a e7 9b 1a d9 f8 e1 64 80 4c 13 67 5c ae 23 d4 c6 32 6d 31 c6 b6 ea dd 52 80 5c cd 81 66 9b 0e ea a2 c3 e0 13 1f 13 64 eb ca 59 b2 25 d4 44 bb 9c be 0d 15 28 f2 f3 ba e6 70 38 b4 b0 ae 08 88 f4 6e 79 2c d6 4a ea a1 5d 4e 08 38 d7 02 6d f3 7b 72 be 82 d1 5e 6d 8f 01 e7 aa 61 87 ba b5 46 e8 ff ac 35 ec d0 67 90 e9 aa 4b 37 fe 9b bf 27 e7 c3 e8 cd 5a e4 69 9c 81 a3 ed 62 Data Ascii: S8qQM4AVjnQ)W'M6NoC1Jjg:pq]/ucF,S_0[<JG_]2i5X9JKuRZ jdLg\#2m1R\fdY%D(p8ny,J]N8m{r^maF5gK7'Zib
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 81 51 03 43 88 9e a7 35 92 2f a2 52 57 c1 3f 4b 71 10 06 ae b5 81 66 2b f1 2d 26 53 21 50 b7 4e 7c 23 0a 4f d3 40 b6 c1 3f 16 de 84 20 38 e9 79 5a 23 f9 66 43 cb 95 41 ba 9e 67 0b af ec 87 21 44 cd 0a de 88 6c da 3a c4 41 be da 20 d3 8d e8 96 eb 8a 13 03 f5 40 95 d3 05 89 6f d4 97 f1 d5 1f dd 48 08 ee b0 b0 9c 04 37 03 00 83 5e 72 6e 8e c8 b6 92 38 3c 20 e3 82 49 31 08 ae 1e 63 ae 4c cd 31 82 ad 43 e2 05 24 ea d6 77 03 29 a7 8e 20 b8 a1 47 3e 1a 35 e7 0f 91 b5 09 c8 49 ef d3 f4 12 db 0f ba 81 7a e6 12 cf 89 68 df 99 20 e9 60 47 a1 ed cf a0 16 1a e3 d5 80 c4 6d 02 b2 ca 9f 02 05 a1 8d 0d 5c 31 35 e7 2e 88 16 97 e9 5b 20 eb 92 17 0a 6d 93 db 4b 8a da 1d 76 48 d4 80 71 1e 69 39 7e 4f 68 b7 0b d3 0a ff 16 12 b7 d2 a5 65 65 89 6c e9 66 8a 02 ed 92 17 12 7d a8 Data Ascii: QC5/RW?Kqf+-&S!PN\|#O@? 8yZ#fCAg!Dl:A @oH7^rn8< I1cL1C$w) G>5Izh `Gm\15.[ mKvHqi9~Oheelf}
2024-04-19 14:07:06 UTC	1085	IN	Data Raw: 5f 3a e3 28 60 cb a8 a5 14 2b f3 a8 48 f3 ea 71 8b 9e de 09 a5 67 45 57 a3 80 93 55 9d 57 53 86 56 38 0d 1b 90 ea a8 bf 86 10 d0 ef dd 52 35 cc 1b f9 41 68 b8 40 47 03 d7 18 70 ae b8 b2 12 cc 2e ab 23 d5 7f 35 80 be f5 8d 25 9f 93 0a 80 82 6d d3 c0 ff a9 16 59 e2 3a 6f 7a f0 b3 47 41 aa ed fd 16 83 40 1b 54 03 e0 9e 11 01 0d c4 69 eb e0 29 b6 b8 2a 29 9a 8a 0d 48 77 a3 9f d0 80 61 e6 02 12 a9 03 fd 63 ff 48 05 b1 7e da 9c d8 63 71 e3 5a b3 fa f5 f2 3f 48 f9 3f 4d 60 18 68 83 ea 00 1c 39 cb b6 12 1d bc 51 eb 13 3b 75 2e 5c dd 79 1f af 3c 2c d2 de 7a cc 18 c0 32 73 df 6a 01 02 23 fd e8 28 21 2e db 16 bf 92 17 4b 59 8c 74 d3 5d 76 49 65 f0 84 d4 df 99 04 96 81 36 a8 1a c0 73 60 5a 88 38 0b 86 4d 85 26 ff 7a 29 9d 9a 9e e7 6b 51 27 76 2c 2c 13 d2 9f 85 40 b7 Data Ascii: _:(`+HqgEWUWSV8R5Ah@Gp.#5%mY:ozGA@Ti)*)HwacH~cqZ?H?M`h9Q;u.\y<,z2sj#(!.KYt]vIe6s`Z8M&z)kQ'v,,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50205	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	524	OUT	GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 48232 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 60 bc 00 00 57 45 42 50 56 50 38 4c 53 bc 00 00 2f ff c0 3f 10 4d 48 0c c0 36 6e a3 00 7c 44 10 ee fe 03 cb be 5b 21 a2 ff 13 60 e3 dd 99 07 93 35 59 da c5 27 cd 01 26 98 01 b6 24 cd 48 bb 67 37 59 55 d4 40 3a 87 23 ed 6e 95 76 b5 bb aa dd a9 12 4d a9 07 09 00 81 41 d6 9b 76 47 12 b5 a1 a6 6f 30 6c e3 73 75 2e 26 38 34 6d 82 c6 bf 5a 71 09 c8 43 fb ef 8f 20 03 55 15 11 06 dc ad 15 95 99 49 e3 f5 21 aa 24 05 00 6e 6b f7 7f 48 b2 2a 24 d8 96 a4 a5 94 dc 2f 5f 71 01 ae 97 89 66 7d 3d e4 73 4e 84 22 c2 1c 69 73 02 d4 75 80 78 6c e4 2a 04 00 0a 69 30 d1 94 0d 00 7f 4f 44 20 69 00 30 47 12 20 89 3c b8 9f e7 01 e0 bb 8a 6e 65 e7 24 49 bc 3f 0f 6e 92 55 45 b6 66 26 93 19 0c 74 6f 4b 2f f3 e6 ba 90 99 87 00 ba 4b f1 92 ac 8b 95 2f 1c d0 00 5a 62 06 90 Data Ascii: RIFF`WEBPVP8LS/?MH6n\|D[!`5Y'&$Hg7YU@:#nvMAvGo0lsu.&84mZqC UI!$nkH$/_qf}=sN"isuxli0OD i0G <ne$I?nUEf&toK/K/Zb
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 83 17 ce d2 f5 31 63 1b 25 a4 11 f0 50 77 75 57 77 fd 83 d3 f5 4c d6 58 5e c8 1a a5 cc 17 b7 e3 c7 3f 95 6c 90 12 52 1a 11 60 0c 20 c3 60 80 94 2c b2 b2 fe 36 97 9f 77 df b8 76 ff ed a1 7f 05 1a c9 5d bd ba cb bf fd 20 40 04 c0 00 63 72 f5 42 29 a5 34 66 76 03 00 be ef f8 bf 57 b6 6c a3 57 7a a5 94 63 40 30 00 80 e4 43 3e bc f0 4b d2 1a 2b 2b a5 4f db 32 ef 3c 7b 25 df f7 d0 f5 e1 34 25 cb f2 52 fe 0c 10 31 27 63 32 e7 34 1b cf f5 ef fb 94 3e 88 37 bc e2 55 b2 14 5c f2 ef 09 6e 1d 24 6f f2 36 11 11 65 fd f4 da f7 38 b3 cf 3e 91 32 69 fd 7b 02 23 06 80 81 e4 26 f3 c2 6d 6e 32 19 c6 2b 1f ef 5e be bc c2 fb fc 0c 28 c9 eb 31 80 e0 64 e4 85 5d 26 37 99 94 18 be f3 f1 67 3e fe d4 db 9f 00 bc 80 af 89 2c 93 74 3f 18 91 01 30 13 bc 70 9d 9b 0c 43 c9 db d7 de bf Data Ascii: 1c%PwuWwLX^?lR` `,6wv] @crB)4fvWlWzc@0C>K++O2<{%4%R1'c24>7U\n$o6e8>2i{#&mn2+^(1d]&7g>,t?0pC
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 70 b7 c4 59 38 24 33 97 3d c2 dd dd dd 5d 02 27 70 18 56 e3 6c 9c 33 f5 86 6d db b1 37 fa ff 6d fb 71 e1 be ef 78 9a 36 4d 91 b6 33 9d 76 8c c7 b6 6d db b6 6d db 36 df 7d 8c 77 b6 3f 9f b1 3d ed 93 22 68 92 3b 17 ce 73 c7 fc ff ff 39 49 92 5e af cf f7 17 c8 8c 54 b9 a6 7a 6c db d6 6d e6 b6 fc 23 7c dc 93 75 b6 6d db b6 ed 6d bb 2a 9d 59 e9 88 f8 be 05 04 45 fe 8f 36 01 7a ec ff 5f 6f 4b 53 f6 39 55 85 bb bb 4b e4 92 32 00 87 08 52 a2 26 73 87 8c 09 b8 13 75 47 78 44 e8 ee ee ee ee 0e 4f dd b3 83 b3 ef bd a7 2d 7f cf 02 87 b4 99 00 13 78 d2 27 fd e2 bf 04 fb a7 1d 7e db d2 4e b1 94 98 b5 2a dd 58 aa 15 fe 71 be 38 ec 21 b0 d1 21 68 a5 b8 bb 6c 9c 8d 53 11 6b 55 fa c7 a9 f4 09 bb 52 74 0a ee 4e 7a 09 db 25 a4 d3 ef 08 08 3b c6 5d d3 27 6d 4b b1 5f fa 9f c7 Data Ascii: pY8$3=]'pVl3m7mqx6M3vmm6}w?="h;s9I^Tzlm#\|ummYE6z_oKS9UK2R&suGxDO-x'~NXq8!!hlSkURtNz%;]'mK_
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: d5 88 e5 34 dd 4d 93 6a 6f 76 37 99 78 b3 62 a3 23 8d bb 66 da 78 33 2c fc 84 de 08 2a f0 7a dc b5 88 13 7c be a2 ad b2 95 ad ac b7 d5 e1 0c 08 ef 7f a1 0a 0a 02 28 df 55 1c 4f d3 25 29 9b ab 0a 7b f1 b4 70 e6 02 79 d0 ac 80 ca eb 9f e5 54 1a b1 81 34 96 e8 10 9f 23 0f aa 58 46 d8 45 bd 3c aa 74 87 be 6f ca 75 6c 4c 23 2c 03 57 dc ca 28 95 2c 31 8e 3b 75 0d 54 d3 18 f3 92 fb ce 8f 7a ea 76 d3 02 91 8b 71 f3 46 b5 51 89 cf 5a 9f c6 6e 4e 4c 9d a5 f3 13 b3 ee 83 aa 5b c7 fc 72 32 68 fd ef bc 3a 78 cc 9d c7 9b 7d f5 95 de c6 8d f3 b1 3e 7f ad 38 17 e7 d9 c6 53 91 bb 19 4d 16 79 b5 7d 31 ea 47 6f 77 f8 ac 41 d1 2a 3d 19 f4 03 dd 39 f6 b8 ba 71 82 3f 93 ce e1 1d 42 4b 32 3e fa 95 79 1f f6 41 2f a4 36 5b 28 51 54 cb 4f 94 cb 56 d9 cb e9 d1 f4 fc 0c 2f b6 17 03 Data Ascii: 4Mjov7xb#fx3,z\|(UO%){pyT4#XFE<toulL#,W(,1;uTzvqFQZnNL[r2h:x}>8SMy}1GowA=9q?BK2>yA/6[(QTOV/
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 6f 52 c5 f0 3a 97 81 74 49 9e fd 81 c3 61 31 6f 22 8a 63 f9 e8 2d 1c 72 5c c2 42 ac 6b 92 2e 0a be 27 aa e1 65 d2 89 8f 97 ed 23 0d 2a 2e 76 31 74 76 aa a7 31 9f fc 9b 88 8d c5 da 38 f6 67 ce 93 f6 1c 47 9b e7 01 f4 a0 c9 e7 3f d2 7c 6f c5 f6 cc 53 b3 c9 a6 62 76 7a 41 da 39 7a f3 8c 56 9f d5 30 43 9b bd e2 4b 8b ec a1 74 24 80 e6 64 66 ba 6d 7e bb 21 88 b7 22 eb a0 0c 3e eb 43 1a 46 fc a4 fc ce ff 8d d8 b8 23 b4 ce d8 1e 78 66 1b 4b c6 61 24 78 34 4b fb 78 02 93 cb 14 87 f6 03 97 0f b3 fa d3 c2 d8 8d 3f 3e 51 42 d7 27 be 14 ba e3 a7 bc be e6 e6 76 11 ad bc c1 ab f5 2b 34 12 21 fa 1e 0d d4 9d 9b 54 c7 97 a7 fb 3f e1 a4 6f 57 d3 f9 c9 fa e9 f8 c6 72 5b c6 a5 f8 d2 fa 91 9e a2 8b d1 38 3f ff c8 db d9 b0 90 62 8c e9 12 cd c6 3c 61 3d 98 e6 8f e6 c9 c4 ac ad Data Ascii: oR:tIa1o"c-r\Bk.'e#*.v1tv18gG?\|oSbvzA9zV0CKt$dfm~!">CF#xfKa$x4Kx?>QB'v+4!T?oWr[8?b<a=
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c1 10 2b 14 1d 22 9a 12 a8 ad b5 42 58 67 35 1b fc e5 6e 6a 8a a9 bb c0 3e ef 1f 4f ed ce 32 62 b6 3e c0 da 4e d1 f0 dd 84 68 7b d9 c8 31 16 69 1c bf 45 85 4f 31 ae 85 66 7f 37 0a 3d 7d 34 88 ba b0 e4 f5 58 8e b1 e8 6c 1c c7 33 fc d2 9b 6d 7f de 9f 6b 33 65 e4 c3 ae b3 77 4d 44 26 8f 46 cb 71 db c9 77 88 56 6c ef ff 08 0f 9a 63 54 ca c2 88 45 f1 08 9b ac 83 ae c3 4c d0 c9 af f5 2e 3e d5 ad 6d a8 f0 a7 2d 59 55 c1 f2 7e 23 36 15 26 ba 7f b7 d7 79 2e 3e ed c9 d9 74 36 6b ee cd 6f 67 13 4b c5 2c 62 b5 6d cc 5a a0 2a cb ff ca 97 e2 02 a5 6f ac 28 66 8d b3 49 53 2b c3 fe 58 bf c4 13 f9 a0 a3 79 13 cb de 92 f5 cf fb e6 8d cc b6 7b 33 3f aa d7 9c ee 51 6c 34 1b 15 25 c6 cf 61 e4 2b 44 4e 95 57 fe a4 37 e3 38 6e 5f ea 7d 6c a2 d1 d9 2f f5 5f 7c d9 6f fa fe 5d 58 Data Ascii: +"BXg5nj>O2b>Nh{1iEO1f7=}4Xl3mk3ewMD&FqwVlcTEL.>m-YU~#6&y.>t6kogK,bmZ*o(fIS+Xy{3?Ql4%a+DNW78n_}l/_\|o]X
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: cd af f1 45 ff 5c cd dd 5e 56 a1 00 aa 00 5a 48 be 9a 44 47 a1 af 1b 05 cb b9 23 4c 04 f3 3a e0 81 bd 46 d0 e6 0c 06 ba 29 9e bc 1b f6 21 cf 33 e8 e8 48 88 a0 d0 da d8 d7 15 24 0a ac eb 6f cf 2d 6e b5 bb 72 36 9e dd ef 32 9d 98 ec 3c f9 d9 3a 9c 79 d4 66 eb c6 18 c7 c2 3a 22 9d be ed e7 8d b4 bf 34 9d 75 14 30 de 2c 9a 7f 2d 8f 5a 6f cf 7f a4 ec fb 49 cc 30 f4 62 3a 17 97 75 51 8c 54 84 04 ba a5 4e a0 fe d8 19 01 c7 71 48 81 c0 75 5c f1 05 f4 50 5c 09 0e f5 47 f2 8a 34 44 c4 be 4f 30 83 41 2c 37 84 98 e2 93 37 b3 45 6b 2e c5 53 ce 8b d7 54 d9 47 54 9f b6 89 eb 8a 06 47 b0 a1 c0 4a ea 9a 97 73 7e f7 5c 00 74 56 dc a5 ca 16 86 20 bc 27 ec 1f 3a 50 f9 3e 68 ca 1d 82 85 cd 1d 7d 2f dd 30 26 df c6 93 c1 4b 67 de 13 7e ee 43 16 54 36 1f aa 9f 86 73 7c f4 50 23 Data Ascii: E\^VZHDG#L:F)!3H$o-nr62<:yf:"4u0,-ZoI0b:uQTNqHu\P\G4DO0A,77Ek.STGTGJs~\tV ':P>h}/0&Kg~CT6s\|P#
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 72 b9 3e cd 5e 7d bf 65 f9 c6 a7 75 da dd 47 8a 6b 48 b0 8c 23 b2 01 4b 44 42 b7 f6 e5 6f 69 97 eb ee b2 e7 0c 39 fb a1 fb f9 cc 57 ab 64 95 f4 19 ea 0f 30 89 7a 43 30 02 86 b4 70 d4 c2 d2 4e 4f ff 06 5a 85 02 dd ea 0a 7f 18 6f 17 48 b1 08 b4 de a4 2c da 6d f3 ae c7 fa fe 97 2a db 71 e1 90 e0 91 f5 36 d9 d4 3c dc d6 4f 67 bf c2 78 c4 4f 17 4b 8c ac 46 86 e5 7a 4c d8 a6 7a a2 d9 a3 36 15 e6 7b 31 41 8a 11 ab d2 5d 22 b2 d5 6d 7f 4d 2b 4c b6 79 f3 ee 7a 92 2b a4 30 4d 17 ff 92 cc a3 c9 7a 14 39 36 f3 78 12 a4 9d ee 02 48 d2 e0 ae 19 a0 ce 73 31 58 13 4f 0f 24 19 f6 85 5a 2c 87 3c 19 66 89 ff 74 6a 14 4d 4f 96 ca c0 57 73 e6 71 6e d9 46 73 d6 33 bb b9 de 31 00 d9 02 12 b7 f9 e5 51 93 6f d3 90 b3 65 26 ac 06 1e 24 3f bc 13 92 1d 73 60 1a c8 fe 75 2b 1c 89 1a Data Ascii: r>^}euGkH#KDBoi9Wd0zC0pNOZoH,m*q6<OgxOKFzLz6{1A]"mM+Lyz+0Mz96xHs1XO$Z,<ftjMOWsqnFs31Qoe&$?s`u+
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 72 46 4e c6 8b ed e9 09 c0 f4 58 fb 0e a6 e2 3c 09 cf f6 30 1c e5 4b 57 aa 6b 0a e8 26 af da 23 92 0d 23 83 97 0d 42 9b 48 02 ac 7f 52 f9 f5 02 e1 a2 ac c7 b1 5e 0f 5f 05 07 77 31 e7 6c 9d 27 19 6f 7a 8b b3 fa e7 fe 7e f4 74 b9 47 f8 5a 92 ae 96 9a e5 f3 8b 07 a8 26 cf 89 81 b2 29 bd 2b cf b1 0b fd 06 2e 05 60 12 23 cf 56 6c 4d 73 62 70 c9 20 1a 3a 5d c0 2d 47 0e 09 6f e8 6e 98 db 04 1e a9 c2 77 ab 89 c7 ef 1c d1 73 4d c1 1b ba 48 56 23 96 2f 1e c1 cc 80 3c cc 57 87 71 0d 99 0e 9f d8 a8 46 b1 c0 21 ee 7b 78 75 7e fb e2 c3 7b 94 8b 41 a5 1c 36 97 5e 4f 45 94 dd bd 9e b2 c6 57 cb b8 62 70 12 cb 45 aa dd db 87 b1 ef 81 92 2c 71 7e ac fd e6 97 a4 db 48 8f 23 ff 7a 61 f3 bb a0 35 51 c9 19 b5 22 42 3d cc 96 18 66 6f 9d 93 d9 d2 d6 02 50 a0 7e 27 60 36 5a 2d e3 Data Ascii: rFNX<0KWk&##BHR^_w1l'oz~tGZ&)+.`#VlMsbp :]-GonwsMHV#/<WqF!{xu~{A6^OEWbpE,q~H#za5Q"B=foP~'`6Z-
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: de 2f d2 d4 af ec df b2 48 b9 14 53 a1 49 fd 7c 0c 92 ae 3c e3 b1 a2 b6 54 0e e9 e0 fe 9e 6f c4 f0 70 6c 77 df 41 c9 17 3d 09 bb 28 83 99 89 d9 51 3b 3d b6 ca 55 16 f4 70 95 f8 76 18 40 a9 d3 65 96 20 17 a5 89 75 23 3c 3f c6 c1 22 25 24 61 ba d7 a6 1b 07 21 fc df fe a2 ef 67 7d 94 d1 10 3c e5 0f cb b6 8c 7b 48 c4 da bc e4 3f ab ce 2a 98 44 e0 3a 61 92 2e c8 6a 94 6c e1 77 88 62 66 ea 8f 3d 58 e5 bd a4 a9 60 0b 31 1d e7 60 19 b7 64 2a 4c 91 99 78 f4 03 ac de 65 ce 42 c7 2a b1 f3 75 4d c4 cd e1 1a 2a b1 4a 91 9b a4 d5 dd af f9 a8 68 45 1b cd be de c9 53 77 ee 70 12 89 27 19 38 f1 66 2e c8 88 54 a8 43 b3 cd d4 82 ca 5b 51 d1 9d 26 85 e6 23 74 9e 66 dd 22 9d c5 4d 49 e0 5a 58 6c da 0d ac af 07 1a a3 f2 e4 1e 33 cb 6a c6 30 3b f2 ec da f9 da 35 88 a6 fd 05 40 Data Ascii: /HSI\|<ToplwA=(Q;=Upv@e u#<?"%$a!g}<{H?D:a.jlwbf=X`1`dLxeBuMJhESwp'8f.TC[Q&#tf"MIZXl3j0;5@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50206	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	526	OUT	GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 2940 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	733	IN	Data Raw: 52 49 46 46 74 0b 00 00 57 45 42 50 56 50 38 4c 68 0b 00 00 2f ff c0 3f 00 1e 7b ff ff a9 6d 23 3d ff 87 53 f2 8c 02 05 87 b1 90 94 c2 6e 4a 61 76 c3 2e 26 f2 57 33 3f fd b5 7b 4c f3 72 97 79 b7 dc 39 a6 dc 6b 8e 61 0e 16 8f 19 7c e4 65 5e fd 96 b2 bc 2b 81 b6 6d d3 ad 4e 6d 3b b6 9d f4 db b6 6d db b6 6d db 46 6c d5 b6 6d db 76 ff fb 2f 89 6d 24 47 92 14 75 26 d6 9b 9b db ac ce e8 ac 7f 99 28 f6 f5 31 ff f9 98 ff e8 4f c0 95 38 61 97 82 b3 65 25 71 3d 76 29 13 48 c4 16 b0 e9 49 6d 8f bb 35 47 22 07 13 46 52 86 53 86 93 8e c7 1e 8e e8 d1 ec ba 96 9e b2 19 ac b0 0e 98 31 4a c0 f6 02 f6 bd 1f 4d cf 0d e6 46 56 d1 64 41 af be 76 cd 26 10 5e 85 98 7c bc d9 f4 fc 81 18 0e a7 f9 a6 ce df c5 94 45 99 30 06 49 d9 6d a5 0f 25 73 1e ca a8 36 83 c4 c7 de 3b d9 08 1d Data Ascii: RIFFtWEBPVP8Lh/?{m#=SnJav.&W3?{Lry9ka\|e^+mNm;mmFlmv/m$Gu&(1O8ae%q=v)HIm5G"FRS1JMFVdAv&^\|E0Im%s6;
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 85 22 8c b1 2c 4b 6d d1 31 9a 05 61 aa d8 38 67 47 d2 e3 a9 f6 2e 48 60 08 5d 12 e1 e6 dc 95 f6 57 30 3a c5 f7 90 8a f0 ea fc 83 f2 d0 f2 2c 5b 41 6b e9 61 b2 d5 30 0f b5 e9 29 01 87 d2 94 65 f5 32 86 f0 55 e1 e5 1c d4 f6 87 f8 d8 e9 36 55 c0 05 f0 fe 64 a1 95 50 5b 26 b4 b9 21 08 8f 9e f3 75 b4 23 69 b0 d5 78 40 d2 e8 0c 5a ed ba c9 10 0e 7e 17 be 67 23 10 fb 3f c0 18 88 a7 d3 da bf 61 08 a0 80 fd 19 cd cc b9 41 53 22 92 0b 65 c0 10 c6 73 56 28 24 ed 27 60 6b f7 bd 57 89 e4 c1 6e 31 86 f6 17 12 ed 1c dc be 40 65 ed 9d cc d6 e3 36 92 70 cb c5 02 91 cd 56 fc 3e ca 8e 67 c3 38 f8 45 f8 d3 58 74 1c 8b c5 b0 f7 c5 0a de b9 1f 77 fc 82 31 53 66 68 2c 3a 72 83 f8 87 d0 85 72 5b 9c dd ca 5b a7 b0 d9 fa 38 43 b8 cd 46 74 8d f2 61 e1 4c 61 d1 f1 09 0c 6d 8f 25 76 Data Ascii: ",Km1a8gG.H`]W0:,[Aka0)e2U6UdP[&!u#ix@Z~g#?aAS"esV($'`kWn1@e6pV>g8EXtw1Sfh,:rr[[8CFtaLam%v
2024-04-19 14:07:06 UTC	952	IN	Data Raw: 2c 99 bf 38 9e 33 92 3a 94 74 3c e6 53 a7 f5 ad 91 94 2f 4f e6 cf 94 ad 71 08 11 92 c2 2b 99 d1 2c 15 a1 75 24 57 69 23 f4 c9 b5 84 96 14 de 66 38 f8 59 4b 68 49 e1 d9 b7 29 5b 6f 4b aa 16 eb fb 3b e6 2f 76 e9 07 35 29 3c 49 0b 60 b2 58 3f a8 49 e1 05 7c 7b 48 ad dd 22 27 85 57 b2 ad e7 b4 83 9e 71 04 02 55 ee f9 91 66 8b a0 5b b1 02 ae 39 1a ae 17 51 a4 f0 74 a8 41 5b ce 2c f7 51 c4 74 89 d1 ea 14 a9 5b 5e d0 69 e1 53 78 9a bc db a4 ed 41 6e 58 1f a0 29 3c ad f4 fd 72 bb 91 14 7d a0 6a 1c c1 af cd 73 da bc 49 ba c6 11 48 bc fd bb 26 60 53 78 ba 3d d1 13 43 ae d7 68 87 70 eb 96 a8 60 69 9f cb 9c 64 ab a9 e1 3f ba d9 80 59 b3 8a 9e cd a7 6e e7 d3 f9 23 e1 4c 8e da 9e 4a 8c 6e b3 a5 28 da 7c ea f5 b6 76 df 65 82 54 06 81 40 af d9 52 14 d1 25 be 47 a7 ad 47 Data Ascii: ,83:t<S/Oq+,u$Wi#f8YKhI)[oK;/v5)<I`X?I\|{H"'WqUf[9QtA[,Qt[^iSxAnX)<r}jsIH&`Sx=Chp`id?Yn#LJn(\|veT@R%GG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50207	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	524	OUT	GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 41526 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:38:46 GMT Expires: Sat, 20 Apr 2024 13:38:46 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1700 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	721	IN	Data Raw: 52 49 46 46 2e a2 00 00 57 45 42 50 56 50 38 4c 22 a2 00 00 2f ff c0 3f 10 4d 40 8c 6c 37 6e 33 20 a0 8f f0 01 e9 bf 60 1e be 1a 88 e8 ff 04 98 99 db db 23 22 cc ed fd a1 88 78 6e ba 97 ee 0b c6 18 c3 bb 67 44 84 6c db 6d 56 bb 35 86 5b 97 5d b6 bb 90 94 92 52 4f 6a b8 5d 57 7b 6a 9f 48 f9 52 b7 0b 60 93 29 16 ef 0b 77 01 d2 23 00 09 d4 6e d7 62 f9 93 40 20 91 ce b5 40 62 9f 20 d0 04 a4 c3 7a c8 4c 40 62 5d 72 11 92 12 24 e9 e1 28 70 7b 63 b0 8a 04 f0 e7 1d 13 10 6b e6 78 47 2d c7 4f 69 be 12 9b 9e b9 4c 80 bf 5d ed ea 00 20 81 94 a7 5e f6 3d 93 e3 a9 5f 79 3e c6 2a 04 87 b2 75 bc b0 3d f4 a6 76 63 82 60 be 50 76 d9 3b 5b ab de 31 ca d6 09 a2 ea ff 1d e3 79 24 8d 65 8c cd 78 05 60 44 48 3a 98 f9 45 55 21 99 47 98 99 9d 6e 6b 6b f6 3b dd 77 11 6f f0 d5 6c Data Ascii: RIFF.WEBPVP8L"/?M@l7n3 `#"xngDlmV5[]ROj]W{jHR`)w#nb@ @b zL@b]r$(p{ckxG-OiL] ^=_y>*u=vc`Pv;[1y$ex`DH:EU!Gnkk;wol
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 8f f0 87 8d 08 4c 04 81 c0 e5 0b 48 2a 48 24 72 9c 0e 4a 87 e4 00 0e 20 7a 4a 72 00 fb 50 12 89 a4 1e f9 28 66 b0 3e 43 22 2d 5d 3a 24 1b d5 84 0c 1c 40 60 3b cf 60 86 97 1d aa 4c 44 6e 47 20 d4 76 b5 5d 05 02 f5 90 a3 2d 31 a4 4a 4f 04 11 6c 0f 26 82 cd 85 cd bc 06 c1 11 04 02 81 cd bc 99 f7 5d f0 cc 39 0a a4 a5 25 eb 11 ae 0a 02 01 b9 d5 2d a5 63 cd cc 92 91 3f 48 24 55 3a 13 93 30 41 5a d2 6d 2b b6 62 3d 47 38 1a a2 a1 b8 2a 46 41 41 41 e1 6e 72 f3 51 08 54 54 00 04 2a bd 40 45 c5 af 63 ef 8f a4 75 5e c5 85 0b 0a af e2 8a 7b b3 68 1f 8f d1 5f c8 fb e3 d8 ac 75 72 f3 39 af e2 c2 85 4b e3 32 70 b1 75 b8 a3 cc ca 2f fd 15 68 8d 62 5f a5 2a 1e e1 55 1c b5 4a e3 3d 37 dd e1 11 9b d9 40 7f 89 6e c3 63 8c 2b c6 18 6f be e4 31 1e 63 fc 97 a8 d2 27 d9 91 18 63 Data Ascii: LHH$rJ zJrP(f>C"-]:$@`;`LDnG v]-1JOl&]9%-c?H$U:0AZm+b=G8FAAAnrQTT@Ecu^{h_ur9K2pu/hb_UJ=7@nc+o1c'c
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 40 12 35 8b 73 fe ff 5f 46 66 9a 0a 11 42 28 6c db 06 69 c7 7b 80 3e b0 f6 fe bf ea c8 cd f9 1f b8 0e 96 f1 61 1f f5 4d f4 59 5f 44 5f 6c 5f 07 3f 4d 9f 86 93 d9 0b e7 9c 7f b9 6f e1 ca 6a 3d 61 ba 1a 5d b9 70 c3 34 3b 1d e9 6a 65 d5 9a 7a b6 10 86 25 b9 5a 70 4a cb e0 e2 6d 18 3c e1 c4 45 2b 9c cc a8 b2 42 2e ba 61 4e 5c 5a 50 36 cc e4 a6 e0 6e 38 0b b2 b4 70 35 92 e4 46 92 1c 49 72 8f ac ae d9 b9 f7 09 78 72 9f 0a 9c b3 d9 a9 90 1d 49 92 25 29 19 59 d5 bb f7 e2 a1 03 fa 8b 81 10 08 c0 2f fc 1d ec 4e 77 25 a3 da b6 95 6c 2c 00 fd d3 10 c0 61 ca 8c 02 ee a2 30 69 03 26 9d b7 28 02 58 ac 3c f1 47 de 32 76 97 8b 55 7b fb d9 65 5e 28 2b cd 8c 31 95 13 08 10 96 57 35 e0 13 e3 b2 3e 20 5b 21 49 9f 1b d6 09 4f 7c 24 cf 54 f7 de c0 9a e8 86 ba e8 13 7a 34 84 5e Data Ascii: @5s_FfB(li{>aMY_D_l_?Moj=a]p4;jez%ZpJm<E+B.aN\ZP6n8p5FIrxrI%)Y/Nw%l,a0i&(X<G2vU{e^(+1W5> [!IO\|$Tz4^
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 47 1c c7 01 1e 71 29 d9 0c db 59 ca 45 92 c7 53 93 b6 e3 65 bc 7a b7 01 9c b5 ba 75 2f 84 db 94 49 b9 dd 09 c8 6d a9 a5 aa 1f 8c b8 ac 46 ce 50 6e 30 0a 39 a4 ba b7 32 75 32 c7 1e ee 02 52 98 d1 60 56 96 7d 63 e2 69 34 73 e4 46 22 85 98 47 79 d5 0b 72 ba 81 2d 37 27 25 4e 84 da ed a6 bd e9 d4 27 d4 37 f0 18 92 f3 4a 03 a0 70 d9 7e b5 db c8 c6 f5 12 80 41 c9 6a 4b ed 24 54 ce 22 14 fa 8f f3 5b fe 68 df cb b7 82 91 ea 0d ae 44 13 c4 1c 1d 15 29 4f 60 8b b6 31 d5 76 47 aa 49 5a c2 5b 7f a3 3a 33 e8 cd 8c ac db 23 6e 3d 15 d9 d9 d1 9a 83 99 90 aa fa 13 bb 0e 57 ca 4e 36 9c f0 ba 35 5d c3 89 f5 33 c8 39 2b b0 c7 a0 a1 23 e8 64 a3 c1 b6 9d 0d 6b 29 bb b9 d1 b4 40 94 cb 97 3d 23 c5 6e 0e 53 aa 6a fb 6c b7 3a 8d 6c d5 47 54 a0 c5 6c 23 5b bd 92 ed d7 45 dd 1e a4 Data Ascii: Gq)YESezu/ImFPn092u2R`V}ci4sF"Gyr-7'%N'7Jp~AjK$T"[hD)O`1vGIZ[:3#n=WN65]39+#dk)@=#nSjl:lGTl#[E
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: b3 c0 a5 2c e1 82 66 21 79 3d 2f eb 9e 87 46 b7 33 9e c7 2d 04 00 33 57 a7 68 4b 10 4a e9 42 2b 28 43 ef 12 74 e0 79 ba 18 96 0d 20 10 a3 6d 8c b7 57 67 a3 50 dc ed dc 46 c1 46 2b 34 8e a1 3e 36 ae 1b 86 14 45 c9 8d 95 50 cd 42 8c 0a 17 00 2a 64 bb a4 db b6 e1 28 96 c8 2b 8f 77 19 32 d6 8b fd c2 ba 8b b0 eb 91 e4 2c 6a 23 cb d7 62 8e b2 33 44 99 97 63 db 38 83 a4 c0 42 4c 8b 9e a4 d6 c6 0a 8c 34 d2 65 fe 59 3d 99 e9 52 39 d0 f0 6f 2f 2f a6 1b 47 4d 70 b8 06 a6 66 0b ba 28 02 44 02 84 03 94 02 a4 1c 34 d2 3b 76 69 1b be e7 6a 8c ac 99 7a 7b 3a a1 57 8b 15 83 a6 66 30 a7 5d 3a f4 dc 13 1f 73 e9 4d 48 19 6c a6 54 ab 8a 57 48 23 9d 1d 00 db 59 7d 5a bd 6c 1a 50 f6 d2 2b c2 54 07 af 86 6f 00 93 bb 62 22 8a b0 a2 02 a0 f8 39 a0 e6 1b c0 94 2d a1 66 3e 6a 49 48 Data Ascii: ,f!y=/F3-3WhKJB+(Cty mWgPFF+4>6EPB*d(+w2,j#b3Dc8BL4eY=R9o//GMpf(D4;vijz{:Wf0]:sMHlTWH#Y}ZlP+Tob"9-f>jIH
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 55 bf e1 ad 0c 31 26 06 32 1c c3 ba 9c 75 6e 86 96 98 25 19 77 98 59 a3 a2 88 26 ac 0d 63 61 60 22 61 21 54 91 44 2c c2 2d 2c 52 d2 41 16 7c 6c 77 29 54 c2 d1 a5 66 c5 0f 7c 79 9a ec ad 14 f0 f5 5e fb 84 80 4e a0 08 dd 88 e0 29 ac 7e ca 9c 74 7b 71 3a 4e c6 89 b8 f0 2a b8 12 2e 8d bf 99 a0 8d 7c 79 a3 31 87 8e b6 fc b6 fa 53 ff 37 ef 0c 0c aa 95 60 b8 98 5e 84 d2 e8 a6 71 bc 67 c9 05 27 12 05 33 05 33 87 70 16 53 c1 0c 91 cd 82 dd 5c 8f 97 c7 70 66 d7 13 e5 5a a4 1c d2 09 3a 66 60 1b d6 2c af 56 ab 63 65 19 f1 3c b9 5d d0 5a 1d 3b 5c d2 ca f6 a9 57 7a 84 a3 0e 17 1b 55 68 f5 19 aa 9a 36 f7 36 b9 bf b0 05 28 51 6c 7d b9 65 c4 90 46 a5 46 a7 30 4d 2d f2 a3 31 8a 24 c1 42 6c 24 69 b9 cd 47 ce c4 6c c5 58 43 ce 1d 95 31 db 55 09 52 1a f2 07 9d 1a 8b a2 4a 31 Data Ascii: U1&2un%wY&ca`"a!TD,-,RA\|lw)Tf\|y^N)~t{q:N*.\|y1S7`^qg'33pS\pfZ:f`,Vce<]Z;\WzUh66(Ql}eFF0M-1$Bl$iGlXC1URJ1
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: e7 e4 23 b6 d6 ff 6d 81 c4 fc 56 3b 74 77 d8 7e 6e 4c 32 45 30 7f e0 e1 cc 3d b1 6c 1d 16 e8 32 1a b5 7a 0e 7a b5 9c 57 b3 a5 95 dc c0 9c cd 95 84 9c 9a 6d 7b 59 ae 2d aa 1e 26 6e 6d c8 b6 b7 c8 51 73 24 4a 76 8b 22 47 b9 d1 2a d9 5e cd b1 31 6c cf ab 43 56 c5 a3 82 19 4b 9e d2 28 88 80 36 55 b1 6d d8 58 d0 5f 01 ff 5e 73 bd 9b a5 89 b7 3f 15 ea 0f d7 e3 00 2d 3b c0 59 e4 42 4c f6 a2 af 21 d2 77 60 bb 63 9c fd 55 f2 93 7f 62 8f 0f 29 82 50 f4 ba a0 5e ec 83 62 1a fb d3 c1 40 b0 64 fc 0c 53 66 86 7c c5 c3 7e 4d 36 73 c9 f9 01 a7 3d 60 75 7b 9c 6e 8f 9c 2d 5c 7f 83 61 d1 b1 fb ae a9 56 19 52 2a ad a2 c6 08 9e e1 07 60 54 56 57 fc 27 a1 62 40 0d 07 01 54 a3 74 8e 2f d7 fb 80 ab de ec e9 f3 e7 3c 92 7f 2a a4 d7 79 e4 38 b1 78 61 13 e2 b6 38 2b d2 c6 91 9b 48 Data Ascii: #mV;tw~nL2E0=l2zzWm{Y-&nmQs$Jv"G^1lCVK(6UmX_^s?-;YBL!w`cUb)P^b@dSf\|~M6s=`u{n-\aVR`TVW'b@Tt/<*y8xa8+H
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 94 30 1a 39 c0 d0 a3 21 3d 30 60 b4 c0 0b b0 c7 15 aa 32 94 4e 92 33 4d dc 26 92 f6 08 24 b1 19 bf 2e 3a f9 70 6c 3e a8 43 dc f9 20 01 c0 07 dd b3 69 f7 2f 58 24 0a b0 98 46 22 10 d1 fa 84 21 4c d4 0e 7a c0 40 8b 01 0c bc 81 f1 30 d0 8b 36 61 99 81 f1 06 11 47 0e 9b 88 47 30 71 ef 08 98 3c 0b 4a c9 fa f6 bf e4 ff ea eb 97 1f 3d 3e fe e8 91 c3 ff 7f 87 d9 ff fa a7 a6 bf fe 81 f5 9b df 90 3f ff 29 f9 eb 5f 6b fe e3 df cd ff d5 ef 1c ff cb bb 1d f9 ab d1 82 7d 6b e6 0d 4f 40 d4 24 91 6b 56 7a 28 48 2d 87 ab 5f 69 cf f9 64 18 30 85 e4 13 b7 5a 97 5d f0 a1 2e f2 28 66 51 6c 24 84 d0 c3 9c 51 aa cf 44 64 03 ad 8d 46 56 1c 54 1b fb 23 dd 63 11 76 58 05 65 7f a8 f8 51 5b 72 80 86 b0 21 da ba 87 22 15 3a 69 eb ac 08 88 48 b4 8a 45 92 94 63 d9 1e b0 1f 49 78 7e 4b Data Ascii: 09!=0`2N3M&$.:pl>C i/X$F"!Lz@06aGG0q<J=>?)_k}kO@$kVz(H-_id0Z].(fQl$QDdFVT#cvXeQ[r!":iHEcIx~K
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 3b 83 76 76 30 6d 14 33 33 85 99 f9 e8 4e d6 26 a7 93 86 61 6a 6c d7 63 3a 98 ed f6 48 c0 19 86 2d dc ef 6b 6d 89 1d d2 b3 da 49 36 e4 8f 0f dd 04 62 1d 8b 35 84 02 17 2c 2e 98 02 04 ad 57 c4 c5 7d 6a ab 60 73 3b 71 2c b7 4f 49 06 96 12 5f a9 41 13 e8 af b8 f3 be 9a ba fa d8 cf 9d ef 6c 2c 6e d4 5b dc 1e f4 50 54 a7 79 b2 2d 49 17 e4 77 e7 71 3e 6e 98 90 48 3a 25 b7 b1 a4 e4 55 4c 90 41 ea 68 ca 3d ce 25 fb 27 30 97 ec 63 b5 20 27 ec e1 36 57 03 87 2b 2c d6 5f 33 b8 c1 53 20 73 af 72 a9 18 4a 81 10 a6 85 50 e0 09 2d ea 3d e7 bb df d3 2e 8e 56 dc d9 be df 31 62 ee 1b f7 af 70 ef 85 98 d1 00 a6 5b f5 61 e2 8b 00 aa d8 9f 31 88 2b 07 45 2c ba 80 81 19 c6 f7 c7 b8 69 fc ab 01 50 af 41 a9 2a ac c6 8d c8 95 1c 8d 74 fd 58 48 9c 10 57 88 49 c0 89 92 24 03 c9 e8 Data Ascii: ;vv0m33N&ajlc:H-kmI6b5,.W}j`s;q,OI_Al,n[PTy-Iwq>nH:%ULAh=%'0c '6W+,_3S srJP-=.V1bp[a1+E,iPA*tXHWI$
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 01 df bd 87 e7 93 46 73 01 4e 94 aa fa fb 5e 92 0f 3c 95 e4 2e 7e 95 db ec c4 f3 f0 6d e9 a1 b4 74 1d ef 0d aa 6f 97 e1 fb e2 3d bc 7d 63 e4 e4 37 cf 94 e4 eb 04 dd 52 8c 4c 52 c6 eb 2b 6f fe 6b 47 1d 93 7c 1a be fe 9c 1c 17 e0 83 8e 0b af 5e bf 70 e6 d2 19 ee df 4f a1 fb 3f 55 b3 0f 47 b0 c2 27 ec c9 27 3c 53 7b ef 95 de e4 c8 f9 b7 ce 5c 90 bb fc bd b7 fe f5 c3 ec 1b b3 7a 90 cb 0e 3d 19 f6 44 47 f4 c7 07 db b4 da ee 14 18 ec 4a e4 df 32 6f b5 a1 8e 75 9a c3 8f a8 20 83 39 a2 aa 15 23 8b d6 d3 c4 59 a4 5e fd 32 39 a5 ad f2 21 73 da 21 c9 8a 53 cb 8a 9c b2 b2 2d 27 18 29 8f 91 62 6d 6b 53 57 ed d4 3f 99 65 f4 ca 6e 2f 27 eb 19 e8 0e 23 84 88 ff 56 db 7c be fa 83 3e 40 7a 56 e1 3f 8b 48 90 7d f4 83 39 a2 52 a8 70 14 5c 28 c0 27 5d 6e fd 16 5c 00 ed eb 9c Data Ascii: FsN^<.~mto=}c7RLR+okG\|^pO?UG''<S{\z=DGJ2ou 9#Y^29!s!S-')bmkSW?en/'#V\|>@zV?H}9Rp\(']n\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50209	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	525	OUT	GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 7576 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	733	IN	Data Raw: 52 49 46 46 90 1d 00 00 57 45 42 50 56 50 38 4c 84 1d 00 00 2f ff c0 3f 00 09 48 92 e4 c6 8d a2 d1 80 01 04 f0 ff 0f 73 9f f5 1a d1 ff 09 c0 ff d2 7d a2 97 48 b8 cb 00 d5 1b 24 a1 ee 31 20 f4 8c 18 3f 1e 01 80 96 7a b4 f6 c1 32 95 5b b2 21 e2 80 0d 72 ab 3c c2 92 a4 c8 41 d5 02 6a f9 a6 34 93 2f 44 3c 1e a5 18 df 98 11 d3 3e 01 50 80 54 27 ee 2c a5 aa 66 7d 4b cc 6e 4c 7b a8 30 99 34 79 a0 c4 34 22 02 00 79 04 9d 61 c2 1b 50 d5 41 23 b2 ef 6c 76 bf fa 63 2f a0 48 92 ac da ca 78 8a 4f 3c 66 b8 b4 ff 75 3d f9 15 da 7b c8 3d ab c6 6d db 88 53 91 b1 d7 ff df 78 8e 41 01 47 92 24 45 92 77 55 93 ad 34 e2 ee 1e 33 9f c4 f8 ff 27 a1 d0 ff 09 50 0f f1 49 92 d4 3d 67 f0 c5 9b 6a 04 41 62 cb 1e d4 27 28 00 30 8d bb 18 65 2d cb 08 82 05 00 cb 9a bd fb 08 06 9d 55 1e Data Ascii: RIFFWEBPVP8L/?Hs}H$1 ?z2[!r<Aj4/D<>PT',f}KnL{04y4"yaPA#lvc/HxO<fu={=mSxAG$EwU43'PI=gjAb'(0e-U
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 20 06 68 34 bf b5 c6 a4 26 6b db 88 03 50 cb 3f da a5 16 d6 8a c4 02 92 24 49 52 6c 27 b3 aa 07 c4 bc e3 15 f3 4a 57 d6 09 74 00 9d 80 99 99 3f 4a ea 99 ee aa 94 5b db b6 aa 2d 6b ed 7b df af fd 38 10 51 00 44 e4 d4 e0 b1 77 41 6e b5 f1 67 c8 93 1d 13 20 01 26 f9 7f 92 ff 27 f9 5f c7 6b 29 6f 24 d8 40 ac 89 70 35 85 8d 94 37 e2 6f a6 cc c3 6d 89 a8 97 2b 00 dc 34 74 92 e4 26 2d 8e c6 d1 64 24 d0 38 95 36 b1 78 62 71 27 52 3b 8e ba 5d a0 00 d1 b1 14 8e a4 b0 37 07 36 e6 ff f5 78 9b c3 cb 63 e3 30 78 4c 1c 56 0e 13 87 ce a1 31 84 83 08 00 86 92 20 24 11 97 a8 91 88 8a 04 1f 2e 11 11 a9 10 b9 95 45 76 16 83 f3 19 95 42 c3 6c ba 33 f4 2e 4b 40 e1 d2 e9 44 f7 7f ae de ea b3 2f ae f5 ea 0e df 99 5d 23 38 53 8b 3f 80 ee a2 1e 82 2f 12 15 09 7f 2f 40 b5 8f 33 79 Data Ascii: h4&kP?$IRl'JWt?J[-k{8QDwAng &'_k)o$@p57om+4t&-d$86xbq'R;]76xc0xLV1 $.EvBl3.K@D/]#8S?//@3y
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c7 c2 80 4a 26 5f 6f c5 9c 1e a2 a1 f3 8b 74 03 d6 62 ac 62 80 40 53 d2 0e b6 8d cf e4 8c 6a 23 45 0e f9 82 e4 52 9b 08 c9 64 1a cf c7 95 86 40 a8 32 1a b4 c7 6a d8 95 60 99 ae a7 36 64 61 59 f8 e0 da 41 9f 03 b5 73 16 39 a9 81 22 59 eb e4 0e 7a c6 b9 3d 4e db 13 01 39 62 46 60 f8 b3 39 4b 05 fd fa 9b 76 ae d5 23 41 b2 a5 b9 1c c9 e3 35 06 69 92 98 00 89 09 09 26 40 9a 80 4c f2 41 9a 58 c8 a4 eb d7 e6 6a 54 16 81 62 8a ca b4 ef ab ce 5a 07 8d 8b 71 21 c4 14 81 1d 0c 09 11 06 a9 a9 4c af c9 71 5f 80 08 8b a4 5b 3a 01 5c d8 d3 bd 7f c0 23 2c d3 5a 00 25 63 59 16 06 61 85 73 97 01 8b c8 60 94 45 be 9e 0f d5 88 63 98 ba 8c 8c bb cc 33 2e 46 ca 88 0a b2 63 1c 33 b5 01 21 a9 56 33 bd 06 bc 34 b4 18 27 5f 68 10 83 4b ff 16 62 a4 37 fb 3e 2e 65 35 20 73 e5 49 e2 Data Ascii: J&_otbb@Sj#ERd@2j`6daYAs9"Yz=N9bF`9Kv#A5i&@LAXjTbZq!Lq_[:\#,Z%cYas`Ec3.Fc3!V34'_hKb7>.e5 sI
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 74 f8 85 f4 15 ca 1f 06 21 d8 2e 62 ea 14 71 1c d3 4a 66 36 44 08 1e 0e 31 9a ce f0 e6 4c 8a e5 4c 34 28 33 88 be cf 15 f2 40 f2 b2 6e e7 0c 85 69 80 4b 78 e0 e6 5c 18 cf 80 8c 3c ba d1 a7 df 4f 30 89 5c 7a cd 62 d6 53 51 ee 05 2f 80 9d 8b 01 02 25 a6 80 f2 66 4f 6c 16 4b 0e 2c 30 e3 8e c3 6b 04 3b c8 54 a8 da 11 29 7d 2d 52 c0 ea 0b 64 54 4d a7 a0 30 25 08 d2 40 ff fb a3 36 fc 02 b2 c6 b9 e5 f6 b6 aa 8e 12 7a 65 72 b4 31 d0 0f 15 db cf ba 83 0b 52 a8 c5 ec c4 62 80 40 89 14 c6 c7 df 7e af ef 21 79 c0 22 3d 56 f6 d1 2b ba 18 82 49 78 18 09 fa 41 65 dc 0f 12 bb 81 77 77 48 00 89 4e 90 fa 29 23 b9 95 b3 31 21 f3 21 07 ae ed 63 f4 a9 0a 35 1c da 3b 06 a8 60 6d cc da e4 13 23 77 54 a8 8d da bc f1 a7 6b f4 4f ff 78 64 3e fd a7 2b a1 c6 78 7f 87 32 41 40 42 41 Data Ascii: t!.bqJf6D1LL4(3@niKx\<O0\zbSQ/%fOlK,0k;T)}-RdTM0%@6zer1Rb@~!y"=V+IxAewwHN)#1!!c5;`m#wTkOxd>+x2A@BA
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ad 6d 6d 40 0d 5b b2 08 ad 8e 2d 84 41 06 0c 72 c6 ea 80 5b f3 cd 23 7d d6 c9 fd a6 1a 24 d5 30 83 56 80 0b 22 83 d9 d9 02 f0 9c f3 3f 79 e1 f5 75 40 8d 12 b1 39 05 b1 02 81 e9 04 04 88 0c 42 2c e7 4d e3 dc a9 e3 d4 d1 63 ba 2f 5e 77 18 d5 a2 95 00 a1 60 67 03 42 d0 df d2 c5 8d be f0 c6 5a 85 ec 8f 6c 6b 43 2b 67 93 b1 ed 1d 20 03 28 cf b5 f5 d7 e7 9d df d7 67 d8 9f 1e 31 5f ec 40 2b 24 8c 72 18 ab b0 b3 25 2e 68 8e 39 99 f8 11 5c 00 2a 2d 83 93 d4 9d 88 65 13 32 01 d8 14 30 d4 08 73 3e 6a de ff c4 bb 80 ad 16 24 d6 89 b4 12 2a 0d 31 04 66 bb d9 b1 ce 08 eb b4 ea cf e1 0d a8 75 df b8 c6 4e 2b a4 85 e6 ea 1a 50 00 42 02 6a 64 3e 6f 40 ed 17 8a f5 06 43 19 f7 a9 06 64 74 19 b4 92 4c 98 96 b0 0c 66 bb e6 ff 56 fd 63 74 b2 d5 a6 0a 42 46 76 53 87 56 30 47 92 Data Ascii: mm@[-Ar[#}$0V"?yu@9B,Mc/^w`gBZlkC+g (g1_@+$r%.h9\-e20s>j$1fuN+PBjd>o@CdtLfVctBFvSV0G
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 65 85 01 fa 03 f0 a7 55 36 a6 6e 2d fd ad ad 6c b8 81 91 4b 3a 71 97 26 26 f7 07 d6 8d 26 8f 8a e1 60 98 90 4e d2 24 06 fb 88 52 fe 76 44 6b 67 f6 e6 18 81 3f dd 08 af 95 32 12 a1 02 b5 64 bf 7e f4 bc 65 4f d6 35 d3 35 8f 57 1c e1 c9 c4 43 78 ed 7f 1b 48 13 f3 d4 1d 95 07 78 6c ee e9 db ff f1 b7 72 9c 90 1c 6d 60 ba b6 cb 00 16 b8 cb 16 1c 61 97 e2 52 99 65 36 92 6f 9e 1d 94 73 e0 3c b8 b1 2a 5e d1 a3 80 05 1a 3f 49 ea 3d 5b 1c 59 0f 7d ef b7 bc fb 42 af f6 99 c7 ea 9a e1 8e db dd 25 f8 69 b5 67 a7 63 7d ea ad 2a e0 78 42 9a 44 5b 91 5f c1 39 c8 b1 28 ca 25 d3 91 8b da 68 a3 64 97 55 99 b9 ac ca 9b e3 f1 a7 e2 ac 7c 0c 86 43 29 9c 0a 20 34 76 5b 38 dd 0f 6f 85 de 0f 98 f6 a4 47 1c 51 f8 42 b6 7b ff 67 a3 8d 04 97 80 e4 b7 e6 68 c4 47 9e 15 97 fe 1b dc 4f Data Ascii: eU6n-lK:q&&&`N$RvDkg?2d~eO55WCxHxlrm`aRe6os<^?I=[Y}B%igc}xBD[_9(%hdU\|C) 4v[8oGQB{ghGO
2024-04-19 14:07:06 UTC	568	IN	Data Raw: 44 bd 2a 19 4a 79 be 94 3e da 46 74 00 22 6c 82 ab 2f 73 55 6e 74 3b b8 85 05 03 a4 3e 62 d5 e7 12 e1 f3 0a c3 83 5f 71 8c 60 d5 da 89 08 02 03 be aa 89 a8 22 67 c9 3d 9f 5d 69 d3 42 50 db 81 71 c2 7a ec 45 74 7f a1 d1 4c 89 d2 38 b7 87 87 d6 0c 6c 37 d8 c6 46 5b f5 a8 17 de 72 fb f3 d7 de 97 0d 8a 27 29 fd dc ed 83 97 a9 ef 2f 00 0f 25 21 65 95 4d b0 05 bb 2e 3a c0 01 04 ee b3 1a d5 db b9 64 9b 7b cb 7d 8f 80 ec e3 b9 bb 2c 9f de a2 7d 39 27 91 e0 2e 1e 43 41 78 6a f1 d3 7e 7e 9d 12 36 c0 b7 ec 31 dd b0 11 36 6d e3 2b a1 5b 5f f5 d9 ce 7b 9c fd fa ba 8b af 20 7d ab 05 d7 f1 7f 6f 5a cf 6c 14 69 99 7d 94 f3 eb e6 85 f8 f0 b7 ca 62 76 89 63 0e 47 0d 8b 98 61 13 80 8d 3f f8 e4 09 3e e8 dc af 77 99 9f f1 65 ff 41 1c 5a c9 3e be 03 3f cc eb c4 83 80 5b 21 78 Data Ascii: D*Jy>Ft"l/sUnt;>b_q`"g=]iBPqzEtL8l7F[r')/%!eM.:d{},}9'.CAxj~~616m+[_{ }oZli}bvcGa?>weAZ>?[!x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50208	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	526	OUT	GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 10446 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 c6 28 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 7e 28 00 00 2f ff c0 3f 00 55 e9 bd ff 7f 99 23 d9 a9 65 86 61 66 9e e6 56 73 8b 55 25 15 4b ea ee 1d 5c 1a e6 59 ec 59 1c 66 9e e5 dd 1e 66 86 9e 1d 5a 66 e6 1d 86 66 ee 9e 1e 66 3c 5b f5 7b 7e f5 a8 25 3d 75 af 99 6d 19 3a 28 33 93 cc f6 1f c0 32 33 db 4a da cc 6c 97 a1 43 83 0c cb b9 e9 31 33 5d 86 32 64 cc 24 b3 3d 47 06 19 64 66 28 b3 9d 3e 89 41 c1 64 8e 98 64 de d8 50 a6 39 c7 6c cb 20 c3 c5 cc f4 98 19 e6 f2 bd 3a 47 f7 1f 30 83 42 33 28 30 46 ec 27 91 99 d9 2e c3 3f 30 0a 96 da f0 0f 58 81 99 71 49 66 0e f7 31 f4 85 90 49 86 c8 d9 65 e8 b3 a1 33 99 21 c3 9f a9 cc cc 76 99 19 9e c4 d4 86 10 95 ec e5 7b c3 de 40 86 78 9c c9 a0 60 52 b3 5d c6 3f 40 Data Ascii: RIFF(WEBPVP8XVP8L~(/?U#eafVsU%K\YYffZfff<[{~%=um:(323JlC13]2d$=Gdf(>AddP9l :G0B3(0F'.?0XqIf1Ie3!v{@x`R]?@
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 36 d5 68 ae 58 45 b1 b0 54 2d 64 9f ed b5 dc 76 4a 88 52 a4 94 6c 37 33 44 d0 d5 5f b6 76 35 38 5c f5 60 4e 57 a3 ee 3c fa 6c cf 43 3f 6e 62 b6 14 25 23 b3 36 9c 2b b2 ea 66 77 3d ae a5 73 b6 33 70 2a 6a 4b 88 d3 69 1e 38 0e 1e fc e0 4b 2a ba 06 5a b1 2a 0d aa 9f d8 2e 5f 76 df 76 1e 47 72 03 03 a7 aa 5a 2a e6 95 fa 65 a5 5f 97 98 94 9b 61 8c 22 80 4f aa bd ec 6d 6a 70 78 ab bd c6 62 05 3d e1 a3 52 db b9 12 b2 0c 65 d6 6b 91 4a 92 a1 fb 3d 3f 2d 51 72 6b 0b 5c 41 57 52 78 0f 1e f2 79 89 a2 73 49 bb 4d 65 4e e9 e0 1f b7 bc 24 87 ab 36 87 98 a3 14 0f 82 4f f2 8b 12 b1 c8 f0 80 60 84 88 0a c7 6d 64 98 31 17 0f 6e 7e 6c 5d 84 51 cf 20 15 0f 23 af 76 8e ca 5c 5b 03 6f ce 6d 20 e6 2a 45 89 22 85 ec 08 19 49 af a2 f9 6d 8f 36 6a 1d 03 87 b7 1a 29 ca 3c 77 8d 60 Data Ascii: 6hXET-dvJRl73D_v58\`NW<lC?nb%#6+fw=s3pjKi8KZ._vvGrZe_a"Omjpxb=RekJ=?-Qrk\AWRxysIMeN$6O`md1n~l]Q #v\[om *E"Im6j)<w`
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 8c 01 a6 76 f0 c1 53 41 fc 7d bf a9 3a 96 24 c8 50 12 74 3d 01 24 48 33 03 d5 b5 20 8f 84 bf b8 b8 5d e6 29 72 72 db 00 76 02 8a ab 9f b3 d4 cb 96 4b 2a ff 2b e2 11 b9 5f 7a 6b a4 01 b1 b0 64 f9 be cf fa 6a 23 12 3f 5a 5b 05 c4 0c 9a ee a4 b3 0a 59 a4 7f 10 7c 65 45 96 7a b8 c0 9e 66 87 d7 f2 60 15 38 c9 9a d7 b9 42 4e e8 ce a8 cf a8 12 21 37 99 08 c5 8c 80 7d a0 e0 03 0c 1e 31 78 04 f4 70 d8 c3 06 0f 1b f4 84 87 0f aa 45 7a b9 97 36 da b4 44 c4 ea 7a 9e 8b e7 01 d1 44 83 2a c8 7b b9 f9 31 5b 58 40 8c 52 f2 3e 26 09 d9 f1 36 64 80 e2 c1 53 6b 03 c4 ec 39 cb 36 4e 2a a6 79 f0 7c c3 10 73 e6 1c 62 d3 5d 4b 74 b4 ca c7 96 01 25 da f2 e5 d4 72 b4 d9 7c 55 36 46 8b ac 44 e4 bd 4c 33 0f 88 0d 01 54 41 56 ae 0c fb 20 5a 1c d6 c6 16 d7 5b 50 92 49 db 54 2c ca fe Data Ascii: vSA}:$Pt=$H3 ])rrvK+_zkdj#?Z[Y\|eEzf`8BN!7}1xpEz6DzD{1[X@R>&6dSk96N*y\|sb]Kt%r\|U6FDL3TAV Z[PIT,
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 95 88 88 f1 7a 82 f8 f6 43 ec ea 94 90 cd 0c 42 31 a8 36 99 07 97 13 48 72 10 27 ae d9 67 db 49 79 11 72 12 63 b0 86 8d 7f 23 2c cc e9 34 29 df 51 79 45 b4 5e 0b cc 9e 42 52 ec 8b 71 10 a7 53 50 82 48 e0 21 19 39 c2 28 58 96 23 94 1c e4 32 3b 96 e8 48 33 03 4e 4e 8b bc b6 eb 84 38 75 c5 4e 05 59 09 34 43 10 3c 58 5d 7d d9 62 92 51 cf c4 18 3c ba b9 47 f9 ed b4 02 d8 3a fb fb a5 26 26 65 25 18 81 13 69 7d 35 8f 5f 0c 8b b3 a8 24 25 64 a6 8a 59 f1 e1 fe d4 61 5a 84 c4 c1 7e cd fc 82 30 a3 e4 f1 7d 4b 74 c0 89 c7 97 bd b2 00 e2 ed 88 6f ac e8 5d 12 9d 40 9a f5 48 8b 50 2d f2 ee f5 8f e3 49 72 10 23 af c3 95 55 90 e7 30 6b 89 41 dd 52 1e c4 ef cb 67 0b 51 02 b4 2f ba c6 a5 79 f0 ea f2 69 3b 6a aa f5 0d b0 c9 24 dc 91 6b 56 f3 4a ea 96 f1 21 c0 83 8c 51 a2 a0 Data Ascii: zCB16Hr'gIyrc#,4)QyE^BRqSPH!9(X#2;H3NN8uNY4C<X]}bQ<G:&&e%i}5_$%dYaZ~0}Kto]@HP-Ir#U0kARgQ/yi;j$kVJ!Q
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 80 89 1e 2d f6 ce 57 16 0a 79 ff 2f 42 a8 07 ba 10 93 98 a8 4f 64 54 be e7 83 41 b9 be 2f c4 30 36 7d 22 13 a7 fa 08 1a a1 00 6c 2d c3 5c 48 45 1c 14 16 a7 05 86 0e 1e 2d e4 c0 13 85 81 49 ac 31 ef 41 19 e1 8f 32 17 42 48 55 4e ad 32 d5 a3 05 22 04 04 ab 28 46 8b 10 42 61 61 b0 3c 0c cb 5c 28 0e 21 43 8f 10 c4 60 45 02 e7 1a e7 49 29 ca e5 b0 bc 42 db b3 ed 1f c2 c6 40 3f 79 b4 56 cd 33 ea ff b8 ef 48 51 7d 35 bb 6b df 12 b4 8c 6d 97 93 a2 12 b5 aa 56 b1 3f 76 d4 35 c8 b0 cd e1 f0 11 c2 b0 80 d0 7a bd 3c 28 dc fc 21 f4 d8 2c 31 31 01 d8 ec 37 f6 1f e4 30 9b 6d 5a 14 c6 32 8a 08 51 e1 51 1a 2d 82 e4 fc c6 fa 6b 08 0f 8f 62 94 a9 be 71 d4 35 14 72 85 d0 a2 e4 a8 ec a8 44 96 a1 f5 d7 00 49 12 ee 4f b2 99 a3 6c cc 85 90 21 e4 0c af 7a 75 b3 27 7c 1a 2f d5 6c Data Ascii: -Wy/BOdTA/06}"l-\HE-I1A2BHUN2"(FBaa<\(!C`EI)B@?yV3HQ}5kmV?v5z<(!,1170mZ2QQ-kbq5rDIOl!zu'\|/l
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 41 2c 57 31 e0 79 fa 44 a6 89 49 fe d4 aa 70 33 95 ac e0 6d ca 95 a1 6c 71 ff b6 e6 fd 86 c5 e7 f1 50 bd ce bd 09 00 36 db 52 10 95 99 61 67 90 4f df cb e4 c4 f0 19 59 72 de e5 4a 02 ee 03 a5 a2 06 de ce f0 c2 bd cf cf 2f 1d 33 43 b9 6c 67 af a8 8e be 44 6f 54 a9 87 d9 ff 71 5b db 00 da c0 a2 37 77 89 d6 29 6e 57 30 ab b1 5d c7 17 80 ea 4c e3 fb 96 08 d9 0e 79 90 9e f1 ec 7a d2 99 a0 85 0d 35 90 be ac 97 35 cd 9c 1c 60 85 0a 1e 44 47 01 4b 48 43 4c 94 20 49 19 6b a8 a7 6d ae 5c 60 90 49 34 cf ea cc 60 03 48 c8 ab 9f b3 2f c5 41 6c 04 a0 d2 05 91 42 66 46 1c 52 e1 71 f5 84 a7 1d 92 24 64 36 20 f8 63 d7 78 dc b1 d2 bb b9 9d 1a 36 39 79 76 c9 81 af b3 20 57 ca d6 23 2f 37 9f 88 6a 9b 59 7c 5e af 1b 3b fa 31 45 4c 47 06 09 96 84 ed b8 f4 4f c2 98 2a 65 f9 c1 Data Ascii: A,W1yDIp3mlqP6RagOYrJ/3ClgDoTq[7w)nW0]Lyz55`DGKHCL Ikm\`I4`H/AlBfFRq$d6 cx69yv W#/7jY\|^;1ELGO*e
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ae 0a bd 7c 79 00 cf 88 e0 6e eb 6f 5f b9 82 83 56 1b c3 0c 05 54 7a 8e 53 4c ca d6 0c b4 3b af a9 c0 f0 89 83 1f 5d 94 4d b3 f0 62 58 d6 38 c2 4d 1c 60 c4 b5 bc 47 9a ee e6 f6 c1 f7 1a 01 7f d9 b5 37 68 6d 0b aa f4 d5 e0 7b d3 4c 29 59 25 a8 78 d0 f7 7d 03 0d d5 0e ad 49 9d b4 02 b3 b5 36 55 74 ae 5f 10 44 f5 05 fd 5c 76 df c8 22 09 73 df f1 09 a3 3d 44 6b 08 c5 8e 58 7b 03 76 66 df 5f be b9 bc 68 5d 36 cd b2 c1 de 1f 7b ef f3 4f 73 e7 7a 2f 1c b4 6e 7c dc 79 f4 ea b7 4e a9 3a b2 ff e3 69 cd 1a d8 05 3f 3a 42 25 96 f5 27 0e fe ba 9f 50 12 dc bc 50 e9 b1 02 d4 c1 d2 00 f7 d5 bd 6f 43 f1 04 cd 95 b2 5c 5b 63 0d e1 e7 dc 02 f0 22 fc dd d9 5d 30 72 a0 dd 8e 63 71 68 85 47 54 7f 7e 81 3b 8f 47 93 1c bc eb f2 bd 97 2a 19 44 f5 25 fb 6a 8e b4 54 09 71 9f b7 e7 Data Ascii: \|yno_VTzSL;]MbX8M`G7hm{L)Y%x}I6Ut_D\v"s=DkX{vf_h]6{Osz/n\|yN:i?:B%'PPoC\[c"]0rcqhGT~;G*D%jTq
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 59 3a 07 49 5e df ef 3d 60 1c 1c 60 91 5a d4 8a 96 1c de aa 2b f0 8c 32 b9 74 3d 6f 4e 18 71 b4 0c 55 e9 ba 16 29 19 14 52 72 7e f5 f3 fc fb 4a b8 8f bb 24 e4 ee 24 58 52 96 e6 c7 37 d3 80 1e 77 d2 1a 39 ea 63 2e 01 00 9d 59 71 4b 9d 3b 89 a2 14 8b e0 6c e4 7e 5c e0 c1 f5 e6 80 ca eb 28 df 49 10 47 74 e6 15 38 64 c4 9b 99 79 2d 0e b0 82 a2 82 57 7a ac 1c 8d b9 f6 8f 7a 74 9f 20 47 8c 74 48 89 be 64 aa ad 01 14 30 0d 9f 99 e0 45 97 ef a1 89 45 53 8b ef 7b db b7 7d db 4d 01 8a 6a 62 00 af 94 fc 4f 3b a6 57 6c 3d 4f 2e 28 da 9f c5 83 5b 1b 05 7e 57 40 d3 9e 43 d7 2b 85 93 8b 93 7b e4 df f1 21 f9 12 fd 48 42 92 10 25 24 2b eb f7 8a c8 62 22 b9 af f1 19 46 18 99 4d b3 76 3f ef 25 3e 00 e3 37 76 8e d6 a9 60 ef f0 5d 7d bb 30 17 b9 bd 95 39 14 82 9b f6 9c 6f 14 Data Ascii: Y:I^=``Z+2t=oNqU)Rr~J$$XR7w9c.YqK;l~\(IGt8dy-Wzzt GtHd0EES{}MjbO;Wl=O.([~W@C+{!HB%$+b"FMv?%>7v`]}09o
2024-04-19 14:07:06 UTC	929	IN	Data Raw: 76 58 a0 f7 f9 de 96 07 05 54 66 65 df 94 b2 6e 89 14 93 1c 16 f0 90 c0 2e 0e de 09 88 72 c1 9b 48 ce 0e 3f 1f 10 c1 c3 f9 26 72 b3 31 37 2c f1 ad 01 49 fa 6a 56 78 f2 35 e8 5d fa 49 e1 aa 17 5e 58 48 f7 d1 ed 14 50 35 9d 0b 1d e1 c0 6d b1 57 f3 4d 81 25 08 2a bc 06 19 92 66 43 42 07 a0 69 96 76 48 82 ae 40 44 be 82 ec 6b 70 38 c2 f5 34 0d bd 31 34 ab 91 a2 92 af 40 8c ba 82 6c 47 a1 23 db 22 43 d1 72 62 1c 6b a7 69 0b 49 92 34 ad 81 0e 45 b0 2c 4d 5b e8 6c bd c6 ae a1 69 4b b6 32 95 8a 48 24 69 a1 e9 7c 60 e4 32 9b 84 dd af 71 71 ac 8c 4c 5f da d2 9d a4 69 65 40 0d ad b2 94 89 58 d6 6e a7 2f 4d 43 6f 69 3e 2b 63 d3 8a 22 2d 34 cd b0 21 a2 b5 f4 4f a1 b9 eb b3 58 68 a0 ec ac 8a a2 69 5a 4a b6 58 68 0b 0d b9 3f 70 c6 63 30 eb 8c d5 c0 53 41 83 6a c0 c7 21 Data Ascii: vXTfen.rH?&r17,IjVx5]I^XHP5mWM%*fCBivH@Dkp8414@lG#"CrbkiI4E,M[liK2H$i\|`2qqL_ie@Xn/MCoi>+c"-4!OXhiZJXh?pc0SAj!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50210	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	525	OUT	GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 8188 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	733	IN	Data Raw: 52 49 46 46 f4 1f 00 00 57 45 42 50 56 50 38 4c e8 1f 00 00 2f ff c0 3f 10 55 07 db b6 8d 24 51 fd 97 bd ef 5d 74 97 45 c4 04 f8 5a ab 87 fe f9 36 75 91 a6 86 52 a1 92 62 75 7d 47 76 b0 61 96 c2 c4 c2 1b fd de ff 77 ec 97 fb 7f 47 6c 73 ec 99 bd 63 db b6 6d db b6 6d db b6 ad 6d 8e 3d 1b 63 db c6 b5 d6 6b bf ae eb 3a 8f e3 7c 9e af b3 9b 9c b1 53 b2 b4 93 4e d5 cc 55 c6 36 ab 94 56 99 2e 7f 43 a6 9a 7f 20 b6 93 c9 54 59 6b af d4 36 3a 3b a9 b8 bb 47 58 1d 5d dc 39 a9 6d 27 7b 0d ca a0 33 2a 27 9d 9d 2b d5 74 aa 62 db c9 35 b1 db a4 9e 95 6e d7 71 b2 b3 ab bc 5e 71 d2 da 2a 8d 5d bd ba 38 a9 6c 4e d2 db 49 c5 ce 53 c5 28 5d 19 ff 40 d6 3a e2 a4 b4 6d d7 b6 9d 54 d6 ae 62 bb ca 1f 60 3b a9 a6 8a 53 5d 7f c0 ab 8d cd b7 6d bf df 9d df e5 ac 60 97 41 f9 c6 5a Data Ascii: RIFFWEBPVP8L/?U$Q]tEZ6uRbu}GvawGlscmmm=ck:\|SNU6V.C TYk6:;GX]9m'{3'+tb5nq^q]8lNIS(]@:mTb`;S]m`AZ
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 18 cc 51 e5 63 ea 7d 95 4c ac 50 c5 90 3b 06 73 c6 49 9d 76 9b e2 76 6e 69 76 fe 43 ed 77 9b 82 8b 2a 2d d3 3b b7 34 41 dd 55 0e d5 33 07 95 4d 69 ec 93 a6 18 95 4d 79 a1 15 06 73 1a 2c 87 24 4d d3 7e 7e 59 73 9a 7b f8 a4 a9 86 06 2e 2f 4d d6 ca e4 3c 76 4a 95 96 fa d9 6d b6 b8 ab 1c ea 3b 27 d4 f9 df 55 ee 93 a6 1b b5 ef f6 85 43 ce f1 0f d2 84 bd dd d5 1c 51 c5 25 77 d2 8c 71 57 2e e5 de 01 87 74 4b 73 8e 95 d8 33 76 69 d2 4e c2 8e ad 56 2a 45 66 8d bb ce cd be f2 4d c9 d2 b4 4d 29 c7 bd 2f ea d8 1c 83 db bc 71 bf 2f 06 cf 95 26 6e e5 97 b2 89 c1 3f 98 39 85 fb 50 8f 7f b7 51 9a ba 75 6e 9f 47 cb 8a 67 ee 54 7e 29 6b cb 4a 69 1f 98 3b b7 b3 4e 2f 4d de 3f 59 91 d9 53 e7 be a9 8e 67 f6 f4 61 9f 66 cf c5 2b 9d e2 d2 ec a9 74 4a e3 09 9a 3d 0f 5f ae d9 b3 Data Ascii: Qc}LP;sIvvnivCw-;4AU3MiMys,$M~~Ys{./M<vJm;'UCQ%wqW.tKs3viNVEfMM)/q/&n?9PQunGgT~)kJi;N/M?YSgaf+tJ=_
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 43 f6 7f 0e a9 e1 1a 54 64 98 23 96 15 1e 17 1a 6f 8e 12 44 78 42 d5 e6 0a 7e 10 a4 65 97 bd 1d a0 03 2e 0e 22 30 25 0e cb 45 0d d6 60 32 9a 6b 9b 54 28 a1 2d 6e 39 a0 01 a5 e0 4f 6e a0 25 1b 80 a0 52 05 c2 09 1e ab 7d 88 fa 07 28 d1 a3 21 c7 e4 3b 2b 8b 2d 39 4c 58 85 b1 b4 7b bb 46 05 92 1b 61 6e bf 2b 25 82 ec 44 ea ba 0d e1 6f f8 9e 3b 86 03 84 24 13 94 72 f5 75 db c6 78 38 2c 24 97 89 0d 35 64 2e 62 d7 28 72 db bc 41 44 d0 65 17 48 b4 ab 09 a8 fe 04 c4 a4 ac e0 bc b2 45 1e 0a 75 f3 5e 9c 43 16 34 94 6a 8e 59 f1 a4 11 b7 8d af 1e 5c 42 1a 30 c7 bd 88 48 99 b0 ab 62 3c 30 7c c0 dd 97 1a 1e 4a 6b 9b 5b 90 06 dc 96 5a b9 31 73 0b 6a 42 9c 0a 4d 07 f9 80 88 78 5f 30 4c 84 10 f0 00 01 17 81 67 55 b8 24 47 df 3b e8 82 3f 77 ef ae 64 37 25 ac 0d 7f 51 fb 32 Data Ascii: CTd#oDxB~e."0%E`2kT(-n9On%R}(!;+-9LX{Fan+%Do;$rux8,$5d.b(rADeHEu^C4jY\B0Hb<0\|Jk[Z1sjBMx_0LgU$G;?wd7%Q2
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 58 26 0f e9 91 41 ff 46 3d 90 37 fe 0c a2 29 89 e4 55 ca 66 56 8f f4 b9 37 c3 42 67 28 14 af 4d b4 02 43 43 f0 6e 92 61 a5 9c db 0e 41 52 4c 51 20 0f e9 11 f4 e7 ca 0c af 28 6e ab 10 4b 42 4f 3f 6f 39 29 4f f3 cd 81 d8 a7 49 ff e9 01 ef 01 81 77 75 2a 64 02 ee 3b d8 a8 c0 af e2 06 4a b5 d9 2c 08 84 81 d5 7a 1b 4a b4 af e9 ce d1 08 30 8f da 6e 23 22 ee 3b 79 93 28 3e 8c 42 94 8f 1d 70 4b dc 63 81 c1 e6 2f 83 a1 b1 51 bd 09 23 36 54 49 60 33 02 01 51 81 70 e0 2f a8 8b e4 3b 95 fa 7f 51 81 ae b8 8a f1 9c 6e 54 c4 f4 10 86 17 78 e8 96 20 1e 01 b6 d5 b0 e2 29 01 8e 02 2e 01 3c cb ff 06 ca ce 2e b8 80 b0 f4 09 86 46 80 80 1f 6b 96 79 3c b4 cd 94 bf a4 b0 79 bc 88 98 3d ca bf ac f0 4f 26 6b 62 f5 f2 17 51 0e 0c 4f 01 97 a8 54 aa 77 33 8c cf 5f c3 fd f1 50 97 75 Data Ascii: X&AF=7)UfV7Bg(MCCnaARLQ (nKBO?o9)OIwu*d;J,zJ0n#";y(>BpKc/Q#6TI`3Qp/;QnTx ).<.Fky<y=O&kbQOTw3_Pu
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: dc 92 54 b4 9f 8b 1d 1f 8e 1d 6a c2 bf 18 b5 f4 9b 2c 29 c8 c7 98 31 5d 2e 69 fa 76 df 7f ba ef 3f 05 87 06 3b d7 30 7d 23 7f 74 65 fa 86 fd a2 53 30 47 6a fe cc 45 e8 d7 11 ff 6b 49 7d cc 5c 47 ec 5d 04 48 08 81 3d 84 30 6f 5d 15 31 d0 b3 9c e5 2c a6 d2 fc 60 23 ca 5e 43 fe 65 c4 89 d2 0b d3 08 50 1b 2b b4 c1 a1 05 0a f5 20 16 ad ca 04 5c bf 96 f4 d7 02 d8 98 53 96 b7 66 a9 7a b3 4d 00 6e 7a 72 2b 1c ae 54 7a 71 65 65 8a d5 16 3f 7b 23 29 21 18 22 85 eb aa 4f 92 25 9d 76 5e 4c f1 1f f9 d8 4a 08 65 56 c9 a1 1e d6 37 49 67 48 53 7d 9b 2a 92 10 c6 36 86 34 5f d0 f0 d0 21 48 92 9d 92 1d b5 86 fc 1f 4b f1 b5 a4 5f 0f 92 25 3b 9d bc 68 6d 04 5f b4 40 96 88 1d 46 4c 8f 34 4a c5 91 89 8d a1 48 37 92 a5 51 da d9 c1 f2 f3 88 af 21 7f 87 4d 4d 02 eb cd 4f 17 2f 75 Data Ascii: Tj,)1].iv?;0}#teS0GjEkI}\G]H=0o]1,`#^CeP+ \SfzMnzr+Tzqee?{#)!"O%v^LJeV7IgHS}*64_!HK_%;hm_@FL4JH7Q!MMO/u
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 6e 45 06 0d b6 1f 40 3e ed 46 92 64 e5 cc d2 d3 4b 71 f8 3b aa f4 f8 92 44 a7 20 15 ad cb d7 97 5f 9a bd a9 9d 18 7a 80 24 1a 18 e4 29 99 d3 a3 c4 e1 75 af 0e 34 38 fc a5 00 48 33 e8 2f 9f 11 2b fc eb 12 2e aa 04 1c 2c 13 8c 36 fe 75 35 62 6a 8c 36 d1 4d 60 e9 fb 77 74 46 b4 f0 d6 2e 4d 1f 04 f6 db bb 42 00 4c bf a2 4a f9 fd 49 83 37 b6 b3 b6 fc 13 2d d0 23 b5 b1 62 2c 10 76 e9 ae da a2 2b de 96 ce e4 9c e6 d8 bf a9 83 1d 88 9c 9e 4d 73 05 5a af a2 84 d5 1c bf 1c 94 1a c8 cd 5d 2e 47 88 7e 97 f0 d6 2f b3 88 18 32 ba ef dc 5c 71 72 89 10 b8 1b 05 bf 51 75 72 bd c9 3e 91 2f 81 2d 97 3f be 6b 0e fd 42 6e f7 36 ac 7f 74 b5 f7 36 3c 3b 77 a3 70 03 9d 88 92 23 ad 18 7c 8b 72 fe a5 bb 78 5a 86 00 bc 0d cb 2c 83 7f 45 91 36 a9 21 5c 52 33 1e 93 91 25 c0 11 b3 9d Data Ascii: nE@>FdKq;D _z$)u48H3/+.,6u5bj6M`wtF.MBLJI7-#b,v+MsZ].G~/2\qrQur>/-?kBn6t6<;wp#\|rxZ,E6!\R3%
2024-04-19 14:07:06 UTC	1180	IN	Data Raw: 9a 00 83 e6 cf 1e 52 4f 1b cd 9b ce 88 ae 11 f3 64 5c 5e f1 6c c6 02 75 c5 fc d5 05 51 cf 23 8b 16 4e 77 c9 cc 2d 13 37 80 c7 76 da 56 96 6f 43 5d ed 0e 5a 36 d6 80 a6 80 6d d5 48 45 53 70 1e dd d9 85 64 f8 6f 8f 82 7a 84 5c ff d5 4d 20 e2 37 26 fe 49 e4 4f 1e 47 06 c1 74 8a 03 07 86 4d 2d b3 7c b2 b8 7a a4 39 51 73 65 25 51 fb ee 38 4e ed 0f 1a f8 96 a5 f5 9b a9 1b 85 fb 95 05 3c e8 29 78 dd 10 ba e5 89 3e 45 21 ca 2e af 60 b3 fd 3b 12 dc 02 46 b6 21 ba 5c 20 2d 6a 94 52 9e d0 01 05 15 38 6f c8 ab fd da b2 c3 76 72 ce 3c 1a 98 4c cf 15 12 e6 0d 35 4c 77 eb 76 d8 4b 09 df 2f 32 1e 21 df b4 8e d8 0b 17 e1 df 2d cd 92 f0 ef 28 3b 08 50 50 0f 82 5d 82 74 ab b2 f3 ab e2 e5 6e 64 e0 90 ae c1 0e bb 8f 63 f4 a9 ff c0 b4 10 b1 d3 d3 b0 76 21 09 34 78 c0 01 ce 90 Data Ascii: ROd\^luQ#Nw-7vVoC]Z6mHESpdoz\M 7&IOGtM-\|z9Qse%Q8N<)x>E!.`;F!\ -jR8ovr<L5LwvK/2!-(;PP]tndcv!4x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50211	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	524	OUT	GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 22360 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 50 57 00 00 57 45 42 50 56 50 38 4c 43 57 00 00 2f ff c0 3f 10 4d 38 6e 24 49 91 94 55 75 58 7b fe 1b 3c 70 fc 8f e8 ff 04 80 cd a6 b6 99 fb a9 96 b4 4d 81 04 8f 43 32 53 89 4a 24 50 b2 95 45 ab 69 eb e1 66 bb 64 03 bc e1 58 92 0d d1 55 02 49 c5 ea 61 4d 27 3a 43 ab 21 69 a1 c5 6a 37 44 ab 09 49 d9 f7 e3 aa 9c 01 fb 76 e3 95 7e 5c 93 80 5f e7 24 67 c0 b6 5f 76 7e 93 7d e6 9d 83 df 06 64 26 38 40 50 42 e9 86 b0 81 80 56 59 48 02 6b 62 e4 6a c2 0e 24 92 18 a5 4a a2 75 34 4b d0 13 65 90 16 4e 34 26 24 b5 24 34 66 a1 00 4e 02 a4 6e 71 26 99 05 b0 1d c6 d6 06 68 a5 85 f9 ef 7d 57 df c7 db f2 ae 23 79 cf f1 36 58 48 70 24 49 b1 9d 30 33 fb fe 47 63 b6 3f 8c 9e a8 f5 54 6a d3 ec 7b 2b f9 02 92 54 db 6e 24 e9 20 82 e0 13 08 f1 cb d7 30 f6 bf 98 5a 41 Data Ascii: RIFFPWWEBPVP8LCW/?M8n$IUuX{<pMC2SJ$PEifdXUIaM':C!ij7DIv~\_$g_v~}d&8@PBVYHkbj$Ju4KeN4&$$4fNnq&h}W#y6XHp$I03Gc?Tj{+Tn$ 0ZA
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 43 0f c7 40 09 34 f0 7d c7 dc e9 86 88 d0 17 33 3e d3 85 c2 00 74 65 f2 47 df 33 41 17 49 44 15 c8 77 4e 00 ec 61 42 b3 43 b4 d2 61 4e 0b ec 25 8a 28 22 d9 30 ca 5c f2 3a 2f f3 ad 21 e7 f6 f9 de 5f 39 b6 92 bf 65 43 5b 6b 7b 32 d6 51 ac 23 6b 59 a2 e5 75 06 03 f2 15 29 91 95 05 68 c8 d2 58 4e b6 d6 ca 49 95 b6 a5 ad c3 ad b5 18 5a 24 81 89 b8 25 92 2f 89 18 0c 26 24 26 22 02 c9 c1 20 39 27 12 b7 24 86 bc 65 30 2c 24 48 d2 a9 75 41 00 b0 c8 00 41 82 42 01 48 d2 89 f5 99 45 06 08 f8 8b 64 67 27 9d 5c 17 84 33 19 00 40 3a d3 0a 67 32 60 2e ab 75 93 7f 30 79 fb d1 3b de 01 af ce af bb 27 f5 89 03 20 0e c7 6d 23 39 92 94 7f d8 ed 77 cf 7c 23 62 02 78 b5 95 ea 82 94 96 6b b6 13 07 76 c1 30 1d ec 3e 4e 0f b6 a9 d8 cf f8 e4 02 82 2d 5b 2a 12 0d 86 4b 49 ed 38 c8 Data Ascii: C@4}3>teG3AIDwNaBCaN%("0\:/!_9eC[k{2Q#kYu)hXNIZ$%/&$&" 9'$e0,$HuAABHEdg'\3@:g2`.u0y;' m#9w\|#bxkv0>N-[*KI8
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: da e4 b2 04 ae 66 8a ed 05 3b 05 44 81 85 59 a0 a4 29 47 b0 23 9b 88 e6 4a ca 08 57 73 d4 6f c8 ee 5b 95 72 10 c5 00 6a c2 fe 12 46 02 27 5c 61 fd f1 cf 6b 64 1c c6 1a 00 e6 92 2a 64 55 2c ae 42 83 13 20 08 15 d8 2d 60 8b 2a f8 2a 91 02 c3 6a d8 bf 22 d4 24 6b 58 62 97 87 fe 01 7c d5 61 75 1c 9a 82 e9 05 60 bb 42 76 4b 00 e1 ec 36 08 ca 60 af c4 9b 2e c7 9f 0b b3 a4 f2 af af 9c 17 98 02 94 1f b3 d4 66 7a 97 a1 23 09 bd 4c d8 13 26 c2 8a f0 98 b0 24 54 23 0f 89 4d eb 3d 69 46 46 cf 13 02 82 0f 70 9b 77 47 10 e5 57 97 67 10 b3 b9 5f b0 27 01 56 d8 a0 51 94 82 90 d7 9d 22 9e 09 88 04 61 40 2d 44 1a c0 ae 43 05 e9 32 b6 d6 5f 7d 30 3e 10 e4 ce 9b a7 be d4 8e a7 a8 ea 20 cb 3e 0e 09 e3 89 f7 9f bc d4 ec 8d 1b ce 2f 8f 5d 5e e9 ca 94 db 21 96 78 d1 0e a4 b3 63 Data Ascii: f;DY)G#JWso[rjF'\akddU,B -`*j"$kXb\|au`BvK6`.fz#L&$T#M=iFFpwGWg_'VQ"a@-DC2_}0> >/]^!xc
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 4c ab 30 a9 14 a0 5c 03 37 9d 6e 9f 9b 9d 43 3c 20 12 f9 4a 8d 81 43 ea 29 10 17 bb 80 51 22 a8 0b 34 0e 0f 45 9a d3 09 1b 05 99 51 8b ff 6a d8 5c 1c 5c 5c 5f 6f 04 c2 a8 10 34 09 34 13 0f 8f 66 a7 7d 15 34 4a 72 47 29 25 28 81 0b a7 31 82 b7 32 20 5c 44 f2 37 c2 af 7e 11 eb 9b bc e6 71 f7 a1 25 9c 11 a2 05 48 97 a2 49 6e 6c 3d 33 46 be a0 c1 a2 03 5b 07 6e bb f2 ac a1 03 00 f4 cc 8c 9e 74 1a 01 e8 a9 9d 11 e7 c7 b5 ac 41 bd b2 39 66 71 52 ea cf 97 f2 26 1d 9a ab a0 80 6b 5c 58 7b eb 60 51 33 0c 0f 88 3a 05 ef d4 9c ab b9 00 dc 20 dc 66 91 55 c2 12 09 38 5a 56 31 2a 21 dc 6d cf b9 14 65 55 d8 55 3e a6 0e 57 40 dd 29 81 d9 e0 17 c2 c5 76 ae 6c db 62 5f 14 c2 e5 8d de 78 95 5f 53 1a e0 52 d5 7c 43 08 2a de ed bc 8a 4d ad 43 89 88 78 83 cd 83 bf e8 09 2f 38 Data Ascii: L0\7nC< JC)Q"4EQj\\\_o44f}4JrG)%(12 \D7~q%HInl=3F[ntA9fqR&k\X{`Q3: fU8ZV1!meUU>W@)vlb_x_SR\|CMCx/8
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ee fa 8f bb d5 4c 14 77 eb d6 63 bb cd b5 a8 44 2a cd 80 72 d0 30 7c c4 69 a8 00 a1 37 b0 ab 18 4c 44 60 1a fe dc 9d 74 f3 26 77 8e 0f e6 c2 97 42 b6 c2 28 34 98 a7 7e f3 60 24 0f 53 23 34 41 93 a3 e4 6a 31 b9 cd 73 2a 37 9d e3 8b 3d 76 fa 0a 9b cd 71 9b 13 7e 29 45 b0 e9 5c 0b 69 53 09 e5 a6 91 b1 cb a2 77 d5 cc f9 5a 0f 37 dd 7a f3 e5 ff e1 08 7e 54 cb 6c 6d ed 13 11 a7 71 68 ea 69 0f df fb ba ab 6f ab ef e5 8a e3 22 cb 87 5a 2d fc cd be c7 a7 6f f9 c3 8b 6e 26 10 dc 0d af c5 f3 05 c8 e4 d8 08 6a a2 31 f6 97 e5 e2 37 66 e2 e1 40 af 6c ec b8 c0 b4 90 12 a3 5f b3 3a fd f6 4b 73 92 13 92 9c 3f 28 c1 92 66 d1 0e ae 05 1e d2 10 75 4d 98 c8 c9 07 25 65 56 fc c7 52 0d a9 cb 2b ff c7 ed 97 bb bb 9f b2 9e 95 36 e1 ae 24 51 91 f4 b7 21 47 48 50 ae 91 19 51 f4 bb Data Ascii: LwcDr0\|i7LD`t&wB(4~`$S#4Aj1s7=vq~)E\iSwZ7z~Tlmqhio"Z-on&j17f@l_:Ks?(fuM%eVR+6$Q!GHPQ
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 03 67 4c cf bb e6 6e ad ae 4d f9 d4 89 a4 fb c7 5f 2b c0 e6 ba d4 01 b0 46 7d 16 c7 bd 9f e8 2d 66 1e 6f 5c b4 bd 7a 70 c3 b6 e8 bb a2 6f 8b 6c 07 9f 48 da 84 7f 51 2d 42 2d 5e b7 93 ae c9 68 0e 2d d5 5a b8 f3 35 d2 e9 ff 7b f3 55 ff f8 fb 0a 53 cc c2 5d 73 e2 81 cb 6a f9 b8 0f 47 5b 9f 06 8c 87 e8 4a e9 03 77 7c c7 13 a9 8a ef 7e f5 5e df 8d ab f2 ae 07 c1 b6 d7 36 38 1a 75 03 c7 8f 2d 21 6e 84 00 01 35 70 d8 20 60 e7 5a 55 d0 66 82 ca 44 8c 08 cc c0 d5 4b 50 97 7f 2b 49 97 38 f5 45 db df 49 5c 40 80 aa 0a f3 db f4 d3 0d 4b bd 8e c1 d5 ba 43 e5 aa 22 ad d9 74 cb 17 78 2c 3b cd 8e cf 48 de da d7 bf 72 26 2c 8b cd 15 79 6a f2 e5 8e 6a 38 b1 3f b2 86 55 32 cf 13 dd c4 c7 92 1e d7 c3 5b dc 98 b7 5b 9d 1a 9a 3a 0a b6 f1 b8 1a 27 01 00 d1 ed d5 0b ff fd 2b 37 Data Ascii: gLnM_+F}-fo\zpolHQ-B-^h-Z5{US]sjG[Jw\|~^68u-!n5p `ZUfDKP+I8EI\@KC"tx,;Hr&,yjj8?U2[[:'+7
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 36 8d 02 66 4b 2a 25 f5 a7 17 b2 b9 b3 a1 b0 89 7c d5 73 da 17 ea 9b 83 c0 eb f4 b4 e6 69 3d e6 b5 68 31 c6 42 a8 f8 8a 6d f9 1b 3b f8 56 b3 1e db 16 f3 8c 93 57 9a 08 e5 74 92 60 11 4a d8 aa b4 26 74 bc f1 53 1f b8 95 de 99 4e 86 05 67 b5 81 c3 d7 32 ce 93 84 f9 a0 00 c3 b6 c7 61 e3 71 cf 65 a0 0e 84 59 3d 18 ac 15 51 94 dc c1 23 51 d0 8b 6d 9e fc fa fb 4c 72 10 52 00 42 cb 29 b8 78 1a 29 1e 9e b0 21 bf 46 af 5e a7 93 5f 23 de 7f c5 56 9d 0c 78 0e 41 24 6e 8a a1 8b f6 5e 2e 5f 44 2e 7f d9 2a 0e 9d 32 1f 2d a7 a9 7c dd fe c8 64 90 6d d7 b5 58 c5 68 be 3e bf fb c2 ad 37 1f c2 0b d5 df ba 76 fe 74 57 7f 5e 1c fa 48 3f b8 d6 b3 4d 19 68 29 2a 0a 63 66 fc e9 7c f5 2e 5e df 2a 96 f5 0e e6 86 26 57 43 96 63 42 61 1a 65 f8 13 32 fc de e8 31 e3 59 d7 f4 0c 9a eb Data Ascii: 6fK%\|si=h1Bm;VWt`J&tSNg2aqeY=Q#QmLrRB)x)!F^_#VxA$n^._D.2-\|dmXh>7vtW^H?Mh)cf\|.^&WCcBae21Y
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: b9 4e f2 b1 8a b1 ba 21 c7 37 69 14 1a 40 4b 2d 79 40 58 c9 20 bf bf 54 c5 20 2c 96 9d 20 05 01 be 98 2f ff c1 b1 82 6e 58 9e 9a a7 e9 5a 26 03 cd 8a 15 2e 2a 00 02 10 0d 84 e1 4f 89 fa 5e 05 00 28 65 cb fe 97 19 de 28 97 c4 47 c2 35 f1 d7 68 7c 96 94 8b 0f aa 10 1d 10 9e 24 c6 b3 19 00 15 51 3f 62 2c df f3 3d 01 41 45 45 b7 9d 3c f9 0c 8d f3 4f 6c ba 10 00 62 aa 5e 92 09 00 08 98 f1 86 32 20 a1 d9 6b 00 05 a9 4a 88 74 6d 8c c2 a5 67 04 12 3c b3 a2 e2 31 4a c5 46 63 29 ee 34 b4 a8 16 5e 23 3e 01 65 5f ab 79 c9 ec e9 06 47 79 5d 51 e2 fe a8 c1 dd e5 9b 29 42 d3 fc 8e c3 ae 4c 74 48 bc 11 bf 2c 93 ea c7 48 5e 4a 8d f7 47 e8 5a e7 50 32 08 1d 5e 2f a9 4f 87 04 e6 9d 2f 90 39 f7 1a 43 e5 38 49 49 de d5 63 ab 22 c0 84 ea a7 b6 10 8e 17 08 01 29 e9 f0 d0 32 ca Data Ascii: N!7i@K-y@X T , /nXZ&.*O^(e(G5h\|$Q?b,=AEE<Olb^2 kJtmg<1JFc)4^#>e_yGy]Q)BLtH,H^JGZP2^/O/9C8IIc")2
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ae 63 5a 8c 26 5c dc 36 91 e1 c1 c3 2f 5f 7d ee a6 f1 a8 a0 ab 60 a4 9e fa 80 94 60 a1 93 98 ab 76 ca 0f fb 8f 83 11 9c 75 d0 c3 c9 f7 7d 73 d3 7c 9e d9 8e 7f 5d a5 0a 62 29 d9 5b fe 81 00 05 74 7f 00 fe 9c 9e 6e 23 77 d3 ae b4 ad 40 5d a0 76 54 ca af 26 06 66 80 b0 7e 20 fe 2d b4 57 44 41 05 c1 05 11 1f da 5d 76 d3 8c 93 a8 8d c5 71 47 33 1d 9d bc 17 d8 b6 25 e1 e7 db 56 1b b7 b9 29 2c 88 24 e6 9a 8f f5 c7 73 af 46 35 e9 55 f7 c2 ec e8 d3 db 6b 75 12 dd ec 32 f3 59 90 1b 08 31 6b 48 7b 66 7c d2 6d 75 ea 92 14 a5 a7 de 29 35 af 66 bb 1b 83 3b b7 f4 75 97 d3 e8 6f 28 06 67 85 15 91 96 66 b8 7e e1 fc c3 45 dd cd a4 49 b4 7d 34 27 eb 66 65 a1 7c c9 b0 f8 96 8f 26 33 1c 33 98 99 a9 56 d7 4c 23 f1 39 8d d0 66 a1 62 b1 f4 20 78 a0 52 59 47 02 cc bc e3 39 f1 a8 Data Ascii: cZ&\6/_}``vu}s\|]b)[tn#w@]vT&f~ -WDA]vqG3%V),$sF5Uku2Y1kH{f\|mu)5f;uo(gf~EI}4'fe\|&33VL#9fb xRYG9
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: f7 be 46 96 94 0c ae ba 8a 45 d0 3f 6a c9 a7 4e 02 02 30 dd fe a3 d7 25 45 8d 88 e6 9e 38 d9 ac 34 f5 d4 0b 9f 93 96 f7 6b 97 00 95 4a f4 24 f1 33 b1 63 6f a6 09 60 d1 da ec 16 39 19 99 84 d7 a5 d3 5c 8e ed ae ad 54 3a fa 37 ba bb 77 e9 dc 6b 83 14 bb 48 9e 52 cf dc db 75 23 15 ac 45 26 59 c5 34 09 92 9c b1 b7 1f bd 2f a9 f9 14 59 6b 58 63 be d6 7d 76 c1 75 27 37 1b d7 bf 3a 26 df d3 4b 50 e1 7b 2c 6a ea ea f4 3b 9f ba f3 1a 53 c6 a0 1e 2e 4d 54 17 e2 07 38 9f 30 ea 9a 56 10 ee 81 59 0c 40 30 c8 b6 83 f8 ee 28 78 fe de 09 a5 3c 73 cd a0 2e 30 e4 b5 bb 16 3c 2b 32 4e 8e 62 08 33 5b b8 16 b1 dd 7c b7 48 7c fa de d3 c7 db 8e de 12 b1 d5 ba fc 86 b0 cc fb a1 99 e8 7d 16 76 98 62 fb a3 3e 24 ad b4 4a 2b d5 73 56 e9 58 6d 7f f5 5c 4e 21 b3 4e dc 29 9d e8 ab c6 Data Ascii: FE?jN0%E84kJ$3co`9\T:7wkHRu#E&Y4/YkXc}vu'7:&KP{,j;S.MT80VY@0(x<s.0<+2Nb3[\|H\|}vb>$J+sVXm\N!N)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50212	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	1743	OUT	POST /_/PlayStoreUi/data/batchexecute?rpcids=CLXjtf%2CA6yuRe%2CWs7gDc%2Cag2B9c%2CoCPfdb&source-path=%2Fstore%2Fapps%2Fdetails&f.sid=-8008743000736633856&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=358021&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1729 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535624.0.0.0
2024-04-19 14:07:07 UTC	1729	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 25 35 42 25 35 42 25 32 32 43 4c 58 6a 74 66 25 32 32 25 32 43 25 32 32 25 35 42 25 35 42 25 35 43 25 32 32 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 25 35 43 25 32 32 25 32 43 37 25 35 44 25 35 44 25 32 32 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 31 25 32 32 25 35 44 25 32 43 25 35 42 25 32 32 41 36 79 75 52 65 25 32 32 25 32 43 25 32 32 25 35 42 25 35 42 25 35 43 25 32 32 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 25 35 43 25 32 32 25 32 43 37 25 35 44 25 35 44 25 32 32 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 33 25 32 32 25 35 44 25 32 43 25 35 42 25 32 32 57 73 37 67 44 63 25 32 32 25 32 43 25 32 32 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 31 25 32 Data Ascii: f.req=%5B%5B%5B%22CLXjtf%22%2C%22%5B%5B%5C%22com.google.android.keep%5C%22%2C7%5D%5D%22%2Cnull%2C%221%22%5D%2C%5B%22A6yuRe%22%2C%22%5B%5B%5C%22com.google.android.keep%5C%22%2C7%5D%5D%22%2Cnull%2C%223%22%5D%2C%5B%22Ws7gDc%22%2C%22%5Bnull%2Cnull%2C%5B%5B1%2
2024-04-19 14:07:07 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:07 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:07 UTC	15	IN	Data Raw: 32 65 31 0d 0a 29 5d 7d 27 0a 0a 37 32 38 0a Data Ascii: 2e1)]}'728
2024-04-19 14:07:07 UTC	729	IN	Data Raw: 5b 5b 22 77 72 62 2e 66 72 22 2c 22 57 73 37 67 44 63 22 2c 22 5b 5b 5b 5b 5d 5d 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [["wrb.fr","Ws7gDc","[[[[]]],[null,null,[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 33 63 34 65 0d 0a 31 35 34 33 33 0a 5b 5b 22 77 72 62 2e 66 72 22 2c 22 43 4c 58 6a 74 66 22 2c 22 5b 5b 74 72 75 65 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 6e 5f 55 53 5c 22 2c 6e 75 6c 6c 2c 5b 5b 5c 22 78 2d 64 65 66 61 75 6c 74 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 22 5d 2c 5b 5c 22 65 6e 2d 55 53 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 Data Ascii: 3c4e15433[["wrb.fr","CLXjtf","[[true,\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003den_US\",null,[[\"x-default\",\"/store/apps/details?id\\u003dcom.google.android.keep\"],[\"en-US\",\"/store/apps/detai
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 62 6e 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 62 6e 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 62 73 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 62 73 5c Data Ascii: 6gl\\u003dUS\"],[\"bn\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003dbn\\u0026gl\\u003dUS\"],[\"bs\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003dbs\
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 6e 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 65 6e 2d 41 55 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 6e 5f 41 55 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 65 6e 2d 43 41 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e Data Ascii: ?id\\u003dcom.google.android.keep\\u0026hl\\u003den\\u0026gl\\u003dUS\"],[\"en-AU\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003den_AU\\u0026gl\\u003dUS\"],[\"en-CA\",\"/store/apps/details/Google_Keep_N
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 73 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 65 73 2d 34 31 39 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 73 5f 34 31 39 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 65 73 2d 41 52 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e Data Ascii: 026hl\\u003des\\u0026gl\\u003dUS\"],[\"es-419\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003des_419\\u0026gl\\u003dUS\"],[\"es-AR\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 64 55 53 5c 22 5d 2c 5b 5c 22 65 73 2d 48 4e 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 73 5f 48 4e 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 65 73 2d 4d 58 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 73 5f Data Ascii: dUS\"],[\"es-HN\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003des_HN\\u0026gl\\u003dUS\"],[\"es-MX\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003des_
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 73 5f 55 59 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 65 73 2d 56 45 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 65 73 5f 56 45 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 65 74 5c 22 Data Ascii: /details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003des_UY\\u0026gl\\u003dUS\"],[\"es-VE\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003des_VE\\u0026gl\\u003dUS\"],[\"et\"
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 66 72 5f 43 48 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 67 6c 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 6b 65 65 70 5c 5c 75 30 30 32 36 68 6c 5c 5c 75 30 30 33 64 67 6c 5c 5c 75 30 30 32 36 67 6c 5c 5c 75 30 30 33 64 55 53 5c 22 5d 2c 5b 5c 22 67 73 77 5c 22 2c 5c 22 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 2f 47 6f 6f 67 6c 65 5f 4b 65 65 70 5f 4e 6f 74 65 73 5f 61 6e 64 5f 4c 69 73 74 73 3f 69 64 5c 5c 75 30 30 33 64 63 6f 6d 2e 67 6f 6f 67 6c 65 Data Ascii: keep\\u0026hl\\u003dfr_CH\\u0026gl\\u003dUS\"],[\"gl\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google.android.keep\\u0026hl\\u003dgl\\u0026gl\\u003dUS\"],[\"gsw\",\"/store/apps/details/Google_Keep_Notes_and_Lists?id\\u003dcom.google

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50214	64.233.185.113	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	1490	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4956 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.2128404613.1713535574; _gat_UA199959031=1; _gcl_au=1.1.281902741.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q; _ga=GA1.1.702310893.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535575.1.1.1713535624.0.0.0
2024-04-19 14:07:08 UTC	4956	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 32 33 30 39 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535623092",null,null,null,null,
2024-04-19 14:07:08 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:08 GMT Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:08 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 32 38 38 33 30 22 5d 0d 0a Data Ascii: 1a["900000","1713535628830"]
2024-04-19 14:07:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50215	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1107	OUT	GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 1118 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	733	IN	Data Raw: 52 49 46 46 56 04 00 00 57 45 42 50 56 50 38 4c 4a 04 00 00 2f ef c0 3b 10 a7 e5 28 92 64 59 a9 1e 36 07 d8 44 23 8e b8 fd bd eb 86 06 a4 6d 1b c9 87 0e de fe 73 3e ff 40 68 24 c9 91 14 bd 3a fe 20 0e a0 b7 ff 33 dd e5 38 92 6d 55 e9 27 df 65 27 e8 8a cc 08 94 54 34 09 87 04 10 60 81 04 c1 72 47 08 8c 28 d5 30 02 94 cb 88 16 a0 54 8b c0 28 50 d0 14 1a 88 2a 15 6a e2 01 14 35 8d 08 35 45 35 81 d0 a2 81 88 71 19 b5 21 10 da 34 10 9b 52 cb f8 42 44 b9 fc e8 9f a8 03 3e 10 85 96 da 8a 6a a3 21 c6 e1 b0 8c 11 51 a1 a6 7f bb 93 9b 07 fd 3b 95 9b 3f da 2e 5f d8 2e 1b 96 9b 12 87 c5 c0 40 20 ee 86 b6 d8 aa 21 62 d9 8d 97 3f ba a8 2b 7c 04 85 f8 ff 0c c2 30 fc be 26 cd da 0f 06 b2 97 24 df b0 85 0c 31 08 01 1a 01 2d d4 10 a1 82 00 21 80 3f 3c 4a 86 07 cc c3 41 46 Data Ascii: RIFFVWEBPVP8LJ/;(dY6D#ms>@h$: 38mU'e'T4`rG(0T(P*j55E5q!4RBD>j!Q;?._.@ !b?+\|0&$1-!?<JAF
2024-04-19 14:07:09 UTC	385	IN	Data Raw: 52 0f a4 31 a4 31 3a 40 8f 07 e8 53 c9 7e cd 12 ac a5 b5 f9 e4 79 00 7f 29 d6 d3 bd 68 54 eb d5 6b d1 d6 d2 7a 3a 80 36 90 8d 27 cf fb d1 fa 5f 88 ed d2 c5 00 7f 89 c6 3b 81 77 c2 7a df f0 68 bd af 78 b4 de 11 bc 23 d6 bb 80 77 de 78 f2 a4 1f ad ff 29 6d 47 e9 43 63 84 34 4d bd 0c 6d 19 ad a7 db d1 a8 d6 93 eb 68 37 c4 7a ac 67 60 4d 6d a2 f9 74 37 d6 2e b5 9f 54 3d 48 ac c4 7e cc 3b 90 76 e6 e8 00 a9 46 71 a6 bc 11 0f 50 8f e1 1c d5 e8 02 ea 06 94 f5 1a 9d 20 6f 17 61 2c a8 c4 0b 4c f7 26 23 f0 6e 8a 6e 60 7a 34 a9 1c 1f a5 e8 08 a6 87 33 4b cd 7e 90 a2 2b 98 b8 a6 cc 9a 98 a2 33 28 f9 c0 dc f9 6d cf eb 0e 66 89 ee 20 b5 2e d8 45 f0 51 9a 48 ff 15 21 4d 41 71 89 dc e9 1d 69 9d 77 c4 25 b7 42 c1 5b 3e b9 5d e2 f6 9f c1 6e 96 a0 4b f8 78 eb b6 d6 b7 3e a6 Data Ascii: R11:@S~y)hTkz:6'_;wzhx#wx)mGCc4Mmh7zg`Mmt7.T=H~;vFqP oa,L&#nn`z43K~+3(mf .EQH!MAqiw%B[>]nKx>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50217	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1105	OUT	GET /qW1OCeXIVPbBFRtmiUSYhzRfhwEV1CwJa5367zJjBwHktdp1l_tXG1zHWC5Xn4wJYQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 21274 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	732	IN	Data Raw: 52 49 46 46 12 53 00 00 57 45 42 50 56 50 38 4c 05 53 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 d4 52 cd bd ae c9 3f e0 e9 ae bd 27 81 88 fe 4f 00 7f dc 8d ce 5c aa e8 5a 6a 76 90 30 3c 45 8d 4b 97 2b 03 12 24 41 fe 61 ad 17 ae cd aa 57 ea a1 35 8a ee 18 3b 0a 59 f5 e8 53 48 38 1f c2 d6 ee 6e fa a0 b7 ef 62 a7 cd 00 a0 48 82 dd 39 dd 80 dd 89 30 d8 86 a8 83 1b 28 82 1f 6f 13 80 10 ae 24 a7 3c 20 40 c0 43 93 04 33 f3 03 a8 0d 35 e0 03 d8 71 0a db 3c 1c 6c f1 51 27 21 b0 d1 51 5f 62 3e be 67 a2 04 48 e8 81 07 c0 13 ac 43 ea 10 b6 02 95 ab 5f 08 60 92 43 28 cd e3 a2 46 d4 06 78 2c e0 c6 b6 ad ba 59 62 85 2a 41 fd 57 e1 12 5e 68 e6 f0 cf 35 b3 2d 7a f7 7d 53 03 92 55 6b 6f 23 e9 4c ea 1c 34 39 ac b4 ec f7 7f 8e 09 15 8c e9 dc 3f 46 14 9a 6c 6a 65 8c 30 12 1c 49 Data Ascii: RIFFSWEBPVP8LS/IM@lHR?'O\Zjv0<EK+$AaW5;YSH8nbH90(o$< @C35q<lQ'!Q_b>gHC_`C(Fx,Yb*AW^h5-z}SUko#L49?Flje0I
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: ce 6f 0f c7 ff 8e a7 ff 8e 43 df ce 0d 3e 21 75 c0 d1 bd a3 3b 07 00 2f dd bb 04 60 ba 3c 3f 1a 66 8f 24 0c 89 1a e2 1a 04 95 6b 00 cc 67 f3 49 3b a3 49 60 02 40 40 ce 00 bc a1 b8 6d 1b 47 da 7f ec 2b 49 ae 7e 23 62 02 38 bd 39 61 73 de d1 9c 4c 01 43 76 23 ae 44 43 7c 25 94 3f 36 26 6b 1a d2 c7 ff ff 7b 37 6d f5 fd fd ce d0 de 92 e5 6d cb b2 8d b1 31 c6 66 18 13 30 59 04 32 c8 de 7b 37 e9 ce de 7b 6f b2 81 ec bd 07 64 b1 02 21 60 63 c0 0b 6f 1b cb 96 64 6b d8 da f3 48 3a e7 f7 fb fe 71 f6 57 f6 dd e3 cd 55 43 1e 96 4e 73 80 47 86 f8 e6 dc 53 77 1c a5 8a 43 07 e4 a4 fd 00 49 eb 62 17 75 38 38 51 46 07 6d a8 cb e5 e1 ac 63 e2 0e ee 75 aa 5e df 91 6c ab b6 6d db 56 44 2a b5 b5 0e 03 e6 9a 63 d2 66 66 a6 2f 66 de 5b 80 2d c7 16 64 ab 80 52 30 fd 31 33 f3 9e Data Ascii: oC>!u;/`<?f$kgI;I`@@mG+I~#b89asLCv#DC\|%?6&k{7mm1f0Y2{7{od!`codkH:qWUCNsGSwCIbu88QFmcu^lmVD*cff/f[-dR013
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 9e fd 94 2f 7c ef ad 72 60 01 cd a6 07 ec 88 6e a0 3b 64 ad 40 38 9f ec 3e fc ee 9b d4 1e 30 56 ed 02 6d 04 a0 bc 24 c0 ba c0 95 1f 3f 7c f1 bd 5d 09 e7 3c 83 f1 cf ee 62 00 28 91 59 c8 b4 5d f0 c0 7a 50 11 11 3d 76 fa 36 11 dd e5 5c 2e 11 11 9d 41 37 7e ff d9 06 00 c7 2c 4f 78 de ed 62 9c 0e 76 f7 c9 21 b4 75 38 ba d7 bb cf af 38 ec be 02 f5 fa a0 66 82 fb ac fd 30 f3 ea 31 f5 02 e5 77 6f 77 ee 9b cb ba 07 3c 09 52 15 9e bf 8f 99 85 d1 39 e4 61 7f 0c bc 66 79 e0 e7 7f 28 c9 b0 b6 90 80 de 7a d7 f9 45 0b 0a eb 95 0f af 0d 00 37 ee 00 66 7b 59 fe cb 21 6b 1e d2 45 8d 6e fb 70 bd f9 7a 33 59 3b d6 c5 7d d8 a7 5a 93 60 b1 17 b0 89 c2 fe 3d 0f fc e0 ca 63 41 ef 6d 2f 5c d1 f3 e7 be af 11 1d dd f6 b8 b3 9c a6 d5 83 e6 10 d5 60 c9 5b 5f a9 11 80 44 cb 5d 80 79 Data Ascii: /\|r`n;d@8>0Vm$?\|]<b(Y]zP=v6\.A7~,Oxbv!u88f01wow<R9afy(zE7f{Y!kEnpz3Y;}Z`=cAm/\`[_D]y
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 4a 30 00 3c a9 35 58 03 2f 9b d9 b1 1a 2b 0c e5 64 00 7a 19 01 40 cd 80 1e bd ef bc 2e 11 e5 74 5f b8 ba de cd fe f2 9c 32 d8 71 4a 72 00 40 01 72 1e cf 97 88 88 f6 b8 53 02 82 e3 92 3a 89 1c d4 20 bc 90 ac 60 dd 93 d6 66 b0 fd d4 fc 40 00 b8 43 00 c0 dd 3e 38 ad ec 16 d9 46 e0 b3 00 63 b9 00 b4 fa 92 30 fb 83 77 77 88 1f c2 7e 5d 1b ec e9 8a f9 44 f6 33 5f cc cd e3 91 7b 76 20 00 5d c0 ee d7 77 0e 11 d1 e5 fd fe e7 13 17 12 37 c5 1c fc dd a1 8b 9d 06 da f3 be 5b 70 12 0c ab 46 1f 80 36 c0 f3 a6 ef ee 2c 5b 9e 89 c0 45 cb fa 2a a1 9d 8b 02 3f f8 c5 f7 ef 9c b7 0f 08 00 da 00 ac a3 dd f5 da d5 0a 7a 74 56 96 d3 f8 8f 76 f2 eb 18 f8 02 00 fa 1c 98 d9 a7 4f bb 67 0e 92 7c fd 52 4d bf 18 e8 cd 36 91 03 87 5c f8 39 1e 2f 98 f3 ea 6d 13 d0 f2 f4 35 43 39 77 4b Data Ascii: J0<5X/+dz@.t_2qJr@rS: `f@C>8Fc0ww~]D3_{v ]w7[pF6,[E*?ztVvOg\|RM6\9/m5C9wK
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 1f e3 ea 6d ac 10 40 a1 80 8b 56 02 18 04 e0 5a 34 78 fa ae f7 ee 79 ff e9 37 7b fc 4c 16 3b fe 01 f6 57 cf c1 e6 3d f0 41 7c ed dd f8 a7 05 08 ae 2a 70 18 1e 84 37 e1 ee c0 a1 78 30 18 00 09 09 00 cf 02 ae 33 21 0d 98 45 82 94 14 10 87 4f e0 4e 00 30 16 88 ed 75 46 3e aa bb e9 eb 4e 65 7f f5 57 1c cc 46 11 ac 48 c6 45 b3 70 ee 41 f8 83 e9 f8 bb 55 05 fe 7a 07 de 86 c7 e3 00 cc 85 0a 86 21 18 8d f3 ec c6 00 d7 c9 0b f0 71 56 90 12 e1 82 cd 65 c0 9e 00 b0 3f f0 9d 34 94 6e cf c0 0f e0 b8 1a 89 d0 11 3e 37 1e 58 d5 96 02 00 5e 03 38 24 20 f8 05 23 4d 26 41 2a 81 de 40 15 f0 2d 00 0a ae bd 11 be 53 4e 0c 37 c1 7a 27 ab c1 04 00 1a a2 11 c6 26 31 ea 80 78 70 d4 03 df 01 80 14 1c 87 bf 3f 15 87 e3 3c ac 5e 7e c8 58 34 b2 62 f0 2e a2 40 ed f8 89 1d f0 37 7f 84 Data Ascii: m@VZ4xy7{L;W=A\|p7x03!EON0uF>NeWFHEpAUz!qVe?4n>7X^8$ #M&A@-SN7z'&1xp?<^~X4b.@7
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: d1 9b 7b 80 5a 2c a7 11 6c 15 e9 6c 0a ce b5 d2 85 c8 ab 64 76 d3 4f 3e ff 1f 0c 26 90 0e 27 e1 91 af de 86 01 cc 6f fd 35 a9 c9 d2 6e 76 46 ef 1e df 26 46 26 26 d5 cd dc a9 1d 33 db 04 33 56 5d 12 40 44 18 ee 22 1c b4 c1 c9 e4 5e 03 7d fe d8 1a 00 28 c5 f5 dc 13 db 0f 15 8a 61 2f 9c 53 37 77 a7 d2 8d d5 b2 49 62 d5 4d 10 59 25 00 41 27 cf fd fe 5f 7b fc 97 fd 8d 1b 7a 00 d4 21 0e 38 17 f1 a8 07 9d 1d 2e a2 78 d6 46 51 48 64 57 61 f6 24 0c 17 5c be c1 7f 7c 33 89 d5 ac 84 b0 d2 41 a7 a3 4e ac 6e 49 0a e3 03 08 ab 6f 09 c6 8a 22 b1 5a 97 60 24 0a 13 c8 99 d5 82 c2 49 33 39 d2 b4 b5 11 a6 24 2d 30 b1 6a b2 95 41 d0 93 90 b8 00 62 12 27 01 11 f2 34 d9 8a b5 36 c3 67 af bb f2 c2 56 8d 74 49 50 1c 29 16 82 8f a7 ae b6 e7 d8 20 42 42 90 72 32 84 b7 12 86 13 a0 Data Ascii: {Z,lldvO>&'o5nvF&F&&33V]@D"^}(a/S7wIbMY%A'_{z!8.xFQHdWa$\\|3ANnIo"Z`$I39$-0jAb'46gVtIP) BBr2
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: fb 10 8f 14 27 5a a5 74 04 59 ed 34 f6 8d fa e2 51 ac 91 e3 9a e2 58 3c 33 ef 4f 4b 9f 31 23 c8 fc c2 48 a2 91 aa c1 c2 71 61 bd 17 b5 34 e1 82 49 c6 f3 85 a3 60 06 d6 0c 5f cf b6 8a ac 82 5a 31 32 59 f0 1c bf 09 8a c4 21 1d 02 a1 88 70 d0 04 87 f4 75 8e 05 1d 44 ad 64 85 36 8b 5b 32 05 cf e9 50 6d 19 04 54 c3 40 a9 05 31 38 d1 b8 85 1d 82 26 91 3d 2b c7 29 cd f3 77 ed 14 d0 16 51 b6 c0 f5 2f 8c b7 47 7e 7d 13 b5 1c 9c d2 9d 18 a7 4e ba d3 9a a5 a2 dc d9 4e 43 ae 72 1e 73 28 3b 77 ad 85 18 78 cf 75 a7 72 95 39 33 38 b7 cc 1d ed 24 5a 35 25 99 d5 89 43 b2 a9 1a 48 d9 7e d0 e0 30 72 8d d5 8c 7d 26 5f 4c d9 2e 36 77 8b a1 88 d3 8c 08 40 c7 2a 67 68 14 26 ac 6a a9 ba ce d3 a8 04 d6 53 18 ae 2c 62 88 05 3b f3 62 a6 23 b0 81 48 9e 48 88 98 48 02 b5 14 f1 0c 8d Data Ascii: 'ZtY4QX<3OK1#Hqa4I`_Z12Y!puDd6[2PmT@18&=+)wQ/G~}NNCrs(;wxur938$Z5%CH~0r}&_L.6w@*gh&jS,b;b#HHH
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 2a 5c a6 ba 71 17 ad e1 56 4f 3c b6 37 ef 0f 9e 1d 1e d4 5e 56 18 9d 9e 4b 45 b7 6e d7 73 22 ca af bb a1 85 62 a7 24 5d 23 cc 42 6e df a2 6f dd 24 a6 96 05 cd c4 81 ee 04 10 05 80 fa c3 34 7c e6 06 df f8 69 e0 b2 63 6c 6b 32 2b 86 84 cb b4 10 1a 5b a6 11 a8 76 c0 9d 4a 44 a3 65 74 5b 9c d6 58 38 31 cc 70 66 5e 37 c6 a9 cd 65 ea 89 ce 5d c7 a6 7a 15 63 20 95 b2 ba 77 db 48 cc 76 32 d8 15 66 62 d3 e8 4c 15 b2 2a eb d6 ba 8f 3f 08 3d de e9 37 cf 19 45 02 2b 6e 9e f9 c3 b5 75 ed 72 80 6f ce d2 0f d0 ad 37 6b f4 ce dc dd 33 10 a4 67 18 cf f5 c3 8f 3e fc 8d 47 1d d7 39 ff 20 a7 60 3a 5b b9 a8 39 2f 65 bd a8 85 ad 1e 7d c6 bc c5 a2 7b 5d 3b dc 1b ee d7 15 dc f0 ec b0 e8 f1 9d 3a 69 05 de a2 ba 62 f5 4d f0 30 81 00 80 80 01 21 59 1e 29 81 40 0d 32 60 a2 1b 14 31 Data Ascii: \qVO<7^VKEns"b$]#Bno$4\|iclk2+[vJDet[X81pf^7e]zc wHv2fbL?=7E+nuro7k3g>G9 `:[9/e}{];:ibM0!Y)@2`1
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 44 29 d5 38 c1 f9 91 83 a1 67 fa 6b 29 08 cd 8d c8 14 87 44 70 02 38 4d c0 f3 79 82 3c d9 13 0b 5a 13 cc bb aa 97 27 11 09 37 cc 4e 99 a9 6e 6e ea 53 8e 13 c5 08 ac d8 38 6f 45 1a ab 7a cf 3e b7 5d 87 71 6b e4 f0 78 62 c6 d9 ad b1 d9 93 ba a8 92 cf 85 f9 cb 3e 1a d2 e1 a0 46 70 04 23 a9 c8 3d d3 89 de 50 58 d1 8c 0a d6 4e 32 5d ce 89 6e c8 40 2b 4f 77 d3 f3 b7 96 5c 76 20 05 10 54 2d 10 a4 33 1d aa 71 36 bc 41 c9 c5 ba dc c1 45 99 de 8a 93 99 5b b1 54 c6 20 33 7a 36 50 8f ce 5e a4 28 8f 33 98 6d e9 d9 b0 9d 51 a7 81 25 30 2f e0 93 3d eb e2 a8 3f ab 9b 33 af af 5e 19 be 71 a9 f1 08 77 10 d7 37 62 33 53 a2 aa 6e 1c 3b ba 2d 1d de 16 a6 99 43 6f dd 49 65 cb b3 1e 2d a2 49 da e0 2f 92 81 f9 66 01 46 c8 2c 24 0b a2 32 fa 7c 33 5e 62 9c 51 d7 45 5d 34 10 ab 92 Data Ascii: D)8gk)Dp8My<Z'7NnnS8oEz>]qkxb>Fp#=PXN2]n@+Ow\v T-3q6AE[T 3z6P^(3mQ%0/=?3^qw7b3Sn;-CoIe-I/fF,$2\|3^bQE]4
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 31 2c f2 8d 68 76 ee 85 34 8c 21 3b 67 93 43 80 00 45 38 16 22 19 7d 23 c0 00 42 c4 19 a0 50 05 c4 90 20 b8 da ae 72 56 20 cd 69 27 9b 95 b3 f1 4e 7c 57 b7 f5 eb 3a b8 17 67 7b 36 90 aa cf 32 2f 8a 6c 68 80 cd 49 30 d6 73 56 35 db a4 24 2f 03 18 0b b7 df 5f b9 99 95 a2 92 8b a2 12 3f c7 cc 65 ee 1a 3b 2a 85 a5 ba 1c fb e2 17 41 63 ce 83 83 45 40 9e a6 de 58 5c 44 f1 60 2a 31 06 58 9c bd 9e 43 ac 36 d3 f4 60 3d 24 07 11 d1 40 3e c0 8a 28 8a 19 ad 39 39 6f 16 00 3d 81 e3 c5 af 67 d4 e9 b7 73 91 ba eb b0 07 2b 46 37 00 72 a6 3a 67 72 6c 66 70 fa ba cb 28 c3 f2 65 61 47 3b cb d8 7e b9 f2 38 49 6c 0d 0c d6 df f2 d4 cf d2 ba 39 16 6d 55 48 57 29 0d a6 bf 98 cb c9 ca ad f7 30 47 65 eb ac 94 1d e9 1d 07 0e b7 9e d5 d2 0c ac 3a 6d fc 31 b3 56 32 94 34 34 45 f0 a0 Data Ascii: 1,hv4!;gCE8"}#BP rV i'N\|W:g{62/lhI0sV5$/_?e;AcE@X\D`1XC6`=$@>(99o=gs+F7r:grlfp(eaG;~8Il9mUHW)0Ge:m1V244E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50218	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1106	OUT	GET /Kd17zb0wMFSZ_yCf0CSUCZe5vVQOTVrnTEwz9kYDAKchgH4YiFo6Q5NlaCei92b-DnE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 10752 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	732	IN	Data Raw: 52 49 46 46 f8 29 00 00 57 45 42 50 56 50 38 4c eb 29 00 00 2f a5 c0 49 00 55 69 a3 fe ff d8 25 b9 7a c6 6d db 1e b4 6d db 35 9d b6 6d 77 97 d9 b5 bb 76 d5 ae ea da 7b 17 77 59 bb 76 d9 b5 f7 ae aa 5d 7b 97 c7 b6 3d d3 18 db 58 73 3f f7 7d ef dd ff 7d df 3b 36 2a b6 93 8e ad d1 4b c5 79 c2 5a b5 7a c5 ec f5 c4 7a 65 0f 2a 7a 62 e7 9d ef e8 95 ad 27 b6 06 b1 6d 67 50 71 9e 59 ab 47 ff d8 a8 0e 7b 8d 1a b1 d5 1d 1b bd 52 b1 b3 63 e3 d5 8e 6d 6b 18 db 36 7a fd c3 5a 15 db b6 ad 1e f5 ca 1d db ce 3f e6 8e 6d e7 89 6d 67 14 bb 32 e1 4e ce d9 c7 b6 d5 ab e6 d8 67 b0 63 a7 0e fa dd ac df b1 06 75 6c c6 ac 57 c7 b6 d9 2b 3a e6 3e 78 15 27 ef 8e 6d db f6 39 c3 b5 ea d5 20 4e 8e 6d 9f c1 b1 6d 9f 13 67 74 cc b0 2d db da b6 ec 6d 73 3d 8a c3 b1 93 18 c5 d2 cf f8 31 Data Ascii: RIFF)WEBPVP8L)/IUi%zmm5mwv{wYv]{=Xs?}};6KyZzzezb'mgPqYG{Rcmk6zZ?mmg2NgculW+:>x'm9 Nmmgt-ms=1
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: b3 cc e5 b3 13 da e9 a5 c0 bd d0 03 d4 f0 95 ea 9f ff ae df 75 92 cd 6c e5 af 08 f1 0c 59 29 63 eb 56 d1 4c a7 62 f8 ee c5 4b 03 80 d6 3a 69 cc 90 92 ff 5e 18 9e 12 00 f4 75 92 a7 f7 39 01 00 02 f6 c2 b0 94 a0 d5 4e 8e 65 d8 b8 80 78 56 57 7d 16 31 6e 08 58 35 0c 65 31 0d 1b 1d d4 72 27 47 32 cc cc b0 c7 78 a5 88 86 fd 2e 88 ab 8c 5f 96 51 29 31 da ec a4 b1 00 25 bf 46 1c b9 12 a3 a5 2b a9 5b e8 d2 4c 8c a0 14 d5 b0 61 2a c1 c4 c1 56 2f cf 56 55 f7 a5 3a ad 32 b1 48 a0 2c 88 11 d8 fa 1a 15 d4 9d e2 2a 80 5d 71 0d 4b a1 c4 b1 21 4a fd 32 da dc 4a 6c 23 53 62 b4 b8 95 c7 01 8d 05 6a 69 2b 29 75 d2 89 3b 04 00 70 89 0d 5c a9 d7 42 2c cb 2c 83 1b 61 82 00 e0 c5 fd f4 42 37 46 00 68 bf 93 12 2b 03 78 ad 6a 36 91 93 54 40 22 65 61 8d 00 bf 46 69 5c 8a a1 3c d0 Data Ascii: ulY)cVLbK:i^u9NexVW}1nX5e1r'G2x._Q)1%F+[LaV/VU:2H,]qK!J2Jl#Sbji+)u;p\B,,aB7Fh+xj6T@"eaFi\<
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: b9 29 9d 6a b1 f7 bf b5 ee f7 00 5e ae 54 a9 95 01 bc cc 83 1f 1d 44 50 e1 c4 1e 19 46 a4 54 f3 b9 66 c5 e1 f5 fb 9a 88 02 26 a5 68 bb 93 86 af 04 f3 a9 e8 81 fe b9 4e 13 ba e8 44 a5 0f f9 8d f0 ab 0e 12 e0 05 87 74 f9 c3 89 2b d6 b8 fc af af 12 1c f8 8d f5 5f a9 97 5a c6 47 5f 7d fd 8e 7a 69 40 c8 1a d4 08 e5 7e 71 d5 1d d5 75 a1 5e 1d 80 0f 3d 3a 05 a3 8a 33 dd 51 c1 5b 7a ed c5 8a 1f e9 96 da e4 56 fe 9a c0 aa 33 52 f0 cd 1d 87 5d fb 27 95 3e d6 7d 82 ef 33 76 08 00 d6 b6 8c 8f be f2 d9 3e 76 06 65 af 06 90 52 a9 94 cf be d6 d0 a5 aa 94 cf be be 50 00 f8 61 0a f4 2f 04 9f 73 49 8c a6 3b d5 cd 41 d6 40 46 fc d6 f5 5c aa eb bd 50 ff 2e 98 a8 42 c1 f7 84 07 e0 e1 b3 02 ab 66 f8 e2 60 4f 3d d7 7f e5 3d c6 06 80 cf ce 1a c7 6e 03 64 85 85 2e 14 00 e6 86 d9 Data Ascii: )j^TDPFTf&hNDt+_ZG_}zi@~qu^=:3Q[zV3R]'>}3v>veRPa/sI;A@F\P.Bf`O==nd.
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 04 b4 7a 31 1e 3c 97 0d 9d ce b4 8d 89 78 b4 37 59 b0 48 72 3d 1a d8 bf 80 7d 2c 76 7a 92 1c 6f 88 71 b9 e0 f1 0a 01 78 84 02 44 ba 85 63 fc d4 5d 01 8c 2d d2 5c 37 cf ce 66 e3 0a b4 7f a8 44 c4 72 54 85 8b 87 2b 50 5f 97 27 21 24 47 f8 b0 22 e0 ba 37 71 e1 7e 1f b3 a0 ea cd 3b 1c cf 66 2a e2 fc af 82 81 ec 2e 17 81 fc da 8d db 8c 31 0e e9 fb 5d 3c 3a 9f 8f e3 b8 59 e6 66 57 7c f3 11 dc da 70 c3 93 90 ec 18 7f be 6b db 52 1c 0b 8e c8 f0 85 63 ec 0d bc 1c c6 54 ed d9 e6 68 e5 bb 15 2a 57 2a 37 ba 96 37 5f 69 e9 e2 ab 8a 1d 5c 41 6b c3 f5 ec 0c b7 77 de 33 23 a7 2d 49 e1 f2 be 08 0f 2b 8d f6 b7 1e 88 95 e6 18 da 9d 86 56 a7 8b 40 1a 8f 4e 66 d3 f8 61 3d 3c 8e 16 33 2a be f5 08 6e 7d b0 ae d4 e6 70 15 ff cf db db 0c 7c a1 88 a4 80 63 7c c4 4d 01 5c e7 bd eb Data Ascii: z1<x7YHr=},vzoqxDc]-\7fDrT+P_'!$G"7q~;f.1]<:YfW\|pkRcThW77_i\Akw3#-I+V@Nfa=<3n}p\|c\|M\
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: b1 3e 10 52 81 51 18 e7 27 d6 d9 04 69 63 28 9c 9f 5a 65 ff 41 2d e5 1d 02 53 82 b3 20 57 47 09 c9 39 66 52 f5 de b2 7d 37 ab 32 9d 6f 08 56 55 fa 43 59 96 2e ab d2 49 49 ca da fa c9 1c 5d 66 99 37 0a a0 8c 7f c7 21 c5 88 6b 5b 3b bd 26 8c df db e6 e9 c5 b8 69 b1 5e af 21 1a bd 46 a3 27 1a 8d 5e 13 c4 9e 48 5e ba 95 e3 48 d3 1a f5 1a 95 64 16 74 75 34 3e de d6 e0 42 68 af ef 78 0a 46 8b ea a3 45 81 cc 1a bd a3 fe 31 fa c6 5e bd 3b 7a 5c 2d f3 45 81 bf 82 2c f8 ac 7d 8b 87 37 7e ec b4 8d 41 af 09 e1 0e 74 31 39 60 64 8f a5 69 8c fe 97 8b 5d 4c f7 9b 38 43 7e 17 ab 1d 8c 4e de b0 e1 7a d2 c7 6c 57 87 a3 13 36 75 4a 58 bf 3b 55 9d 12 60 b9 d8 e5 74 9f bf c5 4a 86 2a 26 a4 1b ec 74 7c 38 e0 72 2e 76 5a aa d2 3f 6e b8 a0 a3 a0 ff c5 52 bb c3 33 b1 d2 f2 84 79 Data Ascii: >RQ'ic(ZeA-S WG9fR}72oVUCY.II]f7!k[;&i^!F'^H^Hdtu4>BhxFE1^;z\-E,}7~At19`di]L8C~NzlW6uJX;U`tJ*&t\|8r.vZ?nR3y
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 5e fb 27 47 8d d6 3b 83 ac 46 3e 24 e0 62 ca 70 35 c6 be 6e 9c cf 5d 73 e1 ee 44 fe 64 2a a2 b9 68 cb 32 5d 92 06 25 d2 ef 94 88 4c 06 95 85 f1 5a 32 ab 99 77 1d 10 1a c1 85 73 f0 9c f6 a9 76 69 8b 98 22 f6 97 da a6 4e 61 bf f3 4a cd 1a 04 11 8a a5 ba de 40 79 8a 3a 21 34 82 0b 38 78 cf 51 d1 9c a4 0a 26 72 6e d9 75 d7 0d a1 61 8c 82 eb 00 ae 6b 2e de 77 0f 2c d5 b5 30 58 79 a0 1e 08 99 9c f6 85 24 49 92 44 45 63 cb ce a9 1e 18 1a 26 28 8c 35 e7 5f 7d e1 91 c3 46 a6 22 86 2d 3f 89 bd 50 42 d5 54 45 d4 94 43 25 34 db e8 7a 03 e7 54 1f 84 86 b1 70 7c 6d 9c a0 f1 d2 dc 24 b9 37 6e 92 97 a4 f0 50 79 35 14 fc 52 c1 2f dc dd 5f c3 e7 7c 4b cf ba 25 ca b3 e5 24 79 c6 ef bc 76 8b b8 42 b7 4b bf 56 92 88 2c 13 f9 02 34 84 ca 4c 47 33 ab 25 2a 08 39 5f 1a 15 53 14 Data Ascii: ^'G;F>$bp5n]sDdh2]%LZ2wsvi"NaJ@y:!48xQ&rnuak.w,0Xy$IDEc&(5_}F"-?PBTEC%4zTp\|m$7nPy5R/_\|K%$yvBKV,4LG3%9_S
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: d5 fa ed 52 d0 f5 ce 97 b8 b4 f5 5b f4 fa 05 59 8d e6 b3 48 2b c2 f8 5d 37 f3 a6 07 b5 35 09 b2 7c bd c1 6a fa 0e fd 4c 97 1f 6e 6b 16 90 a4 c8 7c bc 0f 8e 9b 15 05 5d 87 e7 44 1d 59 c3 60 9a 45 08 43 86 3f e2 a6 79 53 b2 ef 8a a4 ea 25 be d9 92 8c 9d c1 a5 85 f7 5a 7f 68 27 c3 83 83 0c 62 ea 04 93 e4 99 27 1d ca ed 35 5a 8f ce 2c 84 1b 34 b6 87 92 57 ee 48 41 73 c1 d3 fc d0 06 8b 69 cb c2 19 2e 68 ef 7a 35 f3 e7 ff f1 79 6f 76 af 8e ef 0f 6e 0a 1e 17 1c 95 3d e6 c6 7b cf ec 5e 66 c6 44 f8 a0 45 2f e9 dc 03 cc 66 d8 d7 fa fc cc 57 e6 fc 7b 83 d9 3b 4d 9c 1d 16 49 f9 af fd 66 27 7a af 3e 26 1b cb 8c 9b 16 9a 3a 03 41 56 63 b7 35 c7 e7 0c eb 77 6e 75 c1 6f 76 5a f7 12 d6 ed 8a 1e d7 fa 99 ad 86 b0 83 b1 e2 f2 00 f3 f9 88 41 d3 81 86 70 82 92 a3 fb 9f 78 9c Data Ascii: R[YH+]75\|jLnk\|]DY`EC?yS%Zh'b'5Z,4WHAsi.hz5yovn={^fDE/fW{;MIf'z>&:AVc5wnuovZApx
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 52 aa 26 44 d5 b7 5d 6d ea bb 6f db c6 bc f6 c4 c1 25 5f b8 96 08 cc 6c 11 35 2c c6 6e a3 58 67 93 c6 c0 00 45 0b 95 29 d4 aa 72 a7 d1 87 47 16 35 2a 94 d0 be 5f 44 60 4d 99 d0 0e a3 11 51 b8 fd 91 ba 49 fa da a6 4e ff e3 3d 9e 89 1d dc 75 d6 a2 96 24 59 e0 d1 3b 32 11 05 78 8f 5d 37 10 6f 3f cf eb f2 da bd 0b 66 85 e6 f4 12 9f 7c 4d 58 7f a9 5b fd 3b 97 79 cf 51 83 80 5e a2 92 e4 ec 2c d8 e6 fc 50 89 04 c7 7b cc 8d 99 39 3f c3 77 56 9e c9 e8 a8 ea 5e d8 67 32 24 75 9d 68 b4 1e bb 8a 77 dc f6 35 9e ff 35 04 b7 43 5b a3 13 6a bc 7b 99 00 15 be 78 12 26 ec 3b 2b 24 b6 8d 65 0b 2d 4b a7 cf e9 86 cf c9 46 08 b7 2f 61 96 f3 2a 97 36 67 95 50 a3 28 61 65 40 c8 7c 88 12 f7 4a 39 13 5b a1 97 25 ee 15 c9 ef 6c 64 8d cd f4 f6 fe 5a f8 a0 f5 5e 5f e5 44 df 5f 16 ee Data Ascii: R&D]mo%_l5,nXgE)rG5_D`MQIN=u$Y;2x]7o?f\|MX[;yQ^,P{9?wV^g2$uhw55C[j{x&;+$e-KF/a6gP(ae@\|J9[%ldZ^_D_
2024-04-19 14:07:09 UTC	1235	IN	Data Raw: fa c9 37 5b fe e0 87 25 7c a5 b4 ea be df 88 f3 76 69 d7 d4 45 21 2b 76 51 bb 41 b2 9b 0f da bd 66 78 bb 20 2f fd 28 ee f5 1f 75 b6 dc c6 0d fe f4 bd 36 7e f2 4e ab c1 a7 cd ef 5e 29 6d f2 ea 18 76 5f e9 76 ef d1 bc c2 fe 30 74 f1 78 4d 02 b6 1c 36 8b b3 49 fe f6 27 b3 7f fc a1 cc af bf 5d e5 e6 3b 55 a5 cf 55 78 77 5b f1 1c 9a 7e eb a7 1d fe 2c 3a ce fc 92 dd 6b 86 a9 a7 cc 4e f8 ad c4 c1 c6 4a 19 af 6c 0f 75 f4 45 6b df f9 b0 09 f7 8b 0a 46 9f 37 b1 ff d6 08 ee 7c 36 02 fb 10 75 0a 44 87 e3 6a 01 c7 74 af 29 dc db 3f 0e f8 f3 e8 e6 ff f7 ab d6 3f fb 6e e3 f1 5b 95 dc db ae 08 9d af 3f fd db f0 3f bf 7a bb 0d b5 6d 2c 6f d7 5a f9 7e c9 23 4d 85 47 9f 3e 6f dd f1 c7 b5 5a 9f e1 8e 8f de 8e bf 7c 32 c7 71 0a ba e9 07 77 0f 50 a9 06 34 01 d8 88 9b 5d de e0 Data Ascii: 7[%\|viE!+vQAfx /(u6~N^)mv_v0txM6I'];UUxw[~,:kNJluEkF7\|6uDjt)??n[??zm,oZ~#MG>oZ\|2qwP4]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50219	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1106	OUT	GET /UnKazEvT-iNEgftYniQK4JOaQ3Bqm3rE-fWo6dRh4inWUGYpSkEgLSGYZxdv-0sfI3M=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 15680 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	732	IN	Data Raw: 52 49 46 46 38 3d 00 00 57 45 42 50 56 50 38 4c 2b 3d 00 00 2f b8 c0 49 00 4d 40 8c 24 c9 91 b2 d5 f3 02 e8 c1 7f 83 b7 57 20 0c 88 e8 ff 04 f0 8f 4a a9 28 24 3e 85 c2 c8 1a b3 34 c6 18 35 81 61 98 ff 5a be 23 24 6f 78 b2 b1 0e 14 60 35 06 15 fa c4 4d 76 68 94 58 da 98 87 3d 92 04 95 5e 0d 36 de 88 b6 65 e5 89 0d 64 00 4b 74 a8 85 99 25 a1 10 dd 0b 27 51 c9 27 50 55 d3 27 76 70 28 20 34 ad a0 20 72 8b 66 cb 3b 79 21 2a b9 7d 92 5b 6f bf a1 56 9c f0 3c 03 1b f8 3c eb 0a 9c c1 ad c6 f8 4a e1 f9 c2 37 02 f0 99 83 d1 51 d3 cc be 90 a7 05 ec da b6 1a 28 7b 46 0b 88 15 d8 7f 39 16 c0 f2 2b eb 33 27 d6 24 e0 61 2a 00 6e 6d db aa 95 f9 fd 7c 01 4e 48 78 43 fa 2f 80 12 88 dc 0f 7e 23 86 bb 0c 88 8d 24 29 92 e2 18 4d 78 ff ed aa 67 fe 3f 58 c6 fe 4f 00 fe 51 a6 81 Data Ascii: RIFF8=WEBPVP8L+=/IM@$W J($>45aZ#$ox`5MvhX=^6edKt%'Q'PU'vp( 4 rf;y!}[oV<<J7Q({F9+3'$anm\|NHxC/~#$)Mxg?XOQ
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 56 30 63 9f f0 d4 af 6a 35 76 ec 55 b5 a2 75 63 9f aa c7 1d fe 83 db 8c 73 e2 ac 56 8c fd a2 19 db d6 8e f5 6c 9b 5d 76 24 c7 b6 ad da ca 9c fb 3c ff b8 3b 2d 27 1f e2 a5 65 51 b8 db 77 e1 dd 7b cf 92 24 49 92 62 3b 11 d5 ff fd 79 5f 0c 4b 66 5e 33 eb 80 ba 13 eb 06 da f3 8e 59 9a 37 95 31 01 b6 af fd 3f 25 cb f9 6d d6 2e b7 fb b0 8f 31 b1 6d db b6 6d db c9 d5 d8 b6 6d 9e 39 b6 7d 4e 9f 69 1b d5 85 ee ea aa bd 77 ed fd fb 5d d4 6e cc cc 3f f0 8d 0e d6 8a 93 5a 3d ec cc 55 ec a4 d6 a8 63 8d 15 1b b7 3d 13 ec e8 6e 96 ad 8e 6d 74 6c 5b e7 2e b6 6d 5d e5 6e 6e 6c 4b 92 ad 48 92 e4 7e ce bd 11 51 95 9d 39 55 b3 cc cc cc cc 4c 9f b1 df b7 ef cc cc cc 0c cd 94 93 10 11 f7 9e e3 7e ae 6d 4f 24 dd b6 ad e7 79 5e 29 22 32 b3 aa b7 1c 1f 0d 66 66 e6 61 8d 61 8e 1f Data Ascii: V0cj5vUucsVl]v$<;-'eQw{$Ib;y_Kf^3Y71?%m.1mmm9}Niw]n?Z=Uc=nmtl[.m]nnlKH~Q9UL~mO$y^)"2ffaa
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: be 70 fb b6 0f b0 72 1d fa ec 2e b3 3b cd fe ed 4a 13 70 a4 ab 47 f5 d4 05 76 00 10 d5 ed ef 03 00 74 ac cb 4d 98 fb e5 a1 07 2e bc 7b 07 80 6e ba f2 86 15 eb 05 7f 35 f9 54 b7 6b 4c c0 60 34 8c 00 00 fb 76 41 30 c4 fb d9 c7 81 ae fa 83 8b cd 5d 68 fb c7 8b 6e 17 9e c3 a9 6f fd 05 e0 6b f6 78 8f 3a fe 0a a7 ba 93 b3 47 07 75 ef 6a 21 65 6f 90 32 81 08 6d 82 60 b5 14 89 27 84 d4 13 ac 6a ef d5 c6 1e f2 b1 dd 02 74 a6 7d 00 50 f0 a6 c9 e7 d8 fd ea 42 db 85 76 17 df f6 c0 a9 35 12 ab 8e 13 4d 07 bd ba fd 8e d3 de e2 d5 5d 00 ee d6 16 6c b8 fd 58 b6 80 fd 7d 94 02 f4 a9 4b 6d c0 d0 c9 d7 9c de 14 0f 73 be bc d6 01 58 a2 ed 88 b9 5f 39 80 eb 8d 15 0b c0 76 57 9d c3 5c 2f af 59 40 af ba c2 04 04 e8 00 a0 43 d0 da 75 a2 05 40 bf ee 24 0b 12 bc f4 d6 a1 00 ac 58 Data Ascii: pr.;JpGvtM.{n5TkL`4vA0]hnokx:Guj!eo2m`'jt}PBv5M]lX}KmsX_9vW\/Y@Cu@$X
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 94 cb d5 51 ce 57 66 f8 85 97 9c 40 4d 8d 0e 95 28 43 26 92 2f ca 42 08 21 51 25 81 3c 48 20 f3 0a 82 5f db 9c 8f 4b 23 ca f5 e2 7c 0c a3 58 0c d4 8c 85 d5 5d 60 57 9a 3b 43 86 0c 99 2c 46 01 a6 28 40 80 04 aa 12 2c 21 c4 12 48 08 21 d9 0f d7 8a 2a b7 79 a3 96 ab 7f 4c 54 dd 7e 38 16 03 b0 86 98 fb 69 58 36 62 07 bb 35 29 88 c9 b0 13 57 99 88 17 80 10 42 88 25 04 92 90 10 f2 88 52 58 e7 1d ab 96 b5 5c 45 59 58 78 ac 0e 65 da b8 7b a0 b9 5b 0d cb a0 2f 1f 09 ea 06 84 c9 84 d7 6c 0b a8 a2 da c6 01 08 84 10 48 48 48 50 21 84 24 10 25 84 84 1f 96 e7 7b b4 18 20 e6 56 21 a6 6e 60 c8 e8 b6 c0 14 16 2c aa 05 02 81 84 24 04 42 c2 28 4b 4d c3 37 85 9c a7 01 f3 98 a8 34 75 43 06 a8 62 ae 4d 71 73 1b 20 04 02 24 24 04 c2 2b 24 01 a3 11 4e 42 86 f5 00 bf d8 25 65 3e Data Ascii: QWf@M(C&/B!Q%<H _K#\|X]`W;C,F(@,!H!*yLT~8iX6b5)WB%RX\EYXxe{[/lHHHP!$%{ V!n`,$B(KM74uCbMqs $$+$NB%e>
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: b9 34 b6 9e 63 30 cd 38 88 43 7c 46 91 5a 4f 06 51 b5 a3 01 d5 86 36 7a 3e ac 1d 0a d7 d7 68 d4 51 34 a1 c2 50 0d 50 b7 35 d4 96 a5 83 0e 4f 58 92 aa 40 88 b7 66 1c 34 26 07 f8 a7 3b 97 dd bf b4 12 2d 6c 04 fa 9a 86 8e d9 9f 03 6b 98 de 74 b7 b7 2f 9e ac 67 4d 6c 5d e4 f0 aa f1 ec 15 d0 36 4c b2 56 ea 60 e0 5b 6c 6f 21 04 0c f7 54 8b 14 87 dd f7 7a 3a 3b 0d 71 2c 55 34 f8 66 16 0e 90 3f 0b a0 11 15 b5 c0 84 8a e5 00 31 30 e7 00 92 aa bc 1d ce c4 ae f0 c4 38 c0 e2 e0 99 26 4b da 50 2c bc f0 e4 09 58 3e 6c 47 90 47 60 c0 f8 ac 27 80 20 23 7a e9 15 ba ab c2 6b 76 6f 79 ce ce 12 be 2b 0d 73 1c 3b 12 2c 89 80 63 ac 10 22 b4 76 60 2f d4 d3 4c 07 72 e0 4d 77 37 b3 f5 6a 3d 47 a2 70 fc 9b ea 17 57 0f 77 0b 36 33 f8 48 b7 c8 ba 3a 45 1d 1c 3b 3b 3a 1a 49 49 39 22 Data Ascii: 4c08C\|FZOQ6z>hQ4PP5OX@f4&;-lkt/gMl]6LV`[lo!Tz:;q,U4f?108&KP,X>lGG`' #zkvoy+s;,c"v`/LrMw7j=GpWw63H:E;;:II9"
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 1c 54 85 18 a2 55 04 68 0a af b9 24 8c 4e a8 cd 57 d3 a4 a2 b2 95 21 8b aa 0e 08 3e 4e 6d db 9f 0f e5 f7 c5 7d 48 b4 c5 f7 82 aa c4 9b 42 16 58 97 42 19 2f e8 8d 1e 93 56 ba c7 e2 2d 8a f2 ed e3 14 67 1f c0 da ea d6 ca 65 b6 d9 a4 ba 47 fc f2 da 6f c3 c0 78 a3 35 a3 64 60 64 f8 0d 37 34 5c cf 72 41 f3 fc cc f9 d9 17 c6 b8 f1 06 db 96 06 99 b2 a7 6c 62 a0 bf 00 80 c0 3c cd 20 22 dd 46 31 aa 27 0a 6a 0d 93 4a 89 b9 8f 0d 48 a8 5d 3a 8f 43 b7 96 b7 fe 27 30 16 b9 2f 4c 05 4d 5b b0 20 ab 11 17 f3 e2 3f 80 f2 6a 17 5a 39 fa 4c 34 96 23 6e 8b 6b 86 84 54 bb d4 e5 68 da 34 a4 2e 65 d8 76 47 6c 50 20 01 a6 cc df 89 35 b0 d0 c1 4a 20 55 3a 2a 8c 49 0c 6f c1 18 66 7b fa b4 f8 82 f3 5c 9a 71 0a 2c 00 00 06 f2 14 a4 43 c2 2c 5d 5a 63 7e 99 c9 8f 5d a7 99 0f 61 4d 28 Data Ascii: TUh$NW!>Nm}HBXB/V-geGox5d`d74\rAlb< "F1'jJH]:C'0/LM[ ?jZ9L4#nkTh4.evGlP 5J U:*Iof{\q,C,]Zc~]aM(
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 79 03 71 80 c8 18 65 9a 65 70 d2 a3 5b 82 ad 44 95 4d e1 60 93 f9 44 0f e5 ac 1b 2a 30 94 d7 9c 46 18 dd 37 eb ad a5 59 14 10 ac 30 f1 23 02 19 07 07 a8 da 0d 58 58 07 c2 7e 35 76 00 d5 d3 5b af f3 d5 a1 c6 71 10 e8 9d ad 45 1f 99 e8 25 b2 b8 de bd 33 b8 f3 b9 8f 79 a4 19 0a 49 0a 69 87 bf 45 61 5d 33 37 5d cc a0 c5 a2 6b b9 da cc b0 17 a3 05 e4 7c e3 99 14 56 03 42 2a de 44 1b 9c 21 1a 49 8c 71 a6 19 c8 8c 8c 88 3e 47 4b 4d c0 04 e2 70 c4 39 4f 17 46 00 00 03 04 28 47 d0 a2 6e ed 0c b3 d0 5b 85 16 2e 4f 6f 69 01 75 61 1d 1a 53 40 47 18 54 ed a4 f7 3b 3a f9 5b e2 9b c9 52 a8 e6 9d 06 b3 3b dd 62 7d c5 43 05 39 96 55 79 24 03 d2 a4 27 7d f3 48 96 ec 87 c7 a1 6f fd 95 e9 1e 7c 81 4c d8 9e 28 8c c2 59 a4 0b 16 d2 2e 33 ca 2b 21 63 d3 36 f3 c1 05 0c 9b 23 9b Data Ascii: yqeep[DM`D0F7Y0#XX~5v[qE%3yIiEa]37]k\|VBD!Iq>GKMp9OF(Gn[.OoiuaS@GT;:[R;b}C9Uy$'}Ho\|L(Y.3+!c6#
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 32 66 45 83 e0 02 40 80 88 6c 48 f6 2c b9 b0 27 d0 28 77 84 37 da 6e b7 ad 9b 00 5e 9f 72 07 ae e9 06 80 23 c8 27 95 ba 1a fb c0 50 e6 d1 2e e3 0c e9 59 86 5b ea 7e 81 b6 ca 34 a0 b5 e0 77 ca e9 18 c8 9d 4c 77 82 26 12 a2 c8 20 10 f3 7f fd 29 b7 0f 9f 52 37 c0 cf bd 21 dd 5e d1 57 99 69 08 47 09 2d c0 44 e2 7f 0c 10 f4 f4 98 71 35 96 51 9a 94 c5 a3 ae 1e 5e 51 38 93 26 74 80 83 ab 25 20 4c 81 94 fc 84 2a 85 78 82 08 1c 02 00 08 40 d0 0c 23 ea 79 c6 8e 48 ee 1e ec 2e 90 b2 61 a0 36 0c a0 87 41 3b 44 c8 e7 23 b2 66 97 89 50 d1 12 c1 44 42 99 c6 98 36 ac 66 be 9d d5 1d 60 40 0b 3c bf 0e d6 80 75 a0 29 24 21 0b 6b ba f0 24 a9 6b 34 6f d8 b9 65 b3 5a 80 4e cc 28 95 71 6e 44 62 1f 80 3f 64 ef 86 a1 0d 1c ec b8 34 94 0b 38 c3 5f 02 f0 f9 47 ea 00 12 58 55 8e 6a Data Ascii: 2fE@lH,'(w7n^r#'P.Y[~4wLw& )R7!^WiG-Dq5Q^Q8&t% L*x@#yH.a6A;D#fPDB6f`@<u)$!k$k4oeZN(qnDb?d48_GXUj
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 29 1e d6 82 db 8a 5e 1d 34 64 15 c6 17 75 14 11 c6 e4 2d ee cc 1c a3 89 48 69 2e 89 dd 83 8a fe d5 20 71 83 20 a1 71 85 31 56 e8 67 ba 81 84 40 03 c8 21 4d 83 3c aa f2 60 f5 16 90 66 8e 78 75 a6 0c ca cd b4 29 d8 0e bd f2 7b 1e da 05 b0 a4 08 7f ed 89 85 84 11 14 98 d9 f3 88 8f 49 a9 83 7d b2 1f 5a 23 9f eb 23 06 c6 b3 31 a5 c6 52 0e 94 30 83 76 40 80 0d a1 23 21 02 54 b2 aa 64 fe 59 fb fb 8f 90 64 95 a6 90 83 d3 87 d8 14 1c a9 1f 93 ab 59 94 92 8c ed 72 23 78 62 0f 31 a9 90 5d e2 62 8d 01 41 08 15 b8 1a 4f c4 d8 84 86 38 b4 21 00 19 c0 14 86 58 0d 56 4a ef 62 9b 79 a4 36 49 4d 91 c8 3b 59 5b 57 28 5e 32 8a c2 59 4a c5 6b 74 4c a5 d0 ca 65 9a e0 66 4f 9c 52 16 a7 62 cb 3b a5 88 64 8f e2 79 4a bd 33 48 f3 1a d3 82 d7 c4 08 16 43 9c 92 ec 29 70 ef d3 de 6e Data Ascii: )^4du-Hi. q q1Vg@!M<`fxu){I}Z##1R0v@#!TdYdYr#xb1]bAO8!XVJby6IM;Y[W(^2YJktLefORb;dyJ3HC)pn
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 9d c3 3a a9 61 47 28 9b ac 62 f1 07 37 e3 82 c3 c0 80 86 f0 9f aa b3 47 46 e5 33 a6 5e 33 3c 59 ea cb 4a cb e2 fc 1c 11 e5 16 cd 7f 92 44 37 57 91 be 79 42 8f b5 d5 c9 3a 28 0d 04 0b a9 8d c9 08 d5 ab 1f fd 63 f3 1e 06 08 15 52 b7 61 53 8d 3e 16 f3 81 6b a5 4f 59 0a 17 c5 17 5c 8d b3 b6 b3 2f e8 99 af bd a3 62 b3 d2 09 25 a6 4b e6 11 80 a0 21 7c 38 ee 53 36 54 71 23 e6 6a e0 d6 ec e5 52 92 77 0c 4a 59 92 8a cd f5 4f a7 44 5a 35 4c c1 7b ef ad 23 b8 ba 0a fa 76 35 e4 c8 72 91 f1 29 df c4 74 c7 d6 cb 72 29 50 61 5b 7a 3b d3 78 90 55 1c 77 24 39 14 48 a2 c2 16 f3 ff 36 bb f9 9f a5 17 e6 ee 5e e4 37 b5 fc ef ab 5f d0 89 cd 94 bb 54 1a 64 94 ea 00 34 b6 66 c7 2c 3b 5b bd d1 cd 7e 88 fe ee 5a 8b c5 bf fc 4b b1 91 0e bf cd 7e b2 54 12 2a 15 a6 0e bb 4e 4e 6f e4 Data Ascii: :aG(b7GF3^3<YJD7WyB:(cRaS>kOY\/b%K!\|8S6Tq#jRwJYODZ5L{#v5r)tr)Pa[z;xUw$9H6^7_Td4f,;[~ZK~T*NNo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50221	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1105	OUT	GET /YPvG90WiRFcg7A45HZ0bPwKe6h_I7lcfy6jMWjQYq3ryi65iCR7UQ-r7WFQDpLkSBQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 11790 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	732	IN	Data Raw: 52 49 46 46 06 2e 00 00 57 45 42 50 56 50 38 4c f9 2d 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 54 72 ed 77 e7 ca 3f e1 69 d7 3e 11 44 f4 7f 02 f8 f5 5b 10 28 dd aa 6a aa 4a 53 b5 01 43 61 c0 09 24 c9 2a 15 7b 5b 36 f6 1b 3f da f5 c6 ed 50 bd 19 b8 f5 45 ea 95 a5 53 49 dd a7 51 02 73 36 0e 26 df 06 82 a4 7b 1f 34 4c 18 72 6b 92 a4 bf 9b 2e 78 c6 a7 61 69 48 f6 42 49 2c b5 31 d0 07 7b 21 b2 41 c1 80 4e bd 10 79 65 e8 0f b0 94 16 bd 70 2f f8 c8 7c 46 de 18 07 2d 66 50 30 f4 c9 ee 30 26 db b7 70 0d b2 1d 8a 7c a3 93 16 82 cb 02 72 24 49 8a 24 df 3d 46 09 18 f4 97 e5 44 18 bb f7 1a d3 31 75 55 2d 48 00 c9 b1 6d d5 4a 7d dc 39 38 cd 33 ff 30 16 6d d9 97 83 dd dc fc 16 ee 10 b8 b1 6d bb 6a d6 79 78 4f 4a 07 f4 df 10 17 2b 29 7b a1 fc eb ff 04 60 c7 39 96 3c ca 0c Data Ascii: RIFF.WEBPVP8L-/IM@lHTrw?i>D[(jJSCa$*{[6?PESIQs6&{4Lrk.xaiHBI,1{!ANyep/\|F-fP00&p\|r$I$=FD1uU-HmJ}9830mmjyxOJ+){`9<
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 33 bb a8 b8 a4 b5 56 a9 a6 5b 8d 9a 65 d7 ea d0 54 8b 6d 8a 99 f9 c7 e7 8c 09 c0 06 6d 9b 2a 37 ce ba fb c0 90 34 b2 d0 cc cc b4 4c 61 66 66 66 66 66 66 66 5e 66 66 66 66 74 a2 c8 96 59 60 cb a2 d1 d0 81 ee 1f 73 bc 5a 70 fe 3f aa b0 46 55 0a ba d6 a7 54 e1 05 ed 86 13 55 f2 7e 0c 61 4e b4 f9 18 83 cb 10 26 57 f9 91 6c 5b b5 6d db b6 52 2e b5 b6 d6 db 80 09 63 ae cd cc cc 4c 1a 4b 4b da 2a c5 62 4b db b6 b4 23 b0 43 b0 35 e6 20 b0 ca 5b e2 3d 61 d1 e0 d9 b1 b5 5a 4b f6 64 6d db 61 db da b6 ed c7 71 46 44 c7 18 6b ad db b6 6d db 46 ce 77 09 56 15 ee 3b ab 02 dc 77 25 98 75 da be 93 b6 31 3d d0 23 ae f3 88 09 70 e0 15 68 0e 52 38 f3 45 07 fe f4 dc f8 37 ef 5c f1 d3 ab eb 7c 78 ed 34 07 fc 12 a2 e8 f6 6d 79 5d d6 49 f4 7a d7 61 97 4e 8e 17 37 39 78 2d a0 2a Data Ascii: 3V[eTmm74Lafffffff^fffftY`sZp?FUTU~aN&Wl[mR.cLKKbK#C5 [=aZKdmaqFDkmFwV;w%u1=#phR8E7\\|x4my]IzaN79x-*
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: f7 1b 8e 58 76 28 cc dd 3e f4 ae e6 6d 23 7a b2 50 2b 6c 99 02 eb 50 b9 00 14 27 00 40 13 4a 43 21 41 e6 d3 be d8 e3 2d ca 2f 50 a2 03 b8 3b 34 ca 1c f9 b2 f3 7d 30 5e dd 8d b9 cc 3a 75 31 60 c7 03 e0 16 07 61 c6 d0 69 45 04 a1 05 a7 74 3b 43 ff 67 68 83 57 da e3 c1 6b 91 18 79 13 39 e1 76 d5 fb 40 98 6f 7c d8 83 47 be 42 44 e5 fc b5 de c3 a3 6b dc 07 9b 3f 3f 7a f7 d4 99 8f d8 fd 35 9b 08 89 4c 99 e9 12 99 8f 30 44 cc 75 fe 21 d2 f3 27 a5 e4 32 5f 74 c2 e4 b1 90 c5 0b 61 b6 4c 65 79 d8 de 9c d6 bf 3a 18 ee 4f 3e 8e 0d 40 8b 05 b0 bb 78 7d 08 80 94 1b 53 56 b0 23 a7 19 1c b6 5e 7c 03 db f2 3f bf 67 c9 c3 32 ff fa e7 a0 ef b2 28 f7 35 39 84 23 64 5d 7a 8b 32 27 4e 20 59 64 c0 e2 85 ed 6b 9d 50 aa 44 ae 2d 0e 92 6a f6 f0 ff 1c 9b 5a c3 4f b3 e2 16 28 40 26 Data Ascii: Xv(>m#zP+lP'@JC!A-/P;4}0^:u1`aiEt;CghWky9v@o\|GBDk??z5L0Du!'2_taLey:O>@x}SV#^\|?g2(59#d]z2'N YdkPD-jZO(@&
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 2f 95 8b 8b 98 85 63 6f 66 37 4e 8b 7a 13 8a 40 d8 81 77 3f 96 07 71 63 46 71 2e 3f 26 06 a6 5b f0 a9 05 f8 9d c5 c8 51 ed 35 e4 1f 7d b8 33 8f e3 fe 6c 02 31 f4 57 53 59 d4 e0 33 2f ca 48 e8 c5 a1 e5 39 cd 68 45 fa 42 0e 07 58 8e 6b 32 80 cb f2 11 8d 98 cc 51 93 17 4f 52 59 c2 df 67 f2 ff 07 83 ab f8 4e 18 38 4a 6d 03 14 c3 8f 81 3d 39 91 0e a0 5b 33 21 d5 9e 42 8d f1 17 9d cf 0b 01 30 e9 e0 70 31 0a 1d 14 b8 3e 7c 0d 1e cd 76 64 d0 70 25 91 34 69 73 03 42 48 cf b0 6b 45 9d c6 55 5a 6e fd d7 e7 97 02 96 20 4d 4c ed 05 90 ce e1 35 66 84 29 33 c8 e0 26 3c 0a b8 08 e0 14 76 64 2f b6 e0 6e ac 4b 0c 30 c6 87 59 40 fd 77 5a 30 50 77 8b 32 0f 6c 54 3f 98 9b c2 9d 11 18 ce a7 f9 f5 5c 78 3c b7 43 53 f5 f5 0b 9a 53 59 09 f5 0b 5e d3 38 85 9e 40 fa 68 20 de 89 a7 Data Ascii: /cof7Nz@w?qcFq.?&[Q5}3l1WSY3/H9hEBXk2QORYgN8Jm=9[3!B0p1>\|vdp%4isBHkEUZn ML5f)3&<vd/nK0Y@wZ0Pw2lT?\x<CSSY^8@h
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: ff e2 3f b9 6f 2c ff fb bb 6b fe fa f6 94 5f 58 ed b7 37 38 7e 67 83 36 4c 2d 67 b8 6c ac 6d 8b e3 a5 57 9b ea 65 25 8c 9d ca 15 da c0 52 a8 93 35 b4 2f 7a 98 63 19 e0 1f e7 70 bf 6d 5b a7 4e 3d d3 db 7d f7 ca ac 0a 2d 9a 7a b5 4a 29 23 eb 06 d6 20 6a 80 f1 fd f2 9a 3b e3 ef 58 73 85 4e 35 fa ff 5f f6 fa f1 3d a1 b9 86 d7 c3 66 a3 e4 80 ca 45 14 8f 99 38 bd 5a ff 00 f8 8b ca 2e 45 f1 40 c9 db 7f 9b be b9 3b 61 4d ef 93 4d 99 8c 72 0d 49 14 8d 83 4f c4 8f fe 03 32 b5 fe 0f bf 4b 04 a7 a9 bd a5 95 6a 9f d6 56 37 7e 04 80 6e 07 55 1e 1f 74 74 d4 b3 6b cd 9b a6 26 8f da fb 37 d6 5e a4 50 86 35 6e 60 54 31 98 0a 58 22 16 4e eb 7c a2 25 dd 4b 00 e0 37 1e cd 47 be fb fc c5 3f 23 f7 df 87 d8 1d 3d d1 ce 1f e2 a0 8c ac 9b 8d a0 b0 88 ce 96 6e ad 58 32 88 0b 7c 19 Data Ascii: ?o,k_X78~g6L-glmWe%R5/zcpm[N=}-zJ)# j;XsN5_=fE8Z.E@;aMMrIO2KjV7~nUttk&7^P5n`T1X"N\|%K7G?#=nX2\|
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: a0 cb 74 6e c7 9f 33 24 d7 70 99 1a b3 cd 68 2b 2c 3c d5 74 16 f4 d9 45 19 a7 60 03 18 1c 6b 42 d7 a1 98 6c a7 01 d9 65 66 74 b7 9b 52 9e 75 b6 a6 03 56 cc ac b9 78 b6 71 f2 d0 26 27 e2 9e 74 c6 ac dc d5 b8 8c 8e ec f3 7b 2c b6 64 9b d3 6d fe d1 29 cc 36 04 ad 07 72 4b 58 12 bf 47 d1 d9 f3 12 db d6 97 95 5f 3e 4c 94 99 e7 b4 70 3f 45 97 13 9f 6c 15 a7 66 07 a7 61 2e f3 c2 c3 fe 7c 63 3f 17 0e 18 72 43 9b cf cb f0 49 10 40 0d 6b 01 46 67 76 46 74 d5 95 25 79 94 f0 ce 21 36 69 d9 d9 4e ca 99 14 cc 39 d1 16 db c4 da 75 a1 a6 40 cc 2c 16 33 87 1a c8 eb fb 58 0c 4d f0 86 9e 7e 9f b4 fb 6a 24 10 00 e2 0c 43 0d 27 08 a2 b3 e8 ab e8 b7 f5 22 75 59 e8 98 8b 4c e3 d0 e3 e6 ce e0 07 2b 1f 94 3b 5d ab be e6 a4 d2 1e b1 42 69 5e e7 a1 be 13 8b ea 5e b5 f4 3f 9e 92 6e Data Ascii: tn3$ph+,<tE`kBleftRuVxq&'t{,dm)6rKXG_>Lp?Elfa.\|c?rCI@kFgvFt%y!6iN9u@,3XM~j$C'"uYL+;]Bi^^?n
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: a6 b1 d3 b0 da 0c 3a d0 37 3d db 67 ce 37 9a 88 3b 55 6b 9c 60 82 b8 20 56 50 d4 1e c4 a0 f5 da 98 cb 4d bc ee 7b f6 8e 84 b5 70 ef b6 5c 90 18 e0 b2 ff ab 5f f9 71 6a ab 30 40 ca cd d8 97 11 35 c0 60 b4 e6 bf 23 9c 9b 43 cf ce b8 35 f9 bd ea 82 8a 93 d5 95 4e f7 fd 33 b0 6e 80 13 0c 96 b9 41 5d 01 6a 18 04 bd 1b ac 5a 29 25 5b 60 94 38 85 7c 51 0f 4d d3 e6 38 9d ad ad ad 18 4b 20 80 71 93 ec 6c d6 30 35 b2 80 78 28 62 1e 6d 58 38 87 ef 0c d5 80 ad e8 34 91 7e b1 ed 3b a3 cb f4 33 1d 84 4b 2c fc 21 93 d6 ea 08 46 ce 76 13 6b a0 6c 1a 52 75 fa b2 65 d0 04 08 49 71 33 8e c6 db 23 50 e3 52 c0 78 98 ae 99 b3 74 1b bc e6 b2 5a 1b 37 43 34 3c bd 52 6c d3 6a 59 3b 45 6b 36 74 28 84 00 66 72 19 7d 26 12 55 4a cd b0 ea 91 65 9e 37 39 29 75 f9 12 22 c9 78 3c ee 26 Data Ascii: :7=g7;Uk` VPM{p\_qj0@5`#C5N3nA]jZ)%[`8\|QM8K ql05x(bmX84~;3K,!FvklRueIq3#PRxtZ7C4<RljY;Ek6t(fr}&UJe79)u"x<&
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 09 4b c8 ff e0 bb 56 9c e6 88 bc 2e 25 17 75 3c bf 73 97 9d fa e0 f4 49 2f 73 1b 0f 3d 98 cc 24 e5 db 08 3a 6a 39 2b 51 43 73 ca 34 98 77 b6 62 0a 2d e9 40 4f db c9 d2 9b 51 ad d6 74 fd bb 67 99 8a 7d 5f 75 39 39 26 69 eb f5 b2 78 ae 60 a3 77 9f e7 b7 29 9e 19 59 d1 50 a7 00 26 8b 04 8c fc af 42 a6 15 04 09 4a 78 d5 e4 3b cf 47 15 f1 b6 6a 08 7f 2c bd c0 6b 33 7a 60 ba 80 da bd 97 87 e4 44 18 b2 6d 49 b9 64 80 1e 9e 7e b0 2f bc 24 b0 30 a9 9a e1 2c 43 f0 5b b9 a4 25 c0 79 17 0a 99 a7 be ef 65 b5 ae f6 57 35 0c c6 9b 7e 0b dc 6a 68 51 12 88 76 1d 51 4e 7d 4b 0d 78 f3 b9 8d 34 11 c8 04 40 75 a4 65 0c 52 44 77 4b 89 a5 a0 23 8e 38 71 b6 d2 53 30 29 97 0c 79 4b 15 30 3a 3b 87 d5 93 51 64 f7 16 0c 59 d6 3e 7d e4 df dd d9 90 c0 b6 db 28 0e 19 d3 e9 ea 52 01 4b Data Ascii: KV.%u<sI/s=$:j9+QCs4wb-@OQtg}_u99&ix`w)YP&BJx;Gj,k3z`DmId~/$0,C[%yeW5~jhQvQN}Kx4@ueRDwK#8qS0)yK0:;QdY>}(RK
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 81 8c 2a 60 c2 ba 60 6c 9f 0c 1e b7 42 0e e1 9f 58 89 72 8a f9 14 30 86 09 14 b0 0e ad 98 c8 47 6a 3b d2 0c 2e 64 49 f0 c7 d3 0b 60 2a d5 6d a8 a0 62 6b a6 f6 7c ae 5d 0a f5 f7 7c a6 ae ba 48 65 11 35 2c 43 c2 69 3c 6e bf 7b fa 3d 45 b8 3d 5a 77 b6 5f f8 67 69 2d 3b 85 f5 f9 f3 24 fe 76 2b bd c0 75 2c 4b d3 8d b3 19 3a d7 ae 96 f6 a3 61 ba 06 73 73 cf eb 29 ad 13 bb b2 3a 17 b1 21 0f d5 15 d8 d4 7e 9f cb 07 5a 70 ae 96 b2 0f 55 48 bf 1e b4 f6 4e d0 59 fa 0c 1c 75 2a 22 ee 40 8d 1a 96 b0 11 f1 f6 eb b5 0f 83 eb 3c f6 65 27 38 92 d5 78 be d6 b6 bf 76 ca b9 fc e2 4c fe fe a6 0b b5 86 ad 5a 0f bb bb 0a ad b2 0c 67 4e ff 70 ea 5c 2b ec 45 ff 19 c1 ca b9 58 ab db d1 4c a5 e5 2c 9d ce 9c cc 8f 2b c6 2f 93 f8 80 44 0e aa d4 48 00 c6 4b 3e 22 42 b9 87 30 4b 33 59 Data Ascii: ``lBXr0Gj;.dI`mbk\|]\|He5,Ci<n{=E=Zw_gi-;$v+u,K:ass):!~ZpUHNYu*"@<e'8xvLZgNp\+EXL,+/DHK>"B0K3Y
2024-04-19 14:07:09 UTC	1018	IN	Data Raw: 56 f9 18 eb e6 38 f0 ed 03 0e ad f7 e7 f5 f6 27 7b e8 01 43 4b 67 87 4b c7 b9 5b ad df d4 d7 ef 5e dc 1c 41 e1 38 a2 31 2e 4e f8 3b 6b 7e da 5a dd d2 39 fa 2c 9f ee a5 57 2b 75 db af 00 2e 73 38 2d e6 7b 5a 4e 4a 6e 86 c2 56 d1 80 d6 f3 ee 52 f2 da 6e 58 33 21 be 58 78 fc 24 97 15 99 59 25 10 89 b3 cb 85 9f d8 1c 13 57 05 44 6f 43 de 4e ba 33 b2 7c f6 dd 3f c2 e2 db 20 c1 d2 9f 38 7d a2 9a 48 aa e2 6c 20 60 f4 55 f0 0a c2 f3 7b 4b ca 8b 7e c4 20 53 13 9f ea 00 80 4b ea 14 51 37 46 79 24 42 44 8c 2a b8 cc ae 86 4a 3d 59 e9 b4 3b fd f8 a0 64 43 a6 80 9b 3d bc 78 c1 eb cf cf 6d 01 00 e6 cc ae df d6 75 05 20 f1 ca fc 5e 4b a2 b4 25 42 5b 59 e2 fd 7a 22 f7 f4 4c 2e 44 eb e3 95 da 03 b6 16 78 0b 31 93 8d 8f 7d 4e 4b cb bc f4 f4 ed 66 de 48 84 48 5c 15 83 08 08 Data Ascii: V8'{CKgK[^A81.N;k~Z9,W+u.s8-{ZNJnVRnX3!Xx$Y%WDoCN3\|? 8}Hl `U{K~ SKQ7Fy$BD*J=Y;dC=xmu ^K%B[Yz"L.Dx1}NKfHH\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50223	173.194.219.147	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1572	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8441 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=3a6l25apk2qh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajQ8yTbYmfNthCqeCUXSA62-OZxgYCryckT7TvnHeCrYgvj_ZEKKw3MoqyxiyWewig5FlXNz8xdPD8vxvg; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:07:09 UTC	8441	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 34 7a 39 44 33 45 6e 6b 61 61 58 65 6d 69 6f 67 67 68 63 76 67 65 39 30 72 65 79 36 44 69 36 53 61 4e 48 56 78 6c 4d 75 76 4b 71 6c 37 39 5a 73 58 6b 67 4b 47 48 5f 57 51 74 5a 4b 35 4f 7a 79 47 32 68 4b 71 62 53 37 7a 6d 36 69 45 4e 42 75 4c 5f 41 49 4c 6d 51 6e 38 4e 6d 39 41 55 6d 59 72 53 5a 5a 42 67 4e 36 4e 70 31 65 35 7a 50 67 7a 75 74 75 2d 2d 4b 49 75 79 39 4e 61 6e 73 5f 50 78 67 6e 65 77 6c 67 78 79 4f 73 64 5a 43 4d 53 69 4e 43 38 6b 49 73 33 49 43 30 67 31 79 44 4c 34 35 66 65 35 30 2d 6c 51 48 5a 55 4b 43 38 72 7a 32 4d 43 36 56 79 31 57 4e 55 63 55 4c 77 52 54 2d 54 54 36 78 4b 7a 53 2d 45 73 56 65 5a 57 65 30 4c 38 32 5a 68 76 67 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA4z9D3EnkaaXemiogghcvge90rey6Di6SaNHVxlMuvKql79ZsXkgKGH_WQtZK5OzyG2hKqbS7zm6iENBuL_AILmQn8Nm9AUmYrSZZBgN6Np1e5zPgzutu--KIuy9Nans_PxgnewlgxyOsdZCMSiNC8kIs3IC0g1yDL45fe50-lQHZUKC8rz2MC6Vy1WNUcULwRT-TT6xKzS-EsVeZWe0L82Zhvg
2024-04-19 14:07:09 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:07:09 GMT Expires: Fri, 19 Apr 2024 14:07:09 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOahUPZFLW2tOAgWgNQd38O7nHUXDtmo2QnNUzY9nfF_LfZbZSMtJVBD614aBH9-1TdRRLN-nkhqP3CSdQIA;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:07:09 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:09 UTC	559	IN	Data Raw: 61 36 34 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 38 34 62 59 35 68 67 4c 46 6e 42 36 72 4e 79 5f 50 49 44 6a 2d 33 6c 50 76 65 42 53 4c 58 30 4b 48 36 6e 52 6f 4f 5a 6c 66 6d 37 66 39 71 62 35 41 79 2d 76 73 78 58 32 53 6c 50 6d 46 38 4b 73 56 75 31 79 62 41 33 71 57 2d 6a 6e 71 30 62 44 68 55 53 4e 69 70 58 4d 41 53 77 6f 46 66 52 59 74 43 6d 4b 6a 7a 68 55 4b 55 73 6f 74 37 73 71 6e 44 57 72 4d 63 36 35 63 6a 6d 79 64 74 71 4e 64 59 4c 30 2d 4f 7a 41 67 4f 43 63 78 48 36 56 31 48 63 41 74 54 6c 30 6c 67 4d 4d 71 63 36 62 6c 75 75 71 31 5f 55 2d 66 59 37 79 54 41 75 31 5a 4d 46 69 6e 44 36 55 76 53 5f 58 4f 61 55 50 69 31 68 74 61 64 67 36 52 74 51 35 73 51 69 51 78 68 43 66 50 6d 79 70 6d 54 33 70 49 39 41 68 36 69 Data Ascii: a64)]}'["rresp","03AFcWeA584bY5hgLFnB6rNy_PIDj-3lPveBSLX0KH6nRoOZlfm7f9qb5Ay-vsxX2SlPmF8KsVu1ybA3qW-jnq0bDhUSNipXMASwoFfRYtCmKjzhUKUsot7sqnDWrMc65cjmydtqNdYL0-OzAgOCcxH6V1HcAtTl0lgMMqc6bluuq1_U-fY7yTAu1ZMFinD6UvS_XOaUPi1htadg6RtQ5sQiQxhCfPmypmT3pI9Ah6i
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 54 57 6f 4b 45 65 46 7a 4e 6b 42 75 63 70 53 70 33 39 7a 79 52 46 2d 56 56 6f 5f 4d 51 4f 6a 5f 77 76 4d 4d 48 4b 74 6e 4d 59 44 64 30 45 5a 4b 37 68 4a 6e 47 77 31 67 35 2d 63 62 30 55 36 63 63 33 5a 59 61 6b 36 79 6d 79 79 4d 53 54 6f 50 56 39 54 49 62 66 5f 53 72 38 2d 68 48 75 57 36 78 52 4a 4b 73 6a 56 68 32 69 4c 68 49 49 65 64 50 4e 44 50 61 68 74 56 79 5a 57 4b 34 74 35 41 62 57 34 52 4d 59 77 77 38 45 42 58 34 46 6a 62 4a 43 52 6d 77 2d 76 4d 4f 51 39 6f 65 45 2d 63 5f 7a 73 70 47 62 6d 4e 55 67 78 35 70 68 49 5f 42 4f 39 48 41 45 30 63 4f 56 50 79 77 32 65 55 78 57 68 44 76 36 38 54 37 6b 4e 75 6d 36 2d 4d 4a 4f 4e 66 6f 67 49 76 65 49 75 4d 78 34 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: TWoKEeFzNkBucpSp39zyRF-VVo_MQOj_wvMMHKtnMYDd0EZK7hJnGw1g5-cb0U6cc3ZYak6ymyyMSToPV9TIbf_Sr8-hHuW6xRJKsjVh2iLhIIedPNDPahtVyZWK4t5AbW4RMYww8EBX4FjbJCRmw-vMOQ9oeE-c_zspGbmNUgx5phI_BO9HAE0cOVPyw2eUxWhDv68T7kNum6-MJONfogIveIuMx4",null,120,null,null,null,["bgdat
2024-04-19 14:07:09 UTC	853	IN	Data Raw: 52 68 56 44 45 76 63 6d 5a 47 62 58 4a 72 53 45 31 52 55 79 74 4d 4e 54 5a 73 53 33 5a 75 4e 48 42 35 63 46 6c 52 63 6d 55 32 4d 31 56 6d 53 31 68 34 5a 53 73 72 55 6c 64 42 52 45 6c 4a 64 56 4a 61 4d 33 42 55 63 57 45 35 4e 43 39 4d 52 55 74 50 4f 55 39 6b 4f 53 39 73 52 6c 46 45 51 58 70 4d 63 30 31 76 57 56 6c 42 4d 43 38 78 64 57 4a 33 53 54 42 47 62 6e 56 4b 62 6a 46 45 61 47 5a 6e 4d 57 52 54 53 32 5a 42 4b 31 51 7a 5a 57 64 74 62 6d 49 30 54 55 74 73 64 30 39 33 54 55 35 4d 53 7a 6b 78 52 45 74 77 62 31 59 32 57 6a 56 31 52 6c 56 6a 4e 69 74 51 4d 47 55 79 56 58 51 72 61 31 6b 30 65 54 41 7a 64 58 52 68 65 6e 41 79 55 45 68 4c 64 56 6f 7a 4e 6c 46 51 64 6a 45 77 61 7a 46 58 59 54 4a 74 64 47 31 4f 61 54 5a 6e 4d 6c 4a 6a 63 44 4a 4a 65 48 67 72 59 Data Ascii: RhVDEvcmZGbXJrSE1RUytMNTZsS3ZuNHB5cFlRcmU2M1VmS1h4ZSsrUldBRElJdVJaM3BUcWE5NC9MRUtPOU9kOS9sRlFEQXpMc01vWVlBMC8xdWJ3STBGbnVKbjFEaGZnMWRTS2ZBK1QzZWdtbmI0TUtsd093TU5MSzkxREtwb1Y2WjV1RlVjNitQMGUyVXQra1k0eTAzdXRhenAyUEhLdVozNlFQdjEwazFXYTJtdG1OaTZnMlJjcDJJeHgrY
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 31 36 36 31 0d 0a 47 45 34 55 7a 4a 75 4d 32 35 58 57 6a 67 35 53 58 59 35 4e 47 4e 5a 61 53 39 76 5a 56 6c 58 57 56 68 53 55 45 70 4e 4e 6c 5a 51 52 31 68 76 5a 55 68 76 52 30 68 75 4e 33 6f 32 62 47 70 47 61 6b 52 4a 56 55 74 78 57 56 6f 33 55 57 74 52 54 6b 6c 70 62 6b 46 6f 53 44 4a 50 53 33 46 36 64 31 5a 36 57 58 68 47 4d 46 6c 49 54 6c 51 31 61 6b 67 32 63 6d 64 33 63 6d 31 61 5a 33 68 53 59 7a 64 70 57 47 46 6d 63 47 64 34 4f 45 5a 6d 63 6a 64 6a 4d 48 55 32 5a 46 42 69 4f 57 78 59 61 54 52 50 62 47 31 51 54 57 68 72 4e 6d 34 35 53 6d 52 35 55 57 31 6a 54 31 42 36 53 6c 4a 56 61 47 39 35 59 6e 4d 32 4e 47 46 4c 55 44 41 31 63 31 6c 74 51 6d 49 76 54 46 68 6f 59 54 59 7a 52 47 39 77 55 44 56 34 4e 55 4a 4d 53 6b 4a 73 62 7a 46 42 65 56 4a 76 59 56 Data Ascii: 1661GE4UzJuM25XWjg5SXY5NGNZaS9vZVlXWVhSUEpNNlZQR1hvZUhvR0huN3o2bGpGakRJVUtxWVo3UWtRTklpbkFoSDJPS3F6d1Z6WXhGMFlITlQ1akg2cmd3cm1aZ3hSYzdpWGFmcGd4OEZmcjdjMHU2ZFBiOWxYaTRPbG1QTWhrNm45SmR5UW1jT1B6SlJVaG95YnM2NGFLUDA1c1ltQmIvTFhoYTYzRG9wUDV4NUJMSkJsbzFBeVJvYV
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 31 4c 4d 44 4e 57 61 57 68 49 51 55 6c 42 54 47 52 4c 5a 44 6c 4a 53 6d 78 74 5a 30 52 42 63 6b 74 33 54 58 5a 58 61 6d 4e 72 5a 44 6b 34 64 58 4e 47 55 32 64 4b 54 45 35 31 54 58 56 7a 64 55 4e 6d 55 45 78 6f 54 47 78 33 53 30 78 44 52 7a 45 72 56 48 4a 73 63 6c 49 33 59 6e 64 77 55 31 52 6a 56 6a 56 54 63 45 4e 51 62 45 5a 51 61 6e 68 6e 61 6d 6c 31 56 57 70 31 4c 32 6f 34 4f 46 4a 47 51 69 74 4e 4e 6c 64 4b 59 57 74 4e 52 44 5a 34 51 33 52 6e 4d 30 46 51 4d 45 4a 34 4c 31 4e 70 63 46 63 32 62 55 78 75 62 6b 64 68 55 7a 56 4e 65 54 68 31 61 57 68 47 53 57 4a 56 61 6c 64 55 61 30 52 69 64 46 52 4c 5a 46 4a 61 56 46 55 35 64 55 46 32 4f 48 4a 58 56 57 78 7a 59 56 59 72 64 54 4a 70 63 47 6c 31 53 48 64 56 4e 32 39 43 51 6c 5a 77 57 6d 64 55 64 58 42 49 61 Data Ascii: 1LMDNWaWhIQUlBTGRLZDlJSmxtZ0RBckt3TXZXamNrZDk4dXNGU2dKTE51TXVzdUNmUExoTGx3S0xDRzErVHJsclI3YndwU1RjVjVTcENQbEZQanhnaml1VWp1L2o4OFJGQitNNldKYWtNRDZ4Q3RnM0FQMEJ4L1NpcFc2bUxubkdhUzVNeTh1aWhGSWJValdUa0RidFRLZFJaVFU5dUF2OHJXVWxzYVYrdTJpcGl1SHdVN29CQlZwWmdUdXBIa
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 6b 46 4f 56 48 64 30 62 54 5a 30 63 45 4a 71 4f 54 64 70 54 46 6b 7a 55 47 31 6c 52 47 74 33 53 45 46 46 65 44 64 4d 4c 32 6c 44 51 6b 35 6e 56 6b 74 78 64 56 4a 4c 55 45 31 4d 4b 79 38 7a 55 30 39 33 63 31 55 76 59 57 64 6c 52 31 68 42 51 54 64 5a 5a 48 56 69 4e 48 42 6f 64 6c 52 59 56 33 4a 30 61 32 52 48 4d 6b 6c 30 62 55 39 33 62 6b 51 34 5a 6b 59 30 55 6c 63 33 65 46 52 4b 62 6c 64 35 51 57 63 7a 63 6b 31 54 62 57 34 78 55 6a 5a 6b 64 31 56 54 61 57 46 75 55 44 49 72 61 45 78 6b 56 32 64 31 52 47 5a 45 61 48 68 6b 57 6e 64 55 61 58 68 70 52 48 68 74 63 47 68 45 65 44 42 42 5a 46 56 58 52 55 70 6c 56 6d 4a 69 57 56 46 74 62 6d 5a 68 64 6c 56 4e 63 7a 6c 68 62 6c 56 4d 63 57 74 42 5a 32 70 45 5a 46 4a 7a 65 6d 38 7a 64 56 6c 56 4d 6d 6f 77 52 48 4a 58 Data Ascii: kFOVHd0bTZ0cEJqOTdpTFkzUG1lRGt3SEFFeDdML2lDQk5nVktxdVJLUE1MKy8zU093c1UvYWdlR1hBQTdZZHViNHBodlRYV3J0a2RHMkl0bU93bkQ4ZkY0Ulc3eFRKbld5QWczck1TbW4xUjZkd1VTaWFuUDIraExkV2d1RGZEaHhkWndUaXhpRHhtcGhEeDBBZFVXRUplVmJiWVFtbmZhdlVNczlhblVMcWtBZ2pEZFJzem8zdVlVMmowRHJX
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 4d 47 30 35 54 55 38 7a 63 56 6c 36 61 6c 55 77 4c 33 52 43 59 30 64 47 51 57 63 30 62 6a 5a 6a 64 6e 45 79 5a 31 6c 77 65 54 5a 6d 55 55 6c 4c 4d 55 52 58 51 6d 46 54 56 55 52 7a 62 6a 4a 7a 4e 57 70 6d 62 45 64 6f 62 33 67 77 62 44 68 61 63 30 73 79 52 6b 5a 68 53 45 31 49 56 54 59 32 4d 79 39 49 53 48 46 6a 4b 7a 59 77 5a 54 42 74 59 57 49 35 4e 47 5a 6b 5a 30 31 50 52 6e 42 57 5a 45 6b 31 51 58 67 33 56 31 56 43 4f 55 46 59 65 47 6b 78 53 57 70 69 52 6e 70 78 4e 57 6f 34 4f 54 4e 55 62 45 77 30 62 55 63 30 61 58 45 76 4e 57 5a 7a 54 48 70 52 54 56 46 6e 52 6b 46 43 53 6c 5a 6c 4f 47 68 79 63 58 42 52 54 6e 6f 76 4e 6d 70 4f 54 30 56 31 61 48 68 46 65 55 4e 46 62 48 46 4c 64 30 5a 76 63 32 5a 70 55 32 70 71 57 6b 5a 36 56 43 73 77 52 31 6c 32 61 54 5a Data Ascii: MG05TU8zcVl6alUwL3RCY0dGQWc0bjZjdnEyZ1lweTZmUUlLMURXQmFTVURzbjJzNWpmbEdob3gwbDhac0syRkZhSE1IVTY2My9ISHFjKzYwZTBtYWI5NGZkZ01PRnBWZEk1QXg3V1VCOUFYeGkxSWpiRnpxNWo4OTNUbEw0bUc0aXEvNWZzTHpRTVFnRkFCSlZlOGhycXBRTnovNmpOT0V1aHhFeUNFbHFLd0Zvc2ZpU2pqWkZ6VCswR1l2aTZ
2024-04-19 14:07:09 UTC	717	IN	Data Raw: 4a 59 55 73 78 55 30 74 75 65 58 5a 32 65 6b 73 32 56 57 56 4a 51 30 74 4e 51 54 4a 6e 63 56 56 5a 57 6d 74 58 4f 43 74 70 56 46 52 70 5a 69 39 42 5a 6b 4e 47 56 45 68 6d 57 48 64 6a 57 6a 4e 53 62 7a 56 74 56 44 46 47 59 7a 46 36 53 6d 56 55 61 48 68 52 4f 58 4e 61 51 31 4e 51 55 46 42 50 64 6d 78 54 53 30 35 30 55 48 4e 69 61 57 4e 71 4e 32 4e 5a 5a 6b 35 49 63 48 46 51 65 57 4a 6e 64 30 46 59 52 6a 5a 53 65 6d 34 30 56 6d 46 36 53 69 39 6e 55 6c 59 79 5a 30 30 30 52 56 6c 59 53 30 4e 51 65 44 42 6f 5a 54 52 35 52 6d 70 51 55 54 68 77 56 6e 42 4f 52 7a 41 78 54 47 6f 72 63 46 42 45 52 56 42 70 51 56 4e 6c 57 6b 68 31 63 48 41 79 53 53 74 6d 59 7a 42 31 4f 56 64 69 53 56 6c 5a 4c 32 6c 5a 62 6c 46 56 64 45 70 42 63 6d 31 72 4f 58 5a 6b 4f 56 42 44 4e 45 Data Ascii: JYUsxU0tueXZ2eks2VWVJQ0tNQTJncVVZWmtXOCtpVFRpZi9BZkNGVEhmWHdjWjNSbzVtVDFGYzF6SmVUaHhROXNaQ1NQUFBPdmxTS050UHNiaWNqN2NZZk5IcHFQeWJnd0FYRjZSem40VmF6Si9nUlYyZ000RVlYS0NQeDBoZTR5RmpQUThwVnBORzAxTGorcFBERVBpQVNlWkh1cHAySStmYzB1OVdiSVlZL2lZblFVdEpBcm1rOXZkOVBDNE
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 31 31 31 36 0d 0a 4a 46 54 30 35 50 5a 57 4e 56 59 79 74 69 51 32 39 73 59 56 42 33 4f 47 64 4c 4d 31 70 4f 4e 31 6f 78 59 32 35 44 57 6c 6c 6d 4e 43 74 4b 4d 44 51 33 4e 44 4e 4f 55 6e 68 6e 54 57 31 42 53 55 5a 6f 4c 30 39 42 56 47 35 4e 4d 56 56 54 5a 54 4a 74 62 33 64 4a 52 43 74 61 62 55 5a 47 4e 55 5a 71 4d 6e 42 72 61 6a 68 36 65 48 4d 30 64 31 4e 75 51 33 42 54 51 6d 6c 75 63 47 6b 77 55 6c 70 76 55 47 39 56 4e 6b 5a 4f 64 54 4e 6a 57 6b 4a 6c 54 6a 4d 79 53 6b 39 34 53 6a 64 6e 4d 56 70 47 54 33 42 4c 5a 47 4a 4c 64 55 67 30 4d 6b 70 74 63 48 52 57 4d 47 38 72 59 6d 74 47 61 6c 64 6c 63 32 59 31 64 55 39 6c 55 32 6c 6c 4d 48 64 36 62 58 5a 77 65 56 56 4c 4d 6b 38 72 62 31 59 78 54 33 5a 7a 52 45 56 4a 56 32 46 46 64 45 31 49 54 6b 74 71 51 30 31 Data Ascii: 1116JFT05PZWNVYytiQ29sYVB3OGdLM1pON1oxY25DWllmNCtKMDQ3NDNOUnhnTW1BSUZoL09BVG5NMVVTZTJtb3dJRCtabUZGNUZqMnBrajh6eHM0d1NuQ3BTQmlucGkwUlpvUG9VNkZOdTNjWkJlTjMySk94SjdnMVpGT3BLZGJLdUg0MkptcHRWMG8rYmtGaldlc2Y1dU9lU2llMHd6bXZweVVLMk8rb1YxT3ZzREVJV2FFdE1ITktqQ01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50222	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1106	OUT	GET /WohXKjCe_QuVrxL3ksS8lODC17sMd-U4kYALcaYabasjh0mm-quhTCfc2xwuZbA9_HU=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 10386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	732	IN	Data Raw: 52 49 46 46 8a 28 00 00 57 45 42 50 56 50 38 4c 7d 28 00 00 2f a5 c0 49 00 35 87 da b6 6d 18 fb ff bf d3 eb 16 11 13 80 e0 9c 27 26 48 a1 df 6f 52 ff b3 6d cf a6 46 d2 07 14 50 39 07 a8 04 e5 44 76 36 39 e7 50 55 04 47 70 ce 39 27 9c 73 ce 39 e7 d0 39 e7 9c 27 87 cd 39 e7 9c f7 0f e8 af ea 7b a9 7a aa 5e ff ba 1a 26 cf 78 91 d8 44 ab a8 09 48 1e 23 10 bb 58 98 ea 15 ea b5 41 9d 64 26 27 07 d9 a2 5b d0 df 04 4a b3 0e 93 3d a2 27 74 b8 54 6e 4a 6b 8b 89 a8 24 37 d3 c2 6b c2 d8 6a 6b ac c9 09 dc b2 58 2f de d7 41 b1 dd 9a 4e 20 77 90 ca 6d e8 15 9d c0 1d 71 07 66 dc c2 db a5 4e 5a d8 ea 0d 96 c5 4e c4 63 e3 67 03 68 99 9a ed 84 e8 2c 26 b0 23 76 64 e3 a6 e5 80 bc 83 b6 83 99 6a d1 c9 a8 26 cf b0 c1 2d 3a b9 36 d1 32 e5 b0 92 45 cb 81 b5 d5 88 5e 5b 4d db 74 Data Ascii: RIFF(WEBPVP8L}(/I5m'&HoRmFP9Dv69PUGp9's99'9{z^&xDH#XAd&'[J='tTnJk$7kjkX/AN wmqfNZNcgh,&#vdj&-:62E^[Mt
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 78 29 d7 a4 2d b1 8a db 3f b0 d6 1e 25 fb 61 65 c8 35 6b a5 a6 1e ff c4 ad ce ab 05 88 69 fc ca e7 13 01 bc de 45 ae 77 53 ae c2 5a bc db 0e 10 ed 01 da cc e1 a6 b8 07 93 b6 76 80 62 ab 44 ea fc 80 d4 0d 1d 89 70 2a 36 69 00 b6 09 a8 56 1e bd 75 2c e3 83 ee 79 27 b5 fc 8e 28 25 ef ac 2d 3d 86 83 62 5b 2f c4 b7 ae ce 7f 60 02 f3 9c 5c 62 15 03 c7 85 93 51 8e 2b 32 cb 00 78 fa 1d 4b e9 21 fe 59 51 5d ed 64 42 d9 9d 5f e3 64 10 cf ba df b1 5b 6c 40 e1 45 36 31 c0 70 94 af a8 63 1b 2f 64 1d 0d 52 ca d6 4c 33 8f 3b 19 0c 48 5d 72 58 ac 02 f8 22 95 e3 60 82 e4 44 89 63 bd 10 56 c6 25 0f 78 8a 77 ea 5c 54 10 a5 e4 ad 75 23 08 ca b3 47 16 5a e4 21 79 6a 72 37 34 4e 74 16 88 e7 15 80 83 23 ab 70 bb 80 28 b6 48 10 28 b7 f3 cb 6c 02 40 f6 41 6a 90 a4 b1 2f 4e 43 47 Data Ascii: x)-?%ae5kiEwSZvbDp*6iVu,y'(%-=b[/`\bQ+2xK!YQ]dB_d[l@E61pc/dRL3;H]rX"`DcV%xw\Tu#GZ!yjr74Nt#p(H(l@Aj/NCG
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: b4 e7 61 00 d3 65 91 4f 8c 63 3d fd a2 eb 80 a9 39 24 6b 6d cb 15 9a e5 69 bb b1 b6 80 a4 f8 26 99 10 10 8f 6f 08 a2 92 c0 3a 35 f9 16 55 ba 61 ec c0 49 00 18 d7 ba 05 6a 5d b4 45 2a ee 9c 4a 07 e7 d7 ed cd c7 8f 4e 00 ff b4 a8 01 2e e9 a6 52 ff 22 5f 08 d0 e9 01 eb 93 06 1a 5d d2 84 3e ca b8 e9 19 1b a5 6c 2c 86 38 2e 97 1e 69 e4 88 00 25 37 d1 b6 28 15 0e ee af bf fe 6a 9e ae 1f a3 a9 c3 df 9d 7e 18 bd ee d4 56 01 0d 99 06 d3 33 4a 83 8b 64 25 dd 17 95 41 d9 07 3d b0 77 3c eb 26 55 37 31 08 ee dc 1e 00 8c 53 62 15 1f 06 58 4f 77 d5 ba a4 85 46 8f 34 84 de 48 d6 d8 0c 71 5e 2d 44 54 11 2d 40 93 1b 5f 60 56 22 bb c7 d3 00 f8 67 45 05 78 e0 77 00 4c ab 9f 0c 51 59 ef 30 d8 4f 89 6b dc dc 34 90 f1 e2 53 4f 78 72 aa 73 e0 79 30 6f 78 11 8d f2 3b cf b7 f5 48 Data Ascii: aeOc=9$kmi&o:5UaIj]E*JN.R"_]>l,8.i%7(j~V3Jd%A=w<&U71SbXOwF4Hq^-DT-@_`V"gExwLQY0Ok4SOxrsy0ox;H
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 4b b1 51 6e 54 ac 6a ab 6a d5 1a d3 d9 3e 75 59 d5 46 d9 2a 35 72 46 a2 18 86 55 58 32 46 6f 97 24 b5 bd 9d 77 df 80 b5 2b 1d 06 40 a1 d1 6c 75 3a 6d b4 ac 68 da ad 4a f3 83 86 7f 94 5b 3e 66 5d 82 a2 7f d7 f7 16 ab 54 2a 05 2c e1 bd 75 d6 69 d9 d2 9c 9d 33 18 d8 e4 6e 32 8a e0 ba eb 12 d3 ce 77 a3 cf 7d 7c 31 3a 97 04 94 4c 1b 1d ea 6c d0 d8 f2 83 56 03 e0 85 73 4b a1 4d a8 5d 62 a2 ef f5 67 70 bd b1 00 96 68 b3 a5 ce ab 7b 10 dc 2b 83 29 3e 74 6e 0c f3 d6 52 cd 5b 89 f7 e3 a8 b3 57 cb b7 9d 0c ae e1 77 89 89 b9 ab b2 b9 db c8 f4 06 a0 d3 50 67 f9 06 d2 6c e7 04 99 c6 f0 21 f4 d2 d1 ea 50 2a 7f 1f ed 96 72 22 d3 02 00 40 29 87 8e 8d d7 3b be 9b 81 04 fe 21 59 80 77 be 53 86 4e f8 2b 84 68 7c 6f 0c 17 11 19 93 f6 40 5a e7 5a 1a 2d 14 51 70 a5 bc f1 e3 43 Data Ascii: KQnTjj>uYF5rFUX2Fo$w+@lu:mhJ[>f]T,ui3n2w}\|1:LlVsKM]bgph{+)>tnR[WwPgl!P*r"@);!YwSN+h\|o@ZZ-QpC
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 5a 7e 95 89 10 29 85 a1 17 58 6d ad 6a a4 06 aa 3a 17 9b 5d d5 ee 0e d5 08 15 fa 7b 25 bf 39 ec dd 59 1d 2e c4 42 66 55 79 f7 03 59 1c e4 e8 79 65 36 55 de dd 0b ec 15 02 3b 17 62 a7 1c 62 cb 6e e6 7e 57 6e 42 92 55 e9 89 a4 6c 76 07 52 c5 56 87 d4 ec 91 47 b0 98 a3 b9 5f 94 ba 84 ba a5 37 11 58 48 01 76 23 54 e8 ef f2 c9 c1 e6 6e 62 b6 32 e4 53 d9 aa 8a 9d 79 59 52 bb 09 bb d9 3a 8a 53 44 39 c4 9c 20 a8 29 e0 a5 c3 b6 70 f4 ac 22 8a 43 a8 48 c6 a0 69 07 4d 81 a9 08 6f 60 c0 7b cb d0 cf 99 72 87 91 bb 2c ea de 64 2d 04 29 de e7 93 de 91 91 f5 cb 34 ae 80 bc 00 b4 3b 10 6c 52 f7 03 54 ef 98 6a 7e 16 a9 cb f8 21 8f 80 15 ce 08 f0 ab 78 e5 3b 33 99 2e c8 cb 2f 02 de 89 b7 ce 29 99 88 b7 d3 2f e7 32 f7 fd ae 1e 95 e8 97 ab 2b a3 da 11 31 f1 75 89 75 49 69 c1 Data Ascii: Z~)Xmj:]{%9Y.BfUyYye6U;bbn~WnBUlvRVG_7XHv#Tnb2SyYR:SD9 )p"CHiMo`{r,d-)4;lRTj~!x;3./)/2+1uuIi
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 7b cb 20 3c 76 85 db 81 90 a8 ae dc 62 40 cd 28 b7 b7 52 9f ba 16 74 6f 08 8f 0c 69 e2 e3 76 5a b7 cd cd b1 b1 d2 7d b8 b4 94 33 73 9b 37 ad d0 15 74 65 ba b2 ce cd ca 5a ad 39 cf f2 50 be 4f a9 c1 c3 93 e6 6d 81 4d b9 a6 27 42 a7 75 7f cf f7 f0 df 1d 37 e3 f2 ca dc b7 39 3d 12 1c ad e8 06 8d 0e 2d 8d aa 9f 99 46 e3 b6 79 5e 33 a5 fb 88 54 3a cf 2f b6 83 f8 fb f1 7c b2 f1 48 48 a9 d8 3d 19 9d ea 36 e7 18 bb bb 46 72 f9 c8 2d 48 15 21 b1 53 c4 48 eb b4 93 03 35 5e e3 8a ed 6e f8 0f 68 6e b2 eb 74 0b 3b 49 73 fd 48 21 34 90 fc a6 4a 6e 05 e2 e4 f9 56 0c 2b b5 61 cf d8 81 db cf d0 2c 4c a2 25 b4 2a 6d 4c 97 b9 7e 24 91 23 18 56 d8 9d a6 01 be 6e 37 a0 34 78 b6 30 78 ce 6e 9e ef a7 d3 4a dc af 9c d6 2d 52 85 32 18 4b 68 ea 52 1f 75 79 7e b7 2b 0d 50 0a a0 d8 Data Ascii: { <vb@(RtoivZ}3s7teZ9POmM'Bu79=-Fy^3T:/\|HH=6Fr-H!SH5^nhnt;IsH!4JnV+a,L%*mL~$#Vn74x0xnJ-R2KhRuy~+P
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 0a 5b e0 2d bb b6 c0 a4 b9 e1 d7 61 12 e6 1f 53 b5 3b d5 a0 39 fe 87 a2 1b c7 4a 23 44 b7 5c 87 4c 37 e4 18 4d 1b cd a0 8a c0 8f 76 d2 4c a5 c3 fb 21 f9 15 52 9c 82 73 6a a3 03 5d 4c 2c 3e c7 1f 0a 43 a8 5b 71 31 74 53 73 00 3c 01 32 f7 c5 7e 3c 3f cc 4d 41 01 70 c8 20 7e 0f 05 00 b7 65 81 d2 80 fb 7b ac a8 e4 fb a5 01 cf 1a be 8b 50 bf c5 b2 eb f3 0c 6e b2 4d 75 38 98 54 44 22 d6 fa 1c 7f 2b 3e d9 30 e1 35 82 52 13 93 7b c5 6a 84 e8 ee 9a 02 94 52 13 c4 2f 48 7d 66 f7 cc 06 b9 95 60 33 69 ea 93 0a c5 4d 10 58 1e f5 33 11 0a 45 05 0d 9b 63 8f d4 55 6d e3 13 b2 53 05 76 17 d2 f2 37 a4 be 3d f0 e1 15 d8 1d 4e c4 be 6d c5 76 37 23 e5 b5 cf 64 b9 a6 d5 08 f9 0a 85 6f 02 93 5b 19 41 6b b8 19 87 48 ec 3d 0c af bb 39 63 90 bd af 39 97 8c 71 16 86 65 30 8e 98 34 Data Ascii: [-aS;9J#D\L7MvL!Rsj]L,>C[q1tSs<2~<?MAp ~e{PnMu8TD"+>05R{jR/H}f`3iMX3EcUmSv7=Nmv7#do[AkH=9c9qe04
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 93 e9 fe cd 1e ff 2d d3 eb d8 49 e8 d2 1c 7f 00 16 fa a1 b8 f3 8c 93 67 15 7d 4f 34 f4 6e 2b 2d be f8 5e b3 df 76 a8 0c c8 0c 29 50 7b eb 63 17 0d 6b 2a 9e 02 1e 9d ea 8b 5e bc c5 01 f1 56 7b f8 9c b3 d2 68 cb a3 1a fd a2 ab 20 5d ba c2 c2 fe 11 a4 ba 19 0a e4 02 92 db ec 51 fd de c3 31 15 8b 6a 77 26 d2 41 73 f4 18 d4 8b 55 3f 53 e0 80 ec c3 64 0b c4 6d 70 68 a5 29 52 63 64 f0 a2 52 4f 9f 4c 2d 66 3f da 26 7a d0 28 5c 95 7f 7c f9 8a 6f 89 37 8e 2a 37 6b b6 ef 36 36 88 58 09 8e c5 06 5f 5a 7c b8 e0 ee c8 51 20 fe e7 c6 bb ed f6 37 da 62 9b ea f8 a8 02 ff ef ee 71 9d 31 65 ae f7 f4 42 8b 5e 19 3f b4 20 ea cd 20 a4 07 63 f8 85 10 bd 5d 26 ca 77 be 20 57 8b 49 55 f9 95 7b d4 18 28 bb ce b1 ef 7f 7a ce 16 1d 1b bc e5 52 7d d5 d3 3e 74 e1 41 d4 02 37 6a 56 f9 Data Ascii: -Ig}O4n+-^v)P{ck^V{h ]Q1jw&AsU?Sdmph)RcdROL-f?&z(\\|o77k66X_Z\|Q 7bq1eB^? c]&w WIU{(zR}>tA7jV
2024-04-19 14:07:09 UTC	869	IN	Data Raw: 59 5d b8 fa 16 21 d1 bf 37 51 7b a4 67 73 74 0a 31 d1 f7 9e 7c 44 14 58 ad 44 3a af 2e 19 51 f6 fe 2d 56 cb 5f b9 84 6f 08 89 bc ab be 8e 88 0c ab b9 26 f2 0a 19 91 5d 75 b5 db 8d 44 7c 76 fb 42 42 f1 5f fd 51 8a d5 dd d9 48 15 df fb 5f fd 12 91 f8 2c 56 90 98 dd d8 2d 7f 41 57 52 96 51 5f 7e 89 00 ab 71 e9 bc 0e 19 51 5c f5 65 9d 96 e5 a1 de 9d 2d 54 39 9b 2f a9 bb 84 68 c8 2f e1 61 35 19 91 8a dd d4 97 35 9b a5 2f 28 0b a9 78 ad c6 62 bb 44 84 2c a3 b9 d8 5d 14 ac e3 6b 3d 8e 8c 48 bb 5a cb 6f 37 1c 0a b0 59 b6 44 ea 43 46 e4 49 55 84 dd ea 24 22 14 91 dc 54 7e dd cd d8 dc cd a7 e1 92 f2 b0 cd 14 60 35 52 c5 07 a5 2a c2 6a 95 2d 4e 26 14 07 fc 7f 6b 36 cb 5f 59 7a 91 ea 8e e8 6a cb 3a 0c 0a 40 ad 61 71 e1 0b 42 11 71 37 95 75 68 d8 8d 58 b0 5c 74 2c f6 Data Ascii: Y]!7Q{gst1\|DXD:.Q-V_o&]uD\|vBB_QH_,V-AWRQ_~qQ\e-T9/h/a55/(xbD,]k=HZo7YDCFIU$"T~`5R*j-N&k6_Yzj:@aqBq7uhX\t,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50226	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1105	OUT	GET /OaJ9ioyoRept6HWOMXjGkA8IMkfh1st9JEdIOyvpemFmFNFI50frodVswWNcAgFxzg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 8026 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 52 1f 00 00 57 45 42 50 56 50 38 4c 46 1f 00 00 2f b8 c0 49 00 4d 40 92 24 c9 51 54 11 68 12 fe ff e0 11 55 a8 dd 6b 44 ff 27 80 6f 7a 3c 1e 3d 00 82 80 1b 55 a5 56 95 96 55 65 ca c5 b7 37 33 a2 49 23 49 5c a1 7b 64 4d 3b 4f a7 60 23 70 68 b8 26 ed 8d 84 c3 d4 05 7b 8f 05 dd 85 2f 3a 1c a6 c8 08 a1 bb 05 c4 c3 10 cc ed fe f7 b8 c3 06 fd 28 0b 57 91 64 bb 4a 17 0a 9e 7f 5d 08 78 49 c0 f9 22 f3 1e f1 9e 43 10 00 ab 91 24 47 56 e8 b4 1a d5 dd 73 0d a1 21 3c ff fd f8 03 f0 ae 9f 01 70 08 9e 20 47 92 a4 48 f2 81 e7 ea 2f d7 8a 90 12 ac 0d 64 1d 43 ff 27 00 7f 74 61 b1 2c b0 b4 39 7a e3 8f f9 f7 cc cf e2 87 59 0c c3 f0 ca f0 c8 2c 86 77 de f9 5b cc 62 bc 60 5f 00 00 cf 0c 2c 00 b8 60 96 0b c0 c2 8b af 57 c0 1f 74 74 da c8 d3 b2 83 13 bb 02 84 90 27 Data Ascii: RIFFRWEBPVP8LF/IM@$QThUkD'oz<=UVUe73I#I\{dM;O`#ph&{/:(WdJ]xI"C$GVs!<p GH/dC'ta,9zY,w[b`_,`Wtt'
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: f5 bc 52 fb 3b 33 33 93 45 66 37 7b 02 14 41 4f a0 27 d1 ed 1e c1 28 3d 87 61 8d 20 86 c7 0c 16 f3 68 20 e9 83 f7 b9 3d 48 92 a4 da b6 6d 5b 6a d1 fa 18 63 33 33 d4 bf 62 cc 3c 60 ce d1 32 62 02 4e e0 f7 fc ff a7 c0 47 a3 4b df e1 f0 a3 d1 98 62 c3 62 62 d8 30 e2 fa 8c 19 53 6b 30 85 53 76 a2 7b 53 76 b9 2e e7 13 97 f6 bb 4f 05 8a c1 c5 ec 35 75 b2 72 4b ce 58 d8 ba c2 89 04 d0 39 33 8c 6c c4 84 33 df 8a a7 a9 75 57 66 74 4c 95 07 32 43 68 2a c4 c6 a5 19 80 da 88 b2 03 51 e7 b4 d9 3e 19 44 44 34 86 28 8b 9f e9 06 05 91 e0 4e c7 58 03 38 3b 4e 8e 8d b2 66 f5 d5 97 b5 45 53 dc 90 a3 c7 e4 50 a6 36 46 ba b1 2c 68 8a 67 e8 36 02 74 28 fb d7 a3 66 81 32 9d 26 da 5c e6 51 ca bc 4b 5b ab a7 e5 d2 51 5d 2a e8 f0 69 8b dd de b3 fd 66 82 8f d7 95 62 27 eb 93 06 7d Data Ascii: R;33Ef7{AO'(=a h =Hm[jc33b<`2bNGKbbb0Sk0Sv{Sv.O5urKX93l3uWftL2ChQ>DD4(NX8;NfESP6F,hg6t(f2&\QK[Q]ifb'}
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 0d 86 ab 13 30 88 4e 3a 69 c2 e6 5a b3 00 ac 76 5b d0 61 dd b9 89 68 70 76 b3 6d 21 74 c6 58 83 15 67 64 4e ec 88 c6 53 9d 1b 71 59 da 6d ce 35 89 e8 fc d6 ea ec 71 13 aa ff f7 cb 7f 12 9d de e6 91 0b db 77 42 86 c1 78 df b7 00 20 0f 9b bb 87 e1 13 f7 d1 23 96 7e 9f 96 fd c3 ea ab 69 85 8c 71 6a ae da d7 2d bb 5e f5 6f ec 63 51 20 a2 8b e7 34 38 d9 a0 75 5c 0a cb 12 4d c8 2e bd 60 fc d6 c6 16 d8 fd 4e f3 bb 81 2e 18 01 d0 9b 95 e6 3b 0b 7f 53 0c 40 97 33 8f 0a 8e ee ea df 6a 76 72 47 fa 54 37 26 4b 67 b6 56 e7 36 df ad b3 15 0e 01 1d d5 b5 38 59 71 9b 13 db be 0f 3f e5 e2 e0 d1 90 d4 f6 62 d5 d5 67 b6 bd f5 a1 66 92 9e 05 a0 cb de 16 54 70 44 d7 ea 62 f5 ad 0d f7 be 63 63 29 ba 2a 74 48 ce d2 19 99 46 77 3d bc fc da 70 22 4a c7 27 bb 7a b7 db fc ac 0b ed Data Ascii: 0N:iZv[ahpvm!tXgdNSqYm5qwBx #~iqj-^ocQ 48u\M.`N.;S@3jvrGT7&KgV68Yq?bgfTpDbcc)*tHFw=p"J'z
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: cf fc ea 01 49 66 f5 60 39 cc 51 a0 88 c9 79 65 2d ad bf ba d5 cb df c8 90 e4 64 3e 3d 79 52 c0 8e cf 5f f9 c8 cf 5d 2e 04 12 eb 9a b7 0c 50 84 b1 60 fb 57 0e 8b 2e 7b f5 6a fb 77 03 1e 9f c5 af 37 65 54 ed 9a 22 72 ac ae 2d 3e dd 01 cf cc 72 bf 3f fb fd e2 89 cd fb c0 0f 1d fa 93 06 3f bc 35 be f9 99 e5 db bf e8 02 6c fb fa 72 b8 92 9c 79 6b 37 0e 3c 1f 00 0a 43 96 0a 5d a7 34 57 82 d8 b3 f8 d4 8f 05 9c ec fa 8b 2c f3 73 bf 4f 9c f7 c9 b7 c7 7d ff 06 36 df 21 3c 56 40 c1 39 6d 9b e8 dd 37 de d1 e6 a1 d2 de de 71 fd ef 87 e6 25 fc e6 ec 8f 3e f0 c6 67 0e 7f e9 de bb 20 34 46 23 cf 2c e4 bf 4e 35 4e da 23 7c 08 0f 0a 3a 20 04 ca 1b b4 82 ca 6c 44 45 28 f5 bc be 2f 89 bd 46 e2 2b 51 a3 3c 6d 2d 51 c1 c3 b4 1c 37 92 87 4e fd 4c 78 10 72 d8 97 44 7f 3b a7 65 Data Ascii: If`9Qye-d>=yR_].P`W.{jw7eT"r->r??5lryk7<C]4W,sO}6!<V@9m7q%>g 4F#,N5N#\|: lDE(/F+Q<m-Q7NLxrD;e
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 22 75 d0 b1 06 47 c0 a0 dc 91 19 7b 42 6f 81 a3 68 49 ee 1f ab 70 b0 2c 00 1d 35 66 79 be 26 c9 92 6c f7 73 74 06 91 1e 3d 30 cc db 82 4b 43 91 16 83 03 40 09 00 05 c2 12 64 ca 21 da 17 04 12 eb cc 6b 4c e2 ff 9f b0 29 6b 99 e5 00 fb 2a 00 33 f6 bc c3 24 69 a7 64 09 f2 ec f0 aa 30 af 2c 9c 01 40 d3 e4 e7 31 57 96 e6 82 8b d6 ab 9b 41 e8 ae 2b af f5 96 48 fe 4e 48 b5 34 0a 15 67 35 f7 d6 d4 cc 52 ba 75 b7 e6 56 04 2d 2e c6 98 d5 1d 96 f1 66 5f b6 c0 bb ea 43 7a 0a 39 3c 14 c5 01 a0 48 7c 4e 01 c0 c0 70 1e cc 92 eb 1c 27 03 b0 b0 dc b8 4a cc d9 ee 15 00 66 93 c8 c2 0e 70 bc d4 59 cd 14 e6 fc 4d 18 05 d4 0c cb 1a ad 19 7a 93 07 2c d2 51 e3 f1 10 1f 38 02 04 88 c2 41 e9 3b 17 1a 04 80 98 33 b7 98 00 c0 a2 10 f5 55 2d 45 d9 77 12 6b 7e e1 62 77 47 a8 0d 75 da Data Ascii: "uG{BohIp,5fy&lst=0KC@d!kL)k*3$id0,@1WA+HNH4g5RuV-.f_Cz9<H\|Np'JfpYMz,Q8A;3U-Ewk~bwGu
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: c8 b9 92 6e b1 63 5c 68 10 00 8b 10 a5 61 d5 47 02 80 36 21 c7 cd 62 51 60 aa 8c 58 94 be fc fa 8c 20 c4 21 ef 2b f8 e3 d7 22 2d 99 35 9a c1 1e 85 d8 0a 09 51 a8 23 53 33 f6 5e 37 58 8c 83 97 c7 18 e9 a9 79 0b 62 19 0b f0 72 c6 08 76 ce 1c 45 b6 23 1f 92 0c 48 32 24 19 8a d8 c4 d5 b9 cf 39 e3 ff 17 fd 35 c0 03 ac be 17 a0 70 00 1c e2 3f 8f 52 ec 44 31 73 f6 53 28 8a 73 d6 07 39 c7 06 08 49 db 4e f6 fc ff 54 cb 03 34 9e 89 2c 01 90 25 11 bb 02 27 00 1e e4 ab a5 5e 14 38 a2 10 64 8a c0 68 ae 96 4a ee 06 29 3f 55 ee 82 0c 40 11 a5 3e 90 04 62 e6 9d 3f 19 43 b1 04 eb 51 0a 01 c7 68 5a 62 cc 0f 3f b0 b2 23 9d 2f 85 63 58 4d ed 9c 78 c7 09 5f b5 54 d5 c1 c5 68 70 e6 53 cc 58 0a 22 d3 48 a4 d8 4c 00 d0 b9 8e 41 59 1f f6 99 bc 45 6b c2 f0 6a 7c 78 58 b1 9e 5c 15 Data Ascii: nc\haG6!bQ`X !+"-5Q#S3^7XybrvE#H2$95p?RD1sS(s9INT4,%'^8dhJ)?U@>b?CQhZb?#/cXMx_ThpSX"HLAYEkj\|xX\
2024-04-19 14:07:10 UTC	1018	IN	Data Raw: 44 05 8c bc 76 30 31 d7 cc 06 16 68 23 ff 7b ff f8 f0 3f 62 aa 19 84 8c d8 0b 96 6b cc a8 5e 06 42 80 0a ee 8e 35 86 f6 6a b9 02 42 c0 96 c7 92 f0 ac 96 cc 39 0a aa 58 20 a4 75 16 b4 54 ab 17 21 a2 2d 6f 27 ad 7a 89 0a 26 f9 2d a3 6e 85 a1 6d 79 7d 5f 02 0b 57 8c 30 42 f3 9a c7 cd 1a 60 66 b5 ac 32 12 78 6d 79 8d f4 5a 2d 20 42 31 f3 f6 94 a8 59 01 62 bb a1 e5 f4 94 5d 2f 2b f1 fd 8e ec 17 29 a9 5e 46 20 98 9d 25 a7 a5 bc 54 cb 9c 01 b0 5e 79 23 e7 54 9c a0 55 4b a8 60 c0 5f e5 5c 95 9a d5 32 10 08 b4 c1 9a 13 37 35 db 8f 8d 50 ec 30 cb 24 58 ab 65 5c 40 08 b6 95 ec 1b 07 36 b8 5a 58 91 01 06 f9 2f 14 08 98 f5 32 05 02 f5 82 b9 04 88 9a 5d 41 06 46 41 eb 11 44 ab 97 01 08 c1 9e f7 3f af 46 6c aa 56 44 5f e4 ed 84 46 9a 35 83 22 3d af 47 10 15 bb 4d 00 81 Data Ascii: Dv01h#{?bk^B5jB9X uT!-o'z&-nmy}_W0B`f2xmyZ- B1Yb]/+)^F %T^y#TUK`_\275P0$Xe\@6ZX/2]AFAD?FlVD_F5"=GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50227	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1100	OUT	GET /S4wylkvt2jz16hnG9IG0pAZosbB82nWWy8P-rQkb54uH-SCVd5L2j7z7x1Vz5pZvIRc=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 976 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:28:57 GMT Expires: Sat, 20 Apr 2024 10:28:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 13093 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	722	IN	Data Raw: 52 49 46 46 c8 03 00 00 57 45 42 50 56 50 38 4c bc 03 00 00 2f 3f c0 0f 10 f5 c8 d1 f6 4f 91 94 5a 77 ef 71 e9 d1 96 dd c5 dd dd dd dd cf 41 ce 01 78 88 dc b9 83 6b 4e 4e 04 11 77 70 9d fa 77 13 6a 67 58 bc 93 d7 f3 fc f0 c2 8f 40 a4 17 a8 2b d4 25 e0 da b6 6d ec d9 f7 de 0f 19 ff 43 64 a4 65 67 94 19 a9 ff 3c 80 ad ca e8 ac ca b6 6d db 36 7f 3b b6 8d 90 2a 0a 00 01 46 36 d3 f6 03 6b aa 76 b2 6d a4 35 db 5b 5b b7 9a d5 56 77 48 66 52 b5 2f 59 6f 02 82 47 e0 19 52 26 89 65 73 b8 c1 95 dc dc 00 76 e5 7e bd 28 3e fe 71 8c ba 8f c1 ba d3 8d 27 cb d1 ef af 18 97 37 9b ef 5c c2 4f 8f 21 fb ee cf 33 eb 41 b7 0c 00 f4 1c 71 e4 0a 8e b2 a1 d2 b9 cc 6c 79 0f 80 fd 6f 2b 32 7c c1 10 36 52 2c 99 c7 4d 4c 60 7b ee ef 53 eb 01 00 e8 72 c1 5e 26 49 b2 46 b8 4f cb 86 aa Data Ascii: RIFFWEBPVP8L/?OZwqAxkNNwpwjgX@+%mCdeg<m6;*F6kvm5[[VwHfR/YoGR&esv~(>q'7\O!3Aqlyo+2\|6R,ML`{Sr^&IFO
2024-04-19 14:07:10 UTC	254	IN	Data Raw: 60 26 e3 a9 f8 24 89 d3 99 ba 8f 31 44 53 59 8f 3f 8a d6 78 c8 61 ff 7d 08 a8 7b c9 3d f8 c3 8c e2 ca ac a5 ad 64 cb e9 34 ea f5 fc 90 cc 81 c1 e4 56 40 3e 92 95 22 d6 c1 bb 26 99 df e8 21 af 03 0f ed 0f b6 80 a8 e6 51 e3 91 b6 0d 6d 0b 3a 27 75 8d 31 46 85 07 f5 99 69 9c 53 70 1f 8c 24 3b 81 97 53 e9 32 22 bd 38 2a 5e 75 8d 4b 56 ca 05 b0 cc b9 32 1a 80 c6 7d ad cf af 33 c8 0a 43 02 43 80 b7 0e f9 86 5f 0f 62 1f 7e 66 12 38 72 1a 70 4f d8 2f 1f 7b f0 68 02 db 5e 41 e7 5f cf a5 03 ff 27 4b 2a 67 0b 15 d3 c5 8a 59 42 65 07 b2 03 ef 19 12 6d a2 e7 48 de 53 bc 85 31 a6 7d 96 31 22 51 cf 4c 60 df d3 e8 56 b2 bf df 4e 23 ab f3 f8 4e 86 e4 c0 ef 0c 41 c3 71 e1 dc c2 bd dd 6a d6 e7 e7 09 6c 6f 26 6b 09 1e d6 fe 5c f1 5c b1 72 ba a4 62 aa 58 15 47 4e f0 e8 34 Data Ascii: `&$1DSY?xa}{=d4V@>"&!Qm:'u1FiSp$;S2"8^uKV2}3CC_b~f8rpO/{h^A_'KgYBemHS1}1"QL`VN#NAqjlo&k\\rbXGN4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50228	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1101	OUT	GET /NntMALIH4odanPPYSqUOXsX8zy_giiK2olJiqkcxwFIOOspVrhMi9Miv6LYdRnKIg-3R=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1176 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:10:28 GMT Expires: Sat, 20 Apr 2024 10:10:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 14202 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	721	IN	Data Raw: 52 49 46 46 90 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 47 04 00 00 2f 3f c0 0f 10 4f 07 b7 b6 6d d5 ca da e7 ca c7 5d 43 3a a0 22 ca fe 35 00 91 eb bd f7 ec 88 1e 20 47 92 a4 48 f2 ec 63 14 e5 24 3e 5d 4e 12 a6 1f 33 cc 74 c2 91 24 c9 b5 52 3d fb f5 ff 68 b0 fe 25 f0 38 36 36 87 c0 c7 d5 5a 6b f6 ed 4e 13 4c d2 08 fb ff e5 95 ae 03 07 51 46 cc 90 fe 99 a1 4b cd 9a 13 4a 10 d1 df 84 27 72 85 6b 06 26 ca f8 a1 60 67 6e e0 1b 11 1c 42 80 e0 1c 04 45 01 a9 96 aa a5 50 48 50 20 05 a4 99 90 00 29 0a 88 00 12 02 44 00 f1 ee 95 cb e3 53 82 02 02 81 40 10 20 22 10 54 10 08 02 04 02 88 40 a0 7d b0 01 02 6d 80 40 5b 20 60 00 22 80 88 40 44 56 aa d5 c1 9f 6f a3 bf 52 37 fc fa e9 bb e9 d3 2c 60 06 88 75 30 03 cc 0c 49 9d Data Ascii: RIFFWEBPVP8X??VP8LG/?Om]C:"5 GHc$>]N3t$R=h%866ZkNLQFKJ'rk&`gnBEPHP )DS@ "T@}m@[ `"@DVoR7,`u0I
2024-04-19 14:07:10 UTC	455	IN	Data Raw: 89 85 6d c4 5d e4 e7 46 0d 6c 4e 7f 9f 99 05 24 27 08 c8 36 57 88 ea cf bf 9c 96 0b 84 5e 47 7f 6e ed ad 69 76 ee c7 94 e1 83 b2 9b c5 3f 15 d0 75 ba 70 96 9d 39 35 79 6c 5e 71 56 b3 b0 de 08 fa fc 3f 7a e2 b8 5c 0e 1f 22 3a 38 67 5c 1e 2f 1a 92 23 96 40 b9 04 04 3f ee a5 42 df 23 5f 9b 1a 95 f2 e1 ed a4 3c ce f9 a8 01 99 19 4a 49 8f 09 e9 a9 ec df b7 46 e5 7c 79 35 5a 54 30 b4 9f 22 a2 e8 47 ca 8e 35 29 fb f8 66 62 1e c8 c8 81 59 ca d2 83 31 7c 1e 56 08 e5 8f c9 55 03 a1 e7 d3 eb f1 5c 92 e2 c1 d9 2a 7a 5a 3e c9 fb 77 13 f2 64 32 a2 bf 8a 49 5a be a0 93 b3 a7 4f 93 c9 d4 19 b3 5a b2 20 b5 59 6f e0 23 1b 83 75 f8 d7 fd 4f 47 6f d9 b0 5f e8 96 1b 79 2b 84 71 6c ce 6e 90 03 83 dc 38 b2 45 e6 de 80 fd 7c cd 9e 40 d8 22 54 5d 0c 3d 01 2f c3 ce a4 31 c0 d3 90 Data Ascii: m]FlN$'6W^Gniv?up95yl^qV?z\":8g\/#@?B#_<JIF\|y5ZT0"G5)fbY1\|VU\*zZ>wd2IZOZ Yo#uOGo_y+qln8E\|@"T]=/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50229	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1106	OUT	GET /rYYXBg1-E5-3Tesa9TW8DSEURcSNbXd1yrt4WDGTV-CA5aPGBH-h4uCpoFIV_w4za2M=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 8272 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 48 20 00 00 57 45 42 50 56 50 38 4c 3c 20 00 00 2f b8 c0 49 00 f5 86 da b6 6d 98 e8 ff c7 d3 db 14 11 13 20 9f 11 94 48 63 fa 18 f0 ff 57 f6 b4 19 f3 d5 71 77 97 18 4e 15 77 af bb 1b 6d e7 be 55 a8 bb 17 77 0f 09 10 a8 3b ee 6e ab e2 ee ee 2d ef c5 39 e7 3e e7 81 e7 e6 bc fe be 2c 04 9a a6 3c 48 2d d2 94 84 25 2c c3 da b0 10 32 42 58 e8 3d 4a 03 e3 ca 48 4a 1b f8 a7 4f 85 2c 64 c1 72 11 96 36 d0 06 3c 47 b6 ad da b6 6d 5b 5e d7 da cc cc cc 5b 9c bd c3 5b e1 1d de 12 30 e3 80 de 5b ad ad 94 92 7d d9 b6 ed b6 cd b6 6d 63 ac 1d 00 ec 0d 49 a4 2c 80 36 75 e7 8a 5c f5 bd cf ef a2 dc 75 b8 8f 72 0e c2 ea bf 24 b6 91 1c 49 62 5e 45 6f d6 54 f7 d6 9c 1b 73 f6 2d d7 b6 6d c5 52 be d4 fb b9 4b 84 bb 3b e4 ee ee ee ee ee ee 0e 65 ed de 55 75 ea 45 f7 07 Data Ascii: RIFFH WEBPVP8L< /Im HcWqwNwmUw;n-9>,<H-%,2BX=JHJO,dr6<Gm[^[[0[}mcI,6u\ur$Ib^EoTs-mRK;eUuE
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 59 7b 05 68 19 df 7f 0e 58 8a bd 5d 3f 65 c9 92 5f 74 7d 3c 82 5b 8e d3 bb 11 9e 8e f1 5e 5e fa 84 a1 a8 15 7f da 75 f5 10 f4 e0 a1 cf cd 1a 9e 61 e2 c7 1c 4a 64 30 dc ff d4 2d 0c 42 7f 7e ea 0c d5 e3 e9 77 83 15 63 58 ab be be bc 0e 0f 47 5b d0 4c a4 db 6b db 08 35 e3 51 f7 02 43 f8 f6 0b f0 d5 e9 d5 7f 32 4d 3e b4 27 2e ef 52 6a a2 c4 c4 07 a5 27 72 55 73 01 70 6a cd 37 1e 49 3c 98 80 af 9e 8c 00 dd c3 c9 77 87 bb 26 ea 44 00 a8 1a af 9f 0a 97 74 99 f2 3c 80 ac b7 da 12 a0 4a a2 64 02 e0 8d 2c 67 19 85 a1 18 c6 ce 4c 75 ad a0 a8 1f 47 42 69 79 e3 94 bf 61 71 5e 5e 07 10 a0 71 bc 6b 0a 9c 51 bd 03 01 a0 76 cc 37 05 da 86 5f 77 05 28 38 f1 78 5c e7 6c 50 68 e2 d1 04 00 c0 ca ef 57 05 00 98 f3 44 18 85 14 d7 36 b3 23 7f d4 b5 5f 48 bb d7 de 00 f0 a8 98 80 Data Ascii: Y{hX]?e_t}<[^^uaJd0-B~wcXG[Lk5QC2M>'.Rj'rUspj7I<w&Dt<Jd,gLuGBiyaq^^qkQv7_w(8x\lPhWD6#_H
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 96 fe be 3b 67 38 b7 0c f7 6d 83 73 86 fb be 01 65 86 ba 7b 7b 4f 54 7d fe 78 e9 0f 6a cf a7 c6 f3 99 f0 fa 11 ff f9 8c f2 f2 cb a4 75 2b 90 d2 93 6c d5 44 d6 fd 71 7a bd 66 ed 2d d1 2c f1 a7 aa a4 c6 4b 8d 93 1a 6b 6a cc 54 8f 58 53 62 a4 46 4d 8d 9a 16 75 6a 94 34 4b ff e8 a9 31 a7 7a c4 9c e2 31 dd 63 95 c7 aa e9 ab 62 a4 ad 22 2a c6 54 bf e8 69 7e 7e 6f e1 8a 3e 35 5a 1a fc 3e 5a 2a bc 12 4b c6 04 59 31 80 3a 5a 45 07 ae 68 40 dd 9a 35 5e 6b e8 15 15 94 8a 2a 23 a7 44 4a 15 54 a4 a9 7f 5c 17 31 2d 62 aa a9 82 59 91 a6 ac fb 23 bd 22 a7 fe 35 4a aa 32 7a 9a 46 96 43 6b 86 7b 7b 06 42 95 14 96 3a 22 d7 79 8f 3f 4b cc f5 a5 be 32 b6 8c b4 88 88 88 d2 d5 15 cd 47 58 44 c0 bc 08 72 1e 51 7b 51 ba ce 43 9d a0 ec 70 85 5f d8 d9 85 97 ff f8 47 78 98 e2 0a 07 Data Ascii: ;g8mse{{OT}xju+lDqzf-,KkjTXSbFMuj4K1z1cb"Ti~~o>5Z>ZKY1:ZEh@5^k*#DJT\1-bY#"5J2zFCk{{B:"y?K2GXDrQ{QCp_Gx
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: ed 84 7e c1 a8 14 77 fc 38 e1 f0 03 71 07 91 ca 38 eb 2f e3 e4 7f af 2a 5f 9f 71 bf 35 0f fe f6 55 7e 65 a5 40 a5 eb 9a 42 1e dc db 8f 7b 05 aa b0 3d fe c6 a4 23 8d e6 df 42 14 a5 60 59 3c bc 93 3f 96 0e 93 57 95 0b 65 43 19 96 40 91 e0 9e 97 25 e9 3f 79 7e a1 50 96 1f 6c 7e a7 38 c5 4d 71 69 2c 8c dd 38 fc 6f 2d 7e 5c ff 4f fb f3 79 e4 cf 6f 29 bf dd fc 29 61 8a 63 a3 7a cf 32 69 40 8f d0 92 3d ed 4f 4e 53 ca 8a 38 8f b2 11 91 4f 17 66 21 16 42 19 e0 7b 56 59 5e f6 e1 ff 03 fd b2 e6 f8 c1 56 e8 43 75 02 42 bd 50 0a a8 f5 d4 4e 65 c4 42 bd 3d 14 5b 65 fb ea f0 96 c6 a7 aa b4 d0 91 7a c4 5d 57 fa 6b 42 27 f8 4b 92 72 2b 71 21 52 4a a9 da 3b 9d c6 39 c3 f6 08 b5 92 aa 3c 8a 07 07 54 9a c1 61 2c eb 3d 61 e2 fd 11 f3 ec 8d 91 9b 13 ee 82 b9 0d d6 36 df 7b 8f Data Ascii: ~w8q8/*_q5U~e@B{=#B`Y<?WeC@%?y~Pl~8Mqi,8o-~\Oyo))acz2i@=ONS8Of!B{VY^VCuBPNeB=[ez]WkB'Kr+q!RJ;9<Ta,=a6{
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: e3 bd 71 34 fa 85 7b 12 95 e2 7d b1 7b 68 c5 37 fa 52 4c 72 c8 54 d3 03 61 44 18 07 c4 50 73 aa 24 e6 89 e6 42 b1 b1 93 94 1d a9 a7 33 1e f8 44 fc f8 11 00 e2 81 87 06 e6 24 c4 b4 f9 74 5f 86 ec c1 c1 07 3e 3b 14 c8 c7 39 80 c8 d6 bc cc 2f ae f8 88 62 62 aa 2c b2 f2 e7 ad 2f 79 68 db 54 54 18 5a c2 78 c4 0e 0c f1 29 0e 7d 05 3c 98 17 84 8f e5 f3 50 a1 10 20 09 1c f1 31 67 57 4e c9 3a 4d 7c 31 9a 59 6e 4c 04 1c 32 73 40 1c a1 8c e2 a4 be 13 c4 9c 39 2b 56 30 a9 9d 03 9d 76 00 44 65 f0 1e 2e 87 28 77 98 b2 06 41 d9 e5 4a 42 bc f1 ed 73 56 ec ca 89 09 2c e2 8a 8d d6 96 d6 58 2a 20 23 11 48 80 78 a5 48 58 8a 78 d8 cc b2 4c 37 4e 88 37 19 47 4a 46 c4 dd 8f 90 b5 89 ca 88 ee 3d df 3f ac ad 1d 64 90 83 66 7e e1 b3 7f f8 71 a5 db e2 a8 db ec 68 e8 71 75 de 73 70 Data Ascii: q4{}{h7RLrTaDPs$B3D$t_>;9/bb,/yhTTZx)}<P 1gWN:M\|1YnL2s@9+V0vDe.(wAJBsV,X* #HxHXxL7N7GJF=?df~qhqusp
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 2c 2f ce b9 48 e2 d5 b7 df de cb 5a 92 b8 5e 83 d5 be df ba f6 10 a7 89 e6 cd d6 0c 2f c1 e8 c7 18 ff 39 92 45 0a c2 20 27 8b b4 b3 d0 a9 5c 47 b0 9e fb ad 24 89 e8 17 86 b3 bd 98 68 03 65 ba 38 93 e1 24 2a 39 27 04 d4 63 47 cb b4 d3 e9 8e eb fd 3b f7 6d df 95 b2 35 f2 ae 42 1e c8 0f 42 6f 2b 8b 04 3f e7 9c 20 d0 48 82 bd bb 19 cd 05 33 02 b9 2b c8 21 c2 77 89 89 e2 55 82 0f a3 c9 35 e3 f7 fb ba b8 e8 6d c2 36 86 40 6e 24 0f 9e 51 03 d1 b3 23 57 6f 81 bc 8f bb 68 01 81 51 e8 0f ca ff 6f e0 61 40 4d 94 87 11 40 7d b4 06 d2 08 00 5f 30 34 c1 3b 3d 01 d0 15 f0 24 86 83 d4 18 8c ff 80 c2 13 11 1b 80 d1 10 fe 1b 1a cd 62 17 d2 3c 11 64 f2 ea ea d5 ab 0f c6 31 92 41 6d 1f 41 6b 8e 45 b4 86 0e a6 df 8b 67 71 1f cc b4 d0 17 f7 a0 3a 2c 16 3c 8a 0a 78 04 0f e0 31 Data Ascii: ,/HZ^/9E '\G$he8$*9'cG;m5BBo+? H3+!wU5m6@n$Q#WohQoa@M@}_04;=$b<d1AmAkEgq:,<x1
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 60 4c ab ed 0f 31 3d f0 8d c6 ba b1 58 22 12 7e 0c 01 81 6b ce e5 de 4b 46 c7 57 4d 4c d0 58 cb be 90 30 3c b8 86 8c e3 c1 0a c1 85 9c f8 16 b6 64 64 9a 2e 5b c3 f0 32 0f 38 53 d9 22 5b 70 23 0b 27 06 2d 2c e4 81 66 f0 a5 48 0c 13 c2 11 98 e0 c0 b0 49 96 90 7c 35 c1 81 f2 95 98 b6 98 fb 6d 60 3c 62 e3 70 c2 d3 dc f9 d3 e9 54 e8 16 84 f9 88 ad ba 0f 41 c3 37 78 a0 98 90 31 5d 86 d3 d0 55 b9 07 37 27 ca 7f c9 c4 c9 83 63 8e 07 19 93 cc fd 98 17 22 39 71 cf a4 49 e6 6f 64 9e ce dd 26 09 d0 11 3b 11 ff 62 3c b9 e3 61 83 ac 25 c8 f6 88 cd b9 86 bc c5 7c 5a a6 2c b2 4c 7b 78 70 cd 6a e2 38 29 39 4e 92 53 65 5a c2 41 e6 e6 4b 17 67 4a 67 db 0f bc 93 14 e4 ca a5 27 21 f3 34 c6 12 04 7f c4 bb 40 03 61 2c 99 43 2e e1 5f 60 27 cb a9 8c b7 fe 0e ea 9d 7c e0 e3 a2 53 Data Ascii: `L1=X"~kKFWMLX0<dd.[28S"[p#'-,fHI\|5m`<bpTA7x1]U7'c"9qIod&;b<a%\|Z,L{xpj8)9NSeZAKgJg'!4@a,C._`'\|S
2024-04-19 14:07:10 UTC	9	IN	Data Raw: be 83 36 e5 02 49 3e 7e 00 Data Ascii: 6I>~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50230	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1105	OUT	GET /j0W5FC6v_GeR-8Z-YnXqrhR3Rw2LDLJQ6yQ6HpnzzRdSrz9Wcl3bylBnjpRnrEQzBQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 7790 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 66 1e 00 00 57 45 42 50 56 50 38 4c 5a 1e 00 00 2f a5 c0 49 00 f5 86 e2 b6 6d 1c 69 ff b5 d3 ae be 23 62 02 38 d2 9e b3 04 74 56 22 13 1b 72 55 87 1c 39 58 47 c0 b0 66 7e 12 3b eb c8 ef 5a ad d4 9d 69 8a 15 fd e1 ff bf ca 69 fc 7f a9 21 f1 ba 61 75 77 77 77 77 1c ea 45 ea ee c5 dd 35 02 71 0f 0e 75 77 77 77 43 c3 d6 b1 ea b5 67 ce 9c 49 9f e7 bc f2 ef 0a 90 c5 66 c3 66 b6 c1 4a e8 93 a6 4c de b3 9d 2e bc 93 66 df 21 83 1d 08 e4 bd 64 29 69 53 66 af 43 4e df a1 9e 76 b0 a9 9d 7d 13 28 e5 48 92 14 db 96 e7 05 11 1e fd dd 17 9b b5 fb 7b e6 3f 15 14 23 49 52 24 5b 1e 35 0f 3e 33 e9 af c8 d7 e2 eb 82 93 fd 87 05 c9 b6 94 a6 af 1e 73 5f 01 79 b8 a1 59 ff 3d de ff 7f ce 8d ff 7f f9 07 5e 36 d6 b6 6d db 46 ed 36 9c d4 b6 6d db 08 6a 23 a8 6d db 4d 06 Data Ascii: RIFFfWEBPVP8LZ/Imi#b8tV"rU9XGf~;Zii!auwwwwE5quwwwCgIffJL.f!d)iSfCNv}(H{?#IR$[5>3s_yY=^6mF6mj#mM
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 01 4d 41 6f 78 42 ce de f2 03 20 70 4c ca 27 8b d0 09 66 76 07 ce cc d1 11 8d 01 23 c5 b1 62 2d 57 31 37 0e 6a 8b 8f 47 c3 15 eb 4a 61 b5 91 4e f8 e9 70 38 1f c0 da fc 03 0a 99 ac 8b 1b 5e ff 6b d2 e2 f4 80 79 cc d4 5a a3 6a 88 6d f6 8d bb a8 e6 26 ec 13 4b e8 07 b3 98 6d b9 6d 33 9b 2b 45 0d 3a c2 35 6a 07 77 79 09 b7 d2 ae 27 9e 28 e7 6a e2 64 f7 58 96 75 3d a0 de 03 07 a8 4b 1b 19 2a be b8 e1 b4 07 c6 8b b1 72 98 21 b7 59 b0 0b 88 5f c2 30 a0 36 12 1e d8 16 00 d8 22 b3 e2 9a 14 73 a9 9d 91 e3 38 11 41 f6 6e ca 37 75 67 6b 3f 98 cd 0b 77 e8 cf be 82 89 f6 b8 02 ce 4f 59 5c 5d b9 dc d4 5a c3 aa 08 47 78 4e 89 3e 02 37 ff 7d 01 8f fe 1b fa 81 2b 05 8e 4e 59 b0 a2 6e 6a ed e1 aa 88 e9 c2 5c cb e2 3d 24 6c 9c 69 cc 02 05 22 ce ca 71 98 a8 0b 5e c6 c4 ef a1 Data Ascii: MAoxB pL'fv#b-W17jGJaNp8^kyZjm&Kmm3+E:5jwy'(jdXu=K*r!Y_06"s8An7ugk?wOY\]ZGxN>7}+NYnj\=$li"q^
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: f4 4c 4e f7 52 fa 65 4a ba 97 fb c9 74 67 3a a6 eb a7 3f f4 34 7d b9 9e 66 32 5b 7f 33 97 d1 f8 37 f3 65 8e 71 ec 17 63 a9 b2 60 8e c5 9a 32 c5 42 53 2c 76 53 2c 57 aa a5 52 ad b0 c6 5a f3 33 af 10 11 4f 5c 77 c3 92 d0 ea 83 88 38 2f 1b b3 27 79 c8 c7 51 1c 4d f8 91 14 24 3f 03 0f e7 30 0e e5 10 0e e2 40 f2 32 38 17 39 c9 81 26 3b 41 41 1a aa 8b 8d 95 9b 43 6c 72 72 32 7d 0e d9 c8 d6 b2 22 1c c0 88 fd 09 db 8f ae 5d f7 65 fa 3e ec 4d 74 f4 5e 50 d5 91 aa 3d f8 f6 db dd 91 d5 ee b6 1b 11 bb d2 bb f7 2e cc de 99 9d d8 81 ed d8 86 2d d9 8c 8d 58 93 e5 c9 c0 fc 32 95 84 18 f6 14 6c b8 d7 b2 bc 3c 68 f2 72 a6 84 1e 4f 71 4a f1 fe d9 9c c2 b1 28 0b 30 6c e0 11 50 1f 1d cc f8 c1 b9 49 8e 0d fa 69 44 57 da 7e 47 47 27 d2 2a 3a 3a f4 5b fa 1e cf fe fc f3 71 b2 da Data Ascii: LNReJtg:?4}f2[37eqc`2BS,vS,WRZ3O\w8/'yQM$?0@289&;AAClrr2}"]e>Mt^P=.-X2l<hrOqJ(0lPIiDW~GG'*::[q
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: fe fb ce 84 52 4e 52 60 24 a0 0f 96 80 99 18 e8 9e c0 c0 c0 59 22 45 75 ea 93 c8 7b a6 78 55 2d 1f 95 b8 ca 75 3e 94 2a db 54 a8 22 9d ee 94 bb 62 97 73 a4 1a 12 1d e2 45 c9 1a cb db 44 65 23 bb 2a 72 29 d5 e5 4e e1 4e e7 a0 a2 97 5d 86 1d 77 67 2c 79 95 2f 71 56 d9 12 15 72 d3 01 f7 14 ce 39 09 29 94 02 5d 05 49 b2 b1 a2 83 26 fb 0f f3 c7 d9 d2 a9 6f 6d 6f 7d bc c8 f0 ef 37 0b f5 dd ee 7f 7c 4f bb 70 0b dd c4 9c 80 29 ba e1 3b 9f 2d 0e 33 d5 31 d7 11 5d be bb 5f f2 5d f9 3b da 55 fd df 45 bb 2a 75 f6 55 55 27 de 05 56 aa 33 2f fb bc ed 48 a4 e4 9e 73 ee 1a 4d a1 52 39 aa 63 b1 ab 62 79 e0 4b e9 ab e4 15 57 e2 2a 5a 75 11 bd 18 2b 7e 53 f8 6a 4c f1 ce 50 ad 4a 56 c5 44 55 4f a1 cb 19 51 f1 45 c4 d4 4a a2 ca 58 d7 64 7d 91 bf 9b fc 3f 77 39 7f 4f 19 7b dd Data Ascii: RNR`$Y"Eu{xU-u>T"bsEDe#r)NN]wg,y/qVr9)]I&omo}7\|Op);-31]_];UEuUU'V3/HsMR9cbyKWZu+~SjLPJVDUOQEJXd}?w9O{
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 6b aa 21 db 0b 46 f9 0d 63 34 29 04 d3 98 09 4a 45 2f 6e 0e d1 a1 31 dd 2d 13 20 15 0c df 21 3d b6 13 8c 8a 1b e9 61 b6 5b 7a 7e 81 6a 36 23 3b 04 c7 8e 68 06 40 45 c5 a1 74 22 58 90 e9 cb 41 a9 64 b8 29 1a a2 c3 4c cb 30 11 4a 67 16 87 83 44 5f 8b 9e a9 70 eb 6a 55 d7 2c f6 48 a5 4f c9 02 91 56 2d ab 75 04 a3 b2 e1 f7 ac f1 b3 a0 6c db 69 f5 9c 34 2d cc b9 84 c1 60 70 a9 07 49 92 c7 de bb e4 da 5b 62 b6 16 d7 e1 00 fd 74 2a 6b 4d a0 4b d1 74 92 41 1e 93 2a b6 ca d0 4d ae 16 c6 ed 56 26 56 4b f2 90 9e 55 c4 de 20 b9 86 f4 47 ad 6d 04 9f 83 d3 71 8d 64 08 57 84 be d3 e2 d2 72 7f 3c 6c 75 7e 92 f0 d6 a1 2f be 30 bb bc 59 e8 87 e7 da 4c af 9d 52 cd 2b 63 37 63 81 7b aa b4 54 66 42 3f a0 a2 33 2b bc 72 3e b5 9e 8f 74 0b 8d d3 fc 0a 8b 8b 1b 89 6f 1c 58 2d 7b Data Ascii: k!Fc4)JE/n1- !=a[z~j6#;h@Et"XAd)L0JgD_pjU,HOV-uli4-`pI[btkMKtAMV&VKU GmqdWr<lu~/0YLR+c7c{TfB?3+r>toX-{
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 80 f0 cc 05 c4 66 c8 b6 1b 59 b1 5c 99 ea 3d b0 c8 09 c9 46 58 91 1c 03 67 11 de ac 2b 91 f3 24 0c 2e e1 46 5e c3 15 77 04 a1 0d ce b4 45 10 9e a6 39 82 f0 1f 66 f7 92 72 5b 51 5a 48 b8 d9 c9 b9 b5 de 5c fc 16 50 63 67 fe d2 90 26 34 e2 7c 2e 44 55 8f 7e 81 aa 9b a9 83 07 7d 78 4f 54 37 71 1d aa db 70 60 42 19 ae 81 d7 bd 4e 33 f4 63 2f a2 01 71 97 d3 16 27 5e e1 11 b4 b7 50 0d 9d 70 05 4d f9 b9 cf 55 1c 45 7c dc c7 36 dc 49 70 dc c7 06 57 02 f5 25 68 c7 75 75 6f 39 a2 1e b0 a4 1b 75 50 3b e7 78 d1 01 3a c2 5e b0 1d a4 13 ec 03 9d 60 7b f4 b8 2e af 4b ea ad 37 b8 bc 9a e7 05 fc 11 56 ca 94 10 f6 e2 7c ee 66 68 8a 1d c2 17 31 05 b8 95 f3 b8 80 17 f9 73 aa 0f 82 b2 38 fd 6b d2 0a e1 e7 f8 de 2f 71 37 a2 20 4c 18 6f c3 e4 d7 79 95 7e 23 e3 ab 13 f4 cd 84 c7 Data Ascii: fY\=FXg+$.F^wE9fr[QZH\Pcg&4\|.DU~}xOT7qp`BN3c/q'^PpMUE\|6IpW%huuo9uP;x:^`{.K7V\|fh1s8k/q7 Loy~#
2024-04-19 14:07:10 UTC	782	IN	Data Raw: fb bb dc 3f 36 f2 85 15 ce 70 9c 3a 81 97 63 f2 23 39 a2 c1 07 46 a1 60 c3 51 b8 32 5b c1 65 3e b8 46 a4 d4 51 bd 3b 5b 37 7b d3 db a5 5e f9 bf 21 db 76 07 b6 6d b5 33 9f 2a 8f e8 15 79 12 a0 86 e3 8c 51 94 04 cf f7 bf 4b 7f fd 67 fe 77 bf 2f f8 ce b7 eb bf b7 93 24 5e 9b 7c 76 b5 d5 f4 da 42 71 6d 05 c5 03 8f 30 1b 0b c5 69 b8 ae 9f 8c d7 db 3f 95 be fa ab d8 6b bf 15 7f e3 e7 18 bd a5 b4 a3 f3 b2 ec cf cb b4 bb a0 44 b7 20 10 e8 0b 1b 9c c0 95 e0 36 c7 d0 9a 7a 97 ad cb 0e 99 5f fa ba 4a f8 dd fe c0 8e 9d b6 83 87 e8 ca fb ac 70 d9 70 ea d6 58 c3 e5 e1 5a a9 23 9e 56 36 07 68 7a e5 9b 8a e1 af 79 a2 bf ef f5 84 99 b9 a0 78 6d 94 14 2c 04 af e4 68 f9 a4 9f 2b 22 5d ca 0f 7e aa 1c ff b6 39 80 f9 82 d8 e1 8d dc 9c 5c a0 74 34 07 8a a7 d1 94 80 b3 a1 f3 c0 Data Ascii: ?6p:c#9F`Q2[e>FQ;[7{^!vm3*yQKgw/$^\|vBqm0i?kD 6z_JppXZ#V6hzyxm,h+"]~9\t4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50231	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1106	OUT	GET /Rv_Fumphjg7BH6I8_sA7PPA2R4Vyq2twJ7ijutwLd54zbDD-d_tDWk9miKA6Kp6cWCM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 8420 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 dc 20 00 00 57 45 42 50 56 50 38 4c cf 20 00 00 2f b8 c0 49 00 15 87 e3 b6 91 1c 49 cc 3f ec b1 bb 67 de 11 31 01 7d a2 31 21 38 d8 5f 54 a8 a1 53 bb 77 3a 7b ab 0a 2a 0b 43 e8 ba 1b 86 ca 61 98 fd 48 d7 ca b5 0f c4 1d ca 86 8d d3 13 ef 31 7b 33 29 f3 1d 08 fd c1 92 65 f1 07 6d bb 72 b7 cd ff 95 b9 66 4b 61 66 5b 32 86 49 14 b3 cb cc cc cc cc cc cc cc cc cc cc cc cc cc e8 70 32 b3 d6 bd d6 fd ec 7b 6d ad 7f 4b 9a b1 ca 01 79 30 58 0e c9 96 52 4d 15 d2 cc ce 9a 51 2b 17 dc 86 99 23 a7 d5 d4 01 6b c6 f5 04 b6 ca e1 44 89 ca e1 44 86 72 60 b9 21 85 b3 d3 71 98 d4 b1 de 77 c2 89 c3 a4 a2 21 96 63 db b6 6d 1b 7d 3d 14 41 13 69 22 f5 2f 94 58 78 ee bd fb b3 d6 94 50 db b6 dc 36 fb 39 d2 ff f2 ff 4e d2 49 f2 aa 83 a9 20 4a a1 18 0a a1 28 66 6e 05 a0 Data Ascii: RIFF WEBPVP8L /II?g1}1!8_TSw:{*CaH1{3)emrfKaf[2Ip2{mKy0XRMQ+#kDDr`!qw!cm}=Ai"/XxP69NI J(fn
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 04 24 51 af 96 81 23 b4 8d 16 05 6c 37 7b ae 46 8c 01 4d 80 df 0e 4f 15 3e ca bd 56 34 04 c8 80 04 a3 e0 ed 21 db 34 fc 3a 49 a8 b8 44 54 8e 13 89 f7 aa ad 59 ee 06 ec af 5c 5c 02 09 d4 24 1a 2a 88 a2 12 d8 73 cc 18 60 65 94 26 02 e7 eb bb 1a 54 83 c0 b8 d1 81 b4 7f 0e 13 03 fa f4 4d a6 30 7a cc 77 79 73 81 7d d2 4b 00 d6 47 a9 05 73 c9 6e 80 b7 0a 6f 9d ea 01 64 54 71 14 7c 77 cc 0f 27 2b 3f 06 cc 31 51 84 44 e1 28 31 a0 06 34 75 ae 7b ee 23 c0 36 a0 0e c8 2a 01 20 54 7b 71 88 12 32 40 f9 a5 80 fb 4a 35 40 69 a8 f7 b2 2d 22 81 5f de 84 0e 59 24 d0 2b 58 3b b2 49 93 e7 ba 36 44 63 a8 e1 b7 71 3d c8 1d 62 b2 9b 78 73 24 0b 81 92 d0 cd 4a ed f2 c1 02 42 18 6a fa 63 0c ec 15 4f 25 55 bd a8 2b 70 a6 46 00 bb 84 6c 2b 0a b7 2e 00 d3 2a 8f 2b 68 b3 f0 00 24 0c Data Ascii: $Q#l7{FMO>V4!4:IDTY\\$s`e&TM0zwys}KGsnodTq\|w'+?1QD(14u{#6 T{q2@J5@i-"_Y$+X;I6Dcq=bxs$JBjcO%U+pFl+.*+h$
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: ce 22 12 19 55 74 05 86 53 a3 45 9f 2d 24 2b 39 4c 7f 19 02 75 7c 01 c8 ec 88 e7 18 9f 83 e4 86 ce 57 02 b0 b9 d5 51 e1 b6 48 31 24 0b 87 6b 03 00 9c 8f 4b d2 4b cc 13 be 8d 7e 63 d3 02 48 79 ae 00 d0 08 e8 f8 77 b8 c2 c2 fd 00 6c 72 24 cd e2 b9 94 94 c0 bf d7 c5 3a 0f 00 96 47 75 10 60 7b e6 6b 00 48 1a fe ca 2b 41 a0 26 b8 1f 3b bb 5e 69 fd 04 aa 36 c4 2e 17 01 80 91 53 2b f7 c5 09 b8 64 21 ca 2e 0e 66 0a 5a ee 73 b9 9f f2 74 0a 25 60 d8 36 da 3e 1d 92 2a 00 f8 fc dd 85 a3 29 ca 95 ef d2 0c 5d 37 7c e0 c9 21 62 0c 96 46 75 37 50 4c ae 1a bc 3d 55 d8 51 d2 f0 db 51 11 02 35 a0 87 0a 00 5b 9d a7 ff 7a 50 1b b4 1d 4b a3 1d 71 3e 6d 66 e0 6e ed ff 0d e5 80 78 d1 b1 f8 df c9 b4 15 32 ca d8 11 cd 7b c5 ab 0b 47 8d 28 7e 3a ca 03 c6 4e 28 e7 6e cf 60 71 d4 8c Data Ascii: "UtSE-$+9Lu\|WQH1$kKK~cHywlr$:Gu`{kH+A&;^i6.S+d!.fZst%`6>*)]7\|!bFu7PL=UQQ5[zPKq>mfnx2{G(~:N(n`q
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: ec d0 eb e9 86 d4 14 2c 25 d7 f4 ee 73 0d 87 53 da 40 a7 27 15 00 f9 80 93 1a f0 ae 81 fb d7 d2 a0 f8 57 85 6f 0a ee aa c7 ef e2 37 26 97 df e8 ad 0b 18 a1 d7 76 de 28 a8 b1 14 2c 45 d9 3e d3 49 2f f5 e4 62 6d 1e 13 4b 20 36 56 ec f0 cf bf f4 7d 73 3c c0 bf 93 44 6c 49 63 37 d9 db 06 1b 6c c0 17 8a 56 30 c3 23 33 98 a3 37 b1 06 56 aa 61 c9 d2 9a 28 ef f6 8d bd b6 93 08 14 15 d9 22 15 ad 82 55 09 a9 05 55 6a 42 6a 42 42 a4 6b 0b 16 2d d8 9a 85 6c 08 ac 19 96 35 4b 6f 2e 35 61 49 ff e8 54 77 dd ad 93 78 f2 00 77 17 52 f9 0f 86 9f e2 1f ee 4c fc 43 4e ab c7 12 56 bd 6a 0e de 6b d6 27 44 b2 24 b0 0d e0 1a 10 7a 38 4c d1 01 cc d0 ef 44 9a 03 56 8a af bd f3 1e ad 23 01 da 09 b1 8e 7b 35 df e1 e8 3d 70 dd 12 ae c1 32 f3 cc 40 44 2f f4 4b ff 73 35 83 86 4c 89 bd Data Ascii: ,%sS@'Wo7&v(,E>I/bmK 6V}s<DlIc7lV0#37Va("UUjBjBBk-l5Ko.5aITwxwRLCNVjk'D$z8LDV#{5=p2@D/Ks5L
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 73 dc d4 55 31 44 f5 0a d4 0d 17 86 1b 26 67 ee 50 82 ba 3b 6f dc 7c 31 e6 29 a8 03 23 80 6f ee 27 17 b0 77 f5 62 01 43 58 8f 47 19 be 1e 66 98 95 c3 c4 cd a6 08 01 42 5a 0f 41 15 b6 70 61 b8 97 b7 61 88 eb 25 a8 e1 47 0e 8c ad 30 85 ef 50 cc 90 57 23 35 f8 52 04 66 3f 44 a1 9e 93 6e eb 53 a8 16 bd cb a2 c8 30 8e b4 5d 4b a9 f7 63 14 d4 6f 54 f0 67 98 9c 61 12 13 13 57 1e 08 cc bf 94 9a 16 e3 04 fc 2b 32 f0 0a 56 61 ad 76 93 bb d1 e4 6c a0 a7 7c 5e 15 72 86 e1 02 59 23 1b 6d 14 0e bf 0a 23 b7 f3 1c 00 80 13 1f 8a 20 f3 05 58 58 eb 9c 15 b9 bb a1 40 bd 61 a0 fd d1 e8 a0 30 66 96 ba 03 83 01 16 3d 18 ee f4 c8 ff 4c e1 d5 31 b2 6a ae 44 22 57 46 82 66 73 3a e5 70 d0 7b 0c 46 e2 6a 2c 8e 7f 0b 1c 17 8b d4 0e 5b 49 dc 07 05 c3 82 b2 82 6d f6 2f d6 28 32 81 91 Data Ascii: sU1D&gP;o\|1)#o'wbCXGfBZApaa%G0PW#5Rf?DnS0]KcoTgaW+2Vavl\|^rY#m# XX@a0f=L1jD"WFfs:p{Fj,[Im/(2
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 3a 25 e8 9f 75 7f 26 6a ec 88 3b 0b 04 01 8d 36 01 12 be ba 5a 9e 30 c6 74 57 66 71 2a d3 2d 88 d0 3b ba cf 0b 08 99 0c f9 5f fb 72 2f 4d 5c 36 f3 44 f3 03 c7 15 84 c1 35 b9 b1 80 73 69 aa 03 df 25 91 b9 1d 03 a0 d2 a3 80 ce c4 19 30 92 7a 0f 14 b2 f8 30 c2 70 8d 94 76 fb 61 aa 38 40 fa 44 b5 5d 1a 78 16 6a bc 10 e8 4a ac 21 5d 51 59 37 74 ba 9c 91 39 56 da 4d fe 0a 95 0f 49 1c 1f af 3d 32 f0 71 28 35 6a 40 eb d9 ad 24 8a 40 20 2b 2b 37 6b ba e6 48 18 18 9d b2 ae f3 0b 95 1c 51 fb 21 b1 56 78 18 4c a9 cb 23 3f 5b 4a 73 d5 fc 5c 6e 1f 1c 4f 10 06 e6 86 83 a9 bc 12 23 9a de 5a 0b 5f de f8 1d a5 6e 86 b5 4b 49 2c 4b 25 6c 1a 32 ac b4 9a 7c 95 06 34 24 2f 20 6d 22 3d 27 56 ea e6 58 6b 53 24 6f 2e fa b5 a0 79 d8 74 39 23 6b d4 3f 9f d0 44 94 11 1c 62 b9 2c f4 Data Ascii: :%u&j;6Z0tWfq*-;_r/M\6D5si%0z0pva8@D]xjJ!]QY7t9VMI=2q(5j@$@ ++7kHQ!VxL#?[Js\nO#Z_nKI,K%l2\|4$/ m"='VXkS$o.yt9#k?Db,
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 36 7c fb f1 9e dd 4c 48 6c c0 a5 09 bb 87 3b 31 8c 9b 6c b6 21 21 b1 5f 5d c2 fc 51 66 b6 6d 4d f4 62 4f f2 b7 67 04 ba fb 64 1b 3a e7 ef 1f ec e5 c9 3c 91 e3 72 e6 e3 3e 27 df 7e 42 9e e4 0e 7e 9e 91 92 d2 3f 58 d4 c8 d7 37 75 d7 01 07 a8 6c 27 29 df 9d 2e 72 5c e6 f1 78 cc 05 19 9e e0 8b 6b 5c 7e fb 21 e7 82 dc 7d 3c e1 eb f3 c4 b6 dd d2 8c 13 d7 c1 e6 d7 5f 90 8a 80 1b e6 e6 5b 33 68 fc 45 d5 a3 0b 40 60 48 62 be bc b4 3d 8f 55 59 b7 75 e1 e3 ca 13 e9 de 1e 9e e4 f9 75 64 f1 39 d9 32 f2 e9 8f 43 3c b8 3f fe eb 0b d6 92 11 3a ae f2 98 75 48 f5 ee 34 42 36 54 01 f4 cb 7d 7c 6f 64 4a 5d 85 0d f1 76 eb a5 a5 78 ac 93 16 de 56 d6 72 f7 fd 3b a4 30 c0 19 3b de 8d 72 f4 4c b7 98 33 73 09 da 0d 38 8d f8 b8 f5 52 ae 6d 47 ce 8b 9d d4 26 ac fa 36 d9 9b 33 c9 24 Data Ascii: 6\|LHl;1l!!_]QfmMbOgd:<r>'~B~?X7ul').r\xk\~!}<_[3hE@`Hb=UYuud92C<?:uH4B6T}\|odJ]vxVr;0;rL3s8RmG&63$
2024-04-19 14:07:10 UTC	157	IN	Data Raw: 15 d5 82 29 5a a9 63 5f dc 4d 42 48 da 9a 65 5b 96 b7 c8 c7 8b 4a b0 74 53 ca 56 59 09 89 36 9d 07 ec aa 46 6b 7c 33 65 06 51 4b cd 53 05 e9 2f e7 15 bc b2 df 15 55 a0 1c eb d3 59 0b b2 79 10 2f 25 ab 41 80 5b 93 33 0a 62 a3 bc 67 ee ee 4b 0f 6f 9b 71 cf 99 04 3b 47 ca d3 13 84 4f 8b ce 44 a5 ac 48 93 e7 4e 05 3b 72 03 dc da f8 9b 67 91 14 e4 d1 85 3c f7 a6 62 78 70 e5 a2 31 7e ba 7c ec 1f 2f 19 fb a7 4b 98 5d f7 df d7 3b ff ff e2 36 07 3e f8 08 5a 8d b3 48 3b 00 00 Data Ascii: )Zc_MBHe[JtSVY6Fk\|3eQKS/UYy/%A[3bgKoq;GODHN;rg<bxp1~\|/K];6>ZH;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50233	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	531	OUT	GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 1118 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 56 04 00 00 57 45 42 50 56 50 38 4c 4a 04 00 00 2f ef c0 3b 10 a7 e5 28 92 64 59 a9 1e 36 07 d8 44 23 8e b8 fd bd eb 86 06 a4 6d 1b c9 87 0e de fe 73 3e ff 40 68 24 c9 91 14 bd 3a fe 20 0e a0 b7 ff 33 dd e5 38 92 6d 55 e9 27 df 65 27 e8 8a cc 08 94 54 34 09 87 04 10 60 81 04 c1 72 47 08 8c 28 d5 30 02 94 cb 88 16 a0 54 8b c0 28 50 d0 14 1a 88 2a 15 6a e2 01 14 35 8d 08 35 45 35 81 d0 a2 81 88 71 19 b5 21 10 da 34 10 9b 52 cb f8 42 44 b9 fc e8 9f a8 03 3e 10 85 96 da 8a 6a a3 21 c6 e1 b0 8c 11 51 a1 a6 7f bb 93 9b 07 fd 3b 95 9b 3f da 2e 5f d8 2e 1b 96 9b 12 87 c5 c0 40 20 ee 86 b6 d8 aa 21 62 d9 8d 97 3f ba a8 2b 7c 04 85 f8 ff 0c c2 30 fc be 26 cd da 0f 06 b2 97 24 df b0 85 0c 31 08 01 1a 01 2d d4 10 a1 82 00 21 80 3f 3c 4a 86 07 cc c3 41 46 Data Ascii: RIFFVWEBPVP8LJ/;(dY6D#ms>@h$: 38mU'e'T4`rG(0T(P*j55E5q!4RBD>j!Q;?._.@ !b?+\|0&$1-!?<JAF
2024-04-19 14:07:10 UTC	385	IN	Data Raw: 52 0f a4 31 a4 31 3a 40 8f 07 e8 53 c9 7e cd 12 ac a5 b5 f9 e4 79 00 7f 29 d6 d3 bd 68 54 eb d5 6b d1 d6 d2 7a 3a 80 36 90 8d 27 cf fb d1 fa 5f 88 ed d2 c5 00 7f 89 c6 3b 81 77 c2 7a df f0 68 bd af 78 b4 de 11 bc 23 d6 bb 80 77 de 78 f2 a4 1f ad ff 29 6d 47 e9 43 63 84 34 4d bd 0c 6d 19 ad a7 db d1 a8 d6 93 eb 68 37 c4 7a ac 67 60 4d 6d a2 f9 74 37 d6 2e b5 9f 54 3d 48 ac c4 7e cc 3b 90 76 e6 e8 00 a9 46 71 a6 bc 11 0f 50 8f e1 1c d5 e8 02 ea 06 94 f5 1a 9d 20 6f 17 61 2c a8 c4 0b 4c f7 26 23 f0 6e 8a 6e 60 7a 34 a9 1c 1f a5 e8 08 a6 87 33 4b cd 7e 90 a2 2b 98 b8 a6 cc 9a 98 a2 33 28 f9 c0 dc f9 6d cf eb 0e 66 89 ee 20 b5 2e d8 45 f0 51 9a 48 ff 15 21 4d 41 71 89 dc e9 1d 69 9d 77 c4 25 b7 42 c1 5b 3e b9 5d e2 f6 9f c1 6e 96 a0 4b f8 78 eb b6 d6 b7 3e a6 Data Ascii: R11:@S~y)hTkz:6'_;wzhx#wx)mGCc4Mmh7zg`Mmt7.T=H~;vFqP oa,L&#nn`z43K~+3(mf .EQH!MAqiw%B[>]nKx>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50235	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	530	OUT	GET /Kd17zb0wMFSZ_yCf0CSUCZe5vVQOTVrnTEwz9kYDAKchgH4YiFo6Q5NlaCei92b-DnE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 10752 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	732	IN	Data Raw: 52 49 46 46 f8 29 00 00 57 45 42 50 56 50 38 4c eb 29 00 00 2f a5 c0 49 00 55 69 a3 fe ff d8 25 b9 7a c6 6d db 1e b4 6d db 35 9d b6 6d 77 97 d9 b5 bb 76 d5 ae ea da 7b 17 77 59 bb 76 d9 b5 f7 ae aa 5d 7b 97 c7 b6 3d d3 18 db 58 73 3f f7 7d ef dd ff 7d df 3b 36 2a b6 93 8e ad d1 4b c5 79 c2 5a b5 7a c5 ec f5 c4 7a 65 0f 2a 7a 62 e7 9d ef e8 95 ad 27 b6 06 b1 6d 67 50 71 9e 59 ab 47 ff d8 a8 0e 7b 8d 1a b1 d5 1d 1b bd 52 b1 b3 63 e3 d5 8e 6d 6b 18 db 36 7a fd c3 5a 15 db b6 ad 1e f5 ca 1d db ce 3f e6 8e 6d e7 89 6d 67 14 bb 32 e1 4e ce d9 c7 b6 d5 ab e6 d8 67 b0 63 a7 0e fa dd ac df b1 06 75 6c c6 ac 57 c7 b6 d9 2b 3a e6 3e 78 15 27 ef 8e 6d db f6 39 c3 b5 ea d5 20 4e 8e 6d 9f c1 b1 6d 9f 13 67 74 cc b0 2d db da b6 ec 6d 73 3d 8a c3 b1 93 18 c5 d2 cf f8 31 Data Ascii: RIFF)WEBPVP8L)/IUi%zmm5mwv{wYv]{=Xs?}};6KyZzzezb'mgPqYG{Rcmk6zZ?mmg2NgculW+:>x'm9 Nmmgt-ms=1
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: b3 cc e5 b3 13 da e9 a5 c0 bd d0 03 d4 f0 95 ea 9f ff ae df 75 92 cd 6c e5 af 08 f1 0c 59 29 63 eb 56 d1 4c a7 62 f8 ee c5 4b 03 80 d6 3a 69 cc 90 92 ff 5e 18 9e 12 00 f4 75 92 a7 f7 39 01 00 02 f6 c2 b0 94 a0 d5 4e 8e 65 d8 b8 80 78 56 57 7d 16 31 6e 08 58 35 0c 65 31 0d 1b 1d d4 72 27 47 32 cc cc b0 c7 78 a5 88 86 fd 2e 88 ab 8c 5f 96 51 29 31 da ec a4 b1 00 25 bf 46 1c b9 12 a3 a5 2b a9 5b e8 d2 4c 8c a0 14 d5 b0 61 2a c1 c4 c1 56 2f cf 56 55 f7 a5 3a ad 32 b1 48 a0 2c 88 11 d8 fa 1a 15 d4 9d e2 2a 80 5d 71 0d 4b a1 c4 b1 21 4a fd 32 da dc 4a 6c 23 53 62 b4 b8 95 c7 01 8d 05 6a 69 2b 29 75 d2 89 3b 04 00 70 89 0d 5c a9 d7 42 2c cb 2c 83 1b 61 82 00 e0 c5 fd f4 42 37 46 00 68 bf 93 12 2b 03 78 ad 6a 36 91 93 54 40 22 65 61 8d 00 bf 46 69 5c 8a a1 3c d0 Data Ascii: ulY)cVLbK:i^u9NexVW}1nX5e1r'G2x._Q)1%F+[LaV/VU:2H,]qK!J2Jl#Sbji+)u;p\B,,aB7Fh+xj6T@"eaFi\<
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: b9 29 9d 6a b1 f7 bf b5 ee f7 00 5e ae 54 a9 95 01 bc cc 83 1f 1d 44 50 e1 c4 1e 19 46 a4 54 f3 b9 66 c5 e1 f5 fb 9a 88 02 26 a5 68 bb 93 86 af 04 f3 a9 e8 81 fe b9 4e 13 ba e8 44 a5 0f f9 8d f0 ab 0e 12 e0 05 87 74 f9 c3 89 2b d6 b8 fc af af 12 1c f8 8d f5 5f a9 97 5a c6 47 5f 7d fd 8e 7a 69 40 c8 1a d4 08 e5 7e 71 d5 1d d5 75 a1 5e 1d 80 0f 3d 3a 05 a3 8a 33 dd 51 c1 5b 7a ed c5 8a 1f e9 96 da e4 56 fe 9a c0 aa 33 52 f0 cd 1d 87 5d fb 27 95 3e d6 7d 82 ef 33 76 08 00 d6 b6 8c 8f be f2 d9 3e 76 06 65 af 06 90 52 a9 94 cf be d6 d0 a5 aa 94 cf be be 50 00 f8 61 0a f4 2f 04 9f 73 49 8c a6 3b d5 cd 41 d6 40 46 fc d6 f5 5c aa eb bd 50 ff 2e 98 a8 42 c1 f7 84 07 e0 e1 b3 02 ab 66 f8 e2 60 4f 3d d7 7f e5 3d c6 06 80 cf ce 1a c7 6e 03 64 85 85 2e 14 00 e6 86 d9 Data Ascii: )j^TDPFTf&hNDt+_ZG_}zi@~qu^=:3Q[zV3R]'>}3v>veRPa/sI;A@F\P.Bf`O==nd.
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 04 b4 7a 31 1e 3c 97 0d 9d ce b4 8d 89 78 b4 37 59 b0 48 72 3d 1a d8 bf 80 7d 2c 76 7a 92 1c 6f 88 71 b9 e0 f1 0a 01 78 84 02 44 ba 85 63 fc d4 5d 01 8c 2d d2 5c 37 cf ce 66 e3 0a b4 7f a8 44 c4 72 54 85 8b 87 2b 50 5f 97 27 21 24 47 f8 b0 22 e0 ba 37 71 e1 7e 1f b3 a0 ea cd 3b 1c cf 66 2a e2 fc af 82 81 ec 2e 17 81 fc da 8d db 8c 31 0e e9 fb 5d 3c 3a 9f 8f e3 b8 59 e6 66 57 7c f3 11 dc da 70 c3 93 90 ec 18 7f be 6b db 52 1c 0b 8e c8 f0 85 63 ec 0d bc 1c c6 54 ed d9 e6 68 e5 bb 15 2a 57 2a 37 ba 96 37 5f 69 e9 e2 ab 8a 1d 5c 41 6b c3 f5 ec 0c b7 77 de 33 23 a7 2d 49 e1 f2 be 08 0f 2b 8d f6 b7 1e 88 95 e6 18 da 9d 86 56 a7 8b 40 1a 8f 4e 66 d3 f8 61 3d 3c 8e 16 33 2a be f5 08 6e 7d b0 ae d4 e6 70 15 ff cf db db 0c 7c a1 88 a4 80 63 7c c4 4d 01 5c e7 bd eb Data Ascii: z1<x7YHr=},vzoqxDc]-\7fDrT+P_'!$G"7q~;f.1]<:YfW\|pkRcThW77_i\Akw3#-I+V@Nfa=<3n}p\|c\|M\
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: b1 3e 10 52 81 51 18 e7 27 d6 d9 04 69 63 28 9c 9f 5a 65 ff 41 2d e5 1d 02 53 82 b3 20 57 47 09 c9 39 66 52 f5 de b2 7d 37 ab 32 9d 6f 08 56 55 fa 43 59 96 2e ab d2 49 49 ca da fa c9 1c 5d 66 99 37 0a a0 8c 7f c7 21 c5 88 6b 5b 3b bd 26 8c df db e6 e9 c5 b8 69 b1 5e af 21 1a bd 46 a3 27 1a 8d 5e 13 c4 9e 48 5e ba 95 e3 48 d3 1a f5 1a 95 64 16 74 75 34 3e de d6 e0 42 68 af ef 78 0a 46 8b ea a3 45 81 cc 1a bd a3 fe 31 fa c6 5e bd 3b 7a 5c 2d f3 45 81 bf 82 2c f8 ac 7d 8b 87 37 7e ec b4 8d 41 af 09 e1 0e 74 31 39 60 64 8f a5 69 8c fe 97 8b 5d 4c f7 9b 38 43 7e 17 ab 1d 8c 4e de b0 e1 7a d2 c7 6c 57 87 a3 13 36 75 4a 58 bf 3b 55 9d 12 60 b9 d8 e5 74 9f bf c5 4a 86 2a 26 a4 1b ec 74 7c 38 e0 72 2e 76 5a aa d2 3f 6e b8 a0 a3 a0 ff c5 52 bb c3 33 b1 d2 f2 84 79 Data Ascii: >RQ'ic(ZeA-S WG9fR}72oVUCY.II]f7!k[;&i^!F'^H^Hdtu4>BhxFE1^;z\-E,}7~At19`di]L8C~NzlW6uJX;U`tJ*&t\|8r.vZ?nR3y
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 5e fb 27 47 8d d6 3b 83 ac 46 3e 24 e0 62 ca 70 35 c6 be 6e 9c cf 5d 73 e1 ee 44 fe 64 2a a2 b9 68 cb 32 5d 92 06 25 d2 ef 94 88 4c 06 95 85 f1 5a 32 ab 99 77 1d 10 1a c1 85 73 f0 9c f6 a9 76 69 8b 98 22 f6 97 da a6 4e 61 bf f3 4a cd 1a 04 11 8a a5 ba de 40 79 8a 3a 21 34 82 0b 38 78 cf 51 d1 9c a4 0a 26 72 6e d9 75 d7 0d a1 61 8c 82 eb 00 ae 6b 2e de 77 0f 2c d5 b5 30 58 79 a0 1e 08 99 9c f6 85 24 49 92 44 45 63 cb ce a9 1e 18 1a 26 28 8c 35 e7 5f 7d e1 91 c3 46 a6 22 86 2d 3f 89 bd 50 42 d5 54 45 d4 94 43 25 34 db e8 7a 03 e7 54 1f 84 86 b1 70 7c 6d 9c a0 f1 d2 dc 24 b9 37 6e 92 97 a4 f0 50 79 35 14 fc 52 c1 2f dc dd 5f c3 e7 7c 4b cf ba 25 ca b3 e5 24 79 c6 ef bc 76 8b b8 42 b7 4b bf 56 92 88 2c 13 f9 02 34 84 ca 4c 47 33 ab 25 2a 08 39 5f 1a 15 53 14 Data Ascii: ^'G;F>$bp5n]sDdh2]%LZ2wsvi"NaJ@y:!48xQ&rnuak.w,0Xy$IDEc&(5_}F"-?PBTEC%4zTp\|m$7nPy5R/_\|K%$yvBKV,4LG3%9_S
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: d5 fa ed 52 d0 f5 ce 97 b8 b4 f5 5b f4 fa 05 59 8d e6 b3 48 2b c2 f8 5d 37 f3 a6 07 b5 35 09 b2 7c bd c1 6a fa 0e fd 4c 97 1f 6e 6b 16 90 a4 c8 7c bc 0f 8e 9b 15 05 5d 87 e7 44 1d 59 c3 60 9a 45 08 43 86 3f e2 a6 79 53 b2 ef 8a a4 ea 25 be d9 92 8c 9d c1 a5 85 f7 5a 7f 68 27 c3 83 83 0c 62 ea 04 93 e4 99 27 1d ca ed 35 5a 8f ce 2c 84 1b 34 b6 87 92 57 ee 48 41 73 c1 d3 fc d0 06 8b 69 cb c2 19 2e 68 ef 7a 35 f3 e7 ff f1 79 6f 76 af 8e ef 0f 6e 0a 1e 17 1c 95 3d e6 c6 7b cf ec 5e 66 c6 44 f8 a0 45 2f e9 dc 03 cc 66 d8 d7 fa fc cc 57 e6 fc 7b 83 d9 3b 4d 9c 1d 16 49 f9 af fd 66 27 7a af 3e 26 1b cb 8c 9b 16 9a 3a 03 41 56 63 b7 35 c7 e7 0c eb 77 6e 75 c1 6f 76 5a f7 12 d6 ed 8a 1e d7 fa 99 ad 86 b0 83 b1 e2 f2 00 f3 f9 88 41 d3 81 86 70 82 92 a3 fb 9f 78 9c Data Ascii: R[YH+]75\|jLnk\|]DY`EC?yS%Zh'b'5Z,4WHAsi.hz5yovn={^fDE/fW{;MIf'z>&:AVc5wnuovZApx
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 52 aa 26 44 d5 b7 5d 6d ea bb 6f db c6 bc f6 c4 c1 25 5f b8 96 08 cc 6c 11 35 2c c6 6e a3 58 67 93 c6 c0 00 45 0b 95 29 d4 aa 72 a7 d1 87 47 16 35 2a 94 d0 be 5f 44 60 4d 99 d0 0e a3 11 51 b8 fd 91 ba 49 fa da a6 4e ff e3 3d 9e 89 1d dc 75 d6 a2 96 24 59 e0 d1 3b 32 11 05 78 8f 5d 37 10 6f 3f cf eb f2 da bd 0b 66 85 e6 f4 12 9f 7c 4d 58 7f a9 5b fd 3b 97 79 cf 51 83 80 5e a2 92 e4 ec 2c d8 e6 fc 50 89 04 c7 7b cc 8d 99 39 3f c3 77 56 9e c9 e8 a8 ea 5e d8 67 32 24 75 9d 68 b4 1e bb 8a 77 dc f6 35 9e ff 35 04 b7 43 5b a3 13 6a bc 7b 99 00 15 be 78 12 26 ec 3b 2b 24 b6 8d 65 0b 2d 4b a7 cf e9 86 cf c9 46 08 b7 2f 61 96 f3 2a 97 36 67 95 50 a3 28 61 65 40 c8 7c 88 12 f7 4a 39 13 5b a1 97 25 ee 15 c9 ef 6c 64 8d cd f4 f6 fe 5a f8 a0 f5 5e 5f e5 44 df 5f 16 ee Data Ascii: R&D]mo%_l5,nXgE)rG5_D`MQIN=u$Y;2x]7o?f\|MX[;yQ^,P{9?wV^g2$uhw55C[j{x&;+$e-KF/a6gP(ae@\|J9[%ldZ^_D_
2024-04-19 14:07:10 UTC	1235	IN	Data Raw: fa c9 37 5b fe e0 87 25 7c a5 b4 ea be df 88 f3 76 69 d7 d4 45 21 2b 76 51 bb 41 b2 9b 0f da bd 66 78 bb 20 2f fd 28 ee f5 1f 75 b6 dc c6 0d fe f4 bd 36 7e f2 4e ab c1 a7 cd ef 5e 29 6d f2 ea 18 76 5f e9 76 ef d1 bc c2 fe 30 74 f1 78 4d 02 b6 1c 36 8b b3 49 fe f6 27 b3 7f fc a1 cc af bf 5d e5 e6 3b 55 a5 cf 55 78 77 5b f1 1c 9a 7e eb a7 1d fe 2c 3a ce fc 92 dd 6b 86 a9 a7 cc 4e f8 ad c4 c1 c6 4a 19 af 6c 0f 75 f4 45 6b df f9 b0 09 f7 8b 0a 46 9f 37 b1 ff d6 08 ee 7c 36 02 fb 10 75 0a 44 87 e3 6a 01 c7 74 af 29 dc db 3f 0e f8 f3 e8 e6 ff f7 ab d6 3f fb 6e e3 f1 5b 95 dc db ae 08 9d af 3f fd db f0 3f bf 7a bb 0d b5 6d 2c 6f d7 5a f9 7e c9 23 4d 85 47 9f 3e 6f dd f1 c7 b5 5a 9f e1 8e 8f de 8e bf 7c 32 c7 71 0a ba e9 07 77 0f 50 a9 06 34 01 d8 88 9b 5d de e0 Data Ascii: 7[%\|viE!+vQAfx /(u6~N^)mv_v0txM6I'];UUxw[~,:kNJluEkF7\|6uDjt)??n[??zm,oZ~#MG>oZ\|2qwP4]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50234	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	530	OUT	GET /UnKazEvT-iNEgftYniQK4JOaQ3Bqm3rE-fWo6dRh4inWUGYpSkEgLSGYZxdv-0sfI3M=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 15680 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	732	IN	Data Raw: 52 49 46 46 38 3d 00 00 57 45 42 50 56 50 38 4c 2b 3d 00 00 2f b8 c0 49 00 4d 40 8c 24 c9 91 b2 d5 f3 02 e8 c1 7f 83 b7 57 20 0c 88 e8 ff 04 f0 8f 4a a9 28 24 3e 85 c2 c8 1a b3 34 c6 18 35 81 61 98 ff 5a be 23 24 6f 78 b2 b1 0e 14 60 35 06 15 fa c4 4d 76 68 94 58 da 98 87 3d 92 04 95 5e 0d 36 de 88 b6 65 e5 89 0d 64 00 4b 74 a8 85 99 25 a1 10 dd 0b 27 51 c9 27 50 55 d3 27 76 70 28 20 34 ad a0 20 72 8b 66 cb 3b 79 21 2a b9 7d 92 5b 6f bf a1 56 9c f0 3c 03 1b f8 3c eb 0a 9c c1 ad c6 f8 4a e1 f9 c2 37 02 f0 99 83 d1 51 d3 cc be 90 a7 05 ec da b6 1a 28 7b 46 0b 88 15 d8 7f 39 16 c0 f2 2b eb 33 27 d6 24 e0 61 2a 00 6e 6d db aa 95 f9 fd 7c 01 4e 48 78 43 fa 2f 80 12 88 dc 0f 7e 23 86 bb 0c 88 8d 24 29 92 e2 18 4d 78 ff ed aa 67 fe 3f 58 c6 fe 4f 00 fe 51 a6 81 Data Ascii: RIFF8=WEBPVP8L+=/IM@$W J($>45aZ#$ox`5MvhX=^6edKt%'Q'PU'vp( 4 rf;y!}[oV<<J7Q({F9+3'$anm\|NHxC/~#$)Mxg?XOQ
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 56 30 63 9f f0 d4 af 6a 35 76 ec 55 b5 a2 75 63 9f aa c7 1d fe 83 db 8c 73 e2 ac 56 8c fd a2 19 db d6 8e f5 6c 9b 5d 76 24 c7 b6 ad da ca 9c fb 3c ff b8 3b 2d 27 1f e2 a5 65 51 b8 db 77 e1 dd 7b cf 92 24 49 92 62 3b 11 d5 ff fd 79 5f 0c 4b 66 5e 33 eb 80 ba 13 eb 06 da f3 8e 59 9a 37 95 31 01 b6 af fd 3f 25 cb f9 6d d6 2e b7 fb b0 8f 31 b1 6d db b6 6d db c9 d5 d8 b6 6d 9e 39 b6 7d 4e 9f 69 1b d5 85 ee ea aa bd 77 ed fd fb 5d d4 6e cc cc 3f f0 8d 0e d6 8a 93 5a 3d ec cc 55 ec a4 d6 a8 63 8d 15 1b b7 3d 13 ec e8 6e 96 ad 8e 6d 74 6c 5b e7 2e b6 6d 5d e5 6e 6e 6c 4b 92 ad 48 92 e4 7e ce bd 11 51 95 9d 39 55 b3 cc cc cc cc 4c 9f b1 df b7 ef cc cc cc 0c cd 94 93 10 11 f7 9e e3 7e ae 6d 4f 24 dd b6 ad e7 79 5e 29 22 32 b3 aa b7 1c 1f 0d 66 66 e6 61 8d 61 8e 1f Data Ascii: V0cj5vUucsVl]v$<;-'eQw{$Ib;y_Kf^3Y71?%m.1mmm9}Niw]n?Z=Uc=nmtl[.m]nnlKH~Q9UL~mO$y^)"2ffaa
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: be 70 fb b6 0f b0 72 1d fa ec 2e b3 3b cd fe ed 4a 13 70 a4 ab 47 f5 d4 05 76 00 10 d5 ed ef 03 00 74 ac cb 4d 98 fb e5 a1 07 2e bc 7b 07 80 6e ba f2 86 15 eb 05 7f 35 f9 54 b7 6b 4c c0 60 34 8c 00 00 fb 76 41 30 c4 fb d9 c7 81 ae fa 83 8b cd 5d 68 fb c7 8b 6e 17 9e c3 a9 6f fd 05 e0 6b f6 78 8f 3a fe 0a a7 ba 93 b3 47 07 75 ef 6a 21 65 6f 90 32 81 08 6d 82 60 b5 14 89 27 84 d4 13 ac 6a ef d5 c6 1e f2 b1 dd 02 74 a6 7d 00 50 f0 a6 c9 e7 d8 fd ea 42 db 85 76 17 df f6 c0 a9 35 12 ab 8e 13 4d 07 bd ba fd 8e d3 de e2 d5 5d 00 ee d6 16 6c b8 fd 58 b6 80 fd 7d 94 02 f4 a9 4b 6d c0 d0 c9 d7 9c de 14 0f 73 be bc d6 01 58 a2 ed 88 b9 5f 39 80 eb 8d 15 0b c0 76 57 9d c3 5c 2f af 59 40 af ba c2 04 04 e8 00 a0 43 d0 da 75 a2 05 40 bf ee 24 0b 12 bc f4 d6 a1 00 ac 58 Data Ascii: pr.;JpGvtM.{n5TkL`4vA0]hnokx:Guj!eo2m`'jt}PBv5M]lX}KmsX_9vW\/Y@Cu@$X
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 94 cb d5 51 ce 57 66 f8 85 97 9c 40 4d 8d 0e 95 28 43 26 92 2f ca 42 08 21 51 25 81 3c 48 20 f3 0a 82 5f db 9c 8f 4b 23 ca f5 e2 7c 0c a3 58 0c d4 8c 85 d5 5d 60 57 9a 3b 43 86 0c 99 2c 46 01 a6 28 40 80 04 aa 12 2c 21 c4 12 48 08 21 d9 0f d7 8a 2a b7 79 a3 96 ab 7f 4c 54 dd 7e 38 16 03 b0 86 98 fb 69 58 36 62 07 bb 35 29 88 c9 b0 13 57 99 88 17 80 10 42 88 25 04 92 90 10 f2 88 52 58 e7 1d ab 96 b5 5c 45 59 58 78 ac 0e 65 da b8 7b a0 b9 5b 0d cb a0 2f 1f 09 ea 06 84 c9 84 d7 6c 0b a8 a2 da c6 01 08 84 10 48 48 48 50 21 84 24 10 25 84 84 1f 96 e7 7b b4 18 20 e6 56 21 a6 6e 60 c8 e8 b6 c0 14 16 2c aa 05 02 81 84 24 04 42 c2 28 4b 4d c3 37 85 9c a7 01 f3 98 a8 34 75 43 06 a8 62 ae 4d 71 73 1b 20 04 02 24 24 04 c2 2b 24 01 a3 11 4e 42 86 f5 00 bf d8 25 65 3e Data Ascii: QWf@M(C&/B!Q%<H _K#\|X]`W;C,F(@,!H!*yLT~8iX6b5)WB%RX\EYXxe{[/lHHHP!$%{ V!n`,$B(KM74uCbMqs $$+$NB%e>
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: b9 34 b6 9e 63 30 cd 38 88 43 7c 46 91 5a 4f 06 51 b5 a3 01 d5 86 36 7a 3e ac 1d 0a d7 d7 68 d4 51 34 a1 c2 50 0d 50 b7 35 d4 96 a5 83 0e 4f 58 92 aa 40 88 b7 66 1c 34 26 07 f8 a7 3b 97 dd bf b4 12 2d 6c 04 fa 9a 86 8e d9 9f 03 6b 98 de 74 b7 b7 2f 9e ac 67 4d 6c 5d e4 f0 aa f1 ec 15 d0 36 4c b2 56 ea 60 e0 5b 6c 6f 21 04 0c f7 54 8b 14 87 dd f7 7a 3a 3b 0d 71 2c 55 34 f8 66 16 0e 90 3f 0b a0 11 15 b5 c0 84 8a e5 00 31 30 e7 00 92 aa bc 1d ce c4 ae f0 c4 38 c0 e2 e0 99 26 4b da 50 2c bc f0 e4 09 58 3e 6c 47 90 47 60 c0 f8 ac 27 80 20 23 7a e9 15 ba ab c2 6b 76 6f 79 ce ce 12 be 2b 0d 73 1c 3b 12 2c 89 80 63 ac 10 22 b4 76 60 2f d4 d3 4c 07 72 e0 4d 77 37 b3 f5 6a 3d 47 a2 70 fc 9b ea 17 57 0f 77 0b 36 33 f8 48 b7 c8 ba 3a 45 1d 1c 3b 3b 3a 1a 49 49 39 22 Data Ascii: 4c08C\|FZOQ6z>hQ4PP5OX@f4&;-lkt/gMl]6LV`[lo!Tz:;q,U4f?108&KP,X>lGG`' #zkvoy+s;,c"v`/LrMw7j=GpWw63H:E;;:II9"
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 1c 54 85 18 a2 55 04 68 0a af b9 24 8c 4e a8 cd 57 d3 a4 a2 b2 95 21 8b aa 0e 08 3e 4e 6d db 9f 0f e5 f7 c5 7d 48 b4 c5 f7 82 aa c4 9b 42 16 58 97 42 19 2f e8 8d 1e 93 56 ba c7 e2 2d 8a f2 ed e3 14 67 1f c0 da ea d6 ca 65 b6 d9 a4 ba 47 fc f2 da 6f c3 c0 78 a3 35 a3 64 60 64 f8 0d 37 34 5c cf 72 41 f3 fc cc f9 d9 17 c6 b8 f1 06 db 96 06 99 b2 a7 6c 62 a0 bf 00 80 c0 3c cd 20 22 dd 46 31 aa 27 0a 6a 0d 93 4a 89 b9 8f 0d 48 a8 5d 3a 8f 43 b7 96 b7 fe 27 30 16 b9 2f 4c 05 4d 5b b0 20 ab 11 17 f3 e2 3f 80 f2 6a 17 5a 39 fa 4c 34 96 23 6e 8b 6b 86 84 54 bb d4 e5 68 da 34 a4 2e 65 d8 76 47 6c 50 20 01 a6 cc df 89 35 b0 d0 c1 4a 20 55 3a 2a 8c 49 0c 6f c1 18 66 7b fa b4 f8 82 f3 5c 9a 71 0a 2c 00 00 06 f2 14 a4 43 c2 2c 5d 5a 63 7e 99 c9 8f 5d a7 99 0f 61 4d 28 Data Ascii: TUh$NW!>Nm}HBXB/V-geGox5d`d74\rAlb< "F1'jJH]:C'0/LM[ ?jZ9L4#nkTh4.evGlP 5J U:*Iof{\q,C,]Zc~]aM(
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 79 03 71 80 c8 18 65 9a 65 70 d2 a3 5b 82 ad 44 95 4d e1 60 93 f9 44 0f e5 ac 1b 2a 30 94 d7 9c 46 18 dd 37 eb ad a5 59 14 10 ac 30 f1 23 02 19 07 07 a8 da 0d 58 58 07 c2 7e 35 76 00 d5 d3 5b af f3 d5 a1 c6 71 10 e8 9d ad 45 1f 99 e8 25 b2 b8 de bd 33 b8 f3 b9 8f 79 a4 19 0a 49 0a 69 87 bf 45 61 5d 33 37 5d cc a0 c5 a2 6b b9 da cc b0 17 a3 05 e4 7c e3 99 14 56 03 42 2a de 44 1b 9c 21 1a 49 8c 71 a6 19 c8 8c 8c 88 3e 47 4b 4d c0 04 e2 70 c4 39 4f 17 46 00 00 03 04 28 47 d0 a2 6e ed 0c b3 d0 5b 85 16 2e 4f 6f 69 01 75 61 1d 1a 53 40 47 18 54 ed a4 f7 3b 3a f9 5b e2 9b c9 52 a8 e6 9d 06 b3 3b dd 62 7d c5 43 05 39 96 55 79 24 03 d2 a4 27 7d f3 48 96 ec 87 c7 a1 6f fd 95 e9 1e 7c 81 4c d8 9e 28 8c c2 59 a4 0b 16 d2 2e 33 ca 2b 21 63 d3 36 f3 c1 05 0c 9b 23 9b Data Ascii: yqeep[DM`D0F7Y0#XX~5v[qE%3yIiEa]37]k\|VBD!Iq>GKMp9OF(Gn[.OoiuaS@GT;:[R;b}C9Uy$'}Ho\|L(Y.3+!c6#
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 32 66 45 83 e0 02 40 80 88 6c 48 f6 2c b9 b0 27 d0 28 77 84 37 da 6e b7 ad 9b 00 5e 9f 72 07 ae e9 06 80 23 c8 27 95 ba 1a fb c0 50 e6 d1 2e e3 0c e9 59 86 5b ea 7e 81 b6 ca 34 a0 b5 e0 77 ca e9 18 c8 9d 4c 77 82 26 12 a2 c8 20 10 f3 7f fd 29 b7 0f 9f 52 37 c0 cf bd 21 dd 5e d1 57 99 69 08 47 09 2d c0 44 e2 7f 0c 10 f4 f4 98 71 35 96 51 9a 94 c5 a3 ae 1e 5e 51 38 93 26 74 80 83 ab 25 20 4c 81 94 fc 84 2a 85 78 82 08 1c 02 00 08 40 d0 0c 23 ea 79 c6 8e 48 ee 1e ec 2e 90 b2 61 a0 36 0c a0 87 41 3b 44 c8 e7 23 b2 66 97 89 50 d1 12 c1 44 42 99 c6 98 36 ac 66 be 9d d5 1d 60 40 0b 3c bf 0e d6 80 75 a0 29 24 21 0b 6b ba f0 24 a9 6b 34 6f d8 b9 65 b3 5a 80 4e cc 28 95 71 6e 44 62 1f 80 3f 64 ef 86 a1 0d 1c ec b8 34 94 0b 38 c3 5f 02 f0 f9 47 ea 00 12 58 55 8e 6a Data Ascii: 2fE@lH,'(w7n^r#'P.Y[~4wLw& )R7!^WiG-Dq5Q^Q8&t% L*x@#yH.a6A;D#fPDB6f`@<u)$!k$k4oeZN(qnDb?d48_GXUj
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 29 1e d6 82 db 8a 5e 1d 34 64 15 c6 17 75 14 11 c6 e4 2d ee cc 1c a3 89 48 69 2e 89 dd 83 8a fe d5 20 71 83 20 a1 71 85 31 56 e8 67 ba 81 84 40 03 c8 21 4d 83 3c aa f2 60 f5 16 90 66 8e 78 75 a6 0c ca cd b4 29 d8 0e bd f2 7b 1e da 05 b0 a4 08 7f ed 89 85 84 11 14 98 d9 f3 88 8f 49 a9 83 7d b2 1f 5a 23 9f eb 23 06 c6 b3 31 a5 c6 52 0e 94 30 83 76 40 80 0d a1 23 21 02 54 b2 aa 64 fe 59 fb fb 8f 90 64 95 a6 90 83 d3 87 d8 14 1c a9 1f 93 ab 59 94 92 8c ed 72 23 78 62 0f 31 a9 90 5d e2 62 8d 01 41 08 15 b8 1a 4f c4 d8 84 86 38 b4 21 00 19 c0 14 86 58 0d 56 4a ef 62 9b 79 a4 36 49 4d 91 c8 3b 59 5b 57 28 5e 32 8a c2 59 4a c5 6b 74 4c a5 d0 ca 65 9a e0 66 4f 9c 52 16 a7 62 cb 3b a5 88 64 8f e2 79 4a bd 33 48 f3 1a d3 82 d7 c4 08 16 43 9c 92 ec 29 70 ef d3 de 6e Data Ascii: )^4du-Hi. q q1Vg@!M<`fxu){I}Z##1R0v@#!TdYdYr#xb1]bAO8!XVJby6IM;Y[W(^2YJktLefORb;dyJ3HC)pn
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 9d c3 3a a9 61 47 28 9b ac 62 f1 07 37 e3 82 c3 c0 80 86 f0 9f aa b3 47 46 e5 33 a6 5e 33 3c 59 ea cb 4a cb e2 fc 1c 11 e5 16 cd 7f 92 44 37 57 91 be 79 42 8f b5 d5 c9 3a 28 0d 04 0b a9 8d c9 08 d5 ab 1f fd 63 f3 1e 06 08 15 52 b7 61 53 8d 3e 16 f3 81 6b a5 4f 59 0a 17 c5 17 5c 8d b3 b6 b3 2f e8 99 af bd a3 62 b3 d2 09 25 a6 4b e6 11 80 a0 21 7c 38 ee 53 36 54 71 23 e6 6a e0 d6 ec e5 52 92 77 0c 4a 59 92 8a cd f5 4f a7 44 5a 35 4c c1 7b ef ad 23 b8 ba 0a fa 76 35 e4 c8 72 91 f1 29 df c4 74 c7 d6 cb 72 29 50 61 5b 7a 3b d3 78 90 55 1c 77 24 39 14 48 a2 c2 16 f3 ff 36 bb f9 9f a5 17 e6 ee 5e e4 37 b5 fc ef ab 5f d0 89 cd 94 bb 54 1a 64 94 ea 00 34 b6 66 c7 2c 3b 5b bd d1 cd 7e 88 fe ee 5a 8b c5 bf fc 4b b1 91 0e bf cd 7e b2 54 12 2a 15 a6 0e bb 4e 4e 6f e4 Data Ascii: :aG(b7GF3^3<YJD7WyB:(cRaS>kOY\/b%K!\|8S6Tq#jRwJYODZ5L{#v5r)tr)Pa[z;xUw$9H6^7_Td4f,;[~ZK~T*NNo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50236	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	529	OUT	GET /qW1OCeXIVPbBFRtmiUSYhzRfhwEV1CwJa5367zJjBwHktdp1l_tXG1zHWC5Xn4wJYQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 21274 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	732	IN	Data Raw: 52 49 46 46 12 53 00 00 57 45 42 50 56 50 38 4c 05 53 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 d4 52 cd bd ae c9 3f e0 e9 ae bd 27 81 88 fe 4f 00 7f dc 8d ce 5c aa e8 5a 6a 76 90 30 3c 45 8d 4b 97 2b 03 12 24 41 fe 61 ad 17 ae cd aa 57 ea a1 35 8a ee 18 3b 0a 59 f5 e8 53 48 38 1f c2 d6 ee 6e fa a0 b7 ef 62 a7 cd 00 a0 48 82 dd 39 dd 80 dd 89 30 d8 86 a8 83 1b 28 82 1f 6f 13 80 10 ae 24 a7 3c 20 40 c0 43 93 04 33 f3 03 a8 0d 35 e0 03 d8 71 0a db 3c 1c 6c f1 51 27 21 b0 d1 51 5f 62 3e be 67 a2 04 48 e8 81 07 c0 13 ac 43 ea 10 b6 02 95 ab 5f 08 60 92 43 28 cd e3 a2 46 d4 06 78 2c e0 c6 b6 ad ba 59 62 85 2a 41 fd 57 e1 12 5e 68 e6 f0 cf 35 b3 2d 7a f7 7d 53 03 92 55 6b 6f 23 e9 4c ea 1c 34 39 ac b4 ec f7 7f 8e 09 15 8c e9 dc 3f 46 14 9a 6c 6a 65 8c 30 12 1c 49 Data Ascii: RIFFSWEBPVP8LS/IM@lHR?'O\Zjv0<EK+$AaW5;YSH8nbH90(o$< @C35q<lQ'!Q_b>gHC_`C(Fx,Yb*AW^h5-z}SUko#L49?Flje0I
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: ce 6f 0f c7 ff 8e a7 ff 8e 43 df ce 0d 3e 21 75 c0 d1 bd a3 3b 07 00 2f dd bb 04 60 ba 3c 3f 1a 66 8f 24 0c 89 1a e2 1a 04 95 6b 00 cc 67 f3 49 3b a3 49 60 02 40 40 ce 00 bc a1 b8 6d 1b 47 da 7f ec 2b 49 ae 7e 23 62 02 38 bd 39 61 73 de d1 9c 4c 01 43 76 23 ae 44 43 7c 25 94 3f 36 26 6b 1a d2 c7 ff ff 7b 37 6d f5 fd fd ce d0 de 92 e5 6d cb b2 8d b1 31 c6 66 18 13 30 59 04 32 c8 de 7b 37 e9 ce de 7b 6f b2 81 ec bd 07 64 b1 02 21 60 63 c0 0b 6f 1b cb 96 64 6b d8 da f3 48 3a e7 f7 fb fe 71 f6 57 f6 dd e3 cd 55 43 1e 96 4e 73 80 47 86 f8 e6 dc 53 77 1c a5 8a 43 07 e4 a4 fd 00 49 eb 62 17 75 38 38 51 46 07 6d a8 cb e5 e1 ac 63 e2 0e ee 75 aa 5e df 91 6c ab b6 6d db 56 44 2a b5 b5 0e 03 e6 9a 63 d2 66 66 a6 2f 66 de 5b 80 2d c7 16 64 ab 80 52 30 fd 31 33 f3 9e Data Ascii: oC>!u;/`<?f$kgI;I`@@mG+I~#b89asLCv#DC\|%?6&k{7mm1f0Y2{7{od!`codkH:qWUCNsGSwCIbu88QFmcu^lmVD*cff/f[-dR013
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 9e fd 94 2f 7c ef ad 72 60 01 cd a6 07 ec 88 6e a0 3b 64 ad 40 38 9f ec 3e fc ee 9b d4 1e 30 56 ed 02 6d 04 a0 bc 24 c0 ba c0 95 1f 3f 7c f1 bd 5d 09 e7 3c 83 f1 cf ee 62 00 28 91 59 c8 b4 5d f0 c0 7a 50 11 11 3d 76 fa 36 11 dd e5 5c 2e 11 11 9d 41 37 7e ff d9 06 00 c7 2c 4f 78 de ed 62 9c 0e 76 f7 c9 21 b4 75 38 ba d7 bb cf af 38 ec be 02 f5 fa a0 66 82 fb ac fd 30 f3 ea 31 f5 02 e5 77 6f 77 ee 9b cb ba 07 3c 09 52 15 9e bf 8f 99 85 d1 39 e4 61 7f 0c bc 66 79 e0 e7 7f 28 c9 b0 b6 90 80 de 7a d7 f9 45 0b 0a eb 95 0f af 0d 00 37 ee 00 66 7b 59 fe cb 21 6b 1e d2 45 8d 6e fb 70 bd f9 7a 33 59 3b d6 c5 7d d8 a7 5a 93 60 b1 17 b0 89 c2 fe 3d 0f fc e0 ca 63 41 ef 6d 2f 5c d1 f3 e7 be af 11 1d dd f6 b8 b3 9c a6 d5 83 e6 10 d5 60 c9 5b 5f a9 11 80 44 cb 5d 80 79 Data Ascii: /\|r`n;d@8>0Vm$?\|]<b(Y]zP=v6\.A7~,Oxbv!u88f01wow<R9afy(zE7f{Y!kEnpz3Y;}Z`=cAm/\`[_D]y
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 4a 30 00 3c a9 35 58 03 2f 9b d9 b1 1a 2b 0c e5 64 00 7a 19 01 40 cd 80 1e bd ef bc 2e 11 e5 74 5f b8 ba de cd fe f2 9c 32 d8 71 4a 72 00 40 01 72 1e cf 97 88 88 f6 b8 53 02 82 e3 92 3a 89 1c d4 20 bc 90 ac 60 dd 93 d6 66 b0 fd d4 fc 40 00 b8 43 00 c0 dd 3e 38 ad ec 16 d9 46 e0 b3 00 63 b9 00 b4 fa 92 30 fb 83 77 77 88 1f c2 7e 5d 1b ec e9 8a f9 44 f6 33 5f cc cd e3 91 7b 76 20 00 5d c0 ee d7 77 0e 11 d1 e5 fd fe e7 13 17 12 37 c5 1c fc dd a1 8b 9d 06 da f3 be 5b 70 12 0c ab 46 1f 80 36 c0 f3 a6 ef ee 2c 5b 9e 89 c0 45 cb fa 2a a1 9d 8b 02 3f f8 c5 f7 ef 9c b7 0f 08 00 da 00 ac a3 dd f5 da d5 0a 7a 74 56 96 d3 f8 8f 76 f2 eb 18 f8 02 00 fa 1c 98 d9 a7 4f bb 67 0e 92 7c fd 52 4d bf 18 e8 cd 36 91 03 87 5c f8 39 1e 2f 98 f3 ea 6d 13 d0 f2 f4 35 43 39 77 4b Data Ascii: J0<5X/+dz@.t_2qJr@rS: `f@C>8Fc0ww~]D3_{v ]w7[pF6,[E*?ztVvOg\|RM6\9/m5C9wK
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 1f e3 ea 6d ac 10 40 a1 80 8b 56 02 18 04 e0 5a 34 78 fa ae f7 ee 79 ff e9 37 7b fc 4c 16 3b fe 01 f6 57 cf c1 e6 3d f0 41 7c ed dd f8 a7 05 08 ae 2a 70 18 1e 84 37 e1 ee c0 a1 78 30 18 00 09 09 00 cf 02 ae 33 21 0d 98 45 82 94 14 10 87 4f e0 4e 00 30 16 88 ed 75 46 3e aa bb e9 eb 4e 65 7f f5 57 1c cc 46 11 ac 48 c6 45 b3 70 ee 41 f8 83 e9 f8 bb 55 05 fe 7a 07 de 86 c7 e3 00 cc 85 0a 86 21 18 8d f3 ec c6 00 d7 c9 0b f0 71 56 90 12 e1 82 cd 65 c0 9e 00 b0 3f f0 9d 34 94 6e cf c0 0f e0 b8 1a 89 d0 11 3e 37 1e 58 d5 96 02 00 5e 03 38 24 20 f8 05 23 4d 26 41 2a 81 de 40 15 f0 2d 00 0a ae bd 11 be 53 4e 0c 37 c1 7a 27 ab c1 04 00 1a a2 11 c6 26 31 ea 80 78 70 d4 03 df 01 80 14 1c 87 bf 3f 15 87 e3 3c ac 5e 7e c8 58 34 b2 62 f0 2e a2 40 ed f8 89 1d f0 37 7f 84 Data Ascii: m@VZ4xy7{L;W=A\|p7x03!EON0uF>NeWFHEpAUz!qVe?4n>7X^8$ #M&A@-SN7z'&1xp?<^~X4b.@7
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: d1 9b 7b 80 5a 2c a7 11 6c 15 e9 6c 0a ce b5 d2 85 c8 ab 64 76 d3 4f 3e ff 1f 0c 26 90 0e 27 e1 91 af de 86 01 cc 6f fd 35 a9 c9 d2 6e 76 46 ef 1e df 26 46 26 26 d5 cd dc a9 1d 33 db 04 33 56 5d 12 40 44 18 ee 22 1c b4 c1 c9 e4 5e 03 7d fe d8 1a 00 28 c5 f5 dc 13 db 0f 15 8a 61 2f 9c 53 37 77 a7 d2 8d d5 b2 49 62 d5 4d 10 59 25 00 41 27 cf fd fe 5f 7b fc 97 fd 8d 1b 7a 00 d4 21 0e 38 17 f1 a8 07 9d 1d 2e a2 78 d6 46 51 48 64 57 61 f6 24 0c 17 5c be c1 7f 7c 33 89 d5 ac 84 b0 d2 41 a7 a3 4e ac 6e 49 0a e3 03 08 ab 6f 09 c6 8a 22 b1 5a 97 60 24 0a 13 c8 99 d5 82 c2 49 33 39 d2 b4 b5 11 a6 24 2d 30 b1 6a b2 95 41 d0 93 90 b8 00 62 12 27 01 11 f2 34 d9 8a b5 36 c3 67 af bb f2 c2 56 8d 74 49 50 1c 29 16 82 8f a7 ae b6 e7 d8 20 42 42 90 72 32 84 b7 12 86 13 a0 Data Ascii: {Z,lldvO>&'o5nvF&F&&33V]@D"^}(a/S7wIbMY%A'_{z!8.xFQHdWa$\\|3ANnIo"Z`$I39$-0jAb'46gVtIP) BBr2
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: fb 10 8f 14 27 5a a5 74 04 59 ed 34 f6 8d fa e2 51 ac 91 e3 9a e2 58 3c 33 ef 4f 4b 9f 31 23 c8 fc c2 48 a2 91 aa c1 c2 71 61 bd 17 b5 34 e1 82 49 c6 f3 85 a3 60 06 d6 0c 5f cf b6 8a ac 82 5a 31 32 59 f0 1c bf 09 8a c4 21 1d 02 a1 88 70 d0 04 87 f4 75 8e 05 1d 44 ad 64 85 36 8b 5b 32 05 cf e9 50 6d 19 04 54 c3 40 a9 05 31 38 d1 b8 85 1d 82 26 91 3d 2b c7 29 cd f3 77 ed 14 d0 16 51 b6 c0 f5 2f 8c b7 47 7e 7d 13 b5 1c 9c d2 9d 18 a7 4e ba d3 9a a5 a2 dc d9 4e 43 ae 72 1e 73 28 3b 77 ad 85 18 78 cf 75 a7 72 95 39 33 38 b7 cc 1d ed 24 5a 35 25 99 d5 89 43 b2 a9 1a 48 d9 7e d0 e0 30 72 8d d5 8c 7d 26 5f 4c d9 2e 36 77 8b a1 88 d3 8c 08 40 c7 2a 67 68 14 26 ac 6a a9 ba ce d3 a8 04 d6 53 18 ae 2c 62 88 05 3b f3 62 a6 23 b0 81 48 9e 48 88 98 48 02 b5 14 f1 0c 8d Data Ascii: 'ZtY4QX<3OK1#Hqa4I`_Z12Y!puDd6[2PmT@18&=+)wQ/G~}NNCrs(;wxur938$Z5%CH~0r}&_L.6w@*gh&jS,b;b#HHH
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 2a 5c a6 ba 71 17 ad e1 56 4f 3c b6 37 ef 0f 9e 1d 1e d4 5e 56 18 9d 9e 4b 45 b7 6e d7 73 22 ca af bb a1 85 62 a7 24 5d 23 cc 42 6e df a2 6f dd 24 a6 96 05 cd c4 81 ee 04 10 05 80 fa c3 34 7c e6 06 df f8 69 e0 b2 63 6c 6b 32 2b 86 84 cb b4 10 1a 5b a6 11 a8 76 c0 9d 4a 44 a3 65 74 5b 9c d6 58 38 31 cc 70 66 5e 37 c6 a9 cd 65 ea 89 ce 5d c7 a6 7a 15 63 20 95 b2 ba 77 db 48 cc 76 32 d8 15 66 62 d3 e8 4c 15 b2 2a eb d6 ba 8f 3f 08 3d de e9 37 cf 19 45 02 2b 6e 9e f9 c3 b5 75 ed 72 80 6f ce d2 0f d0 ad 37 6b f4 ce dc dd 33 10 a4 67 18 cf f5 c3 8f 3e fc 8d 47 1d d7 39 ff 20 a7 60 3a 5b b9 a8 39 2f 65 bd a8 85 ad 1e 7d c6 bc c5 a2 7b 5d 3b dc 1b ee d7 15 dc f0 ec b0 e8 f1 9d 3a 69 05 de a2 ba 62 f5 4d f0 30 81 00 80 80 01 21 59 1e 29 81 40 0d 32 60 a2 1b 14 31 Data Ascii: \qVO<7^VKEns"b$]#Bno$4\|iclk2+[vJDet[X81pf^7e]zc wHv2fbL?=7E+nuro7k3g>G9 `:[9/e}{];:ibM0!Y)@2`1
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 44 29 d5 38 c1 f9 91 83 a1 67 fa 6b 29 08 cd 8d c8 14 87 44 70 02 38 4d c0 f3 79 82 3c d9 13 0b 5a 13 cc bb aa 97 27 11 09 37 cc 4e 99 a9 6e 6e ea 53 8e 13 c5 08 ac d8 38 6f 45 1a ab 7a cf 3e b7 5d 87 71 6b e4 f0 78 62 c6 d9 ad b1 d9 93 ba a8 92 cf 85 f9 cb 3e 1a d2 e1 a0 46 70 04 23 a9 c8 3d d3 89 de 50 58 d1 8c 0a d6 4e 32 5d ce 89 6e c8 40 2b 4f 77 d3 f3 b7 96 5c 76 20 05 10 54 2d 10 a4 33 1d aa 71 36 bc 41 c9 c5 ba dc c1 45 99 de 8a 93 99 5b b1 54 c6 20 33 7a 36 50 8f ce 5e a4 28 8f 33 98 6d e9 d9 b0 9d 51 a7 81 25 30 2f e0 93 3d eb e2 a8 3f ab 9b 33 af af 5e 19 be 71 a9 f1 08 77 10 d7 37 62 33 53 a2 aa 6e 1c 3b ba 2d 1d de 16 a6 99 43 6f dd 49 65 cb b3 1e 2d a2 49 da e0 2f 92 81 f9 66 01 46 c8 2c 24 0b a2 32 fa 7c 33 5e 62 9c 51 d7 45 5d 34 10 ab 92 Data Ascii: D)8gk)Dp8My<Z'7NnnS8oEz>]qkxb>Fp#=PXN2]n@+Ow\v T-3q6AE[T 3z6P^(3mQ%0/=?3^qw7b3Sn;-CoIe-I/fF,$2\|3^bQE]4
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 31 2c f2 8d 68 76 ee 85 34 8c 21 3b 67 93 43 80 00 45 38 16 22 19 7d 23 c0 00 42 c4 19 a0 50 05 c4 90 20 b8 da ae 72 56 20 cd 69 27 9b 95 b3 f1 4e 7c 57 b7 f5 eb 3a b8 17 67 7b 36 90 aa cf 32 2f 8a 6c 68 80 cd 49 30 d6 73 56 35 db a4 24 2f 03 18 0b b7 df 5f b9 99 95 a2 92 8b a2 12 3f c7 cc 65 ee 1a 3b 2a 85 a5 ba 1c fb e2 17 41 63 ce 83 83 45 40 9e a6 de 58 5c 44 f1 60 2a 31 06 58 9c bd 9e 43 ac 36 d3 f4 60 3d 24 07 11 d1 40 3e c0 8a 28 8a 19 ad 39 39 6f 16 00 3d 81 e3 c5 af 67 d4 e9 b7 73 91 ba eb b0 07 2b 46 37 00 72 a6 3a 67 72 6c 66 70 fa ba cb 28 c3 f2 65 61 47 3b cb d8 7e b9 f2 38 49 6c 0d 0c d6 df f2 d4 cf d2 ba 39 16 6d 55 48 57 29 0d a6 bf 98 cb c9 ca ad f7 30 47 65 eb ac 94 1d e9 1d 07 0e b7 9e d5 d2 0c ac 3a 6d fc 31 b3 56 32 94 34 34 45 f0 a0 Data Ascii: 1,hv4!;gCE8"}#BP rV i'N\|W:g{62/lhI0sV5$/_?e;AcE@X\D`1XC6`=$@>(99o=gs+F7r:grlfp(eaG;~8Il9mUHW)0Ge:m1V244E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50238	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	529	OUT	GET /YPvG90WiRFcg7A45HZ0bPwKe6h_I7lcfy6jMWjQYq3ryi65iCR7UQ-r7WFQDpLkSBQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 11790 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	732	IN	Data Raw: 52 49 46 46 06 2e 00 00 57 45 42 50 56 50 38 4c f9 2d 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 54 72 ed 77 e7 ca 3f e1 69 d7 3e 11 44 f4 7f 02 f8 f5 5b 10 28 dd aa 6a aa 4a 53 b5 01 43 61 c0 09 24 c9 2a 15 7b 5b 36 f6 1b 3f da f5 c6 ed 50 bd 19 b8 f5 45 ea 95 a5 53 49 dd a7 51 02 73 36 0e 26 df 06 82 a4 7b 1f 34 4c 18 72 6b 92 a4 bf 9b 2e 78 c6 a7 61 69 48 f6 42 49 2c b5 31 d0 07 7b 21 b2 41 c1 80 4e bd 10 79 65 e8 0f b0 94 16 bd 70 2f f8 c8 7c 46 de 18 07 2d 66 50 30 f4 c9 ee 30 26 db b7 70 0d b2 1d 8a 7c a3 93 16 82 cb 02 72 24 49 8a 24 df 3d 46 09 18 f4 97 e5 44 18 bb f7 1a d3 31 75 55 2d 48 00 c9 b1 6d d5 4a 7d dc 39 38 cd 33 ff 30 16 6d d9 97 83 dd dc fc 16 ee 10 b8 b1 6d bb 6a d6 79 78 4f 4a 07 f4 df 10 17 2b 29 7b a1 fc eb ff 04 60 c7 39 96 3c ca 0c Data Ascii: RIFF.WEBPVP8L-/IM@lHTrw?i>D[(jJSCa$*{[6?PESIQs6&{4Lrk.xaiHBI,1{!ANyep/\|F-fP00&p\|r$I$=FD1uU-HmJ}9830mmjyxOJ+){`9<
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 33 bb a8 b8 a4 b5 56 a9 a6 5b 8d 9a 65 d7 ea d0 54 8b 6d 8a 99 f9 c7 e7 8c 09 c0 06 6d 9b 2a 37 ce ba fb c0 90 34 b2 d0 cc cc b4 4c 61 66 66 66 66 66 66 66 5e 66 66 66 66 74 a2 c8 96 59 60 cb a2 d1 d0 81 ee 1f 73 bc 5a 70 fe 3f aa b0 46 55 0a ba d6 a7 54 e1 05 ed 86 13 55 f2 7e 0c 61 4e b4 f9 18 83 cb 10 26 57 f9 91 6c 5b b5 6d db b6 52 2e b5 b6 d6 db 80 09 63 ae cd cc cc 4c 1a 4b 4b da 2a c5 62 4b db b6 b4 23 b0 43 b0 35 e6 20 b0 ca 5b e2 3d 61 d1 e0 d9 b1 b5 5a 4b f6 64 6d db 61 db da b6 ed c7 71 46 44 c7 18 6b ad db b6 6d db 46 ce 77 09 56 15 ee 3b ab 02 dc 77 25 98 75 da be 93 b6 31 3d d0 23 ae f3 88 09 70 e0 15 68 0e 52 38 f3 45 07 fe f4 dc f8 37 ef 5c f1 d3 ab eb 7c 78 ed 34 07 fc 12 a2 e8 f6 6d 79 5d d6 49 f4 7a d7 61 97 4e 8e 17 37 39 78 2d a0 2a Data Ascii: 3V[eTmm74Lafffffff^fffftY`sZp?FUTU~aN&Wl[mR.cLKKbK#C5 [=aZKdmaqFDkmFwV;w%u1=#phR8E7\\|x4my]IzaN79x-*
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: f7 1b 8e 58 76 28 cc dd 3e f4 ae e6 6d 23 7a b2 50 2b 6c 99 02 eb 50 b9 00 14 27 00 40 13 4a 43 21 41 e6 d3 be d8 e3 2d ca 2f 50 a2 03 b8 3b 34 ca 1c f9 b2 f3 7d 30 5e dd 8d b9 cc 3a 75 31 60 c7 03 e0 16 07 61 c6 d0 69 45 04 a1 05 a7 74 3b 43 ff 67 68 83 57 da e3 c1 6b 91 18 79 13 39 e1 76 d5 fb 40 98 6f 7c d8 83 47 be 42 44 e5 fc b5 de c3 a3 6b dc 07 9b 3f 3f 7a f7 d4 99 8f d8 fd 35 9b 08 89 4c 99 e9 12 99 8f 30 44 cc 75 fe 21 d2 f3 27 a5 e4 32 5f 74 c2 e4 b1 90 c5 0b 61 b6 4c 65 79 d8 de 9c d6 bf 3a 18 ee 4f 3e 8e 0d 40 8b 05 b0 bb 78 7d 08 80 94 1b 53 56 b0 23 a7 19 1c b6 5e 7c 03 db f2 3f bf 67 c9 c3 32 ff fa e7 a0 ef b2 28 f7 35 39 84 23 64 5d 7a 8b 32 27 4e 20 59 64 c0 e2 85 ed 6b 9d 50 aa 44 ae 2d 0e 92 6a f6 f0 ff 1c 9b 5a c3 4f b3 e2 16 28 40 26 Data Ascii: Xv(>m#zP+lP'@JC!A-/P;4}0^:u1`aiEt;CghWky9v@o\|GBDk??z5L0Du!'2_taLey:O>@x}SV#^\|?g2(59#d]z2'N YdkPD-jZO(@&
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 2f 95 8b 8b 98 85 63 6f 66 37 4e 8b 7a 13 8a 40 d8 81 77 3f 96 07 71 63 46 71 2e 3f 26 06 a6 5b f0 a9 05 f8 9d c5 c8 51 ed 35 e4 1f 7d b8 33 8f e3 fe 6c 02 31 f4 57 53 59 d4 e0 33 2f ca 48 e8 c5 a1 e5 39 cd 68 45 fa 42 0e 07 58 8e 6b 32 80 cb f2 11 8d 98 cc 51 93 17 4f 52 59 c2 df 67 f2 ff 07 83 ab f8 4e 18 38 4a 6d 03 14 c3 8f 81 3d 39 91 0e a0 5b 33 21 d5 9e 42 8d f1 17 9d cf 0b 01 30 e9 e0 70 31 0a 1d 14 b8 3e 7c 0d 1e cd 76 64 d0 70 25 91 34 69 73 03 42 48 cf b0 6b 45 9d c6 55 5a 6e fd d7 e7 97 02 96 20 4d 4c ed 05 90 ce e1 35 66 84 29 33 c8 e0 26 3c 0a b8 08 e0 14 76 64 2f b6 e0 6e ac 4b 0c 30 c6 87 59 40 fd 77 5a 30 50 77 8b 32 0f 6c 54 3f 98 9b c2 9d 11 18 ce a7 f9 f5 5c 78 3c b7 43 53 f5 f5 0b 9a 53 59 09 f5 0b 5e d3 38 85 9e 40 fa 68 20 de 89 a7 Data Ascii: /cof7Nz@w?qcFq.?&[Q5}3l1WSY3/H9hEBXk2QORYgN8Jm=9[3!B0p1>\|vdp%4isBHkEUZn ML5f)3&<vd/nK0Y@wZ0Pw2lT?\x<CSSY^8@h
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: ff e2 3f b9 6f 2c ff fb bb 6b fe fa f6 94 5f 58 ed b7 37 38 7e 67 83 36 4c 2d 67 b8 6c ac 6d 8b e3 a5 57 9b ea 65 25 8c 9d ca 15 da c0 52 a8 93 35 b4 2f 7a 98 63 19 e0 1f e7 70 bf 6d 5b a7 4e 3d d3 db 7d f7 ca ac 0a 2d 9a 7a b5 4a 29 23 eb 06 d6 20 6a 80 f1 fd f2 9a 3b e3 ef 58 73 85 4e 35 fa ff 5f f6 fa f1 3d a1 b9 86 d7 c3 66 a3 e4 80 ca 45 14 8f 99 38 bd 5a ff 00 f8 8b ca 2e 45 f1 40 c9 db 7f 9b be b9 3b 61 4d ef 93 4d 99 8c 72 0d 49 14 8d 83 4f c4 8f fe 03 32 b5 fe 0f bf 4b 04 a7 a9 bd a5 95 6a 9f d6 56 37 7e 04 80 6e 07 55 1e 1f 74 74 d4 b3 6b cd 9b a6 26 8f da fb 37 d6 5e a4 50 86 35 6e 60 54 31 98 0a 58 22 16 4e eb 7c a2 25 dd 4b 00 e0 37 1e cd 47 be fb fc c5 3f 23 f7 df 87 d8 1d 3d d1 ce 1f e2 a0 8c ac 9b 8d a0 b0 88 ce 96 6e ad 58 32 88 0b 7c 19 Data Ascii: ?o,k_X78~g6L-glmWe%R5/zcpm[N=}-zJ)# j;XsN5_=fE8Z.E@;aMMrIO2KjV7~nUttk&7^P5n`T1X"N\|%K7G?#=nX2\|
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: a0 cb 74 6e c7 9f 33 24 d7 70 99 1a b3 cd 68 2b 2c 3c d5 74 16 f4 d9 45 19 a7 60 03 18 1c 6b 42 d7 a1 98 6c a7 01 d9 65 66 74 b7 9b 52 9e 75 b6 a6 03 56 cc ac b9 78 b6 71 f2 d0 26 27 e2 9e 74 c6 ac dc d5 b8 8c 8e ec f3 7b 2c b6 64 9b d3 6d fe d1 29 cc 36 04 ad 07 72 4b 58 12 bf 47 d1 d9 f3 12 db d6 97 95 5f 3e 4c 94 99 e7 b4 70 3f 45 97 13 9f 6c 15 a7 66 07 a7 61 2e f3 c2 c3 fe 7c 63 3f 17 0e 18 72 43 9b cf cb f0 49 10 40 0d 6b 01 46 67 76 46 74 d5 95 25 79 94 f0 ce 21 36 69 d9 d9 4e ca 99 14 cc 39 d1 16 db c4 da 75 a1 a6 40 cc 2c 16 33 87 1a c8 eb fb 58 0c 4d f0 86 9e 7e 9f b4 fb 6a 24 10 00 e2 0c 43 0d 27 08 a2 b3 e8 ab e8 b7 f5 22 75 59 e8 98 8b 4c e3 d0 e3 e6 ce e0 07 2b 1f 94 3b 5d ab be e6 a4 d2 1e b1 42 69 5e e7 a1 be 13 8b ea 5e b5 f4 3f 9e 92 6e Data Ascii: tn3$ph+,<tE`kBleftRuVxq&'t{,dm)6rKXG_>Lp?Elfa.\|c?rCI@kFgvFt%y!6iN9u@,3XM~j$C'"uYL+;]Bi^^?n
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: a6 b1 d3 b0 da 0c 3a d0 37 3d db 67 ce 37 9a 88 3b 55 6b 9c 60 82 b8 20 56 50 d4 1e c4 a0 f5 da 98 cb 4d bc ee 7b f6 8e 84 b5 70 ef b6 5c 90 18 e0 b2 ff ab 5f f9 71 6a ab 30 40 ca cd d8 97 11 35 c0 60 b4 e6 bf 23 9c 9b 43 cf ce b8 35 f9 bd ea 82 8a 93 d5 95 4e f7 fd 33 b0 6e 80 13 0c 96 b9 41 5d 01 6a 18 04 bd 1b ac 5a 29 25 5b 60 94 38 85 7c 51 0f 4d d3 e6 38 9d ad ad ad 18 4b 20 80 71 93 ec 6c d6 30 35 b2 80 78 28 62 1e 6d 58 38 87 ef 0c d5 80 ad e8 34 91 7e b1 ed 3b a3 cb f4 33 1d 84 4b 2c fc 21 93 d6 ea 08 46 ce 76 13 6b a0 6c 1a 52 75 fa b2 65 d0 04 08 49 71 33 8e c6 db 23 50 e3 52 c0 78 98 ae 99 b3 74 1b bc e6 b2 5a 1b 37 43 34 3c bd 52 6c d3 6a 59 3b 45 6b 36 74 28 84 00 66 72 19 7d 26 12 55 4a cd b0 ea 91 65 9e 37 39 29 75 f9 12 22 c9 78 3c ee 26 Data Ascii: :7=g7;Uk` VPM{p\_qj0@5`#C5N3nA]jZ)%[`8\|QM8K ql05x(bmX84~;3K,!FvklRueIq3#PRxtZ7C4<RljY;Ek6t(fr}&UJe79)u"x<&
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 09 4b c8 ff e0 bb 56 9c e6 88 bc 2e 25 17 75 3c bf 73 97 9d fa e0 f4 49 2f 73 1b 0f 3d 98 cc 24 e5 db 08 3a 6a 39 2b 51 43 73 ca 34 98 77 b6 62 0a 2d e9 40 4f db c9 d2 9b 51 ad d6 74 fd bb 67 99 8a 7d 5f 75 39 39 26 69 eb f5 b2 78 ae 60 a3 77 9f e7 b7 29 9e 19 59 d1 50 a7 00 26 8b 04 8c fc af 42 a6 15 04 09 4a 78 d5 e4 3b cf 47 15 f1 b6 6a 08 7f 2c bd c0 6b 33 7a 60 ba 80 da bd 97 87 e4 44 18 b2 6d 49 b9 64 80 1e 9e 7e b0 2f bc 24 b0 30 a9 9a e1 2c 43 f0 5b b9 a4 25 c0 79 17 0a 99 a7 be ef 65 b5 ae f6 57 35 0c c6 9b 7e 0b dc 6a 68 51 12 88 76 1d 51 4e 7d 4b 0d 78 f3 b9 8d 34 11 c8 04 40 75 a4 65 0c 52 44 77 4b 89 a5 a0 23 8e 38 71 b6 d2 53 30 29 97 0c 79 4b 15 30 3a 3b 87 d5 93 51 64 f7 16 0c 59 d6 3e 7d e4 df dd d9 90 c0 b6 db 28 0e 19 d3 e9 ea 52 01 4b Data Ascii: KV.%u<sI/s=$:j9+QCs4wb-@OQtg}_u99&ix`w)YP&BJx;Gj,k3z`DmId~/$0,C[%yeW5~jhQvQN}Kx4@ueRDwK#8qS0)yK0:;QdY>}(RK
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 81 8c 2a 60 c2 ba 60 6c 9f 0c 1e b7 42 0e e1 9f 58 89 72 8a f9 14 30 86 09 14 b0 0e ad 98 c8 47 6a 3b d2 0c 2e 64 49 f0 c7 d3 0b 60 2a d5 6d a8 a0 62 6b a6 f6 7c ae 5d 0a f5 f7 7c a6 ae ba 48 65 11 35 2c 43 c2 69 3c 6e bf 7b fa 3d 45 b8 3d 5a 77 b6 5f f8 67 69 2d 3b 85 f5 f9 f3 24 fe 76 2b bd c0 75 2c 4b d3 8d b3 19 3a d7 ae 96 f6 a3 61 ba 06 73 73 cf eb 29 ad 13 bb b2 3a 17 b1 21 0f d5 15 d8 d4 7e 9f cb 07 5a 70 ae 96 b2 0f 55 48 bf 1e b4 f6 4e d0 59 fa 0c 1c 75 2a 22 ee 40 8d 1a 96 b0 11 f1 f6 eb b5 0f 83 eb 3c f6 65 27 38 92 d5 78 be d6 b6 bf 76 ca b9 fc e2 4c fe fe a6 0b b5 86 ad 5a 0f bb bb 0a ad b2 0c 67 4e ff 70 ea 5c 2b ec 45 ff 19 c1 ca b9 58 ab db d1 4c a5 e5 2c 9d ce 9c cc 8f 2b c6 2f 93 f8 80 44 0e aa d4 48 00 c6 4b 3e 22 42 b9 87 30 4b 33 59 Data Ascii: ``lBXr0Gj;.dI`mbk\|]\|He5,Ci<n{=E=Zw_gi-;$v+u,K:ass):!~ZpUHNYu*"@<e'8xvLZgNp\+EXL,+/DHK>"B0K3Y
2024-04-19 14:07:10 UTC	1018	IN	Data Raw: 56 f9 18 eb e6 38 f0 ed 03 0e ad f7 e7 f5 f6 27 7b e8 01 43 4b 67 87 4b c7 b9 5b ad df d4 d7 ef 5e dc 1c 41 e1 38 a2 31 2e 4e f8 3b 6b 7e da 5a dd d2 39 fa 2c 9f ee a5 57 2b 75 db af 00 2e 73 38 2d e6 7b 5a 4e 4a 6e 86 c2 56 d1 80 d6 f3 ee 52 f2 da 6e 58 33 21 be 58 78 fc 24 97 15 99 59 25 10 89 b3 cb 85 9f d8 1c 13 57 05 44 6f 43 de 4e ba 33 b2 7c f6 dd 3f c2 e2 db 20 c1 d2 9f 38 7d a2 9a 48 aa e2 6c 20 60 f4 55 f0 0a c2 f3 7b 4b ca 8b 7e c4 20 53 13 9f ea 00 80 4b ea 14 51 37 46 79 24 42 44 8c 2a b8 cc ae 86 4a 3d 59 e9 b4 3b fd f8 a0 64 43 a6 80 9b 3d bc 78 c1 eb cf cf 6d 01 00 e6 cc ae df d6 75 05 20 f1 ca fc 5e 4b a2 b4 25 42 5b 59 e2 fd 7a 22 f7 f4 4c 2e 44 eb e3 95 da 03 b6 16 78 0b 31 93 8d 8f 7d 4e 4b cb bc f4 f4 ed 66 de 48 84 48 5c 15 83 08 08 Data Ascii: V8'{CKgK[^A81.N;k~Z9,W+u.s8-{ZNJnVRnX3!Xx$Y%WDoCN3\|? 8}Hl `U{K~ SKQ7Fy$BD*J=Y;dC=xmu ^K%B[Yz"L.Dx1}NKfHH\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50240	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	530	OUT	GET /WohXKjCe_QuVrxL3ksS8lODC17sMd-U4kYALcaYabasjh0mm-quhTCfc2xwuZbA9_HU=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 10386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	732	IN	Data Raw: 52 49 46 46 8a 28 00 00 57 45 42 50 56 50 38 4c 7d 28 00 00 2f a5 c0 49 00 35 87 da b6 6d 18 fb ff bf d3 eb 16 11 13 80 e0 9c 27 26 48 a1 df 6f 52 ff b3 6d cf a6 46 d2 07 14 50 39 07 a8 04 e5 44 76 36 39 e7 50 55 04 47 70 ce 39 27 9c 73 ce 39 e7 d0 39 e7 9c 27 87 cd 39 e7 9c f7 0f e8 af ea 7b a9 7a aa 5e ff ba 1a 26 cf 78 91 d8 44 ab a8 09 48 1e 23 10 bb 58 98 ea 15 ea b5 41 9d 64 26 27 07 d9 a2 5b d0 df 04 4a b3 0e 93 3d a2 27 74 b8 54 6e 4a 6b 8b 89 a8 24 37 d3 c2 6b c2 d8 6a 6b ac c9 09 dc b2 58 2f de d7 41 b1 dd 9a 4e 20 77 90 ca 6d e8 15 9d c0 1d 71 07 66 dc c2 db a5 4e 5a d8 ea 0d 96 c5 4e c4 63 e3 67 03 68 99 9a ed 84 e8 2c 26 b0 23 76 64 e3 a6 e5 80 bc 83 b6 83 99 6a d1 c9 a8 26 cf b0 c1 2d 3a b9 36 d1 32 e5 b0 92 45 cb 81 b5 d5 88 5e 5b 4d db 74 Data Ascii: RIFF(WEBPVP8L}(/I5m'&HoRmFP9Dv69PUGp9's99'9{z^&xDH#XAd&'[J='tTnJk$7kjkX/AN wmqfNZNcgh,&#vdj&-:62E^[Mt
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 78 29 d7 a4 2d b1 8a db 3f b0 d6 1e 25 fb 61 65 c8 35 6b a5 a6 1e ff c4 ad ce ab 05 88 69 fc ca e7 13 01 bc de 45 ae 77 53 ae c2 5a bc db 0e 10 ed 01 da cc e1 a6 b8 07 93 b6 76 80 62 ab 44 ea fc 80 d4 0d 1d 89 70 2a 36 69 00 b6 09 a8 56 1e bd 75 2c e3 83 ee 79 27 b5 fc 8e 28 25 ef ac 2d 3d 86 83 62 5b 2f c4 b7 ae ce 7f 60 02 f3 9c 5c 62 15 03 c7 85 93 51 8e 2b 32 cb 00 78 fa 1d 4b e9 21 fe 59 51 5d ed 64 42 d9 9d 5f e3 64 10 cf ba df b1 5b 6c 40 e1 45 36 31 c0 70 94 af a8 63 1b 2f 64 1d 0d 52 ca d6 4c 33 8f 3b 19 0c 48 5d 72 58 ac 02 f8 22 95 e3 60 82 e4 44 89 63 bd 10 56 c6 25 0f 78 8a 77 ea 5c 54 10 a5 e4 ad 75 23 08 ca b3 47 16 5a e4 21 79 6a 72 37 34 4e 74 16 88 e7 15 80 83 23 ab 70 bb 80 28 b6 48 10 28 b7 f3 cb 6c 02 40 f6 41 6a 90 a4 b1 2f 4e 43 47 Data Ascii: x)-?%ae5kiEwSZvbDp*6iVu,y'(%-=b[/`\bQ+2xK!YQ]dB_d[l@E61pc/dRL3;H]rX"`DcV%xw\Tu#GZ!yjr74Nt#p(H(l@Aj/NCG
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: b4 e7 61 00 d3 65 91 4f 8c 63 3d fd a2 eb 80 a9 39 24 6b 6d cb 15 9a e5 69 bb b1 b6 80 a4 f8 26 99 10 10 8f 6f 08 a2 92 c0 3a 35 f9 16 55 ba 61 ec c0 49 00 18 d7 ba 05 6a 5d b4 45 2a ee 9c 4a 07 e7 d7 ed cd c7 8f 4e 00 ff b4 a8 01 2e e9 a6 52 ff 22 5f 08 d0 e9 01 eb 93 06 1a 5d d2 84 3e ca b8 e9 19 1b a5 6c 2c 86 38 2e 97 1e 69 e4 88 00 25 37 d1 b6 28 15 0e ee af bf fe 6a 9e ae 1f a3 a9 c3 df 9d 7e 18 bd ee d4 56 01 0d 99 06 d3 33 4a 83 8b 64 25 dd 17 95 41 d9 07 3d b0 77 3c eb 26 55 37 31 08 ee dc 1e 00 8c 53 62 15 1f 06 58 4f 77 d5 ba a4 85 46 8f 34 84 de 48 d6 d8 0c 71 5e 2d 44 54 11 2d 40 93 1b 5f 60 56 22 bb c7 d3 00 f8 67 45 05 78 e0 77 00 4c ab 9f 0c 51 59 ef 30 d8 4f 89 6b dc dc 34 90 f1 e2 53 4f 78 72 aa 73 e0 79 30 6f 78 11 8d f2 3b cf b7 f5 48 Data Ascii: aeOc=9$kmi&o:5UaIj]E*JN.R"_]>l,8.i%7(j~V3Jd%A=w<&U71SbXOwF4Hq^-DT-@_`V"gExwLQY0Ok4SOxrsy0ox;H
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 4b b1 51 6e 54 ac 6a ab 6a d5 1a d3 d9 3e 75 59 d5 46 d9 2a 35 72 46 a2 18 86 55 58 32 46 6f 97 24 b5 bd 9d 77 df 80 b5 2b 1d 06 40 a1 d1 6c 75 3a 6d b4 ac 68 da ad 4a f3 83 86 7f 94 5b 3e 66 5d 82 a2 7f d7 f7 16 ab 54 2a 05 2c e1 bd 75 d6 69 d9 d2 9c 9d 33 18 d8 e4 6e 32 8a e0 ba eb 12 d3 ce 77 a3 cf 7d 7c 31 3a 97 04 94 4c 1b 1d ea 6c d0 d8 f2 83 56 03 e0 85 73 4b a1 4d a8 5d 62 a2 ef f5 67 70 bd b1 00 96 68 b3 a5 ce ab 7b 10 dc 2b 83 29 3e 74 6e 0c f3 d6 52 cd 5b 89 f7 e3 a8 b3 57 cb b7 9d 0c ae e1 77 89 89 b9 ab b2 b9 db c8 f4 06 a0 d3 50 67 f9 06 d2 6c e7 04 99 c6 f0 21 f4 d2 d1 ea 50 2a 7f 1f ed 96 72 22 d3 02 00 40 29 87 8e 8d d7 3b be 9b 81 04 fe 21 59 80 77 be 53 86 4e f8 2b 84 68 7c 6f 0c 17 11 19 93 f6 40 5a e7 5a 1a 2d 14 51 70 a5 bc f1 e3 43 Data Ascii: KQnTjj>uYF5rFUX2Fo$w+@lu:mhJ[>f]T,ui3n2w}\|1:LlVsKM]bgph{+)>tnR[WwPgl!P*r"@);!YwSN+h\|o@ZZ-QpC
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 5a 7e 95 89 10 29 85 a1 17 58 6d ad 6a a4 06 aa 3a 17 9b 5d d5 ee 0e d5 08 15 fa 7b 25 bf 39 ec dd 59 1d 2e c4 42 66 55 79 f7 03 59 1c e4 e8 79 65 36 55 de dd 0b ec 15 02 3b 17 62 a7 1c 62 cb 6e e6 7e 57 6e 42 92 55 e9 89 a4 6c 76 07 52 c5 56 87 d4 ec 91 47 b0 98 a3 b9 5f 94 ba 84 ba a5 37 11 58 48 01 76 23 54 e8 ef f2 c9 c1 e6 6e 62 b6 32 e4 53 d9 aa 8a 9d 79 59 52 bb 09 bb d9 3a 8a 53 44 39 c4 9c 20 a8 29 e0 a5 c3 b6 70 f4 ac 22 8a 43 a8 48 c6 a0 69 07 4d 81 a9 08 6f 60 c0 7b cb d0 cf 99 72 87 91 bb 2c ea de 64 2d 04 29 de e7 93 de 91 91 f5 cb 34 ae 80 bc 00 b4 3b 10 6c 52 f7 03 54 ef 98 6a 7e 16 a9 cb f8 21 8f 80 15 ce 08 f0 ab 78 e5 3b 33 99 2e c8 cb 2f 02 de 89 b7 ce 29 99 88 b7 d3 2f e7 32 f7 fd ae 1e 95 e8 97 ab 2b a3 da 11 31 f1 75 89 75 49 69 c1 Data Ascii: Z~)Xmj:]{%9Y.BfUyYye6U;bbn~WnBUlvRVG_7XHv#Tnb2SyYR:SD9 )p"CHiMo`{r,d-)4;lRTj~!x;3./)/2+1uuIi
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 7b cb 20 3c 76 85 db 81 90 a8 ae dc 62 40 cd 28 b7 b7 52 9f ba 16 74 6f 08 8f 0c 69 e2 e3 76 5a b7 cd cd b1 b1 d2 7d b8 b4 94 33 73 9b 37 ad d0 15 74 65 ba b2 ce cd ca 5a ad 39 cf f2 50 be 4f a9 c1 c3 93 e6 6d 81 4d b9 a6 27 42 a7 75 7f cf f7 f0 df 1d 37 e3 f2 ca dc b7 39 3d 12 1c ad e8 06 8d 0e 2d 8d aa 9f 99 46 e3 b6 79 5e 33 a5 fb 88 54 3a cf 2f b6 83 f8 fb f1 7c b2 f1 48 48 a9 d8 3d 19 9d ea 36 e7 18 bb bb 46 72 f9 c8 2d 48 15 21 b1 53 c4 48 eb b4 93 03 35 5e e3 8a ed 6e f8 0f 68 6e b2 eb 74 0b 3b 49 73 fd 48 21 34 90 fc a6 4a 6e 05 e2 e4 f9 56 0c 2b b5 61 cf d8 81 db cf d0 2c 4c a2 25 b4 2a 6d 4c 97 b9 7e 24 91 23 18 56 d8 9d a6 01 be 6e 37 a0 34 78 b6 30 78 ce 6e 9e ef a7 d3 4a dc af 9c d6 2d 52 85 32 18 4b 68 ea 52 1f 75 79 7e b7 2b 0d 50 0a a0 d8 Data Ascii: { <vb@(RtoivZ}3s7teZ9POmM'Bu79=-Fy^3T:/\|HH=6Fr-H!SH5^nhnt;IsH!4JnV+a,L%*mL~$#Vn74x0xnJ-R2KhRuy~+P
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 0a 5b e0 2d bb b6 c0 a4 b9 e1 d7 61 12 e6 1f 53 b5 3b d5 a0 39 fe 87 a2 1b c7 4a 23 44 b7 5c 87 4c 37 e4 18 4d 1b cd a0 8a c0 8f 76 d2 4c a5 c3 fb 21 f9 15 52 9c 82 73 6a a3 03 5d 4c 2c 3e c7 1f 0a 43 a8 5b 71 31 74 53 73 00 3c 01 32 f7 c5 7e 3c 3f cc 4d 41 01 70 c8 20 7e 0f 05 00 b7 65 81 d2 80 fb 7b ac a8 e4 fb a5 01 cf 1a be 8b 50 bf c5 b2 eb f3 0c 6e b2 4d 75 38 98 54 44 22 d6 fa 1c 7f 2b 3e d9 30 e1 35 82 52 13 93 7b c5 6a 84 e8 ee 9a 02 94 52 13 c4 2f 48 7d 66 f7 cc 06 b9 95 60 33 69 ea 93 0a c5 4d 10 58 1e f5 33 11 0a 45 05 0d 9b 63 8f d4 55 6d e3 13 b2 53 05 76 17 d2 f2 37 a4 be 3d f0 e1 15 d8 1d 4e c4 be 6d c5 76 37 23 e5 b5 cf 64 b9 a6 d5 08 f9 0a 85 6f 02 93 5b 19 41 6b b8 19 87 48 ec 3d 0c af bb 39 63 90 bd af 39 97 8c 71 16 86 65 30 8e 98 34 Data Ascii: [-aS;9J#D\L7MvL!Rsj]L,>C[q1tSs<2~<?MAp ~e{PnMu8TD"+>05R{jR/H}f`3iMX3EcUmSv7=Nmv7#do[AkH=9c9qe04
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 93 e9 fe cd 1e ff 2d d3 eb d8 49 e8 d2 1c 7f 00 16 fa a1 b8 f3 8c 93 67 15 7d 4f 34 f4 6e 2b 2d be f8 5e b3 df 76 a8 0c c8 0c 29 50 7b eb 63 17 0d 6b 2a 9e 02 1e 9d ea 8b 5e bc c5 01 f1 56 7b f8 9c b3 d2 68 cb a3 1a fd a2 ab 20 5d ba c2 c2 fe 11 a4 ba 19 0a e4 02 92 db ec 51 fd de c3 31 15 8b 6a 77 26 d2 41 73 f4 18 d4 8b 55 3f 53 e0 80 ec c3 64 0b c4 6d 70 68 a5 29 52 63 64 f0 a2 52 4f 9f 4c 2d 66 3f da 26 7a d0 28 5c 95 7f 7c f9 8a 6f 89 37 8e 2a 37 6b b6 ef 36 36 88 58 09 8e c5 06 5f 5a 7c b8 e0 ee c8 51 20 fe e7 c6 bb ed f6 37 da 62 9b ea f8 a8 02 ff ef ee 71 9d 31 65 ae f7 f4 42 8b 5e 19 3f b4 20 ea cd 20 a4 07 63 f8 85 10 bd 5d 26 ca 77 be 20 57 8b 49 55 f9 95 7b d4 18 28 bb ce b1 ef 7f 7a ce 16 1d 1b bc e5 52 7d d5 d3 3e 74 e1 41 d4 02 37 6a 56 f9 Data Ascii: -Ig}O4n+-^v)P{ck^V{h ]Q1jw&AsU?Sdmph)RcdROL-f?&z(\\|o77k66X_Z\|Q 7bq1eB^? c]&w WIU{(zR}>tA7jV
2024-04-19 14:07:10 UTC	869	IN	Data Raw: 59 5d b8 fa 16 21 d1 bf 37 51 7b a4 67 73 74 0a 31 d1 f7 9e 7c 44 14 58 ad 44 3a af 2e 19 51 f6 fe 2d 56 cb 5f b9 84 6f 08 89 bc ab be 8e 88 0c ab b9 26 f2 0a 19 91 5d 75 b5 db 8d 44 7c 76 fb 42 42 f1 5f fd 51 8a d5 dd d9 48 15 df fb 5f fd 12 91 f8 2c 56 90 98 dd d8 2d 7f 41 57 52 96 51 5f 7e 89 00 ab 71 e9 bc 0e 19 51 5c f5 65 9d 96 e5 a1 de 9d 2d 54 39 9b 2f a9 bb 84 68 c8 2f e1 61 35 19 91 8a dd d4 97 35 9b a5 2f 28 0b a9 78 ad c6 62 bb 44 84 2c a3 b9 d8 5d 14 ac e3 6b 3d 8e 8c 48 bb 5a cb 6f 37 1c 0a b0 59 b6 44 ea 43 46 e4 49 55 84 dd ea 24 22 14 91 dc 54 7e dd cd d8 dc cd a7 e1 92 f2 b0 cd 14 60 35 52 c5 07 a5 2a c2 6a 95 2d 4e 26 14 07 fc 7f 6b 36 cb 5f 59 7a 91 ea 8e e8 6a cb 3a 0c 0a 40 ad 61 71 e1 0b 42 11 71 37 95 75 68 d8 8d 58 b0 5c 74 2c f6 Data Ascii: Y]!7Q{gst1\|DXD:.Q-V_o&]uD\|vBB_QH_,V-AWRQ_~qQ\e-T9/h/a55/(xbD,]k=HZo7YDCFIU$"T~`5R*j-N&k6_Yzj:@aqBq7uhX\t,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50239	74.125.136.104	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahUPZFLW2tOAgWgNQd38O7nHUXDtmo2QnNUzY9nfF_LfZbZSMtJVBD614aBH9-1TdRRLN-nkhqP3CSdQIA; NID=513=g82TGRfEvAgGLUKsDrLFAF4QxMIiwYRmatOyW7yfApaQmAhr4X_YG6nfV3MNib4E87phViMq_a8CZW2IGKIfD7wvm5il0yZOIp3umRI5aKy5CJJAjlwjO_mjtPbWagPaOBrcF-96j2MIzqT46uU_nFqMJisCp8mIjnxBkQtaA_Q
2024-04-19 14:07:10 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:10 GMT Expires: Fri, 19 Apr 2024 14:07:10 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:10 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:07:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50241	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1106	OUT	GET /xYnq3zRONE2rpRksqySiqBC8G3UvXJufCV2If7Ck8cPELE8OY1PcVbmGof8CxjXlIyY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 22996 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	732	IN	Data Raw: 52 49 46 46 cc 59 00 00 57 45 42 50 56 50 38 4c bf 59 00 00 2f b8 c0 49 00 4d 40 6c db 48 92 54 f2 fe ab de fc 03 ae ea de 7b 12 88 e8 ff 04 f0 4f b3 27 c9 51 95 56 6a bc 1c 71 b9 5c 2e d9 9e 24 95 4a 2a 95 aa 23 44 e4 7f c7 9f 09 89 7e a1 9a 61 01 eb 00 d8 f0 fd cf 2c e0 3a 64 08 08 72 8d 95 5d 92 e6 53 10 dc 81 01 34 56 c6 f6 01 2e 93 16 85 09 2b a1 07 01 81 22 09 49 a8 e6 0e dc 08 08 7c be ea 8d 26 e8 8f e5 64 96 be 59 27 db 89 6e d4 e5 e0 24 a0 49 f2 68 97 1d 02 07 45 b2 e9 d2 05 f8 1c 5d 8e 38 d1 03 cf 60 a7 b0 be ba a0 ba f0 20 03 08 e0 09 47 9a 61 e1 c1 02 d0 21 7a e1 62 da 36 61 01 cb 91 24 c7 4a e0 bd b9 ff b9 f8 46 23 3e 5d ab f5 f0 d0 7a 6e 77 e6 21 71 01 49 aa 6d bb 56 35 b8 1c 2e db 7c b0 24 96 76 ff 5b 63 ce 61 9b b3 fe 68 bc 3c e0 48 92 a4 Data Ascii: RIFFYWEBPVP8LY/IM@lHT{O'QVjq\.$J*#D~a,:dr]S4V.+"I\|&dY'n$IhE]8` Ga!zb6a$JF#>]znw!qImV5.\|$v[cah<H
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 11 12 b0 90 60 7e 2b b6 62 87 be d8 88 8d d8 88 8d d8 02 80 be 90 20 56 62 23 36 3b 9c 8f 6f a2 01 80 24 08 62 43 f4 04 41 c0 32 9c b7 17 01 00 29 41 29 08 80 98 99 65 01 00 0c 87 6d db 06 92 a4 ee 3f f5 a5 b9 7b fc 02 11 31 01 fc a7 43 12 b4 d5 ca 54 d3 4d c5 b5 97 56 9a a5 b1 ae a2 52 fb 39 1f 06 a0 2f 64 3c 07 aa cd 33 ae d5 4a a7 f8 bc d5 19 2f 4f 34 f0 83 54 39 1f 15 83 1b 30 13 c7 4d 58 45 4f 5e 8c 51 bc 7c 44 e3 10 a6 68 0d dc 7b 7e b2 8f 6d 5f 0e 82 78 ce 51 27 26 b5 c7 79 15 b0 62 af 19 3c ba a8 42 eb 4d 33 03 97 80 69 be cc 03 2a 77 75 e7 a6 e5 c3 1b 2f d5 a9 d0 16 33 66 d9 b6 55 3b 76 d5 c7 3e 47 99 4a a7 d2 ba 60 66 66 76 89 99 99 5d 75 f8 13 b0 c8 ec 92 c3 75 f6 07 30 33 33 96 98 19 64 a7 12 45 e7 ec 11 a1 b3 d6 9c 6b 6f 49 db fc 1e 1d 5b db Data Ascii: `~+b Vb#6;o$bCA2)A)em?{1CTMVR9/d<3J/O4T90MXEO^Q\|Dh{~m_xQ'&yb<BM3i*wu/3fU;v>GJ`ffv]uu033dEkoI[
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 2f bc 3d 36 9b 8d 3f cc 6c d4 66 2d 01 b9 77 fe b2 8e cf 4f ae 93 42 f6 7d 27 0b 41 90 9f 5f f7 2f c4 c2 a2 41 33 06 00 d0 32 2f 10 00 bc f9 e5 ce 19 d1 19 4d cc 7b de 1e 9f 75 18 38 f6 32 5f fd 2c ed 46 20 94 d0 f9 fe 2f 12 6e 6c bf eb 1c a3 83 74 b4 fe d9 f9 75 87 40 d8 53 d7 b6 47 eb a6 d9 bb 1a e1 65 0f dd d8 66 41 a8 1f 26 b6 bf af bb da 8e da 36 43 50 18 7c 7b 4d d8 65 3c 55 d7 cd 3e 52 89 f9 bf bb cd c6 a3 ed 64 e7 03 59 3b 3a d7 7f 76 74 66 b6 c7 e7 6d 2f c3 83 1c f8 0e 59 e3 ff ee 8e 2d 04 3b 00 00 b0 40 75 a0 7c 01 00 c0 f3 be de 7f ee 6e 9a 63 eb d8 ba 75 16 85 d8 7c 98 41 93 01 04 02 41 bf 7e 33 e1 cf e3 37 d3 3d ed bf 62 ee 9b dd 5b 84 8f 9c fe d9 46 e8 40 6d dd ee 29 82 89 bb da 27 f7 5c 71 37 a3 5a e7 4f d7 27 de c6 75 bc fe 38 be b9 55 30 Data Ascii: /=6?lf-wOB}'A_/A32/M{u82_,F /nltu@SGefA&6CP\|{Me<U>RdY;:vtfm/Y-;@u\|ncu\|AA~37=b[F@m)'\q7ZO'u8U0
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 82 a8 ba 9a 73 a9 00 8d e5 0e b0 fd 9c c9 2e 81 40 18 22 c2 f6 dd b1 42 10 e4 95 4f c9 6d 13 ef d6 d6 44 0c 00 9c f4 03 00 2c ea 39 e0 59 5f 8a ac 91 d7 b3 be 20 7a 3a 0d 00 58 db 25 00 30 00 be 8e f0 87 f1 be d3 07 f7 7c e0 f4 c1 dd 8d a7 71 02 4a 4c 07 0b 00 0e 58 06 98 20 00 e0 e6 0f 7f fe d6 be b3 df 9f 76 36 1b 26 3b 03 00 c0 ae ff fc 0d 99 dc ee 9a 75 25 de f4 be b5 5b 63 19 00 00 ac 54 ed 7f 9d dd 9d 2f 7f f0 b1 3d 6f 7e 79 d3 cb 5b df 5d fb e9 f1 d9 c4 30 23 00 00 06 03 00 60 64 03 5e f1 94 de d6 48 6d 2f 7b 85 00 18 00 c0 b2 ce 01 40 19 e0 1b 08 7f 1c bb 8a 20 21 71 cd c5 47 5c 00 50 0e 00 a0 07 3a 00 80 02 00 e0 ba 48 0c d3 f7 a7 af cf d8 86 9e a5 35 50 00 a7 a3 6b 9d e7 3e 2f 0b 02 b0 aa 00 96 9b 71 5d 3b 57 dd 49 01 31 b1 38 5f 0e 3b 7a f7 bd Data Ascii: s.@"BOmD,9Y_ z:X%0\|qJLX v6&;u%[cT/=o~y[]0#`d^Hm/{@ !qG\P:H5Pk>/q];WI18_;z
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 00 04 e8 45 67 22 2a 41 b0 2f 83 11 cd e9 41 3d 5c 8c 70 3a a2 4a 21 8d 2b 50 06 a6 e4 4a 20 04 7d 8b a0 40 50 71 84 10 da fc 02 98 b1 aa 86 01 b2 19 8e 4a 42 15 b5 99 4a 75 06 90 c9 62 33 41 85 39 b5 88 bc ad cb 33 31 6b 46 1c 89 e4 8c 28 d5 09 80 88 d2 f1 09 d7 65 a8 4f 88 b8 12 0d f2 40 74 c1 99 54 00 9e 94 86 8e 05 d5 05 90 df 21 d5 39 2a 09 5a 54 f9 20 08 f2 64 e1 e7 44 41 61 0a 6c 5d a3 19 4b 00 e6 dc 8c 25 15 87 24 94 74 18 07 55 c9 d0 00 f8 1a 4f 22 8f 57 41 a0 de 01 fe 2c 00 f0 20 b6 80 f2 26 a1 52 c5 70 a0 44 da 16 7f d7 55 76 4e 83 48 6c b7 f3 9e 37 ae 73 eb e9 ed e3 05 bc 62 f1 9a e1 47 dc dd cb 7a f7 09 80 25 ad 16 bc 0a ab cc dd ca 02 8e 18 81 47 19 2b c0 79 cf 57 f2 ea db fb 3a 8b 8f cf 7b d7 37 00 b8 2f e8 c5 cd 77 1f d7 e1 02 50 e0 51 c0 Data Ascii: Eg"A/A=\p:J!+PJ }@PqJBJub3A931kF(eO@tT!9ZT dDAal]K%$tUO"WA, &RpDUvNHl7sbGz%G+yW:{7/wPQ
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 86 45 f5 0e 3b 1d c4 7f 8d 69 45 40 73 3e bc 7a 78 9f 84 1c 7b ac 5d 1d 23 db bc 00 b8 20 f0 c4 8a 12 2b 80 12 00 30 90 01 0c cb 5e 6d 01 17 38 00 cb 87 d1 7e 72 ce 63 bb de 4f 63 f7 1b b9 86 8f 35 63 0b ef f7 dd bf 1d 3c e8 53 ef fb 81 fc 2b 9c d0 e5 1f d3 e3 6c 93 49 1d be 29 42 e9 92 37 96 45 61 8f 9c cd 89 e0 33 f2 69 65 a9 07 c2 8d 5d 5f 3e 2b 3d 7f 53 1f 46 d3 10 e8 c3 1c af 33 8a 17 78 3d 80 f2 20 2c 13 63 67 1d 12 00 75 3f 15 cb 49 b5 74 a6 e6 6c 02 b6 d2 b3 4b 04 a4 fa 82 c2 e2 ce 4a 14 23 ad 26 b6 96 01 43 23 16 16 0c 2d df 05 d6 a7 3c 7c 54 0a 05 df a4 16 3e e5 56 de 52 51 2c 5f 53 51 b5 0c 0b b0 8e 76 92 f2 d7 d7 1c 70 12 e3 f9 70 be e5 f9 65 f9 f5 fb cf db c3 1b ae 5f f2 95 9f d6 eb f6 c4 af 8f ee ff d2 dd f1 72 a1 e2 dd 52 4e ea 79 32 ec e3 Data Ascii: E;iE@s>zx{]# +0^m8~rcOc5c<S+lI)B7Ea3ie]_>+=SF3x= ,cgu?ItlKJ#&C#-<\|T>VRQ,_SQvppe_rRNy2
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 14 26 fb 42 b2 45 f3 ad dd 0d 60 93 8b 94 19 ae 28 21 62 d7 0d 88 02 dc 09 49 02 3b a4 a0 f0 86 da 83 04 dc 40 58 c8 88 19 2f b8 d9 bd fd 7f d3 5b a7 ff e0 68 48 13 00 bd 0d 99 6d b0 65 77 af 4c 7c dc cd 1e 12 44 8d 51 8f 9d 99 58 92 b3 2d 4b 3c 1b 3b 66 8b 3c 37 ed f7 f1 e3 dd 51 5f ba 2c 66 28 cb e4 24 b0 66 d9 3f f9 24 ea b1 73 b8 75 cc 5a c1 2c 1c 47 f7 44 d9 47 77 3d da d9 eb 12 cf 02 b1 02 ce 88 01 3f 8a 76 0a cc 3f 3c 3e 82 cc 5f d5 e5 f3 e3 22 95 fb ac 2f b4 b1 03 c9 80 a9 6e c3 07 bf 76 b5 f0 41 7b e7 47 98 52 7d ec 7f a8 f7 e7 37 ce b2 dd 2c 5a 35 36 c7 3e d3 9d 70 76 66 a9 c1 72 2d 11 67 e4 68 92 b5 83 b5 83 47 e6 5c b4 02 24 62 d3 40 09 53 72 af 52 73 46 4d fd c2 ab ca db ef ea 0c 60 57 3c 3c 34 3d a5 30 99 69 80 39 44 8a 25 38 04 e5 2c a1 dd Data Ascii: &BE`(!bI;@X/[hHmewL\|DQX-K<;f<7Q_,f($f?$suZ,GDGw=?v?<>_"/nvA{GR}7,Z56>pvfr-ghG\$b@SrRsFM`W<<4=0i9D%8,
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: e7 9e 2b 72 ab f4 08 34 de 55 b6 f1 c6 e2 7e 6a ea 87 b8 1f cd f1 de 4b 19 64 76 81 8b f2 64 98 80 6b 89 c6 e9 dd a2 3d 0f 3b 9c 20 82 15 4b 0c 01 eb 3b 3b f3 3a ee c4 b1 72 63 4e 87 ce b2 cb 71 7a b4 93 16 39 f6 7d cc 19 ac 06 ce ef 78 e8 05 0f 7d 19 fa fb 93 7f 7d f8 c6 d3 ff b9 fb 4e 31 46 da 0b 65 f7 0a 4d 7f ec 0b 27 14 51 1f 7f cb de 73 39 3c 55 3d f3 ef 7b 2f 37 75 eb f6 83 d2 ea af cf 9e 50 46 79 63 39 88 54 a2 08 ce 0c 73 99 f8 e1 d3 67 1f 8c f7 0a f8 29 51 62 f3 28 64 b6 18 48 28 9d 04 4f 2b 23 1e 23 5f 1c e7 35 e6 b9 8e d7 0f 7f d2 27 0c 4e ed a5 00 09 06 eb 8f 51 85 8c 85 a1 40 84 61 f9 cc ad 0e 93 d1 90 e5 30 0b c4 81 04 87 2c c6 2c 58 92 74 63 50 22 42 4d a6 85 a8 40 51 20 aa 47 b9 d2 9a 0b 1a 99 8f c3 be 70 5a ec fb 1c 09 00 91 c3 ec 35 ef Data Ascii: +r4U~jKdvdk=; K;;:rcNqz9}x}}N1FeM'Qs9<U={/7uPFyc9Tsg)Qb(dH(O+##_5'NQ@a0,,XtcP"BM@Q GpZ5
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 68 af 81 4e b0 ea 6e 8f fc 48 19 2f 04 3d 7d ce 91 e5 1b 27 87 77 94 f5 c5 07 1d 00 37 be 73 cc 5c d9 5e 3b ea 7a 35 fe a4 c1 65 be 24 95 39 2d 38 59 9e dc e1 fa ad 62 3f cf fc f1 91 f3 c9 71 76 c9 e8 e5 0e 55 7a ae ec f9 b0 49 36 f5 03 3e 44 56 17 d1 ac 46 00 20 a3 b0 35 3a 7f 34 b3 d6 11 82 01 b0 f1 6c a6 1f 31 44 7c 4d f6 a6 e6 4a 91 02 f2 8b 0b bc 31 64 1c d3 5c f0 8c f1 e3 f2 23 98 14 9c 43 1e c3 3e ad 7c 14 7b a3 6e 64 b0 94 12 26 4d fc 66 3e 02 08 00 61 f5 dc 6c ae 80 a3 df 74 61 3b 61 12 23 e3 90 6f b6 15 71 d0 b6 11 00 c0 27 aa 04 d7 ce 47 7b 0d 35 b0 9a e1 fe 59 00 bc 17 65 db f9 73 af a7 fe 83 1f 6d 3f 3e f5 c5 39 7b bf f1 3b 85 db c1 24 fd 6d d9 fc d0 da eb 7e fc 68 57 fa 32 2f 40 c5 ee 14 4f 79 b7 58 c0 9e 66 4d 79 fd ad 97 2b 8a d8 6e fa 1c Data Ascii: hNnH/=}'w7s\^;z5e$9-8Yb?qvUzI6>DVF 5:4l1D\|MJ1d\#C>\|{nd&Mf>alta;a#oq'G{5Yesm?>9{;$m~hW2/@OyXfMy+n
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 27 a9 13 4b 77 b6 96 4f b2 9b a1 47 80 65 64 25 94 51 59 80 41 59 5d 2c 43 41 99 29 91 2a 0e f2 16 44 11 60 22 42 19 ad 6d d6 32 7c 5a 4c 28 08 40 01 04 ab 20 01 c3 13 60 d3 60 92 51 15 72 ad 48 55 f2 94 6b d0 12 72 95 a7 2a a5 ca 15 54 01 a5 cb c1 9e e9 30 48 93 88 5a 30 4b 56 8c c9 42 22 d4 70 18 43 55 01 9b 20 20 8b b0 2d 89 35 0a 4e 7e 5b a2 97 82 74 0e 58 ab 30 9e 52 e4 93 09 4e 90 77 c7 28 fb 4d f8 4e fb 50 70 7e c3 b2 87 92 a3 cd 65 16 28 62 88 ae ea 84 9a 41 69 f9 3c 00 03 90 81 c0 40 88 e1 d2 a5 91 bd 74 21 d9 a5 6c 88 09 0c 16 40 6d aa 14 fc 2d da aa 9f 91 e5 03 98 61 cb 38 3b 68 d4 20 29 de 82 b4 cc 22 35 d6 44 3d 78 4e b3 1b 84 81 c5 dd b3 be 09 0d 62 d3 ba 21 79 73 e7 51 fa f0 90 a3 03 c0 40 1d 55 81 b6 48 67 47 0d c1 a4 84 17 89 02 dd 20 16 Data Ascii: 'KwOGed%QYAY],CA)D`"Bm2\|ZL(@ ``QrHUkrT0HZ0KVB"pCU -5N~[tX0RNw(MNPp~e(bAi<@t!l@m-a8;h )"5D=xNb!ysQ@UHgG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50242	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1100	OUT	GET /gk-WYYED1OJNr0G28ucBPUTPric5QCLwW2q_rNcYg-XTQCbPkhcp3CqVJ-1dHiBql10=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 220 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:28:57 GMT Expires: Sat, 20 Apr 2024 10:28:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 13093 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	220	IN	Data Raw: 52 49 46 46 d4 00 00 00 57 45 42 50 56 50 38 4c c8 00 00 00 2f 3f c0 0f 10 35 b8 89 6d db 55 b6 ab 6f e2 8b c0 05 06 a2 8f d8 21 81 0e 34 a4 0e 07 b9 a5 e4 fe 43 ce f7 b8 a9 6d db 89 7e 4b 74 40 97 34 40 87 04 ba e8 23 1a c0 05 22 30 31 a6 98 1d 6c 23 db 56 f2 3f 56 80 94 e0 90 5b 5f 1a 51 0c 35 92 ef 04 e4 27 41 bc 7c 40 94 3f 7c 41 28 40 18 73 0c 4a 25 ac 67 87 e5 5e aa 3d ce ee 18 4c 3a 67 67 77 57 67 e7 75 ae 7e 3b 37 7b 59 2a 7e ce cd 1e f7 ce ce ee 6c ce 6d 38 ca f3 9a b6 e0 74 ad 55 a1 7c c1 59 1d 22 8d 4b 86 0a 8d 06 19 2c 33 6b 40 b8 4c 85 0f 0a 54 4a d8 63 12 bf 0e 1f 42 0c 42 81 03 37 2e 49 e3 41 4d 08 17 1e 2a 44 7f 76 68 ce 0e 83 c8 9b 3d Data Ascii: RIFFWEBPVP8L/?5mUo!4Cm~Kt@4@#"01l#V?V[_Q5'A\|@?\|A(@sJ%g^=L:ggwWgu~;7{Y~lm8tU\|Y"K,3k@LTJcBB7.IAMDvh=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50243	173.194.219.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1106	OUT	GET /W6pBP57UU3sGnhrVO_SWywKMb5YwKcDoQW3hBxW3L0pV4UyzS7IDbxaqD_vK6qHg4i4=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 7606 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 ae 1d 00 00 57 45 42 50 56 50 38 4c a2 1d 00 00 2f a5 c0 49 00 15 07 e3 b6 8d 1c 89 fd 97 bd e9 e2 3f 22 26 a0 47 a3 c2 c4 e5 d5 45 d5 5e eb ad 3e de 25 5a ca c6 e6 e0 ec d7 5d 73 b5 23 d7 5c ed 9a 67 bb 04 99 ef fc a5 32 c1 46 03 d4 0c 1f b3 6d eb dd 46 4a 39 31 85 cb 81 61 e6 99 32 33 37 19 66 66 66 e6 29 33 33 b7 81 61 66 66 66 86 32 33 b7 81 c2 1f e7 3b 3f 78 ce f9 fc ef f0 f8 04 66 29 4e 36 50 f5 28 d2 e9 62 b2 e3 ec ac 87 9d c2 33 e4 a4 ce 26 95 cf 80 17 a3 48 4e ba e9 92 ed c8 41 39 da 64 33 91 ce 30 83 3d 0c 27 59 a7 1e c8 97 ca 8b 96 a5 61 f4 78 15 ea ca 9d 75 37 1b 29 11 74 b5 93 5d 77 28 10 1a 49 72 24 45 ce 43 78 04 96 3f b0 3f 00 6f a7 28 47 92 ed da 56 b2 d6 d7 1f 35 fa 9e 32 94 f6 61 13 ec ee ff 04 58 a3 fe ff 94 24 a7 82 57 b6 Data Ascii: RIFFWEBPVP8L/I?"&GE^>%Z]s#\g2FmFJ91a237fff)33afff23;?xf)N6P(b3&HNA9d30='Yaxu7)t]w(Ir$ECx??o(GV52aX$W
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: b4 3e 72 d3 a3 f4 92 e8 64 a4 a8 8a 11 e3 0a 96 de f5 88 b2 cf 7d 98 58 d2 67 62 4c 0d b1 40 a4 54 30 90 31 96 3e a0 e5 9e 06 33 9a ed b9 99 91 cb 5f 7a 1a 05 b6 fa c3 6f d7 74 96 54 6b ad 5d 8d 80 e1 f5 a9 2d f6 b4 4f e5 6b 9b da 94 de 13 76 a2 ed dc b2 97 51 48 81 08 d2 44 cf 40 a7 49 56 9a 44 2a ba 82 9f 54 53 1a 8c ae 47 d3 10 5a 9a 19 19 68 77 a4 a9 25 b1 54 79 6b cf 02 d0 6f 5c c1 da b3 20 b5 aa da d6 05 d5 52 00 b3 b3 78 bd eb d9 fa 3c 8a d0 d0 d6 48 5d 25 c1 84 8b 50 7b 2d 29 10 cd f5 dc 61 12 6c f0 fe e7 6b 0d b9 e0 43 6f d7 dc 09 db fa 3f 8e 63 ab ac 4a c3 16 30 7c 5f 05 96 6a aa 67 18 22 6e 63 a4 1b e1 c4 f4 28 09 94 73 ee b6 02 57 f5 1e 13 4f 55 55 06 2f e8 2b 1e 4e 33 a6 54 b2 0e e9 01 ea 6f f9 49 63 46 6f 09 7b ac ed 94 a5 01 31 7a 38 ff 81 Data Ascii: >rd}XgbL@T01>3_zotTk]-OkvQHD@IVD*TSGZhw%Tyko\ Rx<H]%P{-)alkCo?cJ0\|_jg"nc(sWOUU/+N3ToIcFo{1z8
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 0f 89 5b db 1e a9 b3 24 5f fb e9 11 20 4a 50 ce b9 4f 35 49 65 65 c8 81 d6 28 ff 3c f4 1e 3f da 7c cf 5e a9 51 a0 d3 b8 4c 1d b5 94 77 ee 38 4a c7 49 60 2d 3e 3f cc ba 4b b4 da 53 5d ad a4 45 14 6e a1 e7 cf 77 32 e2 c6 0a 97 41 2f f3 db 41 e3 25 8c df 9c 8d 44 aa fc b5 d3 f5 88 3a 5a d9 a8 dc 73 8f 28 cc 59 7f cb 7f ac 70 1d 96 b3 2f a7 5a 61 46 d5 d5 d6 36 29 d4 59 cb 8e 66 0d 2d 0f 80 07 e1 21 e0 c5 78 5b 38 f7 ed 2f 37 4c 8a 8f 0f b3 79 d9 a8 9b 11 80 bd 56 61 cb 15 a1 f2 32 a4 03 08 0d cf 13 5b aa 28 c3 e1 f0 5c 6d b5 90 58 05 3a 8d c2 01 0c 19 1f 25 49 81 ca 59 ba 8d 86 b1 74 97 89 8f a1 24 e8 6e b0 09 43 68 48 00 55 d5 01 0e 0f a9 ed ce 88 7a 07 a0 ef 84 9d 50 7f 2b 43 c4 17 01 61 71 ab 23 01 5c f8 1c 3e de 4f e7 a5 a6 52 cf 07 58 64 24 fd a0 ad f4 Data Ascii: [$_ JPO5Iee(<?\|^QLw8JI`->?KS]Enw2A/A%D:Zs(Yp/ZaF6)Yf-!x[8/7LyVa2[(\mX:%IYt$nChHUzP+Caq#\>ORXd$
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: f2 8a 9b 00 74 97 90 cd bf f0 2e f2 f8 58 25 d1 38 8b b6 5d 79 de e0 04 9f be 8d 59 a7 60 21 ea 90 b7 41 c9 75 53 48 8e 41 2d 5f f8 07 30 0f 37 f2 af 16 85 5c 04 a5 d4 43 89 e1 57 ef 8f 2c d4 13 20 8f cd c7 cf 78 cd c0 dc b4 b1 eb 7c 7c 86 ac 88 52 ab 43 1e 40 2e 85 fd da 1b 51 39 54 ec fa 28 a5 d4 fb c8 e2 7c d8 b7 b8 3b 20 fb 50 7c ff 31 ea 25 a7 83 6b a0 54 28 1d f9 cd d7 73 64 f2 19 08 c2 9b 24 2a b5 15 e1 4a ed 89 bd b8 3d 64 ad bb a2 94 fa c2 86 a8 57 70 1d 94 52 ef 27 4f c0 24 e4 86 8f 09 c8 16 46 7e e8 26 90 a1 4a ad 05 87 14 f6 b1 f8 be b0 a0 71 a4 e0 71 dc 96 11 cf 79 34 7d 96 41 dd 8a 3b 63 2f ee 03 c9 87 a0 d4 48 56 55 f1 3c 4a 29 a5 c8 09 89 af cb d2 06 f2 a8 46 5e 93 2f 92 4a a9 17 31 4f ff 9f ee fe d2 f0 79 6d 43 eb 3a cd 47 12 3d 21 99 be Data Ascii: t.X%8]yY`!AuSHA-_07\CW, x\|\|RC@.Q9T(\|; P\|1%kT(sd$*J=dWpR'O$F~&Jqqy4}A;c/HVU<J)F^/J1OymC:G=!
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 71 a7 7c f8 53 28 55 dc 0e a4 77 10 f3 c3 bb 00 74 62 9d 49 18 cb 18 fb 42 bd 9b b0 89 28 4e df 9a 40 03 30 96 69 ec eb ce c4 a9 00 71 bf 88 e2 3e 90 ef c6 f8 31 fb ba 1d 38 cb 03 c4 bb 02 e2 4c e1 b6 60 7c 8c 55 80 9a 10 7a 3b 20 66 e7 bc d5 06 65 59 8f 7d 81 ce 8e b6 49 58 8b 57 bb 35 35 ff f3 f5 f8 0f 8f b6 de 18 6e 3f a1 2c 6b 48 8f 85 5a ff 9a 08 01 98 9e 46 0d d1 bd d8 1b 65 e9 bd 39 5a f8 24 20 9c 6d 90 0a 82 42 8d 2f 2d 81 f6 d4 22 90 dc 02 a5 b1 f3 4c 58 9b 0b 8c 41 28 cb 79 fc a4 db 01 72 2b 34 6c 8e d2 39 81 7c 16 4a fb 1d b0 c2 a7 02 e1 5b 28 cb 19 a7 1a 77 43 8c 20 5a fd bb 72 28 9d 6b f3 03 a5 f7 55 56 92 01 e6 c0 39 08 e7 93 28 3f b0 b2 bf 02 7c 26 22 3e 19 f3 de e5 f4 2b 94 e5 1b cc 8e 50 5c 49 41 fe be 68 21 cc fb aa 73 10 ca 0a 1e cc 1f Data Ascii: q\|S(UwtbIB(N@0iq>18L`\|Uz; feY}IXW55n?,kHZFe9Z$ mB/-"LXA(yr+4l9\|J[(wC Zr(kUV9(?\|&">+P\IAh!s
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: c4 60 2b e5 e8 42 f2 d6 18 50 7f e2 05 32 d2 b0 07 c1 7b a3 b4 3e 57 f0 f7 36 d1 dd 8a da 87 97 93 ed 74 65 84 d7 3f 10 a4 2a 47 79 8c 51 5f 55 9a 5f 25 38 1c ec cf 04 0d ac 29 15 75 f4 ee e8 9a 87 f0 6e 6d 2e 24 8c d5 8d a3 d2 0c d2 d9 57 70 32 c0 ee 83 40 99 28 2a 32 cd 31 56 0b 47 79 10 12 04 04 3b c6 a2 b5 69 f5 db a4 61 1c c2 c9 81 50 ed 05 2e ac 5b 60 b1 20 26 65 84 d7 2f e8 ae 0e ce f8 20 94 41 f0 02 ac a9 b1 78 28 e6 31 15 63 0d 43 79 95 e0 b6 40 6d 0c 2d 1b 98 54 82 73 50 9f 4d 30 0e 41 e9 25 78 09 54 69 04 ca ac 70 98 df 61 68 1a 84 12 14 05 6a 4e 2c 8e b2 1b f1 30 87 5a 70 04 50 47 5a 76 34 af 1b ca ef 30 34 ad 3a c4 7d 10 e4 00 4d 82 40 99 95 81 13 cf 50 4f 23 88 30 c1 40 9c c7 43 cb a5 31 2d 31 3c 1f 28 6b 04 46 45 58 30 1d 26 43 d0 0b a0 1b Data Ascii: `+BP2{>W6te?GyQ_U_%8)unm.$Wp2@(21VGy;iaP.[` &e/ Ax(1cCy@m-TsPM0A%xTipahjN,0ZpPGZv404:}M@PO#0@C1-1<(kFEX0&C
2024-04-19 14:07:10 UTC	598	IN	Data Raw: 32 6b 8a 72 04 3b c8 2d 1d a5 2b 4f 6d 5d 1c f2 0a 41 f2 76 c9 0c 04 05 b3 83 d4 ce 46 6d 9c d7 77 c9 64 1f 59 45 7b fd 0a 65 1d e3 eb 23 24 16 12 93 0e 34 03 81 a1 97 4b ae 24 b5 51 8e e0 29 99 1e c9 7d 0a a3 89 ec de 8e b2 76 02 49 cf e5 c0 ec 4c de 87 7d a8 80 7c 2b 6a db 81 5a b7 71 60 cd 7f 62 9f bd 89 95 6f 05 6d 8d c5 20 94 9b 37 0e 9c 01 07 1f 8a 92 b1 8b 0c 29 81 1f 28 65 8d 03 6b 66 4a 6a 7b 2c 7c 3b 94 28 0e ac e9 90 99 6f 71 13 83 c9 ce 2f b9 7d 0a e3 00 9e 72 cb ce 94 d7 4f 83 de cc 8d c1 f8 10 07 66 3b 02 41 07 70 60 76 a6 3d ca 06 aa 32 b9 91 ae 90 20 9f 0e e5 43 06 a4 52 e9 20 3d 4a a4 36 5e 3b f3 43 23 22 48 32 51 a4 f2 6d 18 69 48 26 64 11 3b c4 8a 44 0f e3 26 76 91 9e 39 09 f2 29 94 52 c6 81 d9 0e 1d 29 01 50 bb 6b 37 0c 08 17 6c 62 cb Data Ascii: 2kr;-+Om]AvFmwdYE{e#$4K$Q)}vIL}\|+jZq`bom 7)(ekfJj{,\|;(oq/}rOf;Ap`v=2 CR =J6^;C#"H2QmiH&d;D&v9)R)Pk7lb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50244	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1105	OUT	GET /ZXHmAeEubL_FFSux8ufdc3kWESm6l3Qps0cC-pt8uNWM74A4iElX7CbcQIgyXli9eQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 7614 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 b6 1d 00 00 57 45 42 50 56 50 38 4c aa 1d 00 00 2f a5 c0 49 00 f5 86 e2 b6 6d 1c 73 ff b1 af d7 77 44 4c 40 36 a7 20 be 31 17 35 e7 f3 cd 49 62 ce d3 99 f2 5e fe f8 ff 5f e4 34 db 3e 6a 48 94 ba 7b 0f 77 3f ea ee ee 38 d4 dd dd 8b bb bb 7b 36 04 87 7a 4b a9 bb bb 0b 25 75 17 a8 f7 71 ce ce cc 26 9f 9d 6f fe 3d a1 48 91 cc 19 ca 00 a1 e4 2c f4 d3 a4 d9 74 e9 1e 27 10 a0 24 59 08 99 83 40 4e 3c 94 b2 ed 90 81 40 4e 7c 4b e8 16 c2 c0 19 82 ac 48 92 55 db ca ba 2c e1 5e 1f 8c 8f 3c be 2f b2 f3 2c e1 6e da b1 6d ab b6 95 d6 d7 73 09 cb 7f 71 88 c3 25 0b 22 84 14 5c d7 e8 bf 2c b6 6d 2c 49 62 76 bc 9b 42 75 5f ed 6b ba 7b 66 31 f7 4f 0f da ff 53 76 73 6b db b6 63 db b6 6d db b6 6d db b6 93 1b db b6 6d fb ee f5 cc 39 67 37 98 93 fc 55 07 d3 6e 6a 33 Data Ascii: RIFFWEBPVP8L/ImswDL@6 15Ib^_4>jH{w?8{6zK%uq&o=H,t'$Y@N<@N\|KHU,^</,nmsq%"\,m,IbvBu_k{f1OSvskcmmm9g7Unj3
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 54 18 8f 1c 9e 67 a9 47 f2 24 c0 bc f6 30 50 7e 1d 02 39 92 32 9a 80 a3 f5 05 78 c7 65 9b 80 12 71 1d 2d aa a8 17 01 f9 e2 46 9a 63 ae 4f be 00 b4 92 cf 48 5f ae a0 07 c3 af 66 f5 24 c4 a8 bc b3 10 48 9d 64 4c b6 20 d7 96 25 4b 4c 91 9f de ee c8 95 e4 8c 9f ce 1b df ae 42 35 7d 3b e8 21 bb fb 9c d7 e4 34 c2 8d 69 28 a6 c8 ff 68 7f 83 99 cf de 04 25 b4 c4 c2 4a 5a d4 44 5e b0 b8 ae 08 fa 2a 0d 11 ab a6 4d 72 19 e1 e6 15 d1 14 8f ef 15 68 57 07 19 d5 da 3a 2a 04 f9 a9 aa c5 4b 37 0b 34 1a 51 ab f4 54 48 ba ce d1 3e 29 29 ad 01 9b db 98 84 90 f4 cc 07 02 1f bd ab b2 4c 90 2f 34 16 4e 7f d8 7f 2c 68 2a c2 e4 73 24 15 0f ba 82 a4 5b c2 55 6d 24 b2 d3 4e ac ac 63 a4 82 37 17 d1 0e bc f4 be 1d 12 57 ea 0b 53 40 87 eb 93 91 11 12 55 0b a2 f2 3a 6e 15 13 85 3e f2 Data Ascii: TgG$0P~92xeq-FcOH_f$HdL %KLB5};!4i(h%JZD^MrhW:K74QTH>))L/4N,h*s$[Um$Nc7WS@U:n>
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: c4 fd 69 97 6d fa a0 b9 40 ea 4a 0b 11 04 ab d6 4b 49 74 55 16 d7 55 87 33 54 97 12 b1 60 18 b8 6c dd e3 d1 2d cc eb e7 36 b7 45 0f 31 52 f9 ed cd de 3e 9b 9f b7 a8 55 a6 03 39 4c 03 81 81 b0 5b 5d fb 18 d9 64 8c 00 cd 46 15 df 71 0a f4 14 2a 9a a0 90 54 c2 d4 16 55 1f 99 13 80 59 e9 01 0d 92 26 c3 54 60 4e 4c 1f 9d 74 7d bc 97 b9 61 d5 75 21 cd 45 7a 15 ec d3 ea 9d 44 8f a6 2a 20 e0 2d 7b 33 9d 5d 52 6f 5a 67 3d 55 0d a3 6f f2 e6 a6 37 99 f4 9d a9 4e 3d 4f bd 1a 13 2d f5 fa 26 26 aa f4 9d 3b 9b 68 ab a4 57 40 c0 e8 56 9c 50 3f 97 53 9a d3 b2 cb 49 4b 27 1e 5c af 6d 4e 4a 9b ca dc 8e 49 8b da 56 ac df 9c 1e 74 4d c5 ab a6 4d 99 16 c9 62 b5 44 b5 5a fc a4 56 f1 69 15 bf c4 2f 12 54 c2 ea 3f 36 11 63 13 9e 94 a8 ac 48 78 72 e6 58 75 ac 62 55 73 1a b7 b1 3a Data Ascii: im@JKItUU3T`l-6E1R>U9L[]dFqTUY&T`NLt}au!EzD -{3]RoZg=Uo7N=O-&&;hW@VP?SIK'\mNJIVtMMbDZVi/T?6cHxrXubUs:
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 30 a7 b3 0a e4 fa 67 42 c1 7c 87 41 a7 42 b0 4e fa fe f8 82 41 d9 88 11 1c 23 18 34 dd d5 cb 1a ee 54 15 81 2a 56 09 84 cf 1b 94 66 27 b1 32 2c 14 2e dc 8e d4 81 a4 70 ca 20 ab 52 dd 54 64 24 8c f5 56 50 67 2b ad 7a f9 ea 98 d6 43 1f bf 03 35 25 83 8b cd fe 8f 85 50 82 94 12 b4 ef 10 9d 87 77 1e 14 95 af a7 e8 43 d5 49 60 59 85 f1 af 4e f7 ee 07 2b 89 73 92 04 16 fd 01 fd 6b 25 18 e4 52 44 9f 83 a0 f5 37 43 f7 b0 3c ca 0f 1b e1 6b 53 09 1d 2d a3 cc 72 9c 3b 4d 7c 37 a3 8a 63 c5 34 32 14 4c 86 86 9f 8d 5b 11 06 e1 d7 4e 52 a5 50 32 ed 26 8b b6 cf 0a 8e 53 6d 1a 1d 23 81 cd 0f ed b6 70 fa 7a b1 49 2b af 0e 39 51 58 25 10 3e 07 94 20 bf e5 61 46 f3 dd 25 18 0c da 3e c3 9a 78 28 61 43 f7 17 5b 18 0e 73 6a 51 9e 0c f4 66 93 0e 7e 53 27 93 0c 2c 66 84 c6 2f 28 Data Ascii: 0gB\|ABNA#4T*Vf'2,.p RTd$VPg+zC5%PwCI`YN+sk%RD7C<kS-r;M\|7c42L[NRP2&Sm#pzI+9QX%> aF%>x(aC[sjQf~S',f/(
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 38 30 72 bb 94 a6 1a 86 73 ab 4f 9f 3e 4d 54 d0 df 64 c6 0f 1e 67 6d 4d a8 95 ba 6f 25 18 b9 1a 6e 0c 23 e4 e2 94 65 bc 97 5c dd 3a 23 22 a2 9f 40 fb 0c e6 2b 4a fb 70 15 ed 3d 14 ce d2 5b 0b 4a 1e 17 37 82 19 bc 8e d7 89 4a 51 30 be 87 b8 37 5f 1f 01 fd 02 ec e3 4a 94 67 07 1a 35 8a 3d 53 e1 2a 38 cb aa b3 f6 00 c9 6d f8 19 5b 0c 68 24 2b 9d ed 3d d8 43 3b 33 1b 47 d1 8f 26 27 28 93 d2 d3 3a 07 e3 87 fd d0 4e e0 70 6c 29 18 79 9a 86 10 d5 51 90 7e c8 f4 c9 b7 31 b3 86 15 53 8f 63 39 56 0a 67 59 77 d6 ca 5c a8 66 43 92 c1 16 5e b2 52 58 b4 e1 c3 a1 0f 0f 08 57 31 bf 91 03 65 d4 1e cb 20 73 d3 36 e8 bb 40 45 9e 50 18 a1 13 75 3a 51 e4 47 4c 9f 3e ef 64 da b3 6e 26 72 78 33 83 87 d5 c9 81 92 d7 70 03 18 c3 3a 1d 4f 2b 59 5d ea 35 54 1e de 09 6a 9c b7 f0 bc Data Ascii: 80rsO>MTdgmMo%n#e\:#"@+Jp=[J7JQ07_Jg5=S*8m[h$+=C;3G&'(:Npl)yQ~1Sc9VgYw\fC^RXW1e s6@EPu:QGL>dn&rx3p:O+Y]5Tj
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: e6 0d f7 b1 ab 55 81 c2 1a 04 9e 7d 0f 0f b6 eb ac 22 30 0b 99 ea 41 dc 73 76 f4 61 58 e4 36 ff 06 0f 33 99 8d 8f 7f 60 9a 01 93 92 56 a4 9e d7 aa d9 d7 2a 0b 48 09 68 86 b0 f3 7e 16 69 6e 53 f7 c1 3d df 47 9a 50 87 b0 fe 52 93 9b e1 70 ec 8c 4f 87 2e 41 da 1a 9e 5b 8c b9 5f 3e c7 6b 5c 41 d3 37 b8 05 e9 62 24 f1 4c 22 ae a2 0a 5c 60 28 8b 13 ef a2 e1 99 45 b6 29 a9 05 a3 a4 d1 22 1d ac ee c3 19 59 0a 7e 94 6b b9 84 80 29 d2 fc cb 69 80 d0 ff 22 e2 24 2e 54 0b 77 97 34 34 ab 4e 37 18 25 e2 82 78 1b f9 72 26 7d 59 97 7e 43 c5 d7 91 62 25 e9 5b cf 67 89 e6 68 43 8f 0e 81 91 50 d1 89 32 84 cc b3 1c da f0 d2 ce f1 c0 59 01 32 77 c4 80 11 30 4a 99 9a a6 e6 d5 f5 aa c3 e5 d2 74 96 b3 0b 7b d2 01 75 a0 41 64 63 a6 f8 80 69 8f 9d 22 89 a4 9e 02 2a 88 58 83 68 8d Data Ascii: U}"0AsvaX63`VHh~inS=GPRpO.A[_>k\A7b$L"\`(E)"Y~k)i"$.Tw44N7%xr&}Y~Cb%[ghCP2Y2w0Jt{uAdci"Xh
2024-04-19 14:07:10 UTC	606	IN	Data Raw: 3b d6 05 78 85 68 58 56 88 e6 25 b3 af 2f 44 d3 5a 43 ca 13 f3 d5 04 be 2a 66 35 7b b0 3e 50 7e 83 5a 0d 74 7c ac 51 85 03 a4 14 1a 4d 95 47 27 9b 69 01 c5 01 06 51 57 65 78 8b d3 b8 fa 05 3a 68 f3 b8 f0 3a 1f 16 0b af 13 69 46 fb 41 71 30 ec bb 15 cc 57 76 d1 50 3c fb 22 7a e8 34 54 0f 17 af 88 d7 b4 3e d7 ac 5c 14 19 6c 05 c5 21 e8 3d 97 e0 d7 eb ea 18 60 07 14 95 b9 91 2a 06 fb 92 cc 3f c0 b6 70 06 d4 f9 c3 6f b7 2d 59 12 92 f9 41 e9 8d 7d 23 a6 b9 89 f1 5b db 02 92 87 41 9b 2d 98 e6 06 6a 85 7d 89 b6 3b 3c 1c 6f 92 f9 8f b6 29 28 e5 0c bd 37 87 ec 06 d0 66 b8 85 bc 08 d7 19 6c b8 37 fe 9a 4d 21 dc 48 a0 86 74 03 a1 94 8d 1b a9 2c f8 2b dc 44 e5 1b fe e0 9e 18 92 d9 08 4a a5 46 21 39 9a d8 00 c5 d1 48 67 dd 81 62 20 9d 75 61 3d 03 f3 23 d9 a0 a2 2d fe Data Ascii: ;xhXV%/DZCf5{>P~Zt\|QMG'iQWex:h:iFAq0WvP<"z4T>\l!=`?po-YA}#[A-j};<o)(7fl7M!Ht,+DJF!9Hgb ua=#-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50245	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1099	OUT	GET /ZrNeuKthBirZN7rrXPN1JmUbaG8ICy3kZSHt-WgSnREsJzo2txzCzjIoChlevMIQEA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3094 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:16:31 GMT Expires: Sat, 20 Apr 2024 12:16:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 6639 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	722	IN	Data Raw: 52 49 46 46 0e 0c 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c6 0b 00 00 2f 3f c0 0f 10 4d 30 6c db 36 12 2c f7 b9 3b dd fe 0b 67 89 88 fe 4f 80 1a 00 fb 66 da 14 a2 44 d4 3f e9 a1 9a b4 2c 32 d5 51 75 c1 10 92 24 49 09 b1 fe 68 1d 1d 0b b0 71 00 ff 03 a1 26 92 a4 a8 25 e0 5f 17 2a fe 3b 20 24 60 1a 49 b2 95 7e ea ff 9e a4 50 e4 1f d6 46 40 21 91 fd cf fd 7f a4 32 bc f8 2a dc 5a 4e 36 00 12 33 66 5d e7 a3 00 2a b1 c5 13 cb 6a 5e b3 aa 33 2a 71 62 96 3d 38 d5 a9 a8 00 44 44 0c a7 61 af 3f 50 21 53 11 f0 5b 00 de 40 d0 b6 6d 62 fe b0 b7 fd 14 22 62 02 fa 87 0b 23 5a 1f 7a a4 23 db da 22 c9 f9 32 ab 7b 78 ac 11 b3 4c e6 5d c8 65 30 19 3d 5a 80 5c 66 6d 41 7b c2 05 0c 33 54 fe 46 fe 99 d9 9d a1 05 5c 59 13 f1 0d a4 18 Data Ascii: RIFFWEBPVP8X??VP8L/?M0l6,;gOfD?,2Qu$Ihq&%_; $`I~PF@!2ZN63f]j^3qb=8DDa?P!S[@mb"b#Zz#"2{xL]e0=Z\fmA{3TF\Y
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 0b 92 ed 53 86 70 c5 ce 51 b2 e0 ed b8 8d ad 11 fb c2 99 d9 8e 69 c1 be 96 a8 56 7d 02 fc 0c 28 7c 01 22 2b f0 42 90 31 6e 3b 14 94 86 46 8d 90 d9 68 af e9 bc e3 83 ce d1 e6 42 70 21 e4 1c 90 b3 bc 9a 14 08 02 b0 1a 7f 96 44 22 08 cc 70 41 f0 a2 24 01 54 69 da 01 0a 5f 00 af ad 69 25 47 34 6e 1d 30 f3 65 9f 84 f5 02 93 3d 08 2c 13 08 00 b8 63 24 84 91 d6 31 05 f6 c2 65 41 07 75 3d f6 c9 b0 a8 a1 90 f0 09 e5 2f 40 12 14 15 b3 56 be 1d bf 75 6d 74 d0 b2 77 9a 94 2c 27 3d 96 0c 1c 9c b8 03 6e fb f2 13 41 0e a4 94 2c 51 29 9d 74 93 d4 7b c7 df 6b 72 16 7c c8 0d 6f 15 43 2a 97 e3 14 c2 1f 83 31 cc aa f6 d6 0d 06 4a cd c4 86 6f 30 e4 5b db 5e fe c8 23 4e b9 0f 73 29 7b af d2 e8 13 9c 07 92 11 35 43 5a 9f 3b c9 a6 6c 74 c2 71 81 30 15 20 c4 73 1a e0 65 89 43 4f Data Ascii: SpQiV}(\|"+B1n;FhBp!D"pA$Ti_i%G4n0e=,c$1eAu=/@Vumtw,'=nA,Q)t{kr\|oC*1Jo0[^#Ns){5CZ;ltq0 seCO
2024-04-19 14:07:10 UTC	1117	IN	Data Raw: 2e 8a 64 3e 10 a2 40 47 43 1f e3 e8 cf e9 6d 2e ef b3 7f 6b 3e 7c 09 98 2c 75 de b1 cd a3 fe 6d 9c a4 8d ac 88 9c ca 90 c0 ad 02 d2 69 78 c1 f4 fb 9d 72 36 3d c3 44 20 44 8a 56 d3 e3 1f 62 35 20 02 05 3a 48 c8 8a 2f 34 f7 ef 2c bc 30 77 8c 32 96 03 99 24 46 53 17 cc 3e cb 3c 1c 71 bc 4e a7 8f 87 69 23 27 a6 42 55 43 42 e4 08 31 4d a7 9a 81 e4 d8 95 3f fc 10 03 80 09 70 40 8b 96 d5 f4 8f a6 8a 4d 2b 94 dc d2 f7 02 ab 67 9b 64 eb cc f6 e7 49 cd 0e 01 45 5e 5c 01 d3 c0 c7 c0 a0 97 5a a0 c0 09 00 25 a4 dc f4 f2 81 c8 fe ad 58 d2 d0 9f ca 8c 03 5a dd 20 b6 eb 61 ac 46 dd 28 28 00 a0 09 2b e1 39 8f 68 9d e0 32 02 4d 80 01 50 20 fd 7b 27 dd bf 5a 45 17 98 bb 64 46 8c 54 2f 3b 4f 59 55 54 d2 b8 24 74 a9 26 04 84 00 fe f4 73 ee 34 2f 23 d8 a0 50 05 70 16 50 37 38 Data Ascii: .d>@GCm.k>\|,umixr6=D DVb5 :H/4,0w2$FS><qNi#'BUCB1M?p@M+gdIE^\Z%XZ aF((+9h2MP {'ZEdFT/;OYUT$t&s4/#PpP78

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50246	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1099	OUT	GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 2572 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 04 0a 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c bb 09 00 00 2f 3f c0 0f 10 4d 00 44 d2 fe e8 0b 44 f4 3f f5 85 99 b6 6d cc 1f 65 ae dd e5 30 12 6c da 46 12 9c 4c 79 e5 00 b8 fb 37 9a b6 8d 64 fe 28 f3 0c 3a de f6 fd cf ee 33 b6 b5 35 86 4b 55 4a 5d cd 48 71 00 06 62 f0 06 44 86 2c cb 10 b3 03 23 8e 23 00 20 5a 88 f8 7c 10 40 1c 3c 98 dd ff 53 24 d9 4e 56 f7 f0 65 a6 15 d8 7e ff b7 f0 03 30 33 33 0c 7b a6 6b 91 39 e7 19 be 66 fb 1f 21 85 b1 d5 f9 57 ca 1c 29 a5 19 2e fd bc 3a 52 b5 ae 72 37 e7 f6 df 4c 25 e5 ca 18 c6 55 4b 2d 41 6a 24 49 92 64 9e b3 fc e9 2d 8e b9 f6 b9 21 3b 92 24 45 b2 3c e6 ee 31 ff 3e fd 55 78 52 31 e3 5a 27 dc 6c db 9e 54 b7 39 f6 fc 95 71 03 06 e1 72 05 5c 03 4b 58 43 57 f0 62 10 Data Ascii: RIFFWEBPVP8X??VP8L/?MDD?me0lFLy7d(:35KUJ]HqbD,## Z\|@<S$NVe~033{k9f!W).:Rr7L%UK-Aj$Id-!;$E<1>UxR1Z'lT9qr\KXCWb
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 72 b9 c0 32 70 09 e4 f3 cb 1b d8 9c 9b 09 0e b8 f0 b0 8c 4d bb cd 99 c3 39 6b a8 17 bb b9 9e ed 36 dc b0 5d 88 05 76 90 77 42 7c 2a 15 1c 39 d9 e0 02 4b 0a fb c2 12 be 12 f2 6e 11 0e 0a 0b ed 77 dc bc ce 9c 73 b1 ef 38 df 2c c0 d9 12 9f ca 27 4b ae 19 97 7f 2a 37 bb 50 13 7e a9 70 76 25 b7 92 56 2a 22 16 41 32 9d 35 87 4b 14 96 cf 76 34 0b 2c 70 9d 8c bc 1b a1 e5 7c a3 12 25 b1 5c 6e e7 19 38 87 ed f2 44 72 9d 80 9a 57 6a 24 6c 9d 7e 5d 16 96 b1 00 0e 0d 1c 70 0b 39 2e 47 ee 19 30 45 76 d4 44 63 5e eb c4 ca ca c9 0e 26 d6 55 02 81 ce 8e 93 10 2e 27 6a ae 2e 07 f0 5c 33 cd 44 c8 91 68 4d 40 8c f3 0a 93 d1 5f 27 59 36 a2 ea ec f7 9d 1f bb 03 e4 ce 42 fa c3 79 2e ee b0 72 b2 99 aa c7 58 32 7b b3 d6 13 69 8f ba b9 bd 3b b7 46 3e 5d ce 82 d3 f1 f0 a6 73 fc db Data Ascii: r2pM9k6]vwB\|9Knws8,'K7P~pv%V*"A25Kv4,p\|%\n8DrWj$l~]p9.G0EvDc^&U.'j.\3DhM@_'Y6By.rX2{i;F>]s
2024-04-19 14:07:10 UTC	584	IN	Data Raw: 70 c8 00 06 c8 b3 01 ac c9 e3 d7 c7 d4 3e ba 89 79 75 0b a0 01 9e a1 a5 42 df b2 67 b8 5e 19 b6 20 15 13 20 20 b1 62 c7 22 fe b7 06 e0 72 00 07 52 01 70 84 81 60 91 33 1e 4b ba 02 2c 2c d2 15 1c 9a 65 17 d9 02 5c 5e 33 6e 01 e0 1c 1a 83 2e 00 0b 90 17 c0 84 1f af ae af 80 03 58 8c 17 58 a6 ef 16 a9 50 07 66 0a 58 00 b4 03 a9 90 d6 45 be 2e 70 68 26 86 d3 28 97 40 4d 40 8d 54 00 c7 02 6a 40 2a 00 ed 00 58 d8 04 35 0a 7d 93 0b 48 23 e5 12 04 f4 a8 91 0a 78 2a 00 f3 78 2c 0c ba 00 63 aa d3 b2 a8 77 68 46 0f 8b 03 08 90 87 76 5c f7 0c 5d 73 a1 e6 79 00 57 1b 02 0e b4 03 b0 30 68 80 5c 60 02 d2 6a 61 c4 4e d7 bb c4 e7 2c 00 17 0e e0 0c 36 48 05 43 0c bb 6d e7 61 c2 c5 a1 99 00 2c 23 27 73 97 cf 6e 57 f3 4d b6 cb d4 5c 3d 57 3c 5b a4 e2 72 28 90 40 a4 65 72 63 Data Ascii: p>yuBg^ b"rRp`3K,,e\^3n.XXPfXE.ph&(@M@Tj@X5}H#xx,cwhFv\]syW0h\`jaN,6HCma,#'snWM\=W<[r(@erc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50247	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	524	OUT	GET /S4wylkvt2jz16hnG9IG0pAZosbB82nWWy8P-rQkb54uH-SCVd5L2j7z7x1Vz5pZvIRc=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 976 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:16:31 GMT Expires: Sat, 20 Apr 2024 12:16:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 6639 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	723	IN	Data Raw: 52 49 46 46 c8 03 00 00 57 45 42 50 56 50 38 4c bc 03 00 00 2f 3f c0 0f 10 f5 c8 d1 f6 4f 91 94 5a 77 ef 71 e9 d1 96 dd c5 dd dd dd dd cf 41 ce 01 78 88 dc b9 83 6b 4e 4e 04 11 77 70 9d fa 77 13 6a 67 58 bc 93 d7 f3 fc f0 c2 8f 40 a4 17 a8 2b d4 25 e0 da b6 6d ec d9 f7 de 0f 19 ff 43 64 a4 65 67 94 19 a9 ff 3c 80 ad ca e8 ac ca b6 6d db 36 7f 3b b6 8d 90 2a 0a 00 01 46 36 d3 f6 03 6b aa 76 b2 6d a4 35 db 5b 5b b7 9a d5 56 77 48 66 52 b5 2f 59 6f 02 82 47 e0 19 52 26 89 65 73 b8 c1 95 dc dc 00 76 e5 7e bd 28 3e fe 71 8c ba 8f c1 ba d3 8d 27 cb d1 ef af 18 97 37 9b ef 5c c2 4f 8f 21 fb ee cf 33 eb 41 b7 0c 00 f4 1c 71 e4 0a 8e b2 a1 d2 b9 cc 6c 79 0f 80 fd 6f 2b 32 7c c1 10 36 52 2c 99 c7 4d 4c 60 7b ee ef 53 eb 01 00 e8 72 c1 5e 26 49 b2 46 b8 4f cb 86 aa Data Ascii: RIFFWEBPVP8L/?OZwqAxkNNwpwjgX@+%mCdeg<m6;*F6kvm5[[VwHfR/YoGR&esv~(>q'7\O!3Aqlyo+2\|6R,ML`{Sr^&IFO
2024-04-19 14:07:10 UTC	253	IN	Data Raw: 26 e3 a9 f8 24 89 d3 99 ba 8f 31 44 53 59 8f 3f 8a d6 78 c8 61 ff 7d 08 a8 7b c9 3d f8 c3 8c e2 ca ac a5 ad 64 cb e9 34 ea f5 fc 90 cc 81 c1 e4 56 40 3e 92 95 22 d6 c1 bb 26 99 df e8 21 af 03 0f ed 0f b6 80 a8 e6 51 e3 91 b6 0d 6d 0b 3a 27 75 8d 31 46 85 07 f5 99 69 9c 53 70 1f 8c 24 3b 81 97 53 e9 32 22 bd 38 2a 5e 75 8d 4b 56 ca 05 b0 cc b9 32 1a 80 c6 7d ad cf af 33 c8 0a 43 02 43 80 b7 0e f9 86 5f 0f 62 1f 7e 66 12 38 72 1a 70 4f d8 2f 1f 7b f0 68 02 db 5e 41 e7 5f cf a5 03 ff 27 4b 2a 67 0b 15 d3 c5 8a 59 42 65 07 b2 03 ef 19 12 6d a2 e7 48 de 53 bc 85 31 a6 7d 96 31 22 51 cf 4c 60 df d3 e8 56 b2 bf df 4e 23 ab f3 f8 4e 86 e4 c0 ef 0c 41 c3 71 e1 dc c2 bd dd 6a d6 e7 e7 09 6c 6f 26 6b 09 1e d6 fe 5c f1 5c b1 72 ba a4 62 aa 58 15 47 4e f0 e8 34 Data Ascii: &$1DSY?xa}{=d4V@>"&!Qm:'u1FiSp$;S2"8^uKV2}3CC_b~f8rpO/{h^A_'KgYBemHS1}1"QL`VN#NAqjlo&k\\rbXGN4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50248	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	529	OUT	GET /OaJ9ioyoRept6HWOMXjGkA8IMkfh1st9JEdIOyvpemFmFNFI50frodVswWNcAgFxzg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 8026 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 52 1f 00 00 57 45 42 50 56 50 38 4c 46 1f 00 00 2f b8 c0 49 00 4d 40 92 24 c9 51 54 11 68 12 fe ff e0 11 55 a8 dd 6b 44 ff 27 80 6f 7a 3c 1e 3d 00 82 80 1b 55 a5 56 95 96 55 65 ca c5 b7 37 33 a2 49 23 49 5c a1 7b 64 4d 3b 4f a7 60 23 70 68 b8 26 ed 8d 84 c3 d4 05 7b 8f 05 dd 85 2f 3a 1c a6 c8 08 a1 bb 05 c4 c3 10 cc ed fe f7 b8 c3 06 fd 28 0b 57 91 64 bb 4a 17 0a 9e 7f 5d 08 78 49 c0 f9 22 f3 1e f1 9e 43 10 00 ab 91 24 47 56 e8 b4 1a d5 dd 73 0d a1 21 3c ff fd f8 03 f0 ae 9f 01 70 08 9e 20 47 92 a4 48 f2 81 e7 ea 2f d7 8a 90 12 ac 0d 64 1d 43 ff 27 00 7f 74 61 b1 2c b0 b4 39 7a e3 8f f9 f7 cc cf e2 87 59 0c c3 f0 ca f0 c8 2c 86 77 de f9 5b cc 62 bc 60 5f 00 00 cf 0c 2c 00 b8 60 96 0b c0 c2 8b af 57 c0 1f 74 74 da c8 d3 b2 83 13 bb 02 84 90 27 Data Ascii: RIFFRWEBPVP8LF/IM@$QThUkD'oz<=UVUe73I#I\{dM;O`#ph&{/:(WdJ]xI"C$GVs!<p GH/dC'ta,9zY,w[b`_,`Wtt'
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: f5 bc 52 fb 3b 33 33 93 45 66 37 7b 02 14 41 4f a0 27 d1 ed 1e c1 28 3d 87 61 8d 20 86 c7 0c 16 f3 68 20 e9 83 f7 b9 3d 48 92 a4 da b6 6d 5b 6a d1 fa 18 63 33 33 d4 bf 62 cc 3c 60 ce d1 32 62 02 4e e0 f7 fc ff a7 c0 47 a3 4b df e1 f0 a3 d1 98 62 c3 62 62 d8 30 e2 fa 8c 19 53 6b 30 85 53 76 a2 7b 53 76 b9 2e e7 13 97 f6 bb 4f 05 8a c1 c5 ec 35 75 b2 72 4b ce 58 d8 ba c2 89 04 d0 39 33 8c 6c c4 84 33 df 8a a7 a9 75 57 66 74 4c 95 07 32 43 68 2a c4 c6 a5 19 80 da 88 b2 03 51 e7 b4 d9 3e 19 44 44 34 86 28 8b 9f e9 06 05 91 e0 4e c7 58 03 38 3b 4e 8e 8d b2 66 f5 d5 97 b5 45 53 dc 90 a3 c7 e4 50 a6 36 46 ba b1 2c 68 8a 67 e8 36 02 74 28 fb d7 a3 66 81 32 9d 26 da 5c e6 51 ca bc 4b 5b ab a7 e5 d2 51 5d 2a e8 f0 69 8b dd de b3 fd 66 82 8f d7 95 62 27 eb 93 06 7d Data Ascii: R;33Ef7{AO'(=a h =Hm[jc33b<`2bNGKbbb0Sk0Sv{Sv.O5urKX93l3uWftL2ChQ>DD4(NX8;NfESP6F,hg6t(f2&\QK[Q]ifb'}
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 0d 86 ab 13 30 88 4e 3a 69 c2 e6 5a b3 00 ac 76 5b d0 61 dd b9 89 68 70 76 b3 6d 21 74 c6 58 83 15 67 64 4e ec 88 c6 53 9d 1b 71 59 da 6d ce 35 89 e8 fc d6 ea ec 71 13 aa ff f7 cb 7f 12 9d de e6 91 0b db 77 42 86 c1 78 df b7 00 20 0f 9b bb 87 e1 13 f7 d1 23 96 7e 9f 96 fd c3 ea ab 69 85 8c 71 6a ae da d7 2d bb 5e f5 6f ec 63 51 20 a2 8b e7 34 38 d9 a0 75 5c 0a cb 12 4d c8 2e bd 60 fc d6 c6 16 d8 fd 4e f3 bb 81 2e 18 01 d0 9b 95 e6 3b 0b 7f 53 0c 40 97 33 8f 0a 8e ee ea df 6a 76 72 47 fa 54 37 26 4b 67 b6 56 e7 36 df ad b3 15 0e 01 1d d5 b5 38 59 71 9b 13 db be 0f 3f e5 e2 e0 d1 90 d4 f6 62 d5 d5 67 b6 bd f5 a1 66 92 9e 05 a0 cb de 16 54 70 44 d7 ea 62 f5 ad 0d f7 be 63 63 29 ba 2a 74 48 ce d2 19 99 46 77 3d bc fc da 70 22 4a c7 27 bb 7a b7 db fc ac 0b ed Data Ascii: 0N:iZv[ahpvm!tXgdNSqYm5qwBx #~iqj-^ocQ 48u\M.`N.;S@3jvrGT7&KgV68Yq?bgfTpDbcc)*tHFw=p"J'z
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: cf fc ea 01 49 66 f5 60 39 cc 51 a0 88 c9 79 65 2d ad bf ba d5 cb df c8 90 e4 64 3e 3d 79 52 c0 8e cf 5f f9 c8 cf 5d 2e 04 12 eb 9a b7 0c 50 84 b1 60 fb 57 0e 8b 2e 7b f5 6a fb 77 03 1e 9f c5 af 37 65 54 ed 9a 22 72 ac ae 2d 3e dd 01 cf cc 72 bf 3f fb fd e2 89 cd fb c0 0f 1d fa 93 06 3f bc 35 be f9 99 e5 db bf e8 02 6c fb fa 72 b8 92 9c 79 6b 37 0e 3c 1f 00 0a 43 96 0a 5d a7 34 57 82 d8 b3 f8 d4 8f 05 9c ec fa 8b 2c f3 73 bf 4f 9c f7 c9 b7 c7 7d ff 06 36 df 21 3c 56 40 c1 39 6d 9b e8 dd 37 de d1 e6 a1 d2 de de 71 fd ef 87 e6 25 fc e6 ec 8f 3e f0 c6 67 0e 7f e9 de bb 20 34 46 23 cf 2c e4 bf 4e 35 4e da 23 7c 08 0f 0a 3a 20 04 ca 1b b4 82 ca 6c 44 45 28 f5 bc be 2f 89 bd 46 e2 2b 51 a3 3c 6d 2d 51 c1 c3 b4 1c 37 92 87 4e fd 4c 78 10 72 d8 97 44 7f 3b a7 65 Data Ascii: If`9Qye-d>=yR_].P`W.{jw7eT"r->r??5lryk7<C]4W,sO}6!<V@9m7q%>g 4F#,N5N#\|: lDE(/F+Q<m-Q7NLxrD;e
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 22 75 d0 b1 06 47 c0 a0 dc 91 19 7b 42 6f 81 a3 68 49 ee 1f ab 70 b0 2c 00 1d 35 66 79 be 26 c9 92 6c f7 73 74 06 91 1e 3d 30 cc db 82 4b 43 91 16 83 03 40 09 00 05 c2 12 64 ca 21 da 17 04 12 eb cc 6b 4c e2 ff 9f b0 29 6b 99 e5 00 fb 2a 00 33 f6 bc c3 24 69 a7 64 09 f2 ec f0 aa 30 af 2c 9c 01 40 d3 e4 e7 31 57 96 e6 82 8b d6 ab 9b 41 e8 ae 2b af f5 96 48 fe 4e 48 b5 34 0a 15 67 35 f7 d6 d4 cc 52 ba 75 b7 e6 56 04 2d 2e c6 98 d5 1d 96 f1 66 5f b6 c0 bb ea 43 7a 0a 39 3c 14 c5 01 a0 48 7c 4e 01 c0 c0 70 1e cc 92 eb 1c 27 03 b0 b0 dc b8 4a cc d9 ee 15 00 66 93 c8 c2 0e 70 bc d4 59 cd 14 e6 fc 4d 18 05 d4 0c cb 1a ad 19 7a 93 07 2c d2 51 e3 f1 10 1f 38 02 04 88 c2 41 e9 3b 17 1a 04 80 98 33 b7 98 00 c0 a2 10 f5 55 2d 45 d9 77 12 6b 7e e1 62 77 47 a8 0d 75 da Data Ascii: "uG{BohIp,5fy&lst=0KC@d!kL)k*3$id0,@1WA+HNH4g5RuV-.f_Cz9<H\|Np'JfpYMz,Q8A;3U-Ewk~bwGu
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: c8 b9 92 6e b1 63 5c 68 10 00 8b 10 a5 61 d5 47 02 80 36 21 c7 cd 62 51 60 aa 8c 58 94 be fc fa 8c 20 c4 21 ef 2b f8 e3 d7 22 2d 99 35 9a c1 1e 85 d8 0a 09 51 a8 23 53 33 f6 5e 37 58 8c 83 97 c7 18 e9 a9 79 0b 62 19 0b f0 72 c6 08 76 ce 1c 45 b6 23 1f 92 0c 48 32 24 19 8a d8 c4 d5 b9 cf 39 e3 ff 17 fd 35 c0 03 ac be 17 a0 70 00 1c e2 3f 8f 52 ec 44 31 73 f6 53 28 8a 73 d6 07 39 c7 06 08 49 db 4e f6 fc ff 54 cb 03 34 9e 89 2c 01 90 25 11 bb 02 27 00 1e e4 ab a5 5e 14 38 a2 10 64 8a c0 68 ae 96 4a ee 06 29 3f 55 ee 82 0c 40 11 a5 3e 90 04 62 e6 9d 3f 19 43 b1 04 eb 51 0a 01 c7 68 5a 62 cc 0f 3f b0 b2 23 9d 2f 85 63 58 4d ed 9c 78 c7 09 5f b5 54 d5 c1 c5 68 70 e6 53 cc 58 0a 22 d3 48 a4 d8 4c 00 d0 b9 8e 41 59 1f f6 99 bc 45 6b c2 f0 6a 7c 78 58 b1 9e 5c 15 Data Ascii: nc\haG6!bQ`X !+"-5Q#S3^7XybrvE#H2$95p?RD1sS(s9INT4,%'^8dhJ)?U@>b?CQhZb?#/cXMx_ThpSX"HLAYEkj\|xX\
2024-04-19 14:07:10 UTC	1018	IN	Data Raw: 44 05 8c bc 76 30 31 d7 cc 06 16 68 23 ff 7b ff f8 f0 3f 62 aa 19 84 8c d8 0b 96 6b cc a8 5e 06 42 80 0a ee 8e 35 86 f6 6a b9 02 42 c0 96 c7 92 f0 ac 96 cc 39 0a aa 58 20 a4 75 16 b4 54 ab 17 21 a2 2d 6f 27 ad 7a 89 0a 26 f9 2d a3 6e 85 a1 6d 79 7d 5f 02 0b 57 8c 30 42 f3 9a c7 cd 1a 60 66 b5 ac 32 12 78 6d 79 8d f4 5a 2d 20 42 31 f3 f6 94 a8 59 01 62 bb a1 e5 f4 94 5d 2f 2b f1 fd 8e ec 17 29 a9 5e 46 20 98 9d 25 a7 a5 bc 54 cb 9c 01 b0 5e 79 23 e7 54 9c a0 55 4b a8 60 c0 5f e5 5c 95 9a d5 32 10 08 b4 c1 9a 13 37 35 db 8f 8d 50 ec 30 cb 24 58 ab 65 5c 40 08 b6 95 ec 1b 07 36 b8 5a 58 91 01 06 f9 2f 14 08 98 f5 32 05 02 f5 82 b9 04 88 9a 5d 41 06 46 41 eb 11 44 ab 97 01 08 c1 9e f7 3f af 46 6c aa 56 44 5f e4 ed 84 46 9a 35 83 22 3d af 47 10 15 bb 4d 00 81 Data Ascii: Dv01h#{?bk^B5jB9X uT!-o'z&-nmy}_W0B`f2xmyZ- B1Yb]/+)^F %T^y#TUK`_\275P0$Xe\@6ZX/2]AFAD?FlVD_F5"=GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50249	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	525	OUT	GET /NntMALIH4odanPPYSqUOXsX8zy_giiK2olJiqkcxwFIOOspVrhMi9Miv6LYdRnKIg-3R=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1176 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:22:17 GMT Expires: Sat, 20 Apr 2024 10:22:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 13493 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	721	IN	Data Raw: 52 49 46 46 90 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 47 04 00 00 2f 3f c0 0f 10 4f 07 b7 b6 6d d5 ca da e7 ca c7 5d 43 3a a0 22 ca fe 35 00 91 eb bd f7 ec 88 1e 20 47 92 a4 48 f2 ec 63 14 e5 24 3e 5d 4e 12 a6 1f 33 cc 74 c2 91 24 c9 b5 52 3d fb f5 ff 68 b0 fe 25 f0 38 36 36 87 c0 c7 d5 5a 6b f6 ed 4e 13 4c d2 08 fb ff e5 95 ae 03 07 51 46 cc 90 fe 99 a1 4b cd 9a 13 4a 10 d1 df 84 27 72 85 6b 06 26 ca f8 a1 60 67 6e e0 1b 11 1c 42 80 e0 1c 04 45 01 a9 96 aa a5 50 48 50 20 05 a4 99 90 00 29 0a 88 00 12 02 44 00 f1 ee 95 cb e3 53 82 02 02 81 40 10 20 22 10 54 10 08 02 04 02 88 40 a0 7d b0 01 02 6d 80 40 5b 20 60 00 22 80 88 40 44 56 aa d5 c1 9f 6f a3 bf 52 37 fc fa e9 bb e9 d3 2c 60 06 88 75 30 03 cc 0c 49 9d Data Ascii: RIFFWEBPVP8X??VP8LG/?Om]C:"5 GHc$>]N3t$R=h%866ZkNLQFKJ'rk&`gnBEPHP )DS@ "T@}m@[ `"@DVoR7,`u0I
2024-04-19 14:07:10 UTC	455	IN	Data Raw: 89 85 6d c4 5d e4 e7 46 0d 6c 4e 7f 9f 99 05 24 27 08 c8 36 57 88 ea cf bf 9c 96 0b 84 5e 47 7f 6e ed ad 69 76 ee c7 94 e1 83 b2 9b c5 3f 15 d0 75 ba 70 96 9d 39 35 79 6c 5e 71 56 b3 b0 de 08 fa fc 3f 7a e2 b8 5c 0e 1f 22 3a 38 67 5c 1e 2f 1a 92 23 96 40 b9 04 04 3f ee a5 42 df 23 5f 9b 1a 95 f2 e1 ed a4 3c ce f9 a8 01 99 19 4a 49 8f 09 e9 a9 ec df b7 46 e5 7c 79 35 5a 54 30 b4 9f 22 a2 e8 47 ca 8e 35 29 fb f8 66 62 1e c8 c8 81 59 ca d2 83 31 7c 1e 56 08 e5 8f c9 55 03 a1 e7 d3 eb f1 5c 92 e2 c1 d9 2a 7a 5a 3e c9 fb 77 13 f2 64 32 a2 bf 8a 49 5a be a0 93 b3 a7 4f 93 c9 d4 19 b3 5a b2 20 b5 59 6f e0 23 1b 83 75 f8 d7 fd 4f 47 6f d9 b0 5f e8 96 1b 79 2b 84 71 6c ce 6e 90 03 83 dc 38 b2 45 e6 de 80 fd 7c cd 9e 40 d8 22 54 5d 0c 3d 01 2f c3 ce a4 31 c0 d3 90 Data Ascii: m]FlN$'6W^Gniv?up95yl^qV?z\":8g\/#@?B#_<JIF\|y5ZT0"G5)fbY1\|VU\*zZ>wd2IZOZ Yo#uOGo_y+qln8E\|@"T]=/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50250	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	530	OUT	GET /rYYXBg1-E5-3Tesa9TW8DSEURcSNbXd1yrt4WDGTV-CA5aPGBH-h4uCpoFIV_w4za2M=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 8272 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 48 20 00 00 57 45 42 50 56 50 38 4c 3c 20 00 00 2f b8 c0 49 00 f5 86 da b6 6d 98 e8 ff c7 d3 db 14 11 13 20 9f 11 94 48 63 fa 18 f0 ff 57 f6 b4 19 f3 d5 71 77 97 18 4e 15 77 af bb 1b 6d e7 be 55 a8 bb 17 77 0f 09 10 a8 3b ee 6e ab e2 ee ee 2d ef c5 39 e7 3e e7 81 e7 e6 bc fe be 2c 04 9a a6 3c 48 2d d2 94 84 25 2c c3 da b0 10 32 42 58 e8 3d 4a 03 e3 ca 48 4a 1b f8 a7 4f 85 2c 64 c1 72 11 96 36 d0 06 3c 47 b6 ad da b6 6d 5b 5e d7 da cc cc cc 5b 9c bd c3 5b e1 1d de 12 30 e3 80 de 5b ad ad 94 92 7d d9 b6 ed b6 cd b6 6d 63 ac 1d 00 ec 0d 49 a4 2c 80 36 75 e7 8a 5c f5 bd cf ef a2 dc 75 b8 8f 72 0e c2 ea bf 24 b6 91 1c 49 62 5e 45 6f d6 54 f7 d6 9c 1b 73 f6 2d d7 b6 6d c5 52 be d4 fb b9 4b 84 bb 3b e4 ee ee ee ee ee ee 0e 65 ed de 55 75 ea 45 f7 07 Data Ascii: RIFFH WEBPVP8L< /Im HcWqwNwmUw;n-9>,<H-%,2BX=JHJO,dr6<Gm[^[[0[}mcI,6u\ur$Ib^EoTs-mRK;eUuE
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 59 7b 05 68 19 df 7f 0e 58 8a bd 5d 3f 65 c9 92 5f 74 7d 3c 82 5b 8e d3 bb 11 9e 8e f1 5e 5e fa 84 a1 a8 15 7f da 75 f5 10 f4 e0 a1 cf cd 1a 9e 61 e2 c7 1c 4a 64 30 dc ff d4 2d 0c 42 7f 7e ea 0c d5 e3 e9 77 83 15 63 58 ab be be bc 0e 0f 47 5b d0 4c a4 db 6b db 08 35 e3 51 f7 02 43 f8 f6 0b f0 d5 e9 d5 7f 32 4d 3e b4 27 2e ef 52 6a a2 c4 c4 07 a5 27 72 55 73 01 70 6a cd 37 1e 49 3c 98 80 af 9e 8c 00 dd c3 c9 77 87 bb 26 ea 44 00 a8 1a af 9f 0a 97 74 99 f2 3c 80 ac b7 da 12 a0 4a a2 64 02 e0 8d 2c 67 19 85 a1 18 c6 ce 4c 75 ad a0 a8 1f 47 42 69 79 e3 94 bf 61 71 5e 5e 07 10 a0 71 bc 6b 0a 9c 51 bd 03 01 a0 76 cc 37 05 da 86 5f 77 05 28 38 f1 78 5c e7 6c 50 68 e2 d1 04 00 c0 ca ef 57 05 00 98 f3 44 18 85 14 d7 36 b3 23 7f d4 b5 5f 48 bb d7 de 00 f0 a8 98 80 Data Ascii: Y{hX]?e_t}<[^^uaJd0-B~wcXG[Lk5QC2M>'.Rj'rUspj7I<w&Dt<Jd,gLuGBiyaq^^qkQv7_w(8x\lPhWD6#_H
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 96 fe be 3b 67 38 b7 0c f7 6d 83 73 86 fb be 01 65 86 ba 7b 7b 4f 54 7d fe 78 e9 0f 6a cf a7 c6 f3 99 f0 fa 11 ff f9 8c f2 f2 cb a4 75 2b 90 d2 93 6c d5 44 d6 fd 71 7a bd 66 ed 2d d1 2c f1 a7 aa a4 c6 4b 8d 93 1a 6b 6a cc 54 8f 58 53 62 a4 46 4d 8d 9a 16 75 6a 94 34 4b ff e8 a9 31 a7 7a c4 9c e2 31 dd 63 95 c7 aa e9 ab 62 a4 ad 22 2a c6 54 bf e8 69 7e 7e 6f e1 8a 3e 35 5a 1a fc 3e 5a 2a bc 12 4b c6 04 59 31 80 3a 5a 45 07 ae 68 40 dd 9a 35 5e 6b e8 15 15 94 8a 2a 23 a7 44 4a 15 54 a4 a9 7f 5c 17 31 2d 62 aa a9 82 59 91 a6 ac fb 23 bd 22 a7 fe 35 4a aa 32 7a 9a 46 96 43 6b 86 7b 7b 06 42 95 14 96 3a 22 d7 79 8f 3f 4b cc f5 a5 be 32 b6 8c b4 88 88 88 d2 d5 15 cd 47 58 44 c0 bc 08 72 1e 51 7b 51 ba ce 43 9d a0 ec 70 85 5f d8 d9 85 97 ff f8 47 78 98 e2 0a 07 Data Ascii: ;g8mse{{OT}xju+lDqzf-,KkjTXSbFMuj4K1z1cb"Ti~~o>5Z>ZKY1:ZEh@5^k*#DJT\1-bY#"5J2zFCk{{B:"y?K2GXDrQ{QCp_Gx
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: ed 84 7e c1 a8 14 77 fc 38 e1 f0 03 71 07 91 ca 38 eb 2f e3 e4 7f af 2a 5f 9f 71 bf 35 0f fe f6 55 7e 65 a5 40 a5 eb 9a 42 1e dc db 8f 7b 05 aa b0 3d fe c6 a4 23 8d e6 df 42 14 a5 60 59 3c bc 93 3f 96 0e 93 57 95 0b 65 43 19 96 40 91 e0 9e 97 25 e9 3f 79 7e a1 50 96 1f 6c 7e a7 38 c5 4d 71 69 2c 8c dd 38 fc 6f 2d 7e 5c ff 4f fb f3 79 e4 cf 6f 29 bf dd fc 29 61 8a 63 a3 7a cf 32 69 40 8f d0 92 3d ed 4f 4e 53 ca 8a 38 8f b2 11 91 4f 17 66 21 16 42 19 e0 7b 56 59 5e f6 e1 ff 03 fd b2 e6 f8 c1 56 e8 43 75 02 42 bd 50 0a a8 f5 d4 4e 65 c4 42 bd 3d 14 5b 65 fb ea f0 96 c6 a7 aa b4 d0 91 7a c4 5d 57 fa 6b 42 27 f8 4b 92 72 2b 71 21 52 4a a9 da 3b 9d c6 39 c3 f6 08 b5 92 aa 3c 8a 07 07 54 9a c1 61 2c eb 3d 61 e2 fd 11 f3 ec 8d 91 9b 13 ee 82 b9 0d d6 36 df 7b 8f Data Ascii: ~w8q8/*_q5U~e@B{=#B`Y<?WeC@%?y~Pl~8Mqi,8o-~\Oyo))acz2i@=ONS8Of!B{VY^VCuBPNeB=[ez]WkB'Kr+q!RJ;9<Ta,=a6{
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: e3 bd 71 34 fa 85 7b 12 95 e2 7d b1 7b 68 c5 37 fa 52 4c 72 c8 54 d3 03 61 44 18 07 c4 50 73 aa 24 e6 89 e6 42 b1 b1 93 94 1d a9 a7 33 1e f8 44 fc f8 11 00 e2 81 87 06 e6 24 c4 b4 f9 74 5f 86 ec c1 c1 07 3e 3b 14 c8 c7 39 80 c8 d6 bc cc 2f ae f8 88 62 62 aa 2c b2 f2 e7 ad 2f 79 68 db 54 54 18 5a c2 78 c4 0e 0c f1 29 0e 7d 05 3c 98 17 84 8f e5 f3 50 a1 10 20 09 1c f1 31 67 57 4e c9 3a 4d 7c 31 9a 59 6e 4c 04 1c 32 73 40 1c a1 8c e2 a4 be 13 c4 9c 39 2b 56 30 a9 9d 03 9d 76 00 44 65 f0 1e 2e 87 28 77 98 b2 06 41 d9 e5 4a 42 bc f1 ed 73 56 ec ca 89 09 2c e2 8a 8d d6 96 d6 58 2a 20 23 11 48 80 78 a5 48 58 8a 78 d8 cc b2 4c 37 4e 88 37 19 47 4a 46 c4 dd 8f 90 b5 89 ca 88 ee 3d df 3f ac ad 1d 64 90 83 66 7e e1 b3 7f f8 71 a5 db e2 a8 db ec 68 e8 71 75 de 73 70 Data Ascii: q4{}{h7RLrTaDPs$B3D$t_>;9/bb,/yhTTZx)}<P 1gWN:M\|1YnL2s@9+V0vDe.(wAJBsV,X* #HxHXxL7N7GJF=?df~qhqusp
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 2c 2f ce b9 48 e2 d5 b7 df de cb 5a 92 b8 5e 83 d5 be df ba f6 10 a7 89 e6 cd d6 0c 2f c1 e8 c7 18 ff 39 92 45 0a c2 20 27 8b b4 b3 d0 a9 5c 47 b0 9e fb ad 24 89 e8 17 86 b3 bd 98 68 03 65 ba 38 93 e1 24 2a 39 27 04 d4 63 47 cb b4 d3 e9 8e eb fd 3b f7 6d df 95 b2 35 f2 ae 42 1e c8 0f 42 6f 2b 8b 04 3f e7 9c 20 d0 48 82 bd bb 19 cd 05 33 02 b9 2b c8 21 c2 77 89 89 e2 55 82 0f a3 c9 35 e3 f7 fb ba b8 e8 6d c2 36 86 40 6e 24 0f 9e 51 03 d1 b3 23 57 6f 81 bc 8f bb 68 01 81 51 e8 0f ca ff 6f e0 61 40 4d 94 87 11 40 7d b4 06 d2 08 00 5f 30 34 c1 3b 3d 01 d0 15 f0 24 86 83 d4 18 8c ff 80 c2 13 11 1b 80 d1 10 fe 1b 1a cd 62 17 d2 3c 11 64 f2 ea ea d5 ab 0f c6 31 92 41 6d 1f 41 6b 8e 45 b4 86 0e a6 df 8b 67 71 1f cc b4 d0 17 f7 a0 3a 2c 16 3c 8a 0a 78 04 0f e0 31 Data Ascii: ,/HZ^/9E '\G$he8$*9'cG;m5BBo+? H3+!wU5m6@n$Q#WohQoa@M@}_04;=$b<d1AmAkEgq:,<x1
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 60 4c ab ed 0f 31 3d f0 8d c6 ba b1 58 22 12 7e 0c 01 81 6b ce e5 de 4b 46 c7 57 4d 4c d0 58 cb be 90 30 3c b8 86 8c e3 c1 0a c1 85 9c f8 16 b6 64 64 9a 2e 5b c3 f0 32 0f 38 53 d9 22 5b 70 23 0b 27 06 2d 2c e4 81 66 f0 a5 48 0c 13 c2 11 98 e0 c0 b0 49 96 90 7c 35 c1 81 f2 95 98 b6 98 fb 6d 60 3c 62 e3 70 c2 d3 dc f9 d3 e9 54 e8 16 84 f9 88 ad ba 0f 41 c3 37 78 a0 98 90 31 5d 86 d3 d0 55 b9 07 37 27 ca 7f c9 c4 c9 83 63 8e 07 19 93 cc fd 98 17 22 39 71 cf a4 49 e6 6f 64 9e ce dd 26 09 d0 11 3b 11 ff 62 3c b9 e3 61 83 ac 25 c8 f6 88 cd b9 86 bc c5 7c 5a a6 2c b2 4c 7b 78 70 cd 6a e2 38 29 39 4e 92 53 65 5a c2 41 e6 e6 4b 17 67 4a 67 db 0f bc 93 14 e4 ca a5 27 21 f3 34 c6 12 04 7f c4 bb 40 03 61 2c 99 43 2e e1 5f 60 27 cb a9 8c b7 fe 0e ea 9d 7c e0 e3 a2 53 Data Ascii: `L1=X"~kKFWMLX0<dd.[28S"[p#'-,fHI\|5m`<bpTA7x1]U7'c"9qIod&;b<a%\|Z,L{xpj8)9NSeZAKgJg'!4@a,C._`'\|S
2024-04-19 14:07:10 UTC	9	IN	Data Raw: be 83 36 e5 02 49 3e 7e 00 Data Ascii: 6I>~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50251	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	529	OUT	GET /j0W5FC6v_GeR-8Z-YnXqrhR3Rw2LDLJQ6yQ6HpnzzRdSrz9Wcl3bylBnjpRnrEQzBQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 7790 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 66 1e 00 00 57 45 42 50 56 50 38 4c 5a 1e 00 00 2f a5 c0 49 00 f5 86 e2 b6 6d 1c 69 ff b5 d3 ae be 23 62 02 38 d2 9e b3 04 74 56 22 13 1b 72 55 87 1c 39 58 47 c0 b0 66 7e 12 3b eb c8 ef 5a ad d4 9d 69 8a 15 fd e1 ff bf ca 69 fc 7f a9 21 f1 ba 61 75 77 77 77 77 1c ea 45 ea ee c5 dd 35 02 71 0f 0e 75 77 77 77 43 c3 d6 b1 ea b5 67 ce 9c 49 9f e7 bc f2 ef 0a 90 c5 66 c3 66 b6 c1 4a e8 93 a6 4c de b3 9d 2e bc 93 66 df 21 83 1d 08 e4 bd 64 29 69 53 66 af 43 4e df a1 9e 76 b0 a9 9d 7d 13 28 e5 48 92 14 db 96 e7 05 11 1e fd dd 17 9b b5 fb 7b e6 3f 15 14 23 49 52 24 5b 1e 35 0f 3e 33 e9 af c8 d7 e2 eb 82 93 fd 87 05 c9 b6 94 a6 af 1e 73 5f 01 79 b8 a1 59 ff 3d de ff 7f ce 8d ff 7f f9 07 5e 36 d6 b6 6d db 46 ed 36 9c d4 b6 6d db 08 6a 23 a8 6d db 4d 06 Data Ascii: RIFFfWEBPVP8LZ/Imi#b8tV"rU9XGf~;Zii!auwwwwE5quwwwCgIffJL.f!d)iSfCNv}(H{?#IR$[5>3s_yY=^6mF6mj#mM
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 01 4d 41 6f 78 42 ce de f2 03 20 70 4c ca 27 8b d0 09 66 76 07 ce cc d1 11 8d 01 23 c5 b1 62 2d 57 31 37 0e 6a 8b 8f 47 c3 15 eb 4a 61 b5 91 4e f8 e9 70 38 1f c0 da fc 03 0a 99 ac 8b 1b 5e ff 6b d2 e2 f4 80 79 cc d4 5a a3 6a 88 6d f6 8d bb a8 e6 26 ec 13 4b e8 07 b3 98 6d b9 6d 33 9b 2b 45 0d 3a c2 35 6a 07 77 79 09 b7 d2 ae 27 9e 28 e7 6a e2 64 f7 58 96 75 3d a0 de 03 07 a8 4b 1b 19 2a be b8 e1 b4 07 c6 8b b1 72 98 21 b7 59 b0 0b 88 5f c2 30 a0 36 12 1e d8 16 00 d8 22 b3 e2 9a 14 73 a9 9d 91 e3 38 11 41 f6 6e ca 37 75 67 6b 3f 98 cd 0b 77 e8 cf be 82 89 f6 b8 02 ce 4f 59 5c 5d b9 dc d4 5a c3 aa 08 47 78 4e 89 3e 02 37 ff 7d 01 8f fe 1b fa 81 2b 05 8e 4e 59 b0 a2 6e 6a ed e1 aa 88 e9 c2 5c cb e2 3d 24 6c 9c 69 cc 02 05 22 ce ca 71 98 a8 0b 5e c6 c4 ef a1 Data Ascii: MAoxB pL'fv#b-W17jGJaNp8^kyZjm&Kmm3+E:5jwy'(jdXu=K*r!Y_06"s8An7ugk?wOY\]ZGxN>7}+NYnj\=$li"q^
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: f4 4c 4e f7 52 fa 65 4a ba 97 fb c9 74 67 3a a6 eb a7 3f f4 34 7d b9 9e 66 32 5b 7f 33 97 d1 f8 37 f3 65 8e 71 ec 17 63 a9 b2 60 8e c5 9a 32 c5 42 53 2c 76 53 2c 57 aa a5 52 ad b0 c6 5a f3 33 af 10 11 4f 5c 77 c3 92 d0 ea 83 88 38 2f 1b b3 27 79 c8 c7 51 1c 4d f8 91 14 24 3f 03 0f e7 30 0e e5 10 0e e2 40 f2 32 38 17 39 c9 81 26 3b 41 41 1a aa 8b 8d 95 9b 43 6c 72 72 32 7d 0e d9 c8 d6 b2 22 1c c0 88 fd 09 db 8f ae 5d f7 65 fa 3e ec 4d 74 f4 5e 50 d5 91 aa 3d f8 f6 db dd 91 d5 ee b6 1b 11 bb d2 bb f7 2e cc de 99 9d d8 81 ed d8 86 2d d9 8c 8d 58 93 e5 c9 c0 fc 32 95 84 18 f6 14 6c b8 d7 b2 bc 3c 68 f2 72 a6 84 1e 4f 71 4a f1 fe d9 9c c2 b1 28 0b 30 6c e0 11 50 1f 1d cc f8 c1 b9 49 8e 0d fa 69 44 57 da 7e 47 47 27 d2 2a 3a 3a f4 5b fa 1e cf fe fc f3 71 b2 da Data Ascii: LNReJtg:?4}f2[37eqc`2BS,vS,WRZ3O\w8/'yQM$?0@289&;AAClrr2}"]e>Mt^P=.-X2l<hrOqJ(0lPIiDW~GG'*::[q
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: fe fb ce 84 52 4e 52 60 24 a0 0f 96 80 99 18 e8 9e c0 c0 c0 59 22 45 75 ea 93 c8 7b a6 78 55 2d 1f 95 b8 ca 75 3e 94 2a db 54 a8 22 9d ee 94 bb 62 97 73 a4 1a 12 1d e2 45 c9 1a cb db 44 65 23 bb 2a 72 29 d5 e5 4e e1 4e e7 a0 a2 97 5d 86 1d 77 67 2c 79 95 2f 71 56 d9 12 15 72 d3 01 f7 14 ce 39 09 29 94 02 5d 05 49 b2 b1 a2 83 26 fb 0f f3 c7 d9 d2 a9 6f 6d 6f 7d bc c8 f0 ef 37 0b f5 dd ee 7f 7c 4f bb 70 0b dd c4 9c 80 29 ba e1 3b 9f 2d 0e 33 d5 31 d7 11 5d be bb 5f f2 5d f9 3b da 55 fd df 45 bb 2a 75 f6 55 55 27 de 05 56 aa 33 2f fb bc ed 48 a4 e4 9e 73 ee 1a 4d a1 52 39 aa 63 b1 ab 62 79 e0 4b e9 ab e4 15 57 e2 2a 5a 75 11 bd 18 2b 7e 53 f8 6a 4c f1 ce 50 ad 4a 56 c5 44 55 4f a1 cb 19 51 f1 45 c4 d4 4a a2 ca 58 d7 64 7d 91 bf 9b fc 3f 77 39 7f 4f 19 7b dd Data Ascii: RNR`$Y"Eu{xU-u>T"bsEDe#r)NN]wg,y/qVr9)]I&omo}7\|Op);-31]_];UEuUU'V3/HsMR9cbyKWZu+~SjLPJVDUOQEJXd}?w9O{
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 6b aa 21 db 0b 46 f9 0d 63 34 29 04 d3 98 09 4a 45 2f 6e 0e d1 a1 31 dd 2d 13 20 15 0c df 21 3d b6 13 8c 8a 1b e9 61 b6 5b 7a 7e 81 6a 36 23 3b 04 c7 8e 68 06 40 45 c5 a1 74 22 58 90 e9 cb 41 a9 64 b8 29 1a a2 c3 4c cb 30 11 4a 67 16 87 83 44 5f 8b 9e a9 70 eb 6a 55 d7 2c f6 48 a5 4f c9 02 91 56 2d ab 75 04 a3 b2 e1 f7 ac f1 b3 a0 6c db 69 f5 9c 34 2d cc b9 84 c1 60 70 a9 07 49 92 c7 de bb e4 da 5b 62 b6 16 d7 e1 00 fd 74 2a 6b 4d a0 4b d1 74 92 41 1e 93 2a b6 ca d0 4d ae 16 c6 ed 56 26 56 4b f2 90 9e 55 c4 de 20 b9 86 f4 47 ad 6d 04 9f 83 d3 71 8d 64 08 57 84 be d3 e2 d2 72 7f 3c 6c 75 7e 92 f0 d6 a1 2f be 30 bb bc 59 e8 87 e7 da 4c af 9d 52 cd 2b 63 37 63 81 7b aa b4 54 66 42 3f a0 a2 33 2b bc 72 3e b5 9e 8f 74 0b 8d d3 fc 0a 8b 8b 1b 89 6f 1c 58 2d 7b Data Ascii: k!Fc4)JE/n1- !=a[z~j6#;h@Et"XAd)L0JgD_pjU,HOV-uli4-`pI[btkMKtAMV&VKU GmqdWr<lu~/0YLR+c7c{TfB?3+r>toX-{
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 80 f0 cc 05 c4 66 c8 b6 1b 59 b1 5c 99 ea 3d b0 c8 09 c9 46 58 91 1c 03 67 11 de ac 2b 91 f3 24 0c 2e e1 46 5e c3 15 77 04 a1 0d ce b4 45 10 9e a6 39 82 f0 1f 66 f7 92 72 5b 51 5a 48 b8 d9 c9 b9 b5 de 5c fc 16 50 63 67 fe d2 90 26 34 e2 7c 2e 44 55 8f 7e 81 aa 9b a9 83 07 7d 78 4f 54 37 71 1d aa db 70 60 42 19 ae 81 d7 bd 4e 33 f4 63 2f a2 01 71 97 d3 16 27 5e e1 11 b4 b7 50 0d 9d 70 05 4d f9 b9 cf 55 1c 45 7c dc c7 36 dc 49 70 dc c7 06 57 02 f5 25 68 c7 75 75 6f 39 a2 1e b0 a4 1b 75 50 3b e7 78 d1 01 3a c2 5e b0 1d a4 13 ec 03 9d 60 7b f4 b8 2e af 4b ea ad 37 b8 bc 9a e7 05 fc 11 56 ca 94 10 f6 e2 7c ee 66 68 8a 1d c2 17 31 05 b8 95 f3 b8 80 17 f9 73 aa 0f 82 b2 38 fd 6b d2 0a e1 e7 f8 de 2f 71 37 a2 20 4c 18 6f c3 e4 d7 79 95 7e 23 e3 ab 13 f4 cd 84 c7 Data Ascii: fY\=FXg+$.F^wE9fr[QZH\Pcg&4\|.DU~}xOT7qp`BN3c/q'^PpMUE\|6IpW%huuo9uP;x:^`{.K7V\|fh1s8k/q7 Loy~#
2024-04-19 14:07:10 UTC	782	IN	Data Raw: fb bb dc 3f 36 f2 85 15 ce 70 9c 3a 81 97 63 f2 23 39 a2 c1 07 46 a1 60 c3 51 b8 32 5b c1 65 3e b8 46 a4 d4 51 bd 3b 5b 37 7b d3 db a5 5e f9 bf 21 db 76 07 b6 6d b5 33 9f 2a 8f e8 15 79 12 a0 86 e3 8c 51 94 04 cf f7 bf 4b 7f fd 67 fe 77 bf 2f f8 ce b7 eb bf b7 93 24 5e 9b 7c 76 b5 d5 f4 da 42 71 6d 05 c5 03 8f 30 1b 0b c5 69 b8 ae 9f 8c d7 db 3f 95 be fa ab d8 6b bf 15 7f e3 e7 18 bd a5 b4 a3 f3 b2 ec cf cb b4 bb a0 44 b7 20 10 e8 0b 1b 9c c0 95 e0 36 c7 d0 9a 7a 97 ad cb 0e 99 5f fa ba 4a f8 dd fe c0 8e 9d b6 83 87 e8 ca fb ac 70 d9 70 ea d6 58 c3 e5 e1 5a a9 23 9e 56 36 07 68 7a e5 9b 8a e1 af 79 a2 bf ef f5 84 99 b9 a0 78 6d 94 14 2c 04 af e4 68 f9 a4 9f 2b 22 5d ca 0f 7e aa 1c ff b6 39 80 f9 82 d8 e1 8d dc 9c 5c a0 74 34 07 8a a7 d1 94 80 b3 a1 f3 c0 Data Ascii: ?6p:c#9F`Q2[e>FQ;[7{^!vm3*yQKgw/$^\|vBqm0i?kD 6z_JppXZ#V6hzyxm,h+"]~9\t4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50252	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	530	OUT	GET /Rv_Fumphjg7BH6I8_sA7PPA2R4Vyq2twJ7ijutwLd54zbDD-d_tDWk9miKA6Kp6cWCM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 8420 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 dc 20 00 00 57 45 42 50 56 50 38 4c cf 20 00 00 2f b8 c0 49 00 15 87 e3 b6 91 1c 49 cc 3f ec b1 bb 67 de 11 31 01 7d a2 31 21 38 d8 5f 54 a8 a1 53 bb 77 3a 7b ab 0a 2a 0b 43 e8 ba 1b 86 ca 61 98 fd 48 d7 ca b5 0f c4 1d ca 86 8d d3 13 ef 31 7b 33 29 f3 1d 08 fd c1 92 65 f1 07 6d bb 72 b7 cd ff 95 b9 66 4b 61 66 5b 32 86 49 14 b3 cb cc cc cc cc cc cc cc cc cc cc cc cc cc e8 70 32 b3 d6 bd d6 fd ec 7b 6d ad 7f 4b 9a b1 ca 01 79 30 58 0e c9 96 52 4d 15 d2 cc ce 9a 51 2b 17 dc 86 99 23 a7 d5 d4 01 6b c6 f5 04 b6 ca e1 44 89 ca e1 44 86 72 60 b9 21 85 b3 d3 71 98 d4 b1 de 77 c2 89 c3 a4 a2 21 96 63 db b6 6d 1b 7d 3d 14 41 13 69 22 f5 2f 94 58 78 ee bd fb b3 d6 94 50 db b6 dc 36 fb 39 d2 ff f2 ff 4e d2 49 f2 aa 83 a9 20 4a a1 18 0a a1 28 66 6e 05 a0 Data Ascii: RIFF WEBPVP8L /II?g1}1!8_TSw:{*CaH1{3)emrfKaf[2Ip2{mKy0XRMQ+#kDDr`!qw!cm}=Ai"/XxP69NI J(fn
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 04 24 51 af 96 81 23 b4 8d 16 05 6c 37 7b ae 46 8c 01 4d 80 df 0e 4f 15 3e ca bd 56 34 04 c8 80 04 a3 e0 ed 21 db 34 fc 3a 49 a8 b8 44 54 8e 13 89 f7 aa ad 59 ee 06 ec af 5c 5c 02 09 d4 24 1a 2a 88 a2 12 d8 73 cc 18 60 65 94 26 02 e7 eb bb 1a 54 83 c0 b8 d1 81 b4 7f 0e 13 03 fa f4 4d a6 30 7a cc 77 79 73 81 7d d2 4b 00 d6 47 a9 05 73 c9 6e 80 b7 0a 6f 9d ea 01 64 54 71 14 7c 77 cc 0f 27 2b 3f 06 cc 31 51 84 44 e1 28 31 a0 06 34 75 ae 7b ee 23 c0 36 a0 0e c8 2a 01 20 54 7b 71 88 12 32 40 f9 a5 80 fb 4a 35 40 69 a8 f7 b2 2d 22 81 5f de 84 0e 59 24 d0 2b 58 3b b2 49 93 e7 ba 36 44 63 a8 e1 b7 71 3d c8 1d 62 b2 9b 78 73 24 0b 81 92 d0 cd 4a ed f2 c1 02 42 18 6a fa 63 0c ec 15 4f 25 55 bd a8 2b 70 a6 46 00 bb 84 6c 2b 0a b7 2e 00 d3 2a 8f 2b 68 b3 f0 00 24 0c Data Ascii: $Q#l7{FMO>V4!4:IDTY\\$s`e&TM0zwys}KGsnodTq\|w'+?1QD(14u{#6 T{q2@J5@i-"_Y$+X;I6Dcq=bxs$JBjcO%U+pFl+.*+h$
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: ce 22 12 19 55 74 05 86 53 a3 45 9f 2d 24 2b 39 4c 7f 19 02 75 7c 01 c8 ec 88 e7 18 9f 83 e4 86 ce 57 02 b0 b9 d5 51 e1 b6 48 31 24 0b 87 6b 03 00 9c 8f 4b d2 4b cc 13 be 8d 7e 63 d3 02 48 79 ae 00 d0 08 e8 f8 77 b8 c2 c2 fd 00 6c 72 24 cd e2 b9 94 94 c0 bf d7 c5 3a 0f 00 96 47 75 10 60 7b e6 6b 00 48 1a fe ca 2b 41 a0 26 b8 1f 3b bb 5e 69 fd 04 aa 36 c4 2e 17 01 80 91 53 2b f7 c5 09 b8 64 21 ca 2e 0e 66 0a 5a ee 73 b9 9f f2 74 0a 25 60 d8 36 da 3e 1d 92 2a 00 f8 fc dd 85 a3 29 ca 95 ef d2 0c 5d 37 7c e0 c9 21 62 0c 96 46 75 37 50 4c ae 1a bc 3d 55 d8 51 d2 f0 db 51 11 02 35 a0 87 0a 00 5b 9d a7 ff 7a 50 1b b4 1d 4b a3 1d 71 3e 6d 66 e0 6e ed ff 0d e5 80 78 d1 b1 f8 df c9 b4 15 32 ca d8 11 cd 7b c5 ab 0b 47 8d 28 7e 3a ca 03 c6 4e 28 e7 6e cf 60 71 d4 8c Data Ascii: "UtSE-$+9Lu\|WQH1$kKK~cHywlr$:Gu`{kH+A&;^i6.S+d!.fZst%`6>*)]7\|!bFu7PL=UQQ5[zPKq>mfnx2{G(~:N(n`q
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: ec d0 eb e9 86 d4 14 2c 25 d7 f4 ee 73 0d 87 53 da 40 a7 27 15 00 f9 80 93 1a f0 ae 81 fb d7 d2 a0 f8 57 85 6f 0a ee aa c7 ef e2 37 26 97 df e8 ad 0b 18 a1 d7 76 de 28 a8 b1 14 2c 45 d9 3e d3 49 2f f5 e4 62 6d 1e 13 4b 20 36 56 ec f0 cf bf f4 7d 73 3c c0 bf 93 44 6c 49 63 37 d9 db 06 1b 6c c0 17 8a 56 30 c3 23 33 98 a3 37 b1 06 56 aa 61 c9 d2 9a 28 ef f6 8d bd b6 93 08 14 15 d9 22 15 ad 82 55 09 a9 05 55 6a 42 6a 42 42 a4 6b 0b 16 2d d8 9a 85 6c 08 ac 19 96 35 4b 6f 2e 35 61 49 ff e8 54 77 dd ad 93 78 f2 00 77 17 52 f9 0f 86 9f e2 1f ee 4c fc 43 4e ab c7 12 56 bd 6a 0e de 6b d6 27 44 b2 24 b0 0d e0 1a 10 7a 38 4c d1 01 cc d0 ef 44 9a 03 56 8a af bd f3 1e ad 23 01 da 09 b1 8e 7b 35 df e1 e8 3d 70 dd 12 ae c1 32 f3 cc 40 44 2f f4 4b ff 73 35 83 86 4c 89 bd Data Ascii: ,%sS@'Wo7&v(,E>I/bmK 6V}s<DlIc7lV0#37Va("UUjBjBBk-l5Ko.5aITwxwRLCNVjk'D$z8LDV#{5=p2@D/Ks5L
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 73 dc d4 55 31 44 f5 0a d4 0d 17 86 1b 26 67 ee 50 82 ba 3b 6f dc 7c 31 e6 29 a8 03 23 80 6f ee 27 17 b0 77 f5 62 01 43 58 8f 47 19 be 1e 66 98 95 c3 c4 cd a6 08 01 42 5a 0f 41 15 b6 70 61 b8 97 b7 61 88 eb 25 a8 e1 47 0e 8c ad 30 85 ef 50 cc 90 57 23 35 f8 52 04 66 3f 44 a1 9e 93 6e eb 53 a8 16 bd cb a2 c8 30 8e b4 5d 4b a9 f7 63 14 d4 6f 54 f0 67 98 9c 61 12 13 13 57 1e 08 cc bf 94 9a 16 e3 04 fc 2b 32 f0 0a 56 61 ad 76 93 bb d1 e4 6c a0 a7 7c 5e 15 72 86 e1 02 59 23 1b 6d 14 0e bf 0a 23 b7 f3 1c 00 80 13 1f 8a 20 f3 05 58 58 eb 9c 15 b9 bb a1 40 bd 61 a0 fd d1 e8 a0 30 66 96 ba 03 83 01 16 3d 18 ee f4 c8 ff 4c e1 d5 31 b2 6a ae 44 22 57 46 82 66 73 3a e5 70 d0 7b 0c 46 e2 6a 2c 8e 7f 0b 1c 17 8b d4 0e 5b 49 dc 07 05 c3 82 b2 82 6d f6 2f d6 28 32 81 91 Data Ascii: sU1D&gP;o\|1)#o'wbCXGfBZApaa%G0PW#5Rf?DnS0]KcoTgaW+2Vavl\|^rY#m# XX@a0f=L1jD"WFfs:p{Fj,[Im/(2
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 3a 25 e8 9f 75 7f 26 6a ec 88 3b 0b 04 01 8d 36 01 12 be ba 5a 9e 30 c6 74 57 66 71 2a d3 2d 88 d0 3b ba cf 0b 08 99 0c f9 5f fb 72 2f 4d 5c 36 f3 44 f3 03 c7 15 84 c1 35 b9 b1 80 73 69 aa 03 df 25 91 b9 1d 03 a0 d2 a3 80 ce c4 19 30 92 7a 0f 14 b2 f8 30 c2 70 8d 94 76 fb 61 aa 38 40 fa 44 b5 5d 1a 78 16 6a bc 10 e8 4a ac 21 5d 51 59 37 74 ba 9c 91 39 56 da 4d fe 0a 95 0f 49 1c 1f af 3d 32 f0 71 28 35 6a 40 eb d9 ad 24 8a 40 20 2b 2b 37 6b ba e6 48 18 18 9d b2 ae f3 0b 95 1c 51 fb 21 b1 56 78 18 4c a9 cb 23 3f 5b 4a 73 d5 fc 5c 6e 1f 1c 4f 10 06 e6 86 83 a9 bc 12 23 9a de 5a 0b 5f de f8 1d a5 6e 86 b5 4b 49 2c 4b 25 6c 1a 32 ac b4 9a 7c 95 06 34 24 2f 20 6d 22 3d 27 56 ea e6 58 6b 53 24 6f 2e fa b5 a0 79 d8 74 39 23 6b d4 3f 9f d0 44 94 11 1c 62 b9 2c f4 Data Ascii: :%u&j;6Z0tWfq*-;_r/M\6D5si%0z0pva8@D]xjJ!]QY7t9VMI=2q(5j@$@ ++7kHQ!VxL#?[Js\nO#Z_nKI,K%l2\|4$/ m"='VXkS$o.yt9#k?Db,
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 36 7c fb f1 9e dd 4c 48 6c c0 a5 09 bb 87 3b 31 8c 9b 6c b6 21 21 b1 5f 5d c2 fc 51 66 b6 6d 4d f4 62 4f f2 b7 67 04 ba fb 64 1b 3a e7 ef 1f ec e5 c9 3c 91 e3 72 e6 e3 3e 27 df 7e 42 9e e4 0e 7e 9e 91 92 d2 3f 58 d4 c8 d7 37 75 d7 01 07 a8 6c 27 29 df 9d 2e 72 5c e6 f1 78 cc 05 19 9e e0 8b 6b 5c 7e fb 21 e7 82 dc 7d 3c e1 eb f3 c4 b6 dd d2 8c 13 d7 c1 e6 d7 5f 90 8a 80 1b e6 e6 5b 33 68 fc 45 d5 a3 0b 40 60 48 62 be bc b4 3d 8f 55 59 b7 75 e1 e3 ca 13 e9 de 1e 9e e4 f9 75 64 f1 39 d9 32 f2 e9 8f 43 3c b8 3f fe eb 0b d6 92 11 3a ae f2 98 75 48 f5 ee 34 42 36 54 01 f4 cb 7d 7c 6f 64 4a 5d 85 0d f1 76 eb a5 a5 78 ac 93 16 de 56 d6 72 f7 fd 3b a4 30 c0 19 3b de 8d 72 f4 4c b7 98 33 73 09 da 0d 38 8d f8 b8 f5 52 ae 6d 47 ce 8b 9d d4 26 ac fa 36 d9 9b 33 c9 24 Data Ascii: 6\|LHl;1l!!_]QfmMbOgd:<r>'~B~?X7ul').r\xk\~!}<_[3hE@`Hb=UYuud92C<?:uH4B6T}\|odJ]vxVr;0;rL3s8RmG&63$
2024-04-19 14:07:11 UTC	157	IN	Data Raw: 15 d5 82 29 5a a9 63 5f dc 4d 42 48 da 9a 65 5b 96 b7 c8 c7 8b 4a b0 74 53 ca 56 59 09 89 36 9d 07 ec aa 46 6b 7c 33 65 06 51 4b cd 53 05 e9 2f e7 15 bc b2 df 15 55 a0 1c eb d3 59 0b b2 79 10 2f 25 ab 41 80 5b 93 33 0a 62 a3 bc 67 ee ee 4b 0f 6f 9b 71 cf 99 04 3b 47 ca d3 13 84 4f 8b ce 44 a5 ac 48 93 e7 4e 05 3b 72 03 dc da f8 9b 67 91 14 e4 d1 85 3c f7 a6 62 78 70 e5 a2 31 7e ba 7c ec 1f 2f 19 fb a7 4b 98 5d f7 df d7 3b ff ff e2 36 07 3e f8 08 5a 8d b3 48 3b 00 00 Data Ascii: )Zc_MBHe[JtSVY6Fk\|3eQKS/UYy/%A[3bgKoq;GODHN;rg<bxp1~\|/K];6>ZH;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50253	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1106	OUT	GET /p23hsdqcrm5D0cLJxdVpLWPkNeNNY5NToUhMea5rNk1CL8xF8lsKo7xVZ1piykfztZE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 8280 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 50 20 00 00 57 45 42 50 56 50 38 4c 43 20 00 00 2f b8 c0 49 00 f5 06 e3 b6 8d 1c 89 fd 97 bd e1 f2 bd 23 62 02 7a a8 79 1e d8 c1 1d 27 75 e8 54 c7 50 41 65 a7 82 36 61 56 6d 7d ac d3 7e a3 71 70 64 f3 29 f6 e8 d6 dc ed f3 9d c5 1f fe ff ab 9c 56 db b6 4f 3f eb b8 d5 bd c5 eb 5e dc 43 dd dd dd dd 15 a8 20 75 dc 2d b8 b3 dd b5 ee ee ee ee 2e 3f fb ae c8 fa fd 7b b2 23 d3 10 08 0d 1d ca 40 48 c3 cc 19 c2 60 29 9b 86 10 24 d8 da 29 4d d3 34 27 a4 d9 1d 98 b0 90 cc 31 b0 73 26 a1 30 90 76 85 26 20 37 92 24 49 72 bc f0 08 b0 14 04 39 1e 3f b4 ff a1 02 78 70 33 bb db d3 55 49 cb b6 b5 b7 6d b3 af 44 14 02 74 37 c0 65 d2 76 32 95 5e 9f fb d8 ea d8 f2 e8 cc a0 e1 f6 5f 16 24 c9 75 db cc 19 0b ed 09 80 cf af 02 48 39 ce 3f 35 6c db 8e c9 cd d4 8e 6d 1b Data Ascii: RIFFP WEBPVP8LC /I#bzy'uTPAe6aVm}~qpd)VO?^C u-.?{#@H`)$)M4'1s&0v& 7$Ir9?xp3UImDt7ev2^_$uH9?5lm
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 5c 30 e7 5f 1a 49 5c 36 01 38 a0 88 87 49 56 c9 c8 e6 57 18 3c 60 8b 6e 39 02 b8 a3 90 5f 97 2e 08 68 1c 6f 44 d6 ca f7 11 6f 0c 66 0a 50 87 fc 29 c8 50 e5 25 00 62 72 f0 1a 14 67 8c 1b 65 65 b3 b2 9c be fb 5f 5e ba 6c 17 00 ad 74 f1 a4 32 b8 21 f0 57 aa ea 01 9c b7 bb 39 7d 75 1f bd 65 80 fc 82 8e f1 60 a1 99 71 90 ec 78 75 a0 6c d9 b2 65 fe 94 f1 b2 95 08 fb 7d b1 14 68 14 8f 13 4a dc 31 ec 22 0a 76 22 c9 1a 2c 14 21 ad 1a 1a 10 38 b4 2d 7d c3 96 2d 03 b4 09 68 40 ae 4e 00 98 28 15 12 c1 bf ae da 6b be 61 08 17 ec 8e b0 53 d1 46 c5 07 52 02 c0 16 80 0e f1 50 a1 6b a8 01 37 08 fa 69 ed 02 00 0e 60 ef 3f 44 98 ef 0b 76 2c 80 a6 54 52 5c 88 fb be 42 fa dd 9b 28 00 b6 0a 6a 90 b3 93 30 47 00 2e ab a2 04 e0 97 0a 77 54 ed 30 81 9b 8b 77 b4 89 a1 0b e1 0f 8b Data Ascii: \0_I\68IVW<`n9_.hoDofP)P%brgee_^lt2!W9}ue`qxule}hJ1"v",!8-}-h@N(kaSFRPk7i`?Dv,TR\B(j0G.wT0w
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: b9 30 1a 8d c6 27 11 17 13 c0 47 00 56 7d 73 18 70 00 5b 00 8c 4f 11 61 14 7d a4 de c3 3c 5c 4f 27 2e 25 92 b8 be f6 22 6e 9a ab db 6d c0 46 cd f4 ee d2 a5 4b 52 0f ea ea 2f c9 bb 7d 52 7b 2a bc a9 71 de 40 74 b1 07 e1 4d e4 d9 61 8b 34 a0 b0 59 9a a4 55 c6 7c b4 34 85 6c 7f f4 d1 d2 66 71 f3 ce 99 5d f4 7a fd 8b e2 2a 8c 37 9a 11 69 7b 8a 3a 76 b1 e6 2e f6 9c 63 af 5d 9c 39 47 9b fb 68 63 17 6d ee a2 ce fd 8a b4 7b 73 fa de 9c b9 57 67 d4 fa f4 bd 4e b3 b7 df 47 19 fb 28 73 ff dd ba 8f bd 5d bb 75 9e d7 af bf 5e f7 b9 7f dd 6e ed e7 75 c8 3a 8f eb d7 ed e6 af f3 d8 87 ac fd b8 22 67 5e eb 71 0d d9 23 32 f6 a2 f3 b0 47 64 1e 36 88 8e 43 94 b5 2d 5a b5 a2 4b 97 22 90 4a 46 61 a2 92 90 46 15 02 bf 83 cf 71 a0 79 05 f1 45 ae 00 38 f2 f3 fd f7 f9 f8 7e e2 c4 Data Ascii: 0'GV}sp[Oa}<\O'.%"nmFKR/}R{q@tMa4YU\|4lfq]z7i{:v.c]9Ghcm{sWgNG(s]u^nu:"g^q#2Gd6C-ZK"JFaFqyE8~
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 42 92 5a 10 e6 4e 93 73 66 48 96 50 27 d2 93 5c cf 3f ae e5 cf 88 1f b7 5f 61 6c 89 f4 2a c6 da 90 6c 4a 5f 3c 52 28 f3 50 50 34 40 6f 71 43 4d f4 6f b2 9b 7a 60 2b f4 ea 9f 41 43 4c db 58 73 ce 19 30 df 2f 5e 65 c2 95 d0 eb 51 5e c2 b8 53 d2 2f d7 9c d9 08 ae dd f7 7f 65 c2 9f 20 71 20 58 95 1c 9a 6b 66 40 fc a4 65 a8 52 2c 08 bf e8 4b 12 fe 79 ee 99 a1 f4 34 7e 92 03 2d 70 46 f2 5b 95 a3 e4 28 5a dd 1b 30 f1 d3 2d 7d 95 13 c8 b2 8d 71 08 cf a9 eb f5 f9 88 9e 8d 4c fc 74 fd 52 00 4d 55 8c 28 95 a9 8b 4c 55 50 1f ba 00 e4 68 3c b1 44 65 eb b5 4e 06 23 5b d2 29 8c 72 21 6a 11 3e ae 41 19 39 1d f2 83 55 4a 72 14 81 32 81 95 ec 2c 45 3d 94 47 66 2f 94 93 ac bd 36 cc 09 90 01 4e f3 00 e4 3d e3 22 ca 85 08 a9 40 2d 4a a0 90 15 1c 2d 27 4a 49 c1 15 c8 aa 72 cc Data Ascii: BZNsfHP'\?_al*lJ_<R(PP4@oqCMoz`+ACLXs0/^eQ^S/e q Xkf@eR,Ky4~-pF[(Z0-}qLtRMU(LUPh<DeN#[)r!j>A9UJr2,E=Gf/6N="@-J-'JIr
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 9a d2 1c 5f 5f 85 1b d3 3a 93 92 85 9e c0 90 2c 6b 0b e3 df 75 80 63 67 dc bb b8 8c cf ab 31 b6 22 b2 a2 28 32 3f 40 0d 93 17 9b a2 b7 d4 13 d4 e6 8e 2d c6 19 b4 61 dc 51 53 ab 25 49 16 31 cb 11 47 4a 3e 85 48 bd 17 10 4b 5d 19 24 4b ca e9 a8 65 b7 b3 84 38 dc 25 4e 08 b4 e6 24 4e 8d 06 e2 ab 93 45 0c 6e 99 40 40 1b 5f aa 5e 53 2a 74 b8 33 8c ab 2a b2 a4 44 2a b2 e5 1c 51 24 49 29 4e 4b 82 66 0c 3c 97 13 e2 f0 d8 33 0e 89 3a c8 22 c6 45 10 49 a9 7b 15 40 35 b0 34 53 4a cc df 44 bd 5f 8a 0a 4c 2c 46 69 4a 86 5e c4 e2 12 e7 e2 ed ed 3d 3e 1f 10 73 69 fe 1b f6 19 c9 3c ba 18 63 c7 91 69 45 51 64 45 ad 28 92 24 66 c1 64 65 62 0c 68 f8 37 2d d4 85 24 3f 90 a0 21 26 de ed 1f a1 a8 61 f2 2b 74 ad fb 77 01 86 b8 f2 52 ab d5 0a 2f d8 1c 9a 02 0a 4d 9b 8b 0c 1b 4b Data Ascii: __:,kucg1"(2?@-aQS%I1GJ>HK]$Ke8%N$NEn@@_^St3D*Q$I)NKf<3:"EI{@54SJD_L,FiJ^=>si<ciEQdE($fdebh7-$?!&a+twR/MK
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 89 67 d3 98 74 f2 02 24 43 8f f3 58 62 e0 d1 10 b6 7c 06 10 6e ee fe 4a a1 b4 e1 97 64 a2 77 10 c1 96 0a 20 b0 37 de bb a5 70 84 cd a3 0d 43 5a e1 c3 22 24 89 e0 36 7e c5 1b 88 9a 49 38 0d 20 54 2b 6f 3d fd 95 99 a6 89 7c 95 81 bf e2 4f fc 82 d0 d6 fc 99 71 aa 5f f2 53 ba 87 76 ff 35 15 f1 fa 23 d2 cb 88 04 87 63 18 21 0c 2c 79 66 62 23 bc d6 5b 93 57 69 c3 c4 e7 41 2a 33 46 7a 8a bb f9 f2 5a fa fe 81 37 29 c3 4b d4 a3 06 57 11 69 ec ee 7f 2f 46 b1 bc 19 05 80 5a c2 a4 fe 5b 02 48 c4 b9 f3 de 35 b9 b2 86 30 b8 86 db 31 4e 4f fa f8 fb 5b 79 80 d1 8f d3 c3 23 34 e9 0e ee 47 6f 1c 3d 40 c4 e9 d5 c0 24 ac cd 56 0a 10 71 5d da 1a 0f 88 8d 86 70 80 bc 33 02 69 6f d5 92 55 17 83 75 46 a2 a7 bd 8e f8 63 88 2b 75 b8 63 b2 25 79 67 62 23 bc 57 df 27 53 41 c6 95 03 Data Ascii: gt$CXb\|nJdw 7pCZ"$6~I8 T+o=\|Oq_Sv5#c!,yfb#[WiA*3FzZ7)KWi/FZ[H501NO[y#4Go=@$Vq]p3ioUuFc+uc%ygb#W'SA
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: e3 61 6f ae fe 5f e1 f6 bb 1d 9e 3d fe eb f7 5f c0 92 40 f8 b1 ce f1 c0 90 ac 6b 13 9b a9 c5 db 0c b3 e6 6c 46 8d 6a 88 f1 64 7e c1 79 00 30 df de e8 fc fc 91 36 4f 9f be e0 97 1f 6b df 7f a9 f0 8d 4f 2e ff ed ab ab 7f ff ac e1 a3 67 1a 3c 7c f6 37 ef 3f 17 22 1e 24 85 32 01 86 5a c8 24 96 a3 c6 b7 03 27 3b dc cc e3 3c c6 43 fc 86 d1 ee 0f 02 99 2e cf 1f 2e 7d eb c3 b6 4f 9f aa 76 ef f5 ae cf 1f aa f7 f0 f9 81 af ef 94 bb fd 5e b7 17 0f 76 11 84 3f 41 a1 8c 42 ae 03 50 33 91 af 68 8b 7a c8 d0 37 d7 37 32 df de 18 fa f6 fa cc a9 33 dd 04 32 76 ac f3 76 05 48 67 7d be f6 62 2f 24 4e c4 ef fc f2 d4 e0 b7 d7 b9 e9 27 5f be 79 f2 f6 81 45 27 8a f8 09 80 24 db 2b 99 16 f3 ad 3f 83 6b 7f 8c 7e f2 e9 d8 47 df 71 d1 a5 2f 7f 5e fa f2 eb eb 6f ff 61 e2 e1 81 da 58 Data Ascii: ao_=_@klFjd~y06OkO.g<\|7?"$2Z$';<C..}Ov^v?ABP3hz77232vvHg}b/$N'_yE'$+?k~Gq/^oaX
2024-04-19 14:07:11 UTC	17	IN	Data Raw: c0 dd 05 0f 35 f1 10 f2 0e 5a fb 03 94 dc 3f 00 00 Data Ascii: 5Z?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50254	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1106	OUT	GET /mhjx0LuEJrAw4rY3p9ymDfFJIh9PkyKxJAlx6lFy4FWaRFP3TyAZYFMrLuIDz6l1jqg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 9730 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 fa 25 00 00 57 45 42 50 56 50 38 4c ed 25 00 00 2f b8 c0 49 00 35 87 e2 b6 6d 1c 7b ff b5 d3 db dd 33 22 26 00 4d b9 23 04 fc 50 86 d9 69 b6 7d 7b e2 9f fe 6f dd d5 46 4f 3c c1 e1 28 1c c5 e3 86 bb c6 15 8d bb 3b 71 77 f7 a4 ee ee ee 2e 3f ad fc bc ff 51 bf df fb 7b df 0f 1c b8 7f ad 13 26 93 30 73 d6 98 39 9c e9 84 d9 c8 34 46 2a 4f 77 e2 d4 4f d6 a1 6e 49 e5 59 e1 54 19 ea de 9e e9 67 ce 26 d4 dd 8d 5d 4a a4 02 54 62 2b 84 21 32 64 be b5 50 66 c2 2c 13 36 4c 59 23 93 9e dd 61 ba 21 a7 ee c6 44 86 54 21 67 2b a7 9a 39 6b d9 e4 5e 81 09 7b 92 32 b1 7a 0f 4d 4e 3b d4 db 54 d8 c9 cc d9 81 59 92 32 55 98 a7 06 13 03 a6 4e 8d ed 19 1a 98 ad bb 50 22 13 58 68 67 b7 6e ec 10 29 54 60 72 2a 8b 84 36 92 04 49 72 a3 38 0a cf 9f dd 6f 4f 67 f8 96 24 c9 Data Ascii: RIFF%WEBPVP8L%/I5m{3"&M#Pi}{oFO<(;qw.?Q{&0s94FOwOnIYTg&]JTb+!2dPf,6LY#a!DT!g+9k^{2zMN;TY2UNP"Xhgn)T`r6Ir8oOg$
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: af e4 21 a0 e0 2e 5b 30 57 5e ed 39 86 56 9a 56 fc 10 2d 1d 71 6d 4b ca c2 b8 ab df 7a 7e 2f ff 2e 07 5f 5d 5d 4e e4 29 ba 5b 1e a1 84 60 63 fe 37 b2 73 6d 9f 17 6d 2e 7b 06 50 40 ca 97 da 2f d7 24 c4 9e a1 6a 37 af 54 82 7a f8 39 49 8f 80 dd 0a 12 61 cf b8 35 b3 92 3e 5c 17 75 8d c2 3e 4b 99 ad 30 1c 7d 80 ce 81 90 9e 9a 00 22 2c 49 59 96 82 da 7b bf 68 c3 f1 07 68 63 a9 25 4f 01 cd 34 73 21 48 ca 97 1f e2 b9 e9 94 be ae 2b 3f a7 a9 a8 ad 47 c0 b9 6f fa 57 f6 7c b1 40 b0 b1 b0 30 0d b5 ca 11 85 c2 52 52 1b 60 70 d3 0c d7 01 4d 0c 3b 19 76 46 98 13 07 00 34 35 ac 0c dc 94 43 68 1a 02 17 30 16 bd 5d c0 5b 0d 81 73 49 7a 66 52 af a6 8e df 17 c4 d9 02 6d 1d 15 5a 1a ba 70 67 79 be ef 8b 62 5a 5a 66 91 98 dd 0c fc fa fc fb d2 eb 13 61 77 e1 5d a2 70 d7 0c 22 Data Ascii: !.[0W^9VV-qmKz~/._]]N)[`c7smm.{P@/$j7Tz9Ia5>\u>K0}",IY{hhc%O4s!H+?GoW\|@0RR`pM;vF45Ch0][sIzfRmZpgybZZfaw]p"
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: da 0b 88 be 84 95 c7 75 d7 02 18 b8 20 01 f6 72 fc 49 4a dd 10 75 8d 00 59 85 6e 35 4b ad 64 8f 00 28 b0 cb fe 02 4e f4 d7 57 c1 4d 3d ca 26 b4 9b af 97 84 b5 91 96 38 7c 2a 34 bc 34 1d 5c 55 e3 75 5b 41 5a 62 c9 27 14 13 72 ee e9 40 73 cb d8 51 36 99 d8 76 f9 77 b9 52 a5 cf eb 16 86 01 fc 7f 32 f7 bd 04 d4 57 3c de aa 7a 9f 40 94 35 7a b3 a7 a6 f7 f7 49 b0 40 55 12 cf 8f 2c 42 bf f4 a7 59 f5 14 b8 09 5e d9 dc 14 58 64 64 c6 75 b5 01 be ad 5f 40 06 1d f3 82 67 8a 9f 22 60 c4 b5 6d 33 bf eb b0 58 0f b4 87 50 ea 12 0c b4 07 aa 27 ee e0 df 7f e5 e8 fe f1 44 12 ec 22 05 b1 0f d6 fb 73 1d 14 6b 20 0d b5 76 f4 44 98 d5 c5 03 3f 9d 58 ed 3e 69 04 1c 4c 46 af ba 06 a0 9d a5 fc d4 2f 20 cb df 17 9a 3e 08 8f 4d b7 5f 40 36 d0 dc 7a 00 b6 b2 b4 c5 7e bb da 61 f2 53 Data Ascii: u rIJuYn5Kd(NWM=&8\|*44\Uu[AZb'r@sQ6vwR2W<z@5zI@U,BY^Xddu_@g"`m3XP'D"sk vD?X>iLF/ >M_@6z~aS
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 02 b9 d4 5e 6f 7e c2 89 57 d0 7e 35 b4 47 5a f2 e4 08 91 ea 87 1f a4 f4 71 5f 2c 7e ef eb f6 9d f5 f5 31 e7 61 f5 30 62 38 9b 3a 2c 7e 0b c3 01 e9 d1 5e d0 84 bd e0 7a 24 8e cf fa df 9e 0f 8b bf df 13 51 fb 20 20 5c 95 13 be ed 72 bd f9 ca c9 d1 05 c9 e5 72 8c c7 57 23 d7 39 2f 9c 45 70 1e 97 23 c0 b6 cf fb e2 d1 dd cf 72 18 1c 04 e1 4c 3b 3d 70 75 f2 0b 5f 78 b9 0b 5f 18 fd 95 0b 77 e1 ec 20 77 ae e5 82 30 97 af cf ad 43 b0 22 29 56 80 59 9d 40 5c 69 c2 e8 d5 34 f4 67 48 3d 22 69 3e 5b ca d7 ef c1 e2 ff f7 b8 7d 47 eb b4 20 ed e0 e0 8a e1 20 94 e2 97 94 32 41 82 3f e4 c6 f1 33 91 62 7a e1 4c e1 32 a6 e7 43 39 94 53 99 f7 55 49 15 be 42 35 bf a7 c6 5f 53 0f 75 ba 4e d7 fc 27 37 d4 08 8d d4 8c b7 ac a4 49 ed d0 a6 16 75 f8 e1 8b ba 0d b7 bc b8 3b 0a c9 e5 Data Ascii: ^o~W~5GZq_,~1a0b8:,~^z$Q \rrW#9/Ep#rL;=pu_x_w w0C")VY@\i4gH="i>[}G 2A?3bzL2C9SUIB5_SuN'7Iu;
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 19 a5 c2 53 c4 4d 13 17 61 bc c0 5b 04 83 e3 da b4 c2 23 85 32 47 a0 2d 3c be ef 4b 49 72 71 34 84 29 08 ef cb 1f 4c eb 1d a5 d3 fa 42 e8 65 38 8f a4 4d 8e 49 90 ef d1 5a 7c df e7 78 b4 a4 2c c7 d1 8f 49 80 7e c3 8e 92 46 28 01 b7 09 a2 b9 43 4f 13 2d 10 02 6e 13 44 eb 6d fa 95 c4 15 4c 14 ef 3b 24 d1 7c 07 23 e9 a8 b7 7f 2c 42 f8 17 6d 5f f7 fd 06 c9 88 c0 36 13 19 13 79 2d c3 8f 63 22 cf 9c 99 dc ac 80 31 26 a2 2b 31 d5 2e 45 86 59 92 88 a8 a9 0c 59 c7 b3 98 88 3c 40 e5 ca 22 13 ed d0 45 a1 4b d4 28 eb 79 0b 7d 3a 1a 95 29 63 8c d5 74 b5 51 c7 b6 19 63 06 4c b0 a8 cd 90 c5 0b 96 89 2c 06 8b a7 03 97 46 e5 98 78 fe 09 63 d2 21 ad 12 40 ed db a2 44 aa ae ca 38 d9 04 88 0e 05 ae 0b 20 71 c4 ba b6 00 42 b2 65 36 4b 23 10 c1 c9 9b 06 76 ce 37 21 29 b4 4a 2f Data Ascii: SMa[#2G-<KIrq4)LBe8MIZ\|x,I~F(CO-nDmL;$\|#,Bm_6y-c"1&+1.EYY<@"EK(y}:)ctQcL,Fxc!@D8 qBe6K#v7!)J/
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 10 9d 6e 2e 65 07 d9 20 0f d4 bb 0d 97 3b fe eb ea 79 bb 1d c2 42 6e cb ff ae 2e e1 45 00 0a c3 42 2c fc 0a b7 4b f4 16 a9 6c d9 86 41 92 dc 9a 6f 4f 83 2f 59 e5 ff df fb d6 98 cf eb 07 3d f2 b6 33 6d 9d a3 79 2a 8c ba c6 bb 8b f7 09 9b 8f 44 76 5f 58 6d 1f f9 9e f7 da 98 ed f3 dd ed b2 c6 b3 65 cb fe 7f f7 f1 d2 0a c3 f1 e6 2e 9b 79 7a 66 f4 14 37 cd 3a ea b9 7b 65 85 20 62 80 d8 16 ab 75 8f db 5a c2 46 36 7f b0 72 f6 6d 32 78 6e 0d 33 85 6f 87 a7 40 ae 70 8c 57 6a 76 3c 1a 3b 04 81 1a 31 37 75 be b5 fb 28 b2 2b d8 6c 23 82 a5 e5 63 06 61 64 a3 c1 e2 26 d1 b3 f6 8c 37 9d a2 c8 35 76 86 4d 23 6f 3a d3 46 79 3b 41 fd e5 3b cf 60 14 7d a8 a8 bd ff 54 80 d7 16 1a 06 b7 3e 16 ec 90 3b 8f be e3 fc 90 61 99 a1 c5 e7 6d 8a 40 8d 9d d2 28 eb 6d bb e1 ff c2 d6 03 Data Ascii: n.e ;yBn.EB,KlAoO/Y=3my*Dv_Xme.yzf7:{e buZF6rm2xn3o@pWjv<;17u(+l#cad&75vM#o:Fy;A;`}T>;am@(m
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 42 c6 3c de 44 a9 d3 35 9d a1 a9 58 a6 5f 2c ed bf 38 d9 d8 29 f2 b4 9c cf f5 22 e7 da e4 66 9d a7 fe fc b3 1c 7a f5 a7 1f 3a ee ea 8b e7 5b a8 31 99 fc 5a a7 6b 5e f4 c1 7a b7 a5 31 f5 13 91 86 11 af 31 34 83 e7 7b fb 3d 84 7b 24 82 61 a5 99 fa 92 e5 b4 6f ac a8 77 4b b3 ac e7 2d 53 13 53 a5 95 f2 06 73 5d 39 dd d4 2e 27 d2 2d d5 1a 86 e2 9c 49 cc 62 1f c5 73 21 67 39 0b db cf 3d 51 69 d1 f5 ca b0 e6 a2 cc ac ce b7 dd 95 25 6b 32 43 51 7d 55 da b0 b0 56 69 c8 52 9d 52 74 57 9c 2e b6 e9 19 4f 5d da d0 d4 90 39 d9 32 35 c9 59 fa e9 86 86 f2 39 af 3b 2d 33 34 b4 2d 57 da ac 74 e9 a7 27 b0 d6 5a 1a 32 17 9b 26 86 16 93 d4 bb 65 cd 2a 8f 26 96 8b 91 49 9e cd de 70 ce 37 32 59 92 39 0d 0d 4d 98 94 c4 43 68 56 7f 56 8a 89 04 82 d9 6b 4c 65 84 17 7b a5 65 32 e4 Data Ascii: B<D5X_,8)"fz:[1Zk^z114{={$aowK-SSs]9.'-Ibs!g9=Qi%k2CQ}UViRRtW.O]925Y9;-34-Wt'Z2&e*&Ip72Y9MChVVkLe{e2
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 62 f4 22 7f 15 1e a2 f1 73 3f 6e de 71 e2 4b 41 90 de 1b 7c 62 8d a0 2d ac 48 0e fe de 5f 96 35 1d 68 97 6e 8c 08 33 cf 5c 6b e5 54 55 b1 f8 ff 7e dd bc 1f c7 e7 eb 20 18 96 8e 7e 34 b5 79 29 ac f1 f3 fb 64 71 7c 1a 45 41 2f 13 9f f7 3c 9b 12 f0 79 1f 37 3b 8e 4e 0b 0c b5 d0 5d c6 af 82 f4 96 b5 36 c5 1b 48 74 65 19 da 28 96 8e df e4 a1 4a 2c 84 f7 11 24 d1 af 39 f2 c5 40 2d e1 7b 94 13 49 85 82 62 cc 83 7a 8e a6 b6 aa 4a 2b c5 68 46 2c 4b 4b 4b 5f 08 a5 09 c6 f7 ef c9 42 3f 89 8f 5e f1 01 63 92 ac e5 7a 87 7e d2 44 20 9e 23 14 be 43 12 01 0a 6a 6d 7c 3a 55 e6 58 b1 f8 c6 d1 f4 26 01 9c fc 3c f5 08 75 68 7a ab 2a 6d 41 ae 17 ad e5 1b a1 d1 74 4b 6a 49 47 31 2c 51 a6 28 20 65 89 82 5a d2 04 bd 69 9e 5a b5 52 86 3e 10 d2 6b b9 7e 87 7e 66 79 de 23 d2 cc 26 Data Ascii: b"s?nqKA\|b-H_5hn3\kTU~ ~4y)dq\|EA/<y7;N]6Hte(J,$9@-{IbzJ+hF,KKK_B?^cz~D #Cjm\|:UX&<uhz*mAtKjIG1,Q( eZiZR>k~~fy#&
2024-04-19 14:07:11 UTC	212	IN	Data Raw: f2 fb 47 da 3f 30 77 a5 08 9f 86 8d 16 f4 2a f5 0e d1 43 19 92 7e 8b 26 84 17 11 40 2c e7 2b 9d 6d 46 f4 5a 3c 29 b0 d0 aa e4 4f d2 6f a0 10 f5 0e f5 aa 8d fc a6 19 06 54 48 ef e7 f0 b7 d3 38 49 d5 43 2e fb b0 e1 c3 4c 64 7a 77 98 6a 55 da a5 4c ab 94 cb 98 5c 2e 53 30 d1 41 14 99 de a1 b4 d1 6d b4 1f d6 88 11 d2 09 08 ef a0 cd 47 be 47 4a 15 b5 f6 1d 89 10 19 1d 42 69 c3 9a 11 a4 53 5d f8 a3 52 08 b5 6e ee 48 74 8a c2 2b 91 6e ee e8 47 06 fe e0 e8 0c 24 b9 2f fd c4 37 85 d2 99 2e fc d1 da 34 21 8d 79 5f 9e 7a 74 ae 09 92 7b 5d 44 14 fc c6 47 bd 74 e7 90 66 c7 a6 9e a0 e9 20 e8 52 d7 9c 37 1b 5d 49 69 82 be 4a 1f 8f 83 17 00 00 Data Ascii: G?0w*C~&@,+mFZ<)OoTH8IC.LdzwjUL\.S0AmGGJBiS]RnHt+nG$/7.4!y_zt{]DGtf R7]IiJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50255	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	1106	OUT	GET /IbuKSWXQKCu1b4KABVBvEtr-L2MZfPyxXrL3AmkEY7CA-ffl2FkXVFmRRYdf_lEdfH8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 15926 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	732	IN	Data Raw: 52 49 46 46 2e 3e 00 00 57 45 42 50 56 50 38 4c 22 3e 00 00 2f 27 c1 49 00 35 71 a3 b6 ed d9 a4 36 56 09 ba 9b a6 e9 44 e7 dc 5d 9d 03 dd 4d 77 93 73 ce a9 c9 20 32 4d ce 99 26 e7 d0 e4 9c 73 ce 39 e7 20 a2 72 ce 39 47 94 b3 f4 e3 7b bf 58 45 7f 93 e7 53 2a 07 d6 a8 8d 13 7c 80 5f 45 a6 31 4b cd 4c 77 4b c2 6a a7 32 cc aa c9 03 6a 0c d6 eb c9 b8 49 f3 69 a6 5d 23 26 e1 24 d0 c7 cd 52 21 64 f7 d4 42 ab b4 ac 55 1a b0 d0 0c ab 14 a6 95 01 ab 94 1e cb 78 6c 56 92 a8 1e b4 3e 67 bb a6 67 81 e7 93 40 62 f7 cc 66 97 c3 ea 36 d3 8a d3 76 2f d7 42 8b 25 2b 18 e4 f2 88 79 b7 d9 1a 09 25 f0 14 0a af 84 bc 71 6f 05 6f 15 30 86 dd 4e fd 58 6b da a9 dd 84 d6 08 7d 0e bd 10 83 3c 66 0a f0 76 69 c9 0a 6d b0 31 a5 e0 07 63 8f 5c 0b 79 35 33 c5 96 91 dc 4e b5 d1 2a 79 69 Data Ascii: RIFF.>WEBPVP8L">/'I5q6VD]Mws 2M&s9 r9G{XES\|_E1KLwKj2jIi]#&$R!dBUxlV>gg@bf6v/B%+y%qoo0NXk}<fvim1c\y53Nyi
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 0a 82 d6 60 24 a0 a8 1f 30 fe 9b d0 00 60 d3 c6 81 c2 15 1f 06 a4 3f 4b 9c 09 28 33 63 7c 14 00 68 0f 30 6e 1b 78 46 01 8c 63 00 84 87 09 f0 21 81 e7 ab 31 5e 4f ea eb 1d 30 ee 04 a8 be da d4 ba 39 00 b0 99 1a 9b f6 03 31 a1 0e 38 1c 60 6c 09 00 c3 02 c6 6f 53 38 84 85 9f 8f 87 f7 8f 04 d2 5e c3 80 f1 1c 20 64 63 80 a9 cf 02 8e 00 00 c7 02 4c e9 72 20 48 fd c3 40 42 47 61 a0 78 48 b2 10 c6 f7 1d 1e a2 03 50 2e fd 3a 8c 1f 76 91 52 00 7e 0b 60 4c 00 11 7e d5 64 f5 40 e9 00 fc 8b 85 b9 e7 af 04 e0 77 61 34 f4 fb 57 f4 fb 53 d3 e7 77 53 9f 9f 2d 7f 7e 8a 7d fe 9b bd ed 27 4b 79 b5 fc fd 1e e4 f3 fd f0 9f 6f a7 fa f7 3a dd bf d7 59 fe bd ce f9 79 9d 9b 97 d8 17 34 1f e7 bc 8f 58 ee 93 a4 b6 58 7f bf fb fb fc 38 d9 bf 6f e7 7a ff 9d fd fb 3a db bf 97 b9 f9 99 Data Ascii: `$0`?K(3c\|h0nxFc!1^O0918`loS8^ dcLr H@BGaxHP.:vR~`L~d@wa4WSwS-~}'Kyo:Yy4XX8oz:
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 35 74 4b 64 a4 69 22 05 d3 f4 6b 6f fd 93 7a c9 13 84 4d 12 bd 12 a9 f9 4f 12 db f4 7a 65 d7 e4 26 34 91 aa 69 93 e4 bb ea 89 a0 85 d0 44 ea a6 49 46 c9 f3 12 11 92 26 52 39 cd 7c aa 84 8d 1f 35 69 22 a5 d3 aa f1 25 2a 48 31 21 52 bc c9 bc 12 14 2a 69 22 d5 d3 6e 12 93 dc 84 48 f9 26 c9 25 24 74 9a 10 a9 df c4 50 22 42 14 13 f2 5b 00 4d a6 92 80 40 84 fc 16 c2 1f 16 9b 17 c2 45 2f bf 65 60 0f 6e 19 71 45 4e 9a fc 16 42 da 40 4c c1 8b 09 f9 2d 86 26 fb 88 65 19 9a fc 16 44 7a 19 71 d8 8a 82 0e 59 01 40 87 cf 08 4a f3 44 43 5d 1b dc 86 56 bd 14 59 21 1f 3f 8c 25 27 5c cd b8 8f 4a 10 3f 1b 84 d1 d1 25 5b 31 f8 21 31 0c 11 3e a2 42 3d e4 01 23 c2 88 d1 2b 94 5f 80 23 84 f8 b7 5f 9d bb 41 12 d4 ea 1d a6 90 3a 30 f9 7f 42 3b 95 a4 84 aa b5 92 66 78 37 01 c5 66 Data Ascii: 5tKdi"kozMOze&4iDIF&R9\|5i"%H1!Ri"nH&%$tP"B[M@E/e`nqENB@L-&eDzqY@JDC]VY!?%'\J?%[1!1>B=#+_#_A:0B;fx7f
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 5d c4 c3 01 c6 ae 61 11 a0 3a b4 fe c2 f6 62 b5 22 b3 5a 5c 67 21 7c 74 a8 34 ab 2b 55 a4 01 d1 e7 e9 47 89 c2 50 34 e4 e3 2b 7d 8e 1a 67 01 8c f1 39 c8 51 a0 dc dc 94 aa 4f 02 06 2b 40 5f 04 e3 4e 41 87 45 ca 92 8b 35 1e 8d 14 93 e3 aa 54 7f ba 34 a2 c4 d6 f5 94 31 79 4e 48 4a 21 3e 37 55 e4 0a 4d 06 c6 d7 00 1e d3 87 42 94 54 05 74 3a f4 04 80 f1 c6 c1 ab 40 87 22 b0 bb 0a 5a 20 18 bf 02 bc df f3 6c 8c 0f 1f 30 e6 0a 37 81 0b 4a 84 23 e4 b7 8f 9d 83 d8 aa 89 aa 40 47 54 bf 50 1c d9 1f 1f f1 05 42 da 70 95 e8 7b 86 a2 70 22 22 0e ab f0 4d 3d 86 03 c6 38 e1 4d 58 1e 6b 8f f7 ff 59 42 a6 5e fc 9c 04 f7 46 c0 e7 ee 0d 18 f7 42 60 0f 42 68 f8 8f 18 5f 13 78 fe 23 d0 84 10 38 12 60 97 b2 31 e8 1a 0b ac b1 23 70 84 90 07 ff 3d 8c b7 d3 21 82 98 5e 66 6a 42 c2 Data Ascii: ]a:b"Z\g!\|t4+UGP4+}g9QO+@_NAE5T41yNHJ!>7UMBTt:@"Z l07J#@GTPBp{p""M=8MXkYB^FB`Bh_x#8`1#p=!^fjB
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 93 90 e1 a1 36 a2 03 1c 21 0b 6f fc f6 03 c2 fb 3f 89 78 db f3 86 81 79 f7 05 a5 92 28 49 88 71 11 65 20 de db b5 03 de 3d 42 38 d8 b9 e3 f8 b7 c3 40 df 50 63 81 24 e7 86 4c fc c8 4f 7e e1 23 a6 a1 7e 44 d7 e0 79 1f aa 89 fb 80 ed da 27 c1 2d a1 2f 71 be 77 f9 f0 cd ef 3b 4f 4f 10 b4 05 6f 84 10 12 d8 95 81 fd 91 51 e1 79 5d 90 09 39 7d 2f 8b a4 10 32 89 e7 fb 00 00 18 97 25 84 10 5a 87 07 bc dc 07 4d 08 21 df ae 43 40 b7 12 5e 03 0f f7 01 00 90 fd f5 84 cf 73 f3 dd 07 00 c0 25 0c 08 d5 8c 30 03 00 c0 98 84 77 4c 00 73 42 88 df 0d 3e 7b 12 42 08 89 52 01 56 db 8c 68 a0 91 a8 85 00 80 0e fd 5b f0 30 6c 25 00 f1 e7 80 bf 2f 8f 10 95 87 fb 84 14 84 10 32 27 f0 ce 30 09 a1 9c 13 00 7c ec 38 12 f7 40 08 e1 38 22 56 8e 23 94 14 b5 e3 a6 a4 e0 ca 11 4a 2a 9a 70 Data Ascii: 6!o?xy(Iqe =B8@Pc$LO~#~Dy'-/qw;OOoQy]9}/2%ZM!C@^s%0wLsB>{BRVh[0l%/2'0\|8@8"V#J*p
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 0f 2d a1 ce c6 87 83 cf 1a f1 1e 87 51 ee 96 48 a8 56 d7 b5 6e 44 38 d4 cb ed bc 7f 35 61 c2 84 ea b5 8b 99 91 8b 00 08 c0 e3 f3 6e fc 54 e9 a6 98 72 76 a0 29 d2 55 34 eb b3 a5 55 63 c2 8e ff d0 6d 46 fe dd a7 25 74 55 2b 9f c2 f0 c8 da df 46 bd c7 35 a1 83 dc a1 bb 1d d0 c6 e3 28 52 ed a9 76 4d e8 fa 60 87 2d bf 59 45 08 74 72 73 55 5f 63 9b 51 7e a7 4c 38 57 7e 48 88 e6 4b b7 52 2b cf fb 95 09 f3 7e 96 c3 1f 02 da a0 90 ec 73 e7 ba cd 12 4b 9c 57 6d 5f 95 5a 08 12 be 00 78 4f 95 84 cd 27 9c 8f c2 89 c8 27 3e 4e 6d 57 a1 f5 9b cd ac ce ce d5 d8 08 85 a7 b3 9b dc 5e d9 cd ae 66 ad 5c af 2c 73 56 54 51 19 e3 e2 74 a0 9d bd 7c a8 df da d8 2a ae b5 d9 ee 6e c3 df c9 7b df 1d 44 a8 de 7c 1d f5 9b e8 44 fe ca 33 06 bc c9 07 db 95 59 0d 0e 8a ed 12 ca 9b bd ae Data Ascii: -QHVnD85anTrv)U4UcmF%tU+F5(RvM`-YEtrsU_cQ~L8W~HKR+~sKWm_ZxO''>NmW^f\,sVTQt\|*n{D\|D3Y
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 5c 85 50 1b 14 ab 5b 29 bf 0f 68 0a 55 11 59 4a 16 9e d1 0a 31 ac d3 ca 1c e4 43 ef 52 29 1d 52 51 0d f3 db bb 1a 13 42 9c 9e 30 fc cd e1 23 16 b8 82 c2 be 41 97 85 10 a2 5a ff a2 ea f9 0d 0d 0a d3 3e 6f 6a 87 54 a9 9c 5d 9d e5 5d ec 00 ba bb 3d 7f ef bd 78 ee f2 fe 3c bd de c9 b7 ea 7f f7 9b bc 5b ce b0 67 81 c8 e7 b5 26 0a a5 b3 c3 4a 93 13 09 a6 ff ad 28 3c 11 95 28 0c eb b3 f6 02 e6 28 45 0d 78 fa ba 1b 8f c7 3f ee a6 b4 2c 24 9d 76 df 4f 7d 81 57 11 42 b8 0b 65 50 bf 91 c2 f3 67 2e 73 a9 fb dd 15 93 85 99 89 27 9e b8 08 53 b0 f9 a2 f5 55 84 44 48 78 ed 65 d6 59 49 21 cf f1 2a 8e 8a d8 56 58 af b8 77 fb 57 64 cc 87 9b bc cf 3b 79 8e 3b 70 14 ab 9c ef 82 1b c7 9c 4c 89 74 bf 29 b7 ac 7b ad 58 af ba ce 86 72 aa 61 ee f9 fd 2c 21 04 5d 6c 1b d7 9a a6 cd Data Ascii: \P[)hUYJ1CR)RQB0#AZ>ojT]]=x<[g&J(<((Ex?,$vO}WBePg.s'SUDHxeYI!*VXwWd;y;pLt){Xra,!]l
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 6e 1c 89 94 ef 74 6d b5 da 5e ee 3a 7f 9a 51 ee 2e 0b 74 f6 f8 8d ba bc 72 a5 d2 b2 5e bb 92 f2 f3 81 36 5e a1 8b 4d a9 76 18 e1 77 0e ea 8f 2a be 3a 11 e1 9d c6 b2 53 a7 aa c2 66 7c b1 83 fa 2b 26 1a 3f ce f6 69 7f f5 b9 b6 22 a2 bf 5f 54 de 81 08 75 a9 36 b6 3b c7 76 b6 84 32 6a ae ff 63 77 6e 72 8d 0f d7 51 5f 74 e5 c6 d6 9e 76 49 5e dd a6 2b 21 57 21 14 71 b6 18 79 e7 8d fb df d3 fd 6d aa 20 fa cd 84 b8 34 b6 7d 4d 73 57 43 42 b8 02 b1 66 db e9 ae df 5b ff 77 3b fe c0 d5 b5 84 90 a8 e9 09 6b d7 03 37 be 4f cf b7 0b 14 9b 6b 10 71 86 cb bd 1a da 16 db f8 86 1b 6c b8 66 01 4f 63 42 08 c9 58 5d eb 66 97 e6 97 df a7 7c 7d d7 3b 5f fa fd 8d 9d 9e 78 e5 1f f3 f1 56 bd 7d 63 9a cb ae 54 9d 7a 43 42 54 31 6a 6b 8e 8e 69 3f 79 c3 8d 6f f8 c0 fa 6d 20 aa 22 84 Data Ascii: ntm^:Q.tr^6^Mvw*:Sf\|+&?i"_Tu6;v2jcwnrQ_tvI^+!W!qym 4}MsWCBf[w;k7OkqlfOcBX]f\|};_xV}cTzCBT1jki?yom "
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 99 a5 a9 a8 aa d8 04 ab 7a 25 54 8d 59 5a 89 e6 49 51 45 ab d7 d8 6f 95 38 af c8 20 21 c3 24 7d 54 38 0e f0 1e 0b 8e 08 bd c2 23 6d c4 03 03 91 e3 81 ac 55 52 c0 9d 5e 60 7c fa 0c 0b 56 c7 06 99 4c 66 77 24 e8 17 4a 28 2e 7a e4 db 9a e5 7d 02 38 3a 54 88 21 ab 5e 43 8c 81 a4 ed c3 0a 93 ba 60 cc 7c 0c 38 5a 1c 89 1c 99 fc 55 d9 71 41 71 08 00 46 3c 03 90 e3 83 55 4b c4 87 d3 13 de ef 19 12 ec 8e c1 3b 43 86 a3 81 e2 78 bc 65 79 20 b5 1e 79 96 e3 91 a1 02 d4 7b ec 3e 12 96 cf 23 62 41 22 b0 6b 1f 00 00 7a 84 63 82 e3 87 5f 82 c2 22 84 da 84 ad 02 30 86 c9 6c 34 3c 4f 0a 39 ff 46 ee 2d 19 84 18 06 21 db 10 d5 46 23 80 ed c2 0b a7 16 97 ac 5f 02 00 d0 61 e4 55 f4 16 de f7 30 08 21 db 35 17 b6 98 8d 82 61 18 c4 6c bb a6 85 00 9a 47 ac e9 c6 f0 d1 86 d4 64 a1 Data Ascii: z%TYZIQEo8 !$}T8#mUR^`\|VLfw$J(.z}8:T!^C`\|8ZUqAqF<UK;Cxey y{>#bA"kzc_"0l4<O9F-!F#_aU0!5alGd
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 65 51 5d a9 8b bc d5 5b bd d5 5b 7d 52 e5 98 4c 80 63 41 e6 49 97 fc b0 55 2d 1d f3 98 6c 8b 2e 51 31 16 63 c0 f3 3d 33 40 8b 21 4b 13 b3 b8 c1 5a 96 79 1f 0f 07 40 0d 24 89 a2 65 e2 61 4f 08 ad 28 1c 1d bb 0b f0 eb b6 80 4a c8 2b be 78 01 8d 5b f0 8c 45 00 f2 f3 81 d7 3e cf aa 43 d8 97 a7 14 d2 08 66 70 7c 45 44 7a ff 88 f9 f7 ab 8a 24 c7 82 96 7b 83 0e 97 9f 1f f0 17 e6 50 34 4e 0a d8 c1 73 64 93 66 cf 1e c0 7a bf 55 13 d9 1f 81 24 90 0d 86 12 94 0f 58 20 91 24 75 3c 1e c8 2c 2d 8f 4a ba 87 70 75 5b 04 57 93 4d 58 7b 69 a0 dc ef 7e f5 47 ec 48 9a 74 3a 2f f7 bc c3 1c b2 37 00 8b 90 d6 d3 3e 21 50 43 cb f3 53 d4 1d 2f 64 11 2a d0 fb a4 a4 96 f5 f7 86 ae 40 31 47 ed d1 40 dc ef 7e 9f d9 50 cc 68 35 99 0e a5 60 bc dd f3 1a 67 2b 2b 2b ab b1 fb 0d 60 05 b0 Data Ascii: eQ][[}RLcAIU-l.Q1c=3@!KZy@$eaO(J+x[E>Cfp\|EDz${P4NsdfzU$X $u<,-Jpu[WMX{i~GHt:/7>!PCS/d*@1G@~Ph5`g+++`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50256	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1106	OUT	GET /ZJFuUMqXnSgiDGoJfAXuycSmFFXpkPf_ywUswZAtbhK2MYEOg5_7CR3FYcTHulkv09s=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 7464 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 20 1d 00 00 57 45 42 50 56 50 38 4c 13 1d 00 00 2f 27 c1 49 00 35 87 da b6 6d 18 f9 ff cf 9d 9e 29 22 08 04 28 0a 0b ac 20 46 e5 d1 39 ac 4d 29 96 94 af e4 cb 05 1f f5 ff e7 25 c9 a9 ed 51 73 dc d3 1e db 58 8c 6d db b6 6d db b6 6d f5 d8 66 db 9c b6 dd 3d 3d cd aa 9e ee 3a a7 ea de 5b bf 7b fb ee b9 bf 8d 66 e2 c9 da 88 b5 f6 7e 62 63 10 a3 b7 82 5a db b6 bd ef e8 06 bf 98 df b5 6d bb 93 73 17 1d db b6 d6 de bd 71 be e1 20 5e db ee 99 53 c9 f4 c6 b6 6d 3b 15 7c b3 a7 d7 36 63 f7 e0 9f 9a 39 bf b5 ed dd 9a a0 f7 af d8 c9 3d 3d cb ca 39 bd 13 2d ce 81 d8 b6 8d 20 c9 96 9c c5 f7 5f ef e3 c6 61 24 a9 61 23 c9 49 ff c5 ea ff 01 21 41 ff 25 41 92 24 b7 4d 15 74 40 04 e1 59 de 00 16 3b e3 2f d5 6c db d6 7f 5d 27 b9 43 73 49 ee ee ee 92 dc dd dd dd dd Data Ascii: RIFF WEBPVP8L/'I5m)"( F9M)%QsXmmmf==:[{f~bcZmsq ^Sm;\|6c9==9- _a$a#I!A%A$Mt@Y;/l]'CsI
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 1b 00 e8 44 95 de fd 0f c5 af da ca 37 10 65 73 d5 71 f2 7a 4d 33 92 ff 54 bf c8 fb f3 ed 41 03 90 6b cc 44 0f d6 05 71 08 69 d6 f7 1c 72 0f 0d 53 f3 f9 cf 7c fe f3 78 86 a8 d2 aa b3 b7 45 b2 63 4e f7 44 cf 39 3d bf 63 22 bc f8 7f 7e de 4a 07 fe 41 23 a4 44 aa fa f7 86 5d 4c 7b 16 79 4a 2a 53 8e e9 8f 59 3f e4 e8 76 0c 4d 86 9e de 0f bb f9 61 17 ba f7 e7 dc e8 00 c6 c4 40 8b 30 5a 9a c1 31 e6 98 3d af 70 38 d8 df ce 7a 60 59 0e 26 45 c6 f2 08 35 f7 ed 0f ff c2 bb 37 12 fa 31 c2 4b 07 a9 0a 46 26 4c 26 d4 c5 3f ed c0 39 9d f2 5b 23 e9 89 20 cb 36 64 bd 4d 26 cf 6d 28 ec e9 96 33 e7 54 86 d1 93 49 d5 fe 03 99 48 dd d4 b3 9c 3d e7 d1 65 32 ce e4 18 d8 1f c8 84 ca ad bb f9 c2 9c 43 e5 7d 33 cc 98 20 13 ab 60 b7 5b 31 27 d0 66 6f 02 e9 c9 c8 e4 ca 3c df 60 ed Data Ascii: D7esqzM3TAkDqirS\|xEcND9=c"~JA#D]L{yJ*SY?vMa@0Z1=p8z`Y&E571KF&L&?9[# 6dM&m(3TIH=e2C}3 `[1'fo<`
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 4c 32 4a 70 cd c7 6f bd 6a 9b 5e cd c7 ac 3a b1 d6 90 af 6b ce c8 b8 cd fe 43 9c 23 d0 17 31 ad 06 54 40 27 1b 19 ff d0 01 0d 00 c0 7d 96 f6 20 22 11 ee d4 78 2f 00 a0 d9 66 c4 49 21 25 ec 84 32 79 85 72 95 d7 f6 b7 85 e9 66 0a 39 0c 49 c6 56 49 00 40 ad 7d e1 27 45 47 63 ba 5e a2 2a 5e a4 a9 71 2e 00 74 49 a6 1d 98 f3 de e0 d9 66 0d 70 01 00 dd 7a 12 1d 05 29 21 14 ca b4 0a e5 2a b7 7d 4b cc 3c 53 68 83 09 c7 96 b9 00 80 7a 7b 23 8e 8a d1 fc 38 b6 d8 68 ba d0 17 96 6d db 25 a5 a3 f6 e4 79 32 cc a8 a9 5a 5b 10 e9 8e 16 1b 89 b8 47 14 ac b7 f7 3e 40 e5 d4 0e 79 86 a1 6b 0f 4a eb 28 83 ae 21 55 75 5e 71 9d 5b c6 1c 93 20 1e 1b a2 d4 0e df fd 55 9b 57 67 de 8f 07 cb 08 d2 51 19 b5 21 e6 44 d0 8e 2a 5a b9 0a db e5 87 e9 34 85 a7 18 0a 07 c8 f0 9f 51 b0 c6 57 Data Ascii: L2Jpoj^:kC#1T@'} "x/fI!%2yrf9IVI@}'EGc^^q.tIfpz)!}K<Shz{#8hm%y2Z[G>@ykJ(!Uu^q[ UWgQ!D*Z4QW
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 12 1f 55 e1 11 45 15 c9 77 6d 2d 8a ef 1c 46 57 89 44 24 05 3f 6f 8d ac 5b 55 55 b5 a4 13 c2 ea 4d ba 88 30 6a c3 d5 e1 f0 e2 59 98 64 6e 25 62 4a cb e4 61 11 43 38 31 67 0d be b2 46 d4 2d 44 62 17 f0 9b 35 86 ee 18 6a 85 cc c8 38 b8 e7 32 62 bb f4 d2 77 26 fd 61 3c 6c 22 4c cb 09 b0 30 93 c3 41 2f c8 dc 1a f9 5b e5 a7 ea f2 45 55 59 47 ce d3 83 61 0c 54 d6 7e 99 c8 27 21 b4 b9 3a b5 c5 59 10 21 ce 14 45 99 7b ec 84 d3 22 77 08 9d 78 ca 01 05 1b ca 75 8c 33 9e a3 7b 02 6c 55 fd 34 bf 85 ab e1 2c 6d 72 1c 60 d6 21 e3 36 4f 0e aa a6 7e 3c 18 23 fe a8 28 6a c2 63 8d be 8e c8 29 66 5e 12 51 42 29 54 94 da 5c 92 71 5e b7 10 d3 cf 50 71 ab f4 d4 b7 30 12 21 6b 58 6f 3b 9e 79 25 2d cb 4f 59 25 55 61 aa 74 c6 85 14 45 8d 37 d6 c8 eb c8 9c fa 8c 8c 04 af 5d 8a b5 Data Ascii: UEwm-FWD$?o[UUM0jYdn%bJaC81gF-Db5j82bw&a<l"L0A/[EUYGaT~'!:Y!E{"wxu3{lU4,mr`!6O~<#(jc)f^QB)T\q^Pq0!kXo;y%-OY%UatE7]
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 99 c8 05 98 4d dd d6 ef 21 a7 5a 5e de 78 5a 8a a3 d5 f4 ed e3 61 8a 35 c5 71 27 af 87 9c 6e 0d bc be 1b 61 4f 69 07 55 e5 26 eb 22 c6 55 f5 ec 8b fd c9 8e 60 1c d6 ca bd fc cc 28 e9 90 65 db a2 66 1b b2 6d 0b 9e f5 03 33 19 7a 73 e1 aa a8 96 83 dc f7 29 2f ff a2 30 2a 6b ea eb 84 78 e3 59 63 73 54 2f b0 f2 19 d2 1e 4d 86 67 58 f9 05 de ff 35 df f8 6b 56 81 91 5a 54 bb 8c bc 67 30 19 ae e3 a9 f1 78 a4 94 57 8b c8 aa 15 c9 a9 cf b7 72 6a 7b 49 4e 6d 7f cb a8 fd 39 32 6a ff a0 9c da df 2c a3 8e 5f c8 a8 e3 61 32 ea f8 aa 8c 3a 5e 2f a3 fa 7f c8 a8 fe 44 32 aa 7f 9a 7c ea ef 28 a3 fa cf ca a8 fe d8 f2 a9 7f bf 8c 3a 5f 44 46 9d 7f 24 9f ce 67 93 4f e7 47 ca a8 f3 6d e5 d3 f9 db 72 6f 3c 80 a5 15 b9 81 b2 b4 44 0a ba 31 b9 01 73 2b 68 d8 f1 6f 9c 87 14 36 d5 Data Ascii: M!Z^xZa5q'naOiU&"U`(efm3zs)/0*kxYcsT/MgX5kVZTg0xWrj{INm92j,_a2:^/D2\|(:_DF$gOGmro<D1s+ho6
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 6d a1 39 94 3e 20 11 69 12 62 ec 39 7e ab 45 6f 48 b5 a1 48 f2 bf 16 c0 d8 9a 70 91 6e 38 db bb 76 14 29 88 f5 cc d9 58 e1 e5 92 0d 17 ba 3e 30 38 a1 88 29 e6 1b f8 b9 8a 5b 41 d2 3d 99 1b e8 97 c8 70 30 52 94 33 1b 32 7f c5 7b a0 e2 f6 6e f0 1e 3c 47 31 9c 0e 29 ce fe 28 24 10 98 b1 c6 52 19 b1 a0 8b f9 2b 2a 4f dd e4 e0 36 9b 3b f1 0e cd 77 47 54 e9 18 9a 6d a2 5b ce f6 f0 4f 5c 7c f7 90 f5 ee c8 4c 47 b3 70 cc 0e 53 a1 84 8c 5e 3d 8e 81 46 9e 8f 2f 1a 4e b7 2a 9c a5 14 b5 f0 b6 5c 65 ea 9f f2 99 ad 69 41 6d be bf 6f 89 dc 1a 93 04 cb 30 b4 e6 2d 33 fd 15 c9 a1 d5 ec 15 6a 8a 7c 4a 7a 5c 9c b8 63 bc 8f 9c 3b 21 e6 98 a3 10 c6 fa 67 f5 df 0d 99 0f 65 ae 10 c7 3a 16 ee c2 6d cb e1 1e fe 33 5c f2 1e 92 b6 03 d4 52 b6 d6 58 3a 1d 1b ba c8 ba 1a e1 a6 1b 18 Data Ascii: m9> ib9~EoHHpn8v)X>08)[A=p0R32{n<G1)($R+O6;wGTm[O\\|LGpS^=F/N\eiAmo0-3j\|Jz\c;!ge:m3\RX:
2024-04-19 14:07:11 UTC	456	IN	Data Raw: 13 7e 39 43 e6 e3 f5 4e 2a fc db 01 3b 6c 1e bb f2 ce 51 0c 85 43 8a b3 3d 09 92 64 76 f6 ee c2 9c 8d 33 3f c1 ee 27 9b c7 92 9e 82 88 d8 2d 63 a8 98 2a ce 44 9a 3e c4 31 3b e2 34 9e 3e e2 7c 54 6d c6 59 1a 61 23 22 52 32 1c 5e ed e2 cb 4d 37 9b 67 3b ab f8 8c fc b1 26 a1 11 47 86 21 e4 f4 e6 7b 3d 3b 23 52 68 dd 63 ea 23 ea 4a 08 a5 73 11 76 c5 cb 5e 36 cd 81 11 c5 93 f9 f3 bf 33 23 62 b6 78 e3 64 b3 8b 8f a4 4d aa dd 5b 2b dd af ed d8 af 36 f5 2c f2 64 b4 f9 78 0d 9a df 39 66 e8 fc f9 f6 5b b8 6d f7 58 57 5e 17 c5 9c 4f 92 f7 37 0b 55 55 3d b8 ae cc 1b ba 9e 14 aa 59 55 98 f6 5e 69 d5 ac b0 ab eb 08 8b 09 45 30 ed 80 54 97 f2 a7 72 ce 74 ad 89 88 7b a8 66 0f ae 23 2a 57 45 18 6d 7e 67 43 e6 0b 67 a9 c6 06 bd c0 7e d7 cf 2c 13 68 4d 78 5b 26 5d b6 61 6f Data Ascii: ~9CN;lQC=dv3?'-cD>1;4>\|TmYa#"R2^M7g;&G!{=;#Rhc#Jsv^63#bxdM[+6,dx9f[mXW^O7UU=YU^iE0Trt{f#*WEm~gCg~,hMx[&]ao

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50257	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1106	OUT	GET /XOXJBp4fVtiRE1acOVPBNTcHkSkJl0ly6RTdKvmEPj7EhoR1ZNOalw7n_lGjFy_f_2o=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 5732 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 5c 16 00 00 57 45 42 50 56 50 38 4c 4f 16 00 00 2f 27 c1 49 00 f5 86 e2 b6 6d 1c 69 ff b1 73 bd df 2f 22 26 80 b1 ad c6 71 a9 ae 82 36 69 05 50 8e d0 11 c9 76 6a 48 cf 4e 82 01 72 73 b3 53 c1 a0 08 0a 4e 4b 76 90 a4 f2 af 55 33 da c8 41 a1 8c 56 9d 69 c1 ff 6f da 6e ee e4 31 b5 6d db b6 6d db 76 df fa 64 db 4f b6 ed f6 c9 b6 6d b7 d7 48 72 19 9e fe d7 da 67 ce 3f be 88 93 55 c7 39 37 33 ff de dd ac e2 de 60 cf c4 3a 5d b1 ad 9d 39 27 e6 8e ed 20 68 db 36 69 d3 9d 3f e3 3b 8c 24 35 6c 2e 93 fe ab e5 5f 08 81 a5 fe 4f 80 37 6a db 96 3b cd b6 8d ba bb bb bb bb bb bb bb b7 d4 dd dd 05 ea 6e d4 a0 ee ee ee ee ee ee ee 9a f6 96 e3 38 67 26 a1 cc f0 eb be 93 a6 58 14 9b 4d 8a cc b2 91 59 48 02 09 c1 09 94 9c 85 a4 0d 24 c4 48 48 c9 86 04 e6 45 a0 69 Data Ascii: RIFF\WEBPVP8LO/'Imis/"&q6iPvjHNrsSNKvU3AVion1mmvdOmHrg?U973`:]9' h6i?;$5l._O7j;n8g&XMYH$HHEi
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 08 e0 23 92 7c d5 52 84 e4 67 eb 01 ab 07 90 64 a8 eb 9b 24 b3 05 07 b2 26 80 6b 49 b2 b1 6b 1d 92 55 00 b4 23 69 95 e0 fa 3c 49 3e 3b a0 d6 6e 26 6f 03 10 48 c6 1d 16 fe 20 55 ef 85 71 4d d4 fb 64 40 62 72 e7 51 1c 01 74 aa a3 92 a4 c3 05 1a 1c 01 2c f9 15 f9 3b 80 70 92 55 67 03 b6 2e 45 be 32 a4 ac d7 e0 c0 69 46 b2 b9 cc 10 0f 4c 7a 15 c9 ba d6 a9 3e 03 70 23 49 00 f7 90 56 9b 02 38 5d b5 01 23 bf 42 1e 92 03 38 65 47 00 4d 70 3e 59 04 7d 3a c3 41 ac e6 4a f1 26 85 12 00 d0 9a b4 00 e8 4a d6 81 18 49 aa 3b 48 6e 87 78 19 19 20 fb 05 e2 e3 e4 93 d6 19 15 c0 52 b1 e4 4c e8 37 89 8c 86 18 68 03 50 8c f4 c8 0b e5 f3 04 9d f2 4c 33 c9 43 65 07 08 6d c9 0c 00 8d c9 68 09 9e 25 ff 96 ac 25 99 9d 34 2f 2e d4 fa 53 72 24 69 b2 c6 eb 00 e0 6c 20 17 c3 12 46 06 Data Ascii: #\|Rgd$&kIkU#i<I>;n&oH UqMd@brQt,;pUg.E2iFLz>p#IV8]#B8eGMp>Y}:AJ&JI;Hnx RL7hPL3Cemh%%4/.Sr$il F
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: be 58 7f f6 e6 d0 75 ed c0 f7 0c b6 f7 f3 6b b6 ca 2b fc 43 e6 ab e0 c4 04 a1 96 42 47 86 f6 26 fb 2d 96 1a 16 03 10 94 44 b2 4d ab 03 6c 3b 4d a9 5c 4a d6 46 61 7b 3e 29 98 14 36 e1 b3 03 28 c5 5e 78 be bc d7 fe 10 eb a7 3f 97 44 96 b1 dd a4 f2 93 07 5b 49 63 59 49 f2 91 c2 c9 ec 2c 18 14 f4 ec 0a 99 39 29 a0 06 ac 3d f0 3c 79 0c cc 87 9a 3b 79 0d e4 9e 6c 20 a8 5f 75 91 d5 63 0f c0 c5 ca e8 22 bb 83 97 28 20 91 fb c8 16 9d 00 c0 30 3d 17 80 d8 83 ae 98 99 db c4 4a 0a 21 f4 90 30 41 b2 99 91 15 05 96 91 ac e3 48 07 a5 3f f8 b2 2c c2 63 2d a0 17 5b 49 ec f8 38 66 dc 98 06 c5 b9 de 65 3b c1 8a cd 2b 55 6c 73 4c 04 7f 86 e0 c8 7a 1b 54 6c e3 e6 c1 12 50 c2 9b 4c ec 38 fd 2c a5 43 f9 04 80 d2 46 5e be c4 e8 ff 1e 60 e2 61 98 79 8e 49 4a c8 e2 dd 40 06 df 4e Data Ascii: Xuk+CBG&-DMl;M\JFa{>)6(^x?D[IcYI,9)=<y;yl _uc"( 0=J!0AH?,c-[I8fe;+UlsLzTlPL8,CF^`ayIJ@N
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 67 e7 00 86 49 23 df 7c 22 80 2d a3 be b6 d6 f8 00 4e 23 b3 0e ab 80 6c 76 cd 21 56 a5 a1 c1 77 b3 a1 cf 37 e8 fc 9f 1b 86 14 da e9 76 08 2b 4b e9 53 ff 40 12 d2 95 62 e0 d4 00 b0 a0 2f c5 72 57 f1 42 88 bf 96 32 5a b5 39 2d 47 15 c9 cb dc 49 b2 04 df 9f 14 00 ea 7e 49 f1 1e 48 c7 2c 4b 32 14 d8 3a 89 cc 1e 04 50 f9 6f c1 ed 6d 30 cd 3b 00 ae 33 1f 68 be 63 db 56 0f b6 8d 1c 02 b2 bd d1 a0 83 eb d5 4e df 43 3a 67 f1 3b 83 9b 34 82 5b fa d2 12 34 6e 54 74 5a 20 db 71 03 00 41 e9 33 48 c6 28 d9 b1 96 80 9e 89 0f b4 6a 1b 09 c5 29 d2 f3 84 03 c0 3f e1 c7 fa 01 d8 29 75 9a 82 5b 5e d3 cc fd 3c c4 43 3e 03 a6 69 6e 07 9c 58 d3 c2 70 e4 c7 be 2b 41 5a c3 31 7b 09 e8 dc 95 4c 86 6d c9 de 0c e3 cc fd 25 a5 e9 0d dd 7b 49 68 0f 17 0c 23 ec 0e 4a d3 e0 b3 d0 74 6e Data Ascii: gI#\|"-N#lv!Vw7v+KS@b/rWB2Z9-GI~IH,K2:Pom0;3hcVNC:g;4[4nTtZ qA3H(j)?)u[^<C>inXp+AZ1{Lm%{Ih#Jtn
2024-04-19 14:07:11 UTC	1234	IN	Data Raw: 56 c9 aa 75 6b b7 fb ad 23 a1 7e f9 7c 5b b5 0f b7 4f 68 9d f1 ab d5 e9 1c a6 ad 5a 15 1b 5a a8 00 45 fb 3f bb e1 27 5e 13 26 05 56 73 41 a9 19 81 c1 14 95 95 a6 1b 01 0d 33 2c ba f0 34 da d9 f8 12 58 04 58 6d 0f 97 42 29 06 db 1d a3 30 ff 71 fb 62 61 cb 84 bc 27 1c dd 51 3b 47 e6 3f 7d 7e c9 54 98 37 33 0b c0 70 13 f5 a1 f3 ad 57 6e 9b a9 66 dc a5 ee ea df 5e f2 0d bb 4c a6 fb cc 0e b6 8c a8 95 e3 f7 01 80 03 0f d6 ce f8 df 22 eb e4 1b 43 e7 69 9f b4 24 28 05 cf 37 a1 16 06 f5 5b 4c d8 d3 47 83 49 36 ca 5d 72 bd 71 85 f8 51 96 d9 2d 57 d0 98 92 e9 fd dc 1b e7 74 94 8c bd e6 5e 21 9b 95 d5 60 e1 a2 e5 81 81 72 ee 91 e5 37 bb 6c 85 5d dd 83 86 de 4a 69 90 55 e7 44 ff 2b 55 0e 5b 77 8d a9 01 cc b7 bd fb ce 3e c2 2c fe a8 97 cb c9 01 19 a5 6b 6e 1b 27 fc e0 Data Ascii: Vuk#~\|[OhZZE?'^&VsA3,4XXmB)0qba'Q;G?}~T73pWnf^L"Ci$(7[LGI6]rqQ-Wt^!`r7l]JiUD+U[w>,kn'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50258	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1106	OUT	GET /BdoYxc0T4Tdh6w-MHTPk9qGpoLKuYIa5x11xysND-TYlQohJgIITN6bYrlgIYYd96E4=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 4318 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 d6 10 00 00 57 45 42 50 56 50 38 4c c9 10 00 00 2f 27 c1 49 00 d5 86 e2 b6 6d 1c 6b ff b5 af a6 de fd 22 62 02 e4 98 db a3 eb d8 b0 c9 ed 91 4f b6 7d 70 28 73 59 10 26 8d 18 54 5d f9 93 b2 20 f2 d4 15 6f d8 ff af 6f da ff 1f ef f7 c7 dd ed ed ee ee 3a 77 77 77 77 f7 e1 ee 3e 77 77 f7 0d 77 77 77 77 a7 2e c9 85 e7 33 af a4 65 47 c3 b5 d1 0f 3e 5a 7a a7 38 a4 a4 d8 bb 10 b8 31 a4 23 ed ca bb 63 dc 46 92 22 1f e4 9f e6 f2 1e e3 cb 71 24 db aa d2 81 ff 8f c3 da dd 72 70 77 4d 80 28 d8 bb f5 7f 02 e8 5f ff 7f b8 95 ee bd 6b db b6 6d ef fe 6e db b6 6d db b6 6d db b6 6d 46 d5 d9 7f 80 17 9f 99 24 f3 99 65 92 cd 37 68 9b ec fd e4 9b ba 27 fd 9e 4e b6 98 9e 99 bd f5 f7 d4 10 1b 49 52 24 75 41 8e ff 86 ee ce ee 3d f3 43 ac 6d b7 6d e3 32 b8 9d 19 dc 6b Data Ascii: RIFFWEBPVP8L/'Imk"bO}p(sY&T] oo:wwww>wwwwww.3eG>Zz81#cF"q$rpwM(_kmnmmmF$e7h'NIR$uA=Cmm2k
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 98 d1 ec f4 46 7b 33 37 02 37 4c a2 19 3f 43 e6 fe 34 65 03 c4 30 90 65 9a 0e 78 2c f2 e1 f1 cc bf 9a 83 91 e7 f9 6b af 67 fb ff a0 0f fc ff b7 8d 4f e1 4a 4e e3 bf 78 bf f8 21 79 39 d3 d0 75 5c 43 4a e7 4d 36 04 dd 90 fa 06 9f c7 32 96 e1 6c 9a 33 2d ed cb 44 88 e3 56 92 51 3d 46 b1 a5 3e 4e 5a 00 a1 14 cd d7 c8 c3 3e 8c c5 06 04 3f 9e 96 1e 03 58 94 8c 66 41 37 1c ec 47 26 e0 83 f3 b9 93 ba 94 26 a5 b0 14 98 ca 04 d2 80 0e d8 12 b8 85 69 a9 32 40 23 92 d1 66 e8 8a 83 2f b3 12 02 3e 78 15 d8 92 42 f8 3e c0 ea ff 46 ff 48 3b 60 34 3f e6 7d 40 6f 51 d8 85 6f 31 ad a8 0c 63 d8 72 2b 3e 78 09 37 cc 4c 21 fc 06 58 99 25 49 a9 97 22 13 e2 b9 19 e9 77 1c 84 17 47 b1 17 de ec c5 21 78 73 18 7f c0 93 b7 c7 e0 ec 68 7e 44 52 39 5e 76 38 9e 9e 01 36 a5 10 7e 09 b8 Data Ascii: F{377L?C4e0ex,kgOJNx!y9u\CJM62l3-DVQ=F>NZ>?XfA7G&&i2@#f/>xB>FH;`4?}@oQo1cr+>x7L!X%I"wG!xsh~DR9^v86~
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 9d 96 9b db 83 6f a2 0d a4 f3 a9 4c 51 8a 90 a4 e7 52 95 79 5f 47 f6 34 37 94 45 2a a8 c8 81 c8 ba 2b 40 68 97 7e 46 61 19 be 8c 92 e9 6b b8 a1 15 4e e0 7f 4f 79 aa b1 5a 4e bf 84 52 e2 36 87 c6 05 28 19 5e c3 02 c6 61 1c 4f 14 70 07 c9 c1 2f 9c 56 5e 01 d8 f2 28 55 59 1b 0d e4 ca 7f 9a e7 68 46 72 f9 4b 3e c4 73 05 fc a5 0c 58 ef 68 b5 0b 82 17 93 1c f4 0d ea 11 b4 8c a5 3c f2 97 37 9e c7 ee 1f e2 e8 4b 6c 9c b1 71 7d b2 90 7e 49 5d de a3 39 2f 71 23 fa c0 ff 01 ff eb f7 97 5c e7 e9 25 f5 b7 8e bb 44 aa df 23 7d a4 de d2 59 ef 4e e1 fa c3 5e fe f4 90 77 7a c7 bd c4 dc 21 58 d5 a9 95 48 07 6d d8 9a ee 3d b1 d5 dd 62 ad 7b 4d 3a e8 53 d7 fb c7 e3 60 fd 78 1e 9e db 4f d2 41 9f ba 3f 59 eb c7 7d 7c 7e 3f 49 07 7d fc e9 b7 df 8a be be af a4 4b 7e e5 bf 76 6a Data Ascii: oLQRy_G47E*+@h~FakNOyZNR6(^aOp/V^(UYhFrK>sXh<7Klq}~I]9/q#\%D#}YN^wz!XHm=b{M:S`xOA?Y}\|~?I}K~vj
2024-04-19 14:07:11 UTC	1075	IN	Data Raw: c1 0b ac 68 46 0d fe 03 59 cf e5 46 f4 81 ff 03 fe 0f f8 3f e0 ff bf 90 9c 41 6b 31 f5 4a aa 55 54 0a 77 66 22 3a c0 41 8e 6b ea 4f 55 5f c3 3e 42 bf 2a 5f 83 c2 bd 61 b3 3c 5d 8d ba d3 3b 5e a9 e6 21 f9 90 8b b8 c1 05 4e 50 21 17 41 23 99 09 21 6d 8e e9 6b e3 5f a0 c2 8d 38 40 d5 15 22 7d 6d 7c 8e 69 84 1d 97 f1 61 c9 41 9c e0 00 d5 b3 d6 0f 8b 40 d7 a3 35 4f e1 d2 2b 79 b8 1a 57 6b b9 3f 29 9e 85 f4 da 32 ab 12 51 3b 39 3f 41 3d 20 bd d8 ce 24 d0 b4 89 eb b3 e2 06 e9 d5 22 56 81 a4 c5 d5 9f 81 90 5e 2e 5a 9a 70 f4 5a f1 20 12 d2 09 39 90 8f 18 a0 d5 dd 0c 42 d6 35 a3 e8 9a b8 2d 21 f9 37 70 6b fd 50 8f 43 1c a0 bd 89 10 87 90 b6 89 a0 2d 15 5f 17 06 e2 28 c7 24 68 9a 59 d3 6b 81 d6 51 b1 04 65 45 06 7e 9e af da 12 52 3c 55 1b 32 fb 05 34 27 d1 96 40 eb Data Ascii: hFYF?Ak1JUTwf":AkOU_>B*_a<];^!NP!A#!mk_8@"}m\|iaA@5O+yWk?)2Q;9?A= $"V^.ZpZ 9B5-!7pkPC-_($hYkQeE~R<U24'@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50259	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	524	OUT	GET /gk-WYYED1OJNr0G28ucBPUTPric5QCLwW2q_rNcYg-XTQCbPkhcp3CqVJ-1dHiBql10=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 220 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:47:16 GMT Expires: Sat, 20 Apr 2024 10:47:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 11995 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	220	IN	Data Raw: 52 49 46 46 d4 00 00 00 57 45 42 50 56 50 38 4c c8 00 00 00 2f 3f c0 0f 10 35 b8 89 6d db 55 b6 ab 6f e2 8b c0 05 06 a2 8f d8 21 81 0e 34 a4 0e 07 b9 a5 e4 fe 43 ce f7 b8 a9 6d db 89 7e 4b 74 40 97 34 40 87 04 ba e8 23 1a c0 05 22 30 31 a6 98 1d 6c 23 db 56 f2 3f 56 80 94 e0 90 5b 5f 1a 51 0c 35 92 ef 04 e4 27 41 bc 7c 40 94 3f 7c 41 28 40 18 73 0c 4a 25 ac 67 87 e5 5e aa 3d ce ee 18 4c 3a 67 67 77 57 67 e7 75 ae 7e 3b 37 7b 59 2a 7e ce cd 1e f7 ce ce ee 6c ce 6d 38 ca f3 9a b6 e0 74 ad 55 a1 7c c1 59 1d 22 8d 4b 86 0a 8d 06 19 2c 33 6b 40 b8 4c 85 0f 0a 54 4a d8 63 12 bf 0e 1f 42 0c 42 81 03 37 2e 49 e3 41 4d 08 17 1e 2a 44 7f 76 68 ce 0e 83 c8 9b 3d Data Ascii: RIFFWEBPVP8L/?5mUo!4Cm~Kt@4@#"01l#V?V[_Q5'A\|@?\|A(@sJ%g^=L:ggwWgu~;7{Y~lm8tU\|Y"K,3k@LTJcBB7.IAMDvh=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50260	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /xYnq3zRONE2rpRksqySiqBC8G3UvXJufCV2If7Ck8cPELE8OY1PcVbmGof8CxjXlIyY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 22996 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	732	IN	Data Raw: 52 49 46 46 cc 59 00 00 57 45 42 50 56 50 38 4c bf 59 00 00 2f b8 c0 49 00 4d 40 6c db 48 92 54 f2 fe ab de fc 03 ae ea de 7b 12 88 e8 ff 04 f0 4f b3 27 c9 51 95 56 6a bc 1c 71 b9 5c 2e d9 9e 24 95 4a 2a 95 aa 23 44 e4 7f c7 9f 09 89 7e a1 9a 61 01 eb 00 d8 f0 fd cf 2c e0 3a 64 08 08 72 8d 95 5d 92 e6 53 10 dc 81 01 34 56 c6 f6 01 2e 93 16 85 09 2b a1 07 01 81 22 09 49 a8 e6 0e dc 08 08 7c be ea 8d 26 e8 8f e5 64 96 be 59 27 db 89 6e d4 e5 e0 24 a0 49 f2 68 97 1d 02 07 45 b2 e9 d2 05 f8 1c 5d 8e 38 d1 03 cf 60 a7 b0 be ba a0 ba f0 20 03 08 e0 09 47 9a 61 e1 c1 02 d0 21 7a e1 62 da 36 61 01 cb 91 24 c7 4a e0 bd b9 ff b9 f8 46 23 3e 5d ab f5 f0 d0 7a 6e 77 e6 21 71 01 49 aa 6d bb 56 35 b8 1c 2e db 7c b0 24 96 76 ff 5b 63 ce 61 9b b3 fe 68 bc 3c e0 48 92 a4 Data Ascii: RIFFYWEBPVP8LY/IM@lHT{O'QVjq\.$J*#D~a,:dr]S4V.+"I\|&dY'n$IhE]8` Ga!zb6a$JF#>]znw!qImV5.\|$v[cah<H
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 11 12 b0 90 60 7e 2b b6 62 87 be d8 88 8d d8 88 8d d8 02 80 be 90 20 56 62 23 36 3b 9c 8f 6f a2 01 80 24 08 62 43 f4 04 41 c0 32 9c b7 17 01 00 29 41 29 08 80 98 99 65 01 00 0c 87 6d db 06 92 a4 ee 3f f5 a5 b9 7b fc 02 11 31 01 fc a7 43 12 b4 d5 ca 54 d3 4d c5 b5 97 56 9a a5 b1 ae a2 52 fb 39 1f 06 a0 2f 64 3c 07 aa cd 33 ae d5 4a a7 f8 bc d5 19 2f 4f 34 f0 83 54 39 1f 15 83 1b 30 13 c7 4d 58 45 4f 5e 8c 51 bc 7c 44 e3 10 a6 68 0d dc 7b 7e b2 8f 6d 5f 0e 82 78 ce 51 27 26 b5 c7 79 15 b0 62 af 19 3c ba a8 42 eb 4d 33 03 97 80 69 be cc 03 2a 77 75 e7 a6 e5 c3 1b 2f d5 a9 d0 16 33 66 d9 b6 55 3b 76 d5 c7 3e 47 99 4a a7 d2 ba 60 66 66 76 89 99 99 5d 75 f8 13 b0 c8 ec 92 c3 75 f6 07 30 33 33 96 98 19 64 a7 12 45 e7 ec 11 a1 b3 d6 9c 6b 6f 49 db fc 1e 1d 5b db Data Ascii: `~+b Vb#6;o$bCA2)A)em?{1CTMVR9/d<3J/O4T90MXEO^Q\|Dh{~m_xQ'&yb<BM3i*wu/3fU;v>GJ`ffv]uu033dEkoI[
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 2f bc 3d 36 9b 8d 3f cc 6c d4 66 2d 01 b9 77 fe b2 8e cf 4f ae 93 42 f6 7d 27 0b 41 90 9f 5f f7 2f c4 c2 a2 41 33 06 00 d0 32 2f 10 00 bc f9 e5 ce 19 d1 19 4d cc 7b de 1e 9f 75 18 38 f6 32 5f fd 2c ed 46 20 94 d0 f9 fe 2f 12 6e 6c bf eb 1c a3 83 74 b4 fe d9 f9 75 87 40 d8 53 d7 b6 47 eb a6 d9 bb 1a e1 65 0f dd d8 66 41 a8 1f 26 b6 bf af bb da 8e da 36 43 50 18 7c 7b 4d d8 65 3c 55 d7 cd 3e 52 89 f9 bf bb cd c6 a3 ed 64 e7 03 59 3b 3a d7 7f 76 74 66 b6 c7 e7 6d 2f c3 83 1c f8 0e 59 e3 ff ee 8e 2d 04 3b 00 00 b0 40 75 a0 7c 01 00 c0 f3 be de 7f ee 6e 9a 63 eb d8 ba 75 16 85 d8 7c 98 41 93 01 04 02 41 bf 7e 33 e1 cf e3 37 d3 3d ed bf 62 ee 9b dd 5b 84 8f 9c fe d9 46 e8 40 6d dd ee 29 82 89 bb da 27 f7 5c 71 37 a3 5a e7 4f d7 27 de c6 75 bc fe 38 be b9 55 30 Data Ascii: /=6?lf-wOB}'A_/A32/M{u82_,F /nltu@SGefA&6CP\|{Me<U>RdY;:vtfm/Y-;@u\|ncu\|AA~37=b[F@m)'\q7ZO'u8U0
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 82 a8 ba 9a 73 a9 00 8d e5 0e b0 fd 9c c9 2e 81 40 18 22 c2 f6 dd b1 42 10 e4 95 4f c9 6d 13 ef d6 d6 44 0c 00 9c f4 03 00 2c ea 39 e0 59 5f 8a ac 91 d7 b3 be 20 7a 3a 0d 00 58 db 25 00 30 00 be 8e f0 87 f1 be d3 07 f7 7c e0 f4 c1 dd 8d a7 71 02 4a 4c 07 0b 00 0e 58 06 98 20 00 e0 e6 0f 7f fe d6 be b3 df 9f 76 36 1b 26 3b 03 00 c0 ae ff fc 0d 99 dc ee 9a 75 25 de f4 be b5 5b 63 19 00 00 ac 54 ed 7f 9d dd 9d 2f 7f f0 b1 3d 6f 7e 79 d3 cb 5b df 5d fb e9 f1 d9 c4 30 23 00 00 06 03 00 60 64 03 5e f1 94 de d6 48 6d 2f 7b 85 00 18 00 c0 b2 ce 01 40 19 e0 1b 08 7f 1c bb 8a 20 21 71 cd c5 47 5c 00 50 0e 00 a0 07 3a 00 80 02 00 e0 ba 48 0c d3 f7 a7 af cf d8 86 9e a5 35 50 00 a7 a3 6b 9d e7 3e 2f 0b 02 b0 aa 00 96 9b 71 5d 3b 57 dd 49 01 31 b1 38 5f 0e 3b 7a f7 bd Data Ascii: s.@"BOmD,9Y_ z:X%0\|qJLX v6&;u%[cT/=o~y[]0#`d^Hm/{@ !qG\P:H5Pk>/q];WI18_;z
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 00 04 e8 45 67 22 2a 41 b0 2f 83 11 cd e9 41 3d 5c 8c 70 3a a2 4a 21 8d 2b 50 06 a6 e4 4a 20 04 7d 8b a0 40 50 71 84 10 da fc 02 98 b1 aa 86 01 b2 19 8e 4a 42 15 b5 99 4a 75 06 90 c9 62 33 41 85 39 b5 88 bc ad cb 33 31 6b 46 1c 89 e4 8c 28 d5 09 80 88 d2 f1 09 d7 65 a8 4f 88 b8 12 0d f2 40 74 c1 99 54 00 9e 94 86 8e 05 d5 05 90 df 21 d5 39 2a 09 5a 54 f9 20 08 f2 64 e1 e7 44 41 61 0a 6c 5d a3 19 4b 00 e6 dc 8c 25 15 87 24 94 74 18 07 55 c9 d0 00 f8 1a 4f 22 8f 57 41 a0 de 01 fe 2c 00 f0 20 b6 80 f2 26 a1 52 c5 70 a0 44 da 16 7f d7 55 76 4e 83 48 6c b7 f3 9e 37 ae 73 eb e9 ed e3 05 bc 62 f1 9a e1 47 dc dd cb 7a f7 09 80 25 ad 16 bc 0a ab cc dd ca 02 8e 18 81 47 19 2b c0 79 cf 57 f2 ea db fb 3a 8b 8f cf 7b d7 37 00 b8 2f e8 c5 cd 77 1f d7 e1 02 50 e0 51 c0 Data Ascii: Eg"A/A=\p:J!+PJ }@PqJBJub3A931kF(eO@tT!9ZT dDAal]K%$tUO"WA, &RpDUvNHl7sbGz%G+yW:{7/wPQ
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 86 45 f5 0e 3b 1d c4 7f 8d 69 45 40 73 3e bc 7a 78 9f 84 1c 7b ac 5d 1d 23 db bc 00 b8 20 f0 c4 8a 12 2b 80 12 00 30 90 01 0c cb 5e 6d 01 17 38 00 cb 87 d1 7e 72 ce 63 bb de 4f 63 f7 1b b9 86 8f 35 63 0b ef f7 dd bf 1d 3c e8 53 ef fb 81 fc 2b 9c d0 e5 1f d3 e3 6c 93 49 1d be 29 42 e9 92 37 96 45 61 8f 9c cd 89 e0 33 f2 69 65 a9 07 c2 8d 5d 5f 3e 2b 3d 7f 53 1f 46 d3 10 e8 c3 1c af 33 8a 17 78 3d 80 f2 20 2c 13 63 67 1d 12 00 75 3f 15 cb 49 b5 74 a6 e6 6c 02 b6 d2 b3 4b 04 a4 fa 82 c2 e2 ce 4a 14 23 ad 26 b6 96 01 43 23 16 16 0c 2d df 05 d6 a7 3c 7c 54 0a 05 df a4 16 3e e5 56 de 52 51 2c 5f 53 51 b5 0c 0b b0 8e 76 92 f2 d7 d7 1c 70 12 e3 f9 70 be e5 f9 65 f9 f5 fb cf db c3 1b ae 5f f2 95 9f d6 eb f6 c4 af 8f ee ff d2 dd f1 72 a1 e2 dd 52 4e ea 79 32 ec e3 Data Ascii: E;iE@s>zx{]# +0^m8~rcOc5c<S+lI)B7Ea3ie]_>+=SF3x= ,cgu?ItlKJ#&C#-<\|T>VRQ,_SQvppe_rRNy2
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 14 26 fb 42 b2 45 f3 ad dd 0d 60 93 8b 94 19 ae 28 21 62 d7 0d 88 02 dc 09 49 02 3b a4 a0 f0 86 da 83 04 dc 40 58 c8 88 19 2f b8 d9 bd fd 7f d3 5b a7 ff e0 68 48 13 00 bd 0d 99 6d b0 65 77 af 4c 7c dc cd 1e 12 44 8d 51 8f 9d 99 58 92 b3 2d 4b 3c 1b 3b 66 8b 3c 37 ed f7 f1 e3 dd 51 5f ba 2c 66 28 cb e4 24 b0 66 d9 3f f9 24 ea b1 73 b8 75 cc 5a c1 2c 1c 47 f7 44 d9 47 77 3d da d9 eb 12 cf 02 b1 02 ce 88 01 3f 8a 76 0a cc 3f 3c 3e 82 cc 5f d5 e5 f3 e3 22 95 fb ac 2f b4 b1 03 c9 80 a9 6e c3 07 bf 76 b5 f0 41 7b e7 47 98 52 7d ec 7f a8 f7 e7 37 ce b2 dd 2c 5a 35 36 c7 3e d3 9d 70 76 66 a9 c1 72 2d 11 67 e4 68 92 b5 83 b5 83 47 e6 5c b4 02 24 62 d3 40 09 53 72 af 52 73 46 4d fd c2 ab ca db ef ea 0c 60 57 3c 3c 34 3d a5 30 99 69 80 39 44 8a 25 38 04 e5 2c a1 dd Data Ascii: &BE`(!bI;@X/[hHmewL\|DQX-K<;f<7Q_,f($f?$suZ,GDGw=?v?<>_"/nvA{GR}7,Z56>pvfr-ghG\$b@SrRsFM`W<<4=0i9D%8,
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: e7 9e 2b 72 ab f4 08 34 de 55 b6 f1 c6 e2 7e 6a ea 87 b8 1f cd f1 de 4b 19 64 76 81 8b f2 64 98 80 6b 89 c6 e9 dd a2 3d 0f 3b 9c 20 82 15 4b 0c 01 eb 3b 3b f3 3a ee c4 b1 72 63 4e 87 ce b2 cb 71 7a b4 93 16 39 f6 7d cc 19 ac 06 ce ef 78 e8 05 0f 7d 19 fa fb 93 7f 7d f8 c6 d3 ff b9 fb 4e 31 46 da 0b 65 f7 0a 4d 7f ec 0b 27 14 51 1f 7f cb de 73 39 3c 55 3d f3 ef 7b 2f 37 75 eb f6 83 d2 ea af cf 9e 50 46 79 63 39 88 54 a2 08 ce 0c 73 99 f8 e1 d3 67 1f 8c f7 0a f8 29 51 62 f3 28 64 b6 18 48 28 9d 04 4f 2b 23 1e 23 5f 1c e7 35 e6 b9 8e d7 0f 7f d2 27 0c 4e ed a5 00 09 06 eb 8f 51 85 8c 85 a1 40 84 61 f9 cc ad 0e 93 d1 90 e5 30 0b c4 81 04 87 2c c6 2c 58 92 74 63 50 22 42 4d a6 85 a8 40 51 20 aa 47 b9 d2 9a 0b 1a 99 8f c3 be 70 5a ec fb 1c 09 00 91 c3 ec 35 ef Data Ascii: +r4U~jKdvdk=; K;;:rcNqz9}x}}N1FeM'Qs9<U={/7uPFyc9Tsg)Qb(dH(O+##_5'NQ@a0,,XtcP"BM@Q GpZ5
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 68 af 81 4e b0 ea 6e 8f fc 48 19 2f 04 3d 7d ce 91 e5 1b 27 87 77 94 f5 c5 07 1d 00 37 be 73 cc 5c d9 5e 3b ea 7a 35 fe a4 c1 65 be 24 95 39 2d 38 59 9e dc e1 fa ad 62 3f cf fc f1 91 f3 c9 71 76 c9 e8 e5 0e 55 7a ae ec f9 b0 49 36 f5 03 3e 44 56 17 d1 ac 46 00 20 a3 b0 35 3a 7f 34 b3 d6 11 82 01 b0 f1 6c a6 1f 31 44 7c 4d f6 a6 e6 4a 91 02 f2 8b 0b bc 31 64 1c d3 5c f0 8c f1 e3 f2 23 98 14 9c 43 1e c3 3e ad 7c 14 7b a3 6e 64 b0 94 12 26 4d fc 66 3e 02 08 00 61 f5 dc 6c ae 80 a3 df 74 61 3b 61 12 23 e3 90 6f b6 15 71 d0 b6 11 00 c0 27 aa 04 d7 ce 47 7b 0d 35 b0 9a e1 fe 59 00 bc 17 65 db f9 73 af a7 fe 83 1f 6d 3f 3e f5 c5 39 7b bf f1 3b 85 db c1 24 fd 6d d9 fc d0 da eb 7e fc 68 57 fa 32 2f 40 c5 ee 14 4f 79 b7 58 c0 9e 66 4d 79 fd ad 97 2b 8a d8 6e fa 1c Data Ascii: hNnH/=}'w7s\^;z5e$9-8Yb?qvUzI6>DVF 5:4l1D\|MJ1d\#C>\|{nd&Mf>alta;a#oq'G{5Yesm?>9{;$m~hW2/@OyXfMy+n
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 27 a9 13 4b 77 b6 96 4f b2 9b a1 47 80 65 64 25 94 51 59 80 41 59 5d 2c 43 41 99 29 91 2a 0e f2 16 44 11 60 22 42 19 ad 6d d6 32 7c 5a 4c 28 08 40 01 04 ab 20 01 c3 13 60 d3 60 92 51 15 72 ad 48 55 f2 94 6b d0 12 72 95 a7 2a a5 ca 15 54 01 a5 cb c1 9e e9 30 48 93 88 5a 30 4b 56 8c c9 42 22 d4 70 18 43 55 01 9b 20 20 8b b0 2d 89 35 0a 4e 7e 5b a2 97 82 74 0e 58 ab 30 9e 52 e4 93 09 4e 90 77 c7 28 fb 4d f8 4e fb 50 70 7e c3 b2 87 92 a3 cd 65 16 28 62 88 ae ea 84 9a 41 69 f9 3c 00 03 90 81 c0 40 88 e1 d2 a5 91 bd 74 21 d9 a5 6c 88 09 0c 16 40 6d aa 14 fc 2d da aa 9f 91 e5 03 98 61 cb 38 3b 68 d4 20 29 de 82 b4 cc 22 35 d6 44 3d 78 4e b3 1b 84 81 c5 dd b3 be 09 0d 62 d3 ba 21 79 73 e7 51 fa f0 90 a3 03 c0 40 1d 55 81 b6 48 67 47 0d c1 a4 84 17 89 02 dd 20 16 Data Ascii: 'KwOGed%QYAY],CA)D`"Bm2\|ZL(@ ``QrHUkrT0HZ0KVB"pCU -5N~[tX0RNw(MNPp~e(bAi<@t!l@m-a8;h )"5D=xNb!ysQ@UHgG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50263	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /W6pBP57UU3sGnhrVO_SWywKMb5YwKcDoQW3hBxW3L0pV4UyzS7IDbxaqD_vK6qHg4i4=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 7606 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 ae 1d 00 00 57 45 42 50 56 50 38 4c a2 1d 00 00 2f a5 c0 49 00 15 07 e3 b6 8d 1c 89 fd 97 bd e9 e2 3f 22 26 a0 47 a3 c2 c4 e5 d5 45 d5 5e eb ad 3e de 25 5a ca c6 e6 e0 ec d7 5d 73 b5 23 d7 5c ed 9a 67 bb 04 99 ef fc a5 32 c1 46 03 d4 0c 1f b3 6d eb dd 46 4a 39 31 85 cb 81 61 e6 99 32 33 37 19 66 66 66 e6 29 33 33 b7 81 61 66 66 66 86 32 33 b7 81 c2 1f e7 3b 3f 78 ce f9 fc ef f0 f8 04 66 29 4e 36 50 f5 28 d2 e9 62 b2 e3 ec ac 87 9d c2 33 e4 a4 ce 26 95 cf 80 17 a3 48 4e ba e9 92 ed c8 41 39 da 64 33 91 ce 30 83 3d 0c 27 59 a7 1e c8 97 ca 8b 96 a5 61 f4 78 15 ea ca 9d 75 37 1b 29 11 74 b5 93 5d 77 28 10 1a 49 72 24 45 ce 43 78 04 96 3f b0 3f 00 6f a7 28 47 92 ed da 56 b2 d6 d7 1f 35 fa 9e 32 94 f6 61 13 ec ee ff 04 58 a3 fe ff 94 24 a7 82 57 b6 Data Ascii: RIFFWEBPVP8L/I?"&GE^>%Z]s#\g2FmFJ91a237fff)33afff23;?xf)N6P(b3&HNA9d30='Yaxu7)t]w(Ir$ECx??o(GV52aX$W
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: b4 3e 72 d3 a3 f4 92 e8 64 a4 a8 8a 11 e3 0a 96 de f5 88 b2 cf 7d 98 58 d2 67 62 4c 0d b1 40 a4 54 30 90 31 96 3e a0 e5 9e 06 33 9a ed b9 99 91 cb 5f 7a 1a 05 b6 fa c3 6f d7 74 96 54 6b ad 5d 8d 80 e1 f5 a9 2d f6 b4 4f e5 6b 9b da 94 de 13 76 a2 ed dc b2 97 51 48 81 08 d2 44 cf 40 a7 49 56 9a 44 2a ba 82 9f 54 53 1a 8c ae 47 d3 10 5a 9a 19 19 68 77 a4 a9 25 b1 54 79 6b cf 02 d0 6f 5c c1 da b3 20 b5 aa da d6 05 d5 52 00 b3 b3 78 bd eb d9 fa 3c 8a d0 d0 d6 48 5d 25 c1 84 8b 50 7b 2d 29 10 cd f5 dc 61 12 6c f0 fe e7 6b 0d b9 e0 43 6f d7 dc 09 db fa 3f 8e 63 ab ac 4a c3 16 30 7c 5f 05 96 6a aa 67 18 22 6e 63 a4 1b e1 c4 f4 28 09 94 73 ee b6 02 57 f5 1e 13 4f 55 55 06 2f e8 2b 1e 4e 33 a6 54 b2 0e e9 01 ea 6f f9 49 63 46 6f 09 7b ac ed 94 a5 01 31 7a 38 ff 81 Data Ascii: >rd}XgbL@T01>3_zotTk]-OkvQHD@IVD*TSGZhw%Tyko\ Rx<H]%P{-)alkCo?cJ0\|_jg"nc(sWOUU/+N3ToIcFo{1z8
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 0f 89 5b db 1e a9 b3 24 5f fb e9 11 20 4a 50 ce b9 4f 35 49 65 65 c8 81 d6 28 ff 3c f4 1e 3f da 7c cf 5e a9 51 a0 d3 b8 4c 1d b5 94 77 ee 38 4a c7 49 60 2d 3e 3f cc ba 4b b4 da 53 5d ad a4 45 14 6e a1 e7 cf 77 32 e2 c6 0a 97 41 2f f3 db 41 e3 25 8c df 9c 8d 44 aa fc b5 d3 f5 88 3a 5a d9 a8 dc 73 8f 28 cc 59 7f cb 7f ac 70 1d 96 b3 2f a7 5a 61 46 d5 d5 d6 36 29 d4 59 cb 8e 66 0d 2d 0f 80 07 e1 21 e0 c5 78 5b 38 f7 ed 2f 37 4c 8a 8f 0f b3 79 d9 a8 9b 11 80 bd 56 61 cb 15 a1 f2 32 a4 03 08 0d cf 13 5b aa 28 c3 e1 f0 5c 6d b5 90 58 05 3a 8d c2 01 0c 19 1f 25 49 81 ca 59 ba 8d 86 b1 74 97 89 8f a1 24 e8 6e b0 09 43 68 48 00 55 d5 01 0e 0f a9 ed ce 88 7a 07 a0 ef 84 9d 50 7f 2b 43 c4 17 01 61 71 ab 23 01 5c f8 1c 3e de 4f e7 a5 a6 52 cf 07 58 64 24 fd a0 ad f4 Data Ascii: [$_ JPO5Iee(<?\|^QLw8JI`->?KS]Enw2A/A%D:Zs(Yp/ZaF6)Yf-!x[8/7LyVa2[(\mX:%IYt$nChHUzP+Caq#\>ORXd$
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: f2 8a 9b 00 74 97 90 cd bf f0 2e f2 f8 58 25 d1 38 8b b6 5d 79 de e0 04 9f be 8d 59 a7 60 21 ea 90 b7 41 c9 75 53 48 8e 41 2d 5f f8 07 30 0f 37 f2 af 16 85 5c 04 a5 d4 43 89 e1 57 ef 8f 2c d4 13 20 8f cd c7 cf 78 cd c0 dc b4 b1 eb 7c 7c 86 ac 88 52 ab 43 1e 40 2e 85 fd da 1b 51 39 54 ec fa 28 a5 d4 fb c8 e2 7c d8 b7 b8 3b 20 fb 50 7c ff 31 ea 25 a7 83 6b a0 54 28 1d f9 cd d7 73 64 f2 19 08 c2 9b 24 2a b5 15 e1 4a ed 89 bd b8 3d 64 ad bb a2 94 fa c2 86 a8 57 70 1d 94 52 ef 27 4f c0 24 e4 86 8f 09 c8 16 46 7e e8 26 90 a1 4a ad 05 87 14 f6 b1 f8 be b0 a0 71 a4 e0 71 dc 96 11 cf 79 34 7d 96 41 dd 8a 3b 63 2f ee 03 c9 87 a0 d4 48 56 55 f1 3c 4a 29 a5 c8 09 89 af cb d2 06 f2 a8 46 5e 93 2f 92 4a a9 17 31 4f ff 9f ee fe d2 f0 79 6d 43 eb 3a cd 47 12 3d 21 99 be Data Ascii: t.X%8]yY`!AuSHA-_07\CW, x\|\|RC@.Q9T(\|; P\|1%kT(sd$*J=dWpR'O$F~&Jqqy4}A;c/HVU<J)F^/J1OymC:G=!
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 71 a7 7c f8 53 28 55 dc 0e a4 77 10 f3 c3 bb 00 74 62 9d 49 18 cb 18 fb 42 bd 9b b0 89 28 4e df 9a 40 03 30 96 69 ec eb ce c4 a9 00 71 bf 88 e2 3e 90 ef c6 f8 31 fb ba 1d 38 cb 03 c4 bb 02 e2 4c e1 b6 60 7c 8c 55 80 9a 10 7a 3b 20 66 e7 bc d5 06 65 59 8f 7d 81 ce 8e b6 49 58 8b 57 bb 35 35 ff f3 f5 f8 0f 8f b6 de 18 6e 3f a1 2c 6b 48 8f 85 5a ff 9a 08 01 98 9e 46 0d d1 bd d8 1b 65 e9 bd 39 5a f8 24 20 9c 6d 90 0a 82 42 8d 2f 2d 81 f6 d4 22 90 dc 02 a5 b1 f3 4c 58 9b 0b 8c 41 28 cb 79 fc a4 db 01 72 2b 34 6c 8e d2 39 81 7c 16 4a fb 1d b0 c2 a7 02 e1 5b 28 cb 19 a7 1a 77 43 8c 20 5a fd bb 72 28 9d 6b f3 03 a5 f7 55 56 92 01 e6 c0 39 08 e7 93 28 3f b0 b2 bf 02 7c 26 22 3e 19 f3 de e5 f4 2b 94 e5 1b cc 8e 50 5c 49 41 fe be 68 21 cc fb aa 73 10 ca 0a 1e cc 1f Data Ascii: q\|S(UwtbIB(N@0iq>18L`\|Uz; feY}IXW55n?,kHZFe9Z$ mB/-"LXA(yr+4l9\|J[(wC Zr(kUV9(?\|&">+P\IAh!s
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: c4 60 2b e5 e8 42 f2 d6 18 50 7f e2 05 32 d2 b0 07 c1 7b a3 b4 3e 57 f0 f7 36 d1 dd 8a da 87 97 93 ed 74 65 84 d7 3f 10 a4 2a 47 79 8c 51 5f 55 9a 5f 25 38 1c ec cf 04 0d ac 29 15 75 f4 ee e8 9a 87 f0 6e 6d 2e 24 8c d5 8d a3 d2 0c d2 d9 57 70 32 c0 ee 83 40 99 28 2a 32 cd 31 56 0b 47 79 10 12 04 04 3b c6 a2 b5 69 f5 db a4 61 1c c2 c9 81 50 ed 05 2e ac 5b 60 b1 20 26 65 84 d7 2f e8 ae 0e ce f8 20 94 41 f0 02 ac a9 b1 78 28 e6 31 15 63 0d 43 79 95 e0 b6 40 6d 0c 2d 1b 98 54 82 73 50 9f 4d 30 0e 41 e9 25 78 09 54 69 04 ca ac 70 98 df 61 68 1a 84 12 14 05 6a 4e 2c 8e b2 1b f1 30 87 5a 70 04 50 47 5a 76 34 af 1b ca ef 30 34 ad 3a c4 7d 10 e4 00 4d 82 40 99 95 81 13 cf 50 4f 23 88 30 c1 40 9c c7 43 cb a5 31 2d 31 3c 1f 28 6b 04 46 45 58 30 1d 26 43 d0 0b a0 1b Data Ascii: `+BP2{>W6te?GyQ_U_%8)unm.$Wp2@(21VGy;iaP.[` &e/ Ax(1cCy@m-TsPM0A%xTipahjN,0ZpPGZv404:}M@PO#0@C1-1<(kFEX0&C
2024-04-19 14:07:11 UTC	598	IN	Data Raw: 32 6b 8a 72 04 3b c8 2d 1d a5 2b 4f 6d 5d 1c f2 0a 41 f2 76 c9 0c 04 05 b3 83 d4 ce 46 6d 9c d7 77 c9 64 1f 59 45 7b fd 0a 65 1d e3 eb 23 24 16 12 93 0e 34 03 81 a1 97 4b ae 24 b5 51 8e e0 29 99 1e c9 7d 0a a3 89 ec de 8e b2 76 02 49 cf e5 c0 ec 4c de 87 7d a8 80 7c 2b 6a db 81 5a b7 71 60 cd 7f 62 9f bd 89 95 6f 05 6d 8d c5 20 94 9b 37 0e 9c 01 07 1f 8a 92 b1 8b 0c 29 81 1f 28 65 8d 03 6b 66 4a 6a 7b 2c 7c 3b 94 28 0e ac e9 90 99 6f 71 13 83 c9 ce 2f b9 7d 0a e3 00 9e 72 cb ce 94 d7 4f 83 de cc 8d c1 f8 10 07 66 3b 02 41 07 70 60 76 a6 3d ca 06 aa 32 b9 91 ae 90 20 9f 0e e5 43 06 a4 52 e9 20 3d 4a a4 36 5e 3b f3 43 23 22 48 32 51 a4 f2 6d 18 69 48 26 64 11 3b c4 8a 44 0f e3 26 76 91 9e 39 09 f2 29 94 52 c6 81 d9 0e 1d 29 01 50 bb 6b 37 0c 08 17 6c 62 cb Data Ascii: 2kr;-+Om]AvFmwdYE{e#$4K$Q)}vIL}\|+jZq`bom 7)(ekfJj{,\|;(oq/}rOf;Ap`v=2 CR =J6^;C#"H2QmiH&d;D&v9)R)Pk7lb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50262	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	523	OUT	GET /ZrNeuKthBirZN7rrXPN1JmUbaG8ICy3kZSHt-WgSnREsJzo2txzCzjIoChlevMIQEA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3094 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:16:31 GMT Expires: Sat, 20 Apr 2024 12:16:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 6640 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	722	IN	Data Raw: 52 49 46 46 0e 0c 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c6 0b 00 00 2f 3f c0 0f 10 4d 30 6c db 36 12 2c f7 b9 3b dd fe 0b 67 89 88 fe 4f 80 1a 00 fb 66 da 14 a2 44 d4 3f e9 a1 9a b4 2c 32 d5 51 75 c1 10 92 24 49 09 b1 fe 68 1d 1d 0b b0 71 00 ff 03 a1 26 92 a4 a8 25 e0 5f 17 2a fe 3b 20 24 60 1a 49 b2 95 7e ea ff 9e a4 50 e4 1f d6 46 40 21 91 fd cf fd 7f a4 32 bc f8 2a dc 5a 4e 36 00 12 33 66 5d e7 a3 00 2a b1 c5 13 cb 6a 5e b3 aa 33 2a 71 62 96 3d 38 d5 a9 a8 00 44 44 0c a7 61 af 3f 50 21 53 11 f0 5b 00 de 40 d0 b6 6d 62 fe b0 b7 fd 14 22 62 02 fa 87 0b 23 5a 1f 7a a4 23 db da 22 c9 f9 32 ab 7b 78 ac 11 b3 4c e6 5d c8 65 30 19 3d 5a 80 5c 66 6d 41 7b c2 05 0c 33 54 fe 46 fe 99 d9 9d a1 05 5c 59 13 f1 0d a4 18 Data Ascii: RIFFWEBPVP8X??VP8L/?M0l6,;gOfD?,2Qu$Ihq&%_; $`I~PF@!2ZN63f]j^3qb=8DDa?P!S[@mb"b#Zz#"2{xL]e0=Z\fmA{3TF\Y
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 0b 92 ed 53 86 70 c5 ce 51 b2 e0 ed b8 8d ad 11 fb c2 99 d9 8e 69 c1 be 96 a8 56 7d 02 fc 0c 28 7c 01 22 2b f0 42 90 31 6e 3b 14 94 86 46 8d 90 d9 68 af e9 bc e3 83 ce d1 e6 42 70 21 e4 1c 90 b3 bc 9a 14 08 02 b0 1a 7f 96 44 22 08 cc 70 41 f0 a2 24 01 54 69 da 01 0a 5f 00 af ad 69 25 47 34 6e 1d 30 f3 65 9f 84 f5 02 93 3d 08 2c 13 08 00 b8 63 24 84 91 d6 31 05 f6 c2 65 41 07 75 3d f6 c9 b0 a8 a1 90 f0 09 e5 2f 40 12 14 15 b3 56 be 1d bf 75 6d 74 d0 b2 77 9a 94 2c 27 3d 96 0c 1c 9c b8 03 6e fb f2 13 41 0e a4 94 2c 51 29 9d 74 93 d4 7b c7 df 6b 72 16 7c c8 0d 6f 15 43 2a 97 e3 14 c2 1f 83 31 cc aa f6 d6 0d 06 4a cd c4 86 6f 30 e4 5b db 5e fe c8 23 4e b9 0f 73 29 7b af d2 e8 13 9c 07 92 11 35 43 5a 9f 3b c9 a6 6c 74 c2 71 81 30 15 20 c4 73 1a e0 65 89 43 4f Data Ascii: SpQiV}(\|"+B1n;FhBp!D"pA$Ti_i%G4n0e=,c$1eAu=/@Vumtw,'=nA,Q)t{kr\|oC*1Jo0[^#Ns){5CZ;ltq0 seCO
2024-04-19 14:07:11 UTC	1117	IN	Data Raw: 2e 8a 64 3e 10 a2 40 47 43 1f e3 e8 cf e9 6d 2e ef b3 7f 6b 3e 7c 09 98 2c 75 de b1 cd a3 fe 6d 9c a4 8d ac 88 9c ca 90 c0 ad 02 d2 69 78 c1 f4 fb 9d 72 36 3d c3 44 20 44 8a 56 d3 e3 1f 62 35 20 02 05 3a 48 c8 8a 2f 34 f7 ef 2c bc 30 77 8c 32 96 03 99 24 46 53 17 cc 3e cb 3c 1c 71 bc 4e a7 8f 87 69 23 27 a6 42 55 43 42 e4 08 31 4d a7 9a 81 e4 d8 95 3f fc 10 03 80 09 70 40 8b 96 d5 f4 8f a6 8a 4d 2b 94 dc d2 f7 02 ab 67 9b 64 eb cc f6 e7 49 cd 0e 01 45 5e 5c 01 d3 c0 c7 c0 a0 97 5a a0 c0 09 00 25 a4 dc f4 f2 81 c8 fe ad 58 d2 d0 9f ca 8c 03 5a dd 20 b6 eb 61 ac 46 dd 28 28 00 a0 09 2b e1 39 8f 68 9d e0 32 02 4d 80 01 50 20 fd 7b 27 dd bf 5a 45 17 98 bb 64 46 8c 54 2f 3b 4f 59 55 54 d2 b8 24 74 a9 26 04 84 00 fe f4 73 ee 34 2f 23 d8 a0 50 05 70 16 50 37 38 Data Ascii: .d>@GCm.k>\|,umixr6=D DVb5 :H/4,0w2$FS><qNi#'BUCB1M?p@M+gdIE^\Z%XZ aF((+9h2MP {'ZEdFT/;OYUT$t&s4/#PpP78

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50261	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	523	OUT	GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 2572 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 04 0a 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c bb 09 00 00 2f 3f c0 0f 10 4d 00 44 d2 fe e8 0b 44 f4 3f f5 85 99 b6 6d cc 1f 65 ae dd e5 30 12 6c da 46 12 9c 4c 79 e5 00 b8 fb 37 9a b6 8d 64 fe 28 f3 0c 3a de f6 fd cf ee 33 b6 b5 35 86 4b 55 4a 5d cd 48 71 00 06 62 f0 06 44 86 2c cb 10 b3 03 23 8e 23 00 20 5a 88 f8 7c 10 40 1c 3c 98 dd ff 53 24 d9 4e 56 f7 f0 65 a6 15 d8 7e ff b7 f0 03 30 33 33 0c 7b a6 6b 91 39 e7 19 be 66 fb 1f 21 85 b1 d5 f9 57 ca 1c 29 a5 19 2e fd bc 3a 52 b5 ae 72 37 e7 f6 df 4c 25 e5 ca 18 c6 55 4b 2d 41 6a 24 49 92 64 9e b3 fc e9 2d 8e b9 f6 b9 21 3b 92 24 45 b2 3c e6 ee 31 ff 3e fd 55 78 52 31 e3 5a 27 dc 6c db 9e 54 b7 39 f6 fc 95 71 03 06 e1 72 05 5c 03 4b 58 43 57 f0 62 10 Data Ascii: RIFFWEBPVP8X??VP8L/?MDD?me0lFLy7d(:35KUJ]HqbD,## Z\|@<S$NVe~033{k9f!W).:Rr7L%UK-Aj$Id-!;$E<1>UxR1Z'lT9qr\KXCWb
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 72 b9 c0 32 70 09 e4 f3 cb 1b d8 9c 9b 09 0e b8 f0 b0 8c 4d bb cd 99 c3 39 6b a8 17 bb b9 9e ed 36 dc b0 5d 88 05 76 90 77 42 7c 2a 15 1c 39 d9 e0 02 4b 0a fb c2 12 be 12 f2 6e 11 0e 0a 0b ed 77 dc bc ce 9c 73 b1 ef 38 df 2c c0 d9 12 9f ca 27 4b ae 19 97 7f 2a 37 bb 50 13 7e a9 70 76 25 b7 92 56 2a 22 16 41 32 9d 35 87 4b 14 96 cf 76 34 0b 2c 70 9d 8c bc 1b a1 e5 7c a3 12 25 b1 5c 6e e7 19 38 87 ed f2 44 72 9d 80 9a 57 6a 24 6c 9d 7e 5d 16 96 b1 00 0e 0d 1c 70 0b 39 2e 47 ee 19 30 45 76 d4 44 63 5e eb c4 ca ca c9 0e 26 d6 55 02 81 ce 8e 93 10 2e 27 6a ae 2e 07 f0 5c 33 cd 44 c8 91 68 4d 40 8c f3 0a 93 d1 5f 27 59 36 a2 ea ec f7 9d 1f bb 03 e4 ce 42 fa c3 79 2e ee b0 72 b2 99 aa c7 58 32 7b b3 d6 13 69 8f ba b9 bd 3b b7 46 3e 5d ce 82 d3 f1 f0 a6 73 fc db Data Ascii: r2pM9k6]vwB\|9Knws8,'K7P~pv%V*"A25Kv4,p\|%\n8DrWj$l~]p9.G0EvDc^&U.'j.\3DhM@_'Y6By.rX2{i;F>]s
2024-04-19 14:07:11 UTC	584	IN	Data Raw: 70 c8 00 06 c8 b3 01 ac c9 e3 d7 c7 d4 3e ba 89 79 75 0b a0 01 9e a1 a5 42 df b2 67 b8 5e 19 b6 20 15 13 20 20 b1 62 c7 22 fe b7 06 e0 72 00 07 52 01 70 84 81 60 91 33 1e 4b ba 02 2c 2c d2 15 1c 9a 65 17 d9 02 5c 5e 33 6e 01 e0 1c 1a 83 2e 00 0b 90 17 c0 84 1f af ae af 80 03 58 8c 17 58 a6 ef 16 a9 50 07 66 0a 58 00 b4 03 a9 90 d6 45 be 2e 70 68 26 86 d3 28 97 40 4d 40 8d 54 00 c7 02 6a 40 2a 00 ed 00 58 d8 04 35 0a 7d 93 0b 48 23 e5 12 04 f4 a8 91 0a 78 2a 00 f3 78 2c 0c ba 00 63 aa d3 b2 a8 77 68 46 0f 8b 03 08 90 87 76 5c f7 0c 5d 73 a1 e6 79 00 57 1b 02 0e b4 03 b0 30 68 80 5c 60 02 d2 6a 61 c4 4e d7 bb c4 e7 2c 00 17 0e e0 0c 36 48 05 43 0c bb 6d e7 61 c2 c5 a1 99 00 2c 23 27 73 97 cf 6e 57 f3 4d b6 cb d4 5c 3d 57 3c 5b a4 e2 72 28 90 40 a4 65 72 63 Data Ascii: p>yuBg^ b"rRp`3K,,e\^3n.XXPfXE.ph&(@M@Tj@X5}H#xx,cwhFv\]syW0h\`jaN,6HCma,#'snWM\=W<[r(@erc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50264	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	529	OUT	GET /ZXHmAeEubL_FFSux8ufdc3kWESm6l3Qps0cC-pt8uNWM74A4iElX7CbcQIgyXli9eQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 7614 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 b6 1d 00 00 57 45 42 50 56 50 38 4c aa 1d 00 00 2f a5 c0 49 00 f5 86 e2 b6 6d 1c 73 ff b1 af d7 77 44 4c 40 36 a7 20 be 31 17 35 e7 f3 cd 49 62 ce d3 99 f2 5e fe f8 ff 5f e4 34 db 3e 6a 48 94 ba 7b 0f 77 3f ea ee ee 38 d4 dd dd 8b bb bb 7b 36 04 87 7a 4b a9 bb bb 0b 25 75 17 a8 f7 71 ce ce cc 26 9f 9d 6f fe 3d a1 48 91 cc 19 ca 00 a1 e4 2c f4 d3 a4 d9 74 e9 1e 27 10 a0 24 59 08 99 83 40 4e 3c 94 b2 ed 90 81 40 4e 7c 4b e8 16 c2 c0 19 82 ac 48 92 55 db ca ba 2c e1 5e 1f 8c 8f 3c be 2f b2 f3 2c e1 6e da b1 6d ab b6 95 d6 d7 73 09 cb 7f 71 88 c3 25 0b 22 84 14 5c d7 e8 bf 2c b6 6d 2c 49 62 76 bc 9b 42 75 5f ed 6b ba 7b 66 31 f7 4f 0f da ff 53 76 73 6b db b6 63 db b6 6d db b6 6d db b6 93 1b db b6 6d fb ee f5 cc 39 67 37 98 93 fc 55 07 d3 6e 6a 33 Data Ascii: RIFFWEBPVP8L/ImswDL@6 15Ib^_4>jH{w?8{6zK%uq&o=H,t'$Y@N<@N\|KHU,^</,nmsq%"\,m,IbvBu_k{f1OSvskcmmm9g7Unj3
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 54 18 8f 1c 9e 67 a9 47 f2 24 c0 bc f6 30 50 7e 1d 02 39 92 32 9a 80 a3 f5 05 78 c7 65 9b 80 12 71 1d 2d aa a8 17 01 f9 e2 46 9a 63 ae 4f be 00 b4 92 cf 48 5f ae a0 07 c3 af 66 f5 24 c4 a8 bc b3 10 48 9d 64 4c b6 20 d7 96 25 4b 4c 91 9f de ee c8 95 e4 8c 9f ce 1b df ae 42 35 7d 3b e8 21 bb fb 9c d7 e4 34 c2 8d 69 28 a6 c8 ff 68 7f 83 99 cf de 04 25 b4 c4 c2 4a 5a d4 44 5e b0 b8 ae 08 fa 2a 0d 11 ab a6 4d 72 19 e1 e6 15 d1 14 8f ef 15 68 57 07 19 d5 da 3a 2a 04 f9 a9 aa c5 4b 37 0b 34 1a 51 ab f4 54 48 ba ce d1 3e 29 29 ad 01 9b db 98 84 90 f4 cc 07 02 1f bd ab b2 4c 90 2f 34 16 4e 7f d8 7f 2c 68 2a c2 e4 73 24 15 0f ba 82 a4 5b c2 55 6d 24 b2 d3 4e ac ac 63 a4 82 37 17 d1 0e bc f4 be 1d 12 57 ea 0b 53 40 87 eb 93 91 11 12 55 0b a2 f2 3a 6e 15 13 85 3e f2 Data Ascii: TgG$0P~92xeq-FcOH_f$HdL %KLB5};!4i(h%JZD^MrhW:K74QTH>))L/4N,h*s$[Um$Nc7WS@U:n>
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: c4 fd 69 97 6d fa a0 b9 40 ea 4a 0b 11 04 ab d6 4b 49 74 55 16 d7 55 87 33 54 97 12 b1 60 18 b8 6c dd e3 d1 2d cc eb e7 36 b7 45 0f 31 52 f9 ed cd de 3e 9b 9f b7 a8 55 a6 03 39 4c 03 81 81 b0 5b 5d fb 18 d9 64 8c 00 cd 46 15 df 71 0a f4 14 2a 9a a0 90 54 c2 d4 16 55 1f 99 13 80 59 e9 01 0d 92 26 c3 54 60 4e 4c 1f 9d 74 7d bc 97 b9 61 d5 75 21 cd 45 7a 15 ec d3 ea 9d 44 8f a6 2a 20 e0 2d 7b 33 9d 5d 52 6f 5a 67 3d 55 0d a3 6f f2 e6 a6 37 99 f4 9d a9 4e 3d 4f bd 1a 13 2d f5 fa 26 26 aa f4 9d 3b 9b 68 ab a4 57 40 c0 e8 56 9c 50 3f 97 53 9a d3 b2 cb 49 4b 27 1e 5c af 6d 4e 4a 9b ca dc 8e 49 8b da 56 ac df 9c 1e 74 4d c5 ab a6 4d 99 16 c9 62 b5 44 b5 5a fc a4 56 f1 69 15 bf c4 2f 12 54 c2 ea 3f 36 11 63 13 9e 94 a8 ac 48 78 72 e6 58 75 ac 62 55 73 1a b7 b1 3a Data Ascii: im@JKItUU3T`l-6E1R>U9L[]dFqTUY&T`NLt}au!EzD -{3]RoZg=Uo7N=O-&&;hW@VP?SIK'\mNJIVtMMbDZVi/T?6cHxrXubUs:
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 30 a7 b3 0a e4 fa 67 42 c1 7c 87 41 a7 42 b0 4e fa fe f8 82 41 d9 88 11 1c 23 18 34 dd d5 cb 1a ee 54 15 81 2a 56 09 84 cf 1b 94 66 27 b1 32 2c 14 2e dc 8e d4 81 a4 70 ca 20 ab 52 dd 54 64 24 8c f5 56 50 67 2b ad 7a f9 ea 98 d6 43 1f bf 03 35 25 83 8b cd fe 8f 85 50 82 94 12 b4 ef 10 9d 87 77 1e 14 95 af a7 e8 43 d5 49 60 59 85 f1 af 4e f7 ee 07 2b 89 73 92 04 16 fd 01 fd 6b 25 18 e4 52 44 9f 83 a0 f5 37 43 f7 b0 3c ca 0f 1b e1 6b 53 09 1d 2d a3 cc 72 9c 3b 4d 7c 37 a3 8a 63 c5 34 32 14 4c 86 86 9f 8d 5b 11 06 e1 d7 4e 52 a5 50 32 ed 26 8b b6 cf 0a 8e 53 6d 1a 1d 23 81 cd 0f ed b6 70 fa 7a b1 49 2b af 0e 39 51 58 25 10 3e 07 94 20 bf e5 61 46 f3 dd 25 18 0c da 3e c3 9a 78 28 61 43 f7 17 5b 18 0e 73 6a 51 9e 0c f4 66 93 0e 7e 53 27 93 0c 2c 66 84 c6 2f 28 Data Ascii: 0gB\|ABNA#4T*Vf'2,.p RTd$VPg+zC5%PwCI`YN+sk%RD7C<kS-r;M\|7c42L[NRP2&Sm#pzI+9QX%> aF%>x(aC[sjQf~S',f/(
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 38 30 72 bb 94 a6 1a 86 73 ab 4f 9f 3e 4d 54 d0 df 64 c6 0f 1e 67 6d 4d a8 95 ba 6f 25 18 b9 1a 6e 0c 23 e4 e2 94 65 bc 97 5c dd 3a 23 22 a2 9f 40 fb 0c e6 2b 4a fb 70 15 ed 3d 14 ce d2 5b 0b 4a 1e 17 37 82 19 bc 8e d7 89 4a 51 30 be 87 b8 37 5f 1f 01 fd 02 ec e3 4a 94 67 07 1a 35 8a 3d 53 e1 2a 38 cb aa b3 f6 00 c9 6d f8 19 5b 0c 68 24 2b 9d ed 3d d8 43 3b 33 1b 47 d1 8f 26 27 28 93 d2 d3 3a 07 e3 87 fd d0 4e e0 70 6c 29 18 79 9a 86 10 d5 51 90 7e c8 f4 c9 b7 31 b3 86 15 53 8f 63 39 56 0a 67 59 77 d6 ca 5c a8 66 43 92 c1 16 5e b2 52 58 b4 e1 c3 a1 0f 0f 08 57 31 bf 91 03 65 d4 1e cb 20 73 d3 36 e8 bb 40 45 9e 50 18 a1 13 75 3a 51 e4 47 4c 9f 3e ef 64 da b3 6e 26 72 78 33 83 87 d5 c9 81 92 d7 70 03 18 c3 3a 1d 4f 2b 59 5d ea 35 54 1e de 09 6a 9c b7 f0 bc Data Ascii: 80rsO>MTdgmMo%n#e\:#"@+Jp=[J7JQ07_Jg5=S*8m[h$+=C;3G&'(:Npl)yQ~1Sc9VgYw\fC^RXW1e s6@EPu:QGL>dn&rx3p:O+Y]5Tj
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: e6 0d f7 b1 ab 55 81 c2 1a 04 9e 7d 0f 0f b6 eb ac 22 30 0b 99 ea 41 dc 73 76 f4 61 58 e4 36 ff 06 0f 33 99 8d 8f 7f 60 9a 01 93 92 56 a4 9e d7 aa d9 d7 2a 0b 48 09 68 86 b0 f3 7e 16 69 6e 53 f7 c1 3d df 47 9a 50 87 b0 fe 52 93 9b e1 70 ec 8c 4f 87 2e 41 da 1a 9e 5b 8c b9 5f 3e c7 6b 5c 41 d3 37 b8 05 e9 62 24 f1 4c 22 ae a2 0a 5c 60 28 8b 13 ef a2 e1 99 45 b6 29 a9 05 a3 a4 d1 22 1d ac ee c3 19 59 0a 7e 94 6b b9 84 80 29 d2 fc cb 69 80 d0 ff 22 e2 24 2e 54 0b 77 97 34 34 ab 4e 37 18 25 e2 82 78 1b f9 72 26 7d 59 97 7e 43 c5 d7 91 62 25 e9 5b cf 67 89 e6 68 43 8f 0e 81 91 50 d1 89 32 84 cc b3 1c da f0 d2 ce f1 c0 59 01 32 77 c4 80 11 30 4a 99 9a a6 e6 d5 f5 aa c3 e5 d2 74 96 b3 0b 7b d2 01 75 a0 41 64 63 a6 f8 80 69 8f 9d 22 89 a4 9e 02 2a 88 58 83 68 8d Data Ascii: U}"0AsvaX63`VHh~inS=GPRpO.A[_>k\A7b$L"\`(E)"Y~k)i"$.Tw44N7%xr&}Y~Cb%[ghCP2Y2w0Jt{uAdci"Xh
2024-04-19 14:07:11 UTC	606	IN	Data Raw: 3b d6 05 78 85 68 58 56 88 e6 25 b3 af 2f 44 d3 5a 43 ca 13 f3 d5 04 be 2a 66 35 7b b0 3e 50 7e 83 5a 0d 74 7c ac 51 85 03 a4 14 1a 4d 95 47 27 9b 69 01 c5 01 06 51 57 65 78 8b d3 b8 fa 05 3a 68 f3 b8 f0 3a 1f 16 0b af 13 69 46 fb 41 71 30 ec bb 15 cc 57 76 d1 50 3c fb 22 7a e8 34 54 0f 17 af 88 d7 b4 3e d7 ac 5c 14 19 6c 05 c5 21 e8 3d 97 e0 d7 eb ea 18 60 07 14 95 b9 91 2a 06 fb 92 cc 3f c0 b6 70 06 d4 f9 c3 6f b7 2d 59 12 92 f9 41 e9 8d 7d 23 a6 b9 89 f1 5b db 02 92 87 41 9b 2d 98 e6 06 6a 85 7d 89 b6 3b 3c 1c 6f 92 f9 8f b6 29 28 e5 0c bd 37 87 ec 06 d0 66 b8 85 bc 08 d7 19 6c b8 37 fe 9a 4d 21 dc 48 a0 86 74 03 a1 94 8d 1b a9 2c f8 2b dc 44 e5 1b fe e0 9e 18 92 d9 08 4a a5 46 21 39 9a d8 00 c5 d1 48 67 dd 81 62 20 9d 75 61 3d 03 f3 23 d9 a0 a2 2d fe Data Ascii: ;xhXV%/DZCf5{>P~Zt\|QMG'iQWex:h:iFAq0WvP<"z4T>\l!=`?po-YA}#[A-j};<o)(7fl7M!Ht,+DJF!9Hgb ua=#-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50265	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1106	OUT	GET /I3Qvi0pFixZAlWO3NuIeaoKe0tD3lAJgxkoYh7B8-i442e2Y_DVkPgl8YnbBNTDkKcQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 9500 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 14 25 00 00 57 45 42 50 56 50 38 4c 07 25 00 00 2f 27 c1 49 00 15 07 e3 46 92 1a 4d e5 1f 36 70 06 ff 8c 88 09 c8 f4 f5 71 2f 95 09 6a f0 0e e9 50 39 89 c4 9f 4f ce 16 33 e1 bf 90 f3 47 27 fc 97 3e f4 11 f9 57 1f fd ff cf a5 b4 d6 08 08 23 60 a1 17 e9 30 c3 c0 d0 ed bd f7 de 7b ef bd f7 de b1 f7 de 2b f6 de 35 bd 5a d2 ed 35 bd f7 9e d8 fe d8 7b 0f fb 79 9e 3d fb 39 e7 dc e6 8d ee 3b 12 21 e1 2a 71 21 4c 1a 61 31 f7 77 82 93 00 72 8b 2e 8e e5 e3 1d d7 24 46 cc 2c bc 72 c2 9d 5f da 84 a3 0b 2b 86 55 44 17 c6 e5 c8 3e 4b d0 33 ba 6d fb 52 1c 2b 17 14 33 c7 7c 43 99 ec 14 39 06 2f ae f8 9c 58 c6 c2 5d 10 eb e4 6a f0 10 76 1a 57 34 0e db b6 0d 24 ca e9 ff fe 1b 1f c5 b6 91 04 49 12 e7 f1 fe 9b fb bf 33 dd 19 ea ff 04 50 ba fe ff 90 e5 f4 d8 b6 d1 Data Ascii: RIFF%WEBPVP8L%/'IFM6pq/jP9O3G'>W#`0{+5Z5{y=9;!*q!La1wr.$F,r_+UD>K3mR+3\|C9/X]jvW4$I3P
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 3b 69 00 9a 9f e2 85 16 b9 b3 5e 61 c0 db 2f db a8 00 7d 93 6d 71 1e 04 1e 6d 32 23 b1 80 2d 4d 9b d7 04 70 a1 5f e1 cf e2 cc 9a 79 47 42 5d d6 2b 16 e1 18 a0 1f 9a 4f 47 22 10 8e 73 8e ad 02 e0 e0 7a 9f 6b 02 8f 19 58 89 6c 8e 06 e6 6f f6 c4 1e d7 35 ae 57 b1 1b 32 c3 6f 41 6a 7c 11 c8 b9 24 f7 94 01 66 66 55 e6 a6 3c 4a 2e 4f e0 fc b4 05 ea df 9a 0d 88 c4 15 0b c1 01 ef bc 4f 39 47 ac 40 81 ae 68 99 ac 2e c5 2f d7 9a 4b ae 0b 91 12 a7 ec fb 8d e3 ff 08 00 7b fd a4 35 e0 9d f7 3c 00 b8 3f 83 03 c0 02 64 3a 13 00 66 23 d3 d5 40 8d 5f 43 f5 0a b3 ca 97 be 7d fc f1 26 00 f3 70 eb 99 00 f0 eb d2 c9 c1 67 b3 7d 0a aa ff c5 d7 39 a0 4a de 96 00 30 32 45 ae 04 80 6f fa dd 0b 9c 12 58 1b c0 81 ab d3 10 c0 fd 7f 03 24 c6 b7 26 00 3c 7c b3 33 c4 8a 17 e8 1a 5b 80 Data Ascii: ;i^a/}mqm2#-Mp_yGB]+OG"szkXlo5W2oAj\|$ffU<J.OO9G@h./K{5<?d:f#@_C}&pg}9J02EoX$&<\|3[
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 0f 34 11 5f 19 ce 64 39 2f 23 3a fb c6 99 4c e7 f7 89 ec 20 ce 64 3b 3f 48 54 35 98 ac af 21 26 7b e3 72 8e e7 13 51 d4 32 31 59 6f aa 2c 9a 90 49 d6 b8 bc e3 ae e7 8a 25 56 e3 4c e6 f3 9b c4 62 61 b2 df 22 92 58 c5 45 f0 46 82 ce 88 ff 17 46 6b f8 af c4 51 42 04 5d e7 c9 da 4b 11 6b 18 fd af a4 6d 5a 53 42 14 11 8a 33 e1 a1 9c 66 16 ed 81 ae 3c 35 8c c6 30 7e 81 18 ec 9a 08 8e 9e 6c 47 2f 0c 07 fd e1 d3 d5 f1 f0 f9 1e a1 33 57 8b a0 45 8c 4c 70 79 1b 16 5f 18 0e 0c 63 19 b2 62 70 ce 9f f4 85 19 5b 44 b8 28 c5 84 fe 33 5e e6 18 3d 45 b0 46 47 c3 81 61 b8 16 22 40 4d d0 73 47 97 6d fa c2 8e 15 2e 41 99 84 82 35 f0 36 47 9e e3 8c 07 41 e0 ce e2 f3 60 10 46 15 e7 e9 27 6b 01 24 5a 39 15 71 17 e0 d8 24 91 74 07 40 da 8b 2e 7e 07 c4 d9 74 80 29 87 70 27 33 81 Data Ascii: 4_d9/#:L d;?HT5!&{rQ21Yo,I%VLba"XEFFkQB]KkmZSB3f<50~lG/3WELpy_cbp[D(3^=EFGa"@MsGm.A56GA`F'k$Z9q$t@.~t)p'3
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 6f 86 e8 5d ec f0 a1 06 11 ef e1 38 99 68 67 b6 4a c0 a9 44 eb 04 ac dc 50 46 59 6a 13 d1 5d 62 62 16 a1 b8 40 33 93 ed 6e 73 cf 75 b9 b7 3c 51 66 56 6c 52 4b 91 6b 08 8a 60 a5 a7 8c 0b 9b 35 e6 c8 62 ef bd cc 93 96 04 a9 f5 3a d1 76 24 e8 b1 30 86 e7 42 f4 02 80 50 f7 2e 22 22 5a 54 8f 5a e0 42 0d ff 2f 90 a2 6d 09 51 01 27 ac 26 a2 02 93 04 89 57 87 0d 4f 17 95 9d 43 00 26 0f d1 9a 20 55 97 b0 db 1a a2 67 03 8c 91 53 89 b6 20 8d d0 87 bd 0b 3a 12 a9 5a 84 7b e6 15 65 19 53 f7 c7 dd 8d 2c 22 5a 45 40 7f 95 93 de 43 5f 72 ec 60 24 5a 3d 00 9e 1e 22 4a ab ca 5e 6d b5 9b e9 fa 0e 0d c0 ff 21 ea bf be 5a 6e c8 2a 4b b4 5a 10 be b7 d3 da 5f 4c 5c 28 93 08 e2 b7 8b 6a 44 d8 1e 88 fa 03 63 74 7f fa 47 b5 91 12 8e e7 43 3b d0 73 b9 61 4d 51 c3 91 92 68 c7 52 34 Data Ascii: o]8hgJDPFYj]bb@3nsu<QfVlRKk`5b:v$0BP.""ZTZB/mQ'&WOC& UgS :Z{eS,"ZE@C_r`$Z="J^m!Zn*KZ_L\(jDctGC;saMQhR4
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: b2 6f 83 ba ff a4 69 a7 d8 ee d4 8c c9 fd bf 19 39 4e a9 19 ab 37 51 1b b8 fe 61 17 e8 fd 79 c2 85 6a ef 00 35 88 78 0f c7 6c d9 b9 0f 65 79 17 6f e3 03 21 5a 5e 60 e5 86 32 12 1f bb 49 a8 28 11 e0 be 81 f7 96 25 16 25 36 d4 7f e6 5a 1e 96 21 16 5f 2c b1 70 b8 04 31 cf a2 2e e4 3e cd 8f 2d 44 2e bd 98 68 47 9e 26 87 15 44 34 65 7d 8c a9 a6 6a 78 25 54 74 80 4a d2 ca 0f aa 57 41 44 f4 16 fa a8 27 68 31 b5 72 3f c6 b0 a0 f2 10 51 d9 e7 30 67 76 56 81 ae cd b1 73 42 d9 28 65 61 8c b1 7a 3d 67 0b 5d 4c 44 b4 05 3d 55 fc 1d b3 38 78 bf 4e 5b 53 ce 92 ba d9 f0 52 e8 8d 49 19 35 3b 12 a9 59 22 ef 99 0f aa 3a b6 9a c5 db 8d aa b2 34 0f a1 df 8f b1 28 7b d3 7e d1 0e 1c 10 bb 97 85 7b df 3b de 08 11 d1 96 8c 1d 17 9a 4e 91 ef 65 cc e6 99 2e 37 13 11 9d ba 12 b0 b0 Data Ascii: oi9N7Qayj5xleyo!Z^`2I(%%6Z!_,p1.>-D.hG&D4e}jx%TtJWAD'h1r?Q0gvVsB(eaz=g]LD=U8xN[SRI5;Y":4({~{;Ne.7
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 66 a3 5c 61 fc 49 71 64 16 68 9f 54 eb 3e 52 7d be eb b0 af 57 bb c7 dc ea a6 8f ae 64 16 85 4b 1a c7 84 c4 b0 0c d1 40 12 11 11 73 48 c4 5b 82 2c 33 f8 53 9e b0 4b 5d c4 10 6f a5 69 82 1c 30 1e f7 0f 41 7f e0 1c ea 3f fc fb c7 ba 8b 68 fb 64 0a 8f b7 c4 e0 ca 04 85 42 d8 a7 86 db ad 8f 2d 40 0b 69 b7 05 6c 25 de 11 ab 29 48 d3 e4 09 73 15 41 6b 66 15 c8 2f 12 3f 2d 88 f5 ba 1a 7a d7 ee 80 bd ab 18 82 d0 e4 00 a9 4b 2c 9c eb 59 d6 8b 85 8b 6b 5c a0 2a a1 68 d9 ce 83 41 17 ed 93 4e 3a e9 a4 df a2 ff 6b 49 d3 74 5b 68 7c 80 1f 8a 24 00 48 de f4 2b 1e 28 5c 80 08 f2 62 80 59 db 64 19 4b 13 94 58 dd 6a a9 ba dd 62 51 49 dc f5 9a 17 b0 b6 3a aa fd f5 ab 00 e1 1a 30 dd 60 65 83 66 60 54 07 a2 67 c5 be f7 26 c6 ac d1 7b 37 ce 2e d0 ea 02 d7 a7 58 03 c1 22 86 e9 Data Ascii: f\aIqdhT>R}WdK@sH[,3SK]oi0A?hdB-@il%)HsAkf/?-zK,Yk\*hAN:kIt[h\|$H+(\bYdKXjbQI:0`ef`Tg&{7.X"
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: a6 b9 72 2e 57 38 77 bd 01 3a b5 15 ec 8c 99 b8 fc e0 26 f6 64 5e e8 dc 52 51 cb be 5d c3 4d 5c 3e 70 13 bf e6 be ca a5 a0 9b cf 8e a8 58 e5 60 c1 16 2b e3 7a 3f b3 5a 82 2b ff ea 33 67 43 b7 87 d1 de 11 13 bd 62 59 1c fb b2 1e ef 9b 2d c3 f7 f7 be 1d ff e6 c5 16 64 ab f0 16 41 51 2a 7a 8b 1e bd fa b1 63 1f fd a9 cb 3f 38 2f a5 3c 63 28 87 5d 99 93 4a 71 2c bd 5b 71 33 d7 cd 71 89 67 29 67 22 04 11 f9 9e 8f 92 ac 0c 8a de 6e 38 50 f1 f9 de 1e 35 74 df 6e b1 cd 3d d8 a0 e8 fd 86 60 f7 a3 76 d3 6d 55 e3 99 d9 a0 c8 44 83 f9 b7 55 75 58 6c 39 ca a0 c8 48 83 f7 89 ba 2a 9f d9 a0 c8 4c 83 39 9f 2e 0a 45 fc e6 68 8a 0c 3d e8 b6 7d 75 4e 2b 69 66 50 64 a9 a1 d9 bd 3a 26 6a 99 bd 15 99 ea 6d ae ac 53 9a 2a b2 b6 a9 0e a9 6c 90 37 86 ca 3a 23 8a bc 15 99 eb fd 33 Data Ascii: r.W8w:&d^RQ]M\>pX`+z?Z+3gCbY-dAQzc?8/<c(]Jq,[q3qg)g"n8P5tn=`vmUDUuXl9HL9.Eh=}uN+ifPd:&jmS*l7:#3
2024-04-19 14:07:11 UTC	1237	IN	Data Raw: 41 a8 77 c0 0b f4 5a 16 00 ce 83 eb 25 52 68 a9 92 95 60 49 33 92 77 da 0c d9 9b 2a 23 fc fb 78 74 15 4a bd 98 9f a4 05 21 ef e2 ba 1f d7 9f 4e 50 29 b6 61 60 56 7c 6c 9e eb f2 ff 3d 0c 8a 7b 5b 35 46 3e f6 40 fc 3a e3 e5 04 fd 23 1c cb 80 15 08 5a 03 75 91 77 2d de 4d a5 a0 d3 3b 54 a2 85 e7 e0 5f 03 f8 8e ff 06 3a b4 2b 75 63 dd 28 75 5b 4c 41 eb 09 66 67 21 59 3d 2c 05 17 83 40 9d 75 44 ed 37 c3 ce 54 3b 36 03 af bc 2b 12 11 fb 27 eb 40 d6 f2 ed 4f f5 8b 8d a1 91 34 72 06 c9 4d c5 9e 86 9a 57 d3 08 06 a5 42 87 6b f3 6c cb e8 3c a6 28 8a 7b d4 cd 6a ce 71 86 87 ff b0 8a b2 29 de c8 14 b4 16 ea 22 dd 12 56 e7 d9 14 ff 09 84 9e cb b4 15 c3 27 66 c3 3d af f2 b1 7a 9c 7e fa e9 1e 5e fe cf 4f b8 fb 39 0f 06 17 29 b4 28 45 a0 e4 9d 73 72 14 2a 44 8d b4 5b 44 Data Ascii: AwZ%Rh`I3w#xtJ!NP)a`V\|l={[5F>@:#Zuw-M;T_:+uc(u[LAfg!Y=,@uD7T;6+'@O4rMWBkl<({jq)"V'f=z~^O9)(EsrD[D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50266	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1107	OUT	GET /SUFtSwDL7N33qHh-o0lRr7Gy4QPeMQwWafVAKyeIyWrl7O1gTl5E5YQ8TyExGUatUbdW=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 9368 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 90 24 00 00 57 45 42 50 56 50 38 4c 83 24 00 00 2f 27 c1 49 00 35 87 da b6 6d 98 f8 ff c3 4b fa 18 11 0a dc b6 51 c6 78 7c 9f 88 2f 20 9a 05 75 e4 2c ea ce 00 d4 15 a6 9f 77 d6 ce 66 be bf 26 97 98 c8 49 62 f7 df 3a 18 93 5e ff ec 3b 05 3e fa ff 8f 5b 76 b3 c7 e6 c1 78 ce 5c c5 b6 9d 5c db b6 6d db b6 6d db b6 6d c6 b6 39 13 9d f3 ec 7d f6 d9 cf 73 ce 73 52 c5 ba 8c 6d 4e 53 c6 d9 b5 db b8 76 b4 ab d8 9c ba 9d 7e aa f8 d4 0d 67 e5 a9 6d 5b a7 2b a7 b6 79 b2 74 d7 5c cc 5d 67 6e 31 75 e3 9b 5f 8d 49 57 63 db b6 67 67 56 26 75 3b c1 e4 94 9f ba c1 ac 9b 5f ad ab da 6d 30 77 65 d9 b8 88 ed 64 d6 4e fe ad 26 9a d5 53 77 56 34 f5 72 1b db b6 52 ad 94 02 3c 25 72 77 32 e8 bf a1 af 54 6b db d6 b6 27 6b ed 7d ce 79 9e af 90 f4 92 1e 12 d0 58 2c 0d c4 Data Ascii: RIFF$WEBPVP8L$/'I5mKQx\|/ u,wf&Ib:^;>[vx\\mmm9}ssRmNSv~gm[+yt\]gn1u_IWcggV&u;_m0wedN&SwV4rR<%rw2Tk'k}yX,
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 1d f7 04 91 6e ab 98 fc a2 e1 b0 26 78 3e 61 c6 e3 84 7a e4 fe 23 e1 67 6c 08 93 d9 7f fe 96 98 6e d6 14 26 f2 8d 4f 6c 08 63 87 1d de 68 1c e5 51 8d f8 22 fd 6e e5 e9 25 7f df 6b 52 48 5c 31 70 8d 0a c0 d1 9e 30 7d f3 a5 ed 46 de 58 84 6b 43 6a 91 42 ad c6 9b 80 b8 a7 88 94 27 b5 24 77 6d ce a4 37 2d a5 18 b9 a3 09 80 15 42 37 8a e8 4a d8 c5 1f 78 2c 54 f9 a4 5c 48 eb db 76 32 f8 47 9f a9 12 2f 26 ac 95 d7 0b aa a4 3a 2a 55 60 97 aa 0b 53 d5 84 19 ce 0a dc f2 44 e8 49 51 3f 3b b1 f6 5c 3a 1e f8 4c fa 25 ae 8c 9c 7b e8 59 95 e6 0b da 34 6a 08 93 85 a9 fd e8 14 67 75 af 37 a8 81 27 4c 25 3c 44 5a 6b 17 aa c5 8e 20 81 58 f3 0f 58 15 38 66 ee de b0 21 cc da 29 f5 84 51 c4 37 18 b2 f2 0c 4f a7 3e a8 18 fa 93 5b 51 e9 ca 4e 2b 71 3c e3 77 53 bb 4f 30 a6 7c 31 Data Ascii: n&x>az#gln&OlchQ"n%kRH\1p0}FXkCjB'$wm7-B7Jx,T\Hv2G/&:*U`SDIQ?;\:L%{Y4jgu7'L%<DZk XX8f!)Q7O>[QN+q<wSO0\|1
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 58 3c b3 63 68 92 19 06 e1 a6 46 27 c9 57 f8 04 db cd 5e cc f6 24 57 9b 4e 16 6b bc 4b df 7c b5 c7 de 9d 25 ca af b7 f1 7e 41 2c a1 80 ad 9a 0b 91 47 62 74 42 72 42 60 62 df 59 36 cb 13 14 23 e5 0a 5a 22 b9 43 77 05 30 00 c8 97 83 8c ec 59 30 47 40 f9 04 50 0f d7 06 3a ca 45 42 9b 1d 2d 80 5c 21 e0 ce e7 9c 18 83 82 1c 1d 00 30 21 c9 66 08 8b 1c bb 4c 41 64 33 1a c8 c3 41 a2 7f 92 6b 66 5b 00 4a 97 71 40 ce 66 a2 87 8d 2b 4b 40 08 a7 a8 11 48 22 29 cc 07 d5 07 6f 9b 97 00 e8 16 64 0e 13 0c 9b 1d 18 97 b6 e7 54 c2 86 9b 43 21 27 cc 63 8f b7 05 4d a5 0e bf de b9 c7 ca 69 f6 ca f9 47 c7 cd 16 1d 81 8e fb 35 be 24 42 c7 20 27 02 5c be 53 19 91 2f 99 49 e0 30 1a c9 ae 59 29 6a 40 96 6a 50 27 72 f1 12 90 02 b8 ea e4 9d 48 23 7c eb 8b 31 2d 6a e3 57 19 4a ce 31 Data Ascii: X<chF'W^$WNkK\|%~A,GbtBrB`bY6#Z"Cw0Y0G@P:EB-\!0!fLAd3Akf[Jq@f+K@H")odTC!'cMiG5$B '\S/I0Y)j@jP'rH#\|1-jWJ1
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: db bc b6 c9 13 d3 23 d1 1a d3 21 db 2f 2a df 54 06 da e6 b1 7d 48 8b ac 25 10 c2 c0 5d a6 20 19 da 2d 0f 95 2d f4 6a 4f 29 84 c9 fb 9f a7 4f 4f 8e 8a 39 ed c9 15 3d 23 c4 87 47 ec 00 c1 66 fc 5f 45 bc 61 b6 63 17 c7 24 46 cc 54 b1 e4 ca 76 6c a4 56 e1 42 37 7c 57 1f 72 9d 78 a9 02 21 84 0b 6f f7 ee a4 a3 42 24 b6 02 0d 33 33 49 a6 ff 93 bb 43 d8 0c d7 d4 b6 e7 d3 0c 3f 92 ec aa 59 8f 91 9c 0c 69 5d 38 ff c1 e9 8a 55 06 da b1 94 83 5d 7f 87 be 66 86 16 1c 15 80 8a 2c 8b 05 aa 44 07 ec 1b af d8 23 9a 62 31 8a 60 21 f6 70 eb 06 d1 10 b2 24 30 42 28 53 1a b6 84 9d bd 62 b7 08 33 21 9e 55 38 71 b4 ae 78 f4 5e 58 05 f0 90 cd d6 8f 45 33 a5 11 c2 69 62 54 db 10 8f da 3c cf e3 61 85 08 46 b1 72 85 7e 78 93 4e 70 45 0b 26 5c 0b 94 8f df 6c 58 31 62 17 f9 de a9 01 Data Ascii: #!/*T}H%] --jO)OO9=#Gf_Eac$FTvlVB7\|Wrx!oB$33IC?Yi]8U]f,D#b1`!p$0B(Sb3!U8qx^XE3ibT<aFr~xNpE&\lX1b
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: a7 d5 2e af e5 92 3a 53 8d 3a a3 56 7f 5a 0b ea 4f eb a1 94 89 a9 45 f6 67 e8 52 43 8f 3c f8 03 34 47 9e 0b eb 55 b3 a1 7d 5a 8d b1 4d a9 63 1d d3 b6 ee 2b 81 97 ee a1 d2 5d 35 94 59 d3 bb 51 bd e5 eb 68 85 48 d4 bf 2e 8f 45 c9 d6 35 82 32 54 53 20 68 31 a9 4a a1 87 da 88 06 d8 9d 14 ba c8 5e f7 a3 7e a7 0f 43 2f bb f7 6f 53 0b 7f 50 2f 53 1e 95 d9 b9 d4 d1 f0 15 8f 50 37 c7 76 61 3d bd 9d ed e0 6a 07 6b d2 51 45 9c 59 cd 73 22 84 ae ca a5 6a a9 5b 5f b9 e3 fe 54 e3 c5 84 ce ca 79 70 d5 98 41 ea 6d 92 6a ed de 8f 21 74 97 19 35 50 52 0a dc 04 df 7b 6f 6b b9 8e a2 d8 ad e5 78 7f f0 2c c9 29 99 29 d0 e8 6b ad bd 07 23 d5 09 b4 7e 46 61 ad b9 7d 21 9b 8b 6d 7d ec f4 dc bd 73 89 fe 74 65 39 7e 62 60 91 a2 22 35 12 59 00 40 b8 53 43 6f b7 d8 9e 29 e3 39 bb 10 Data Ascii: .:S:VZOEgRC<4GU}ZMc+]5YQhH.E52TS h1J^~C/oSP/SP7va=jkQEYs"j[_TypAmj!t5PR{okx,))k#~Fa}!m}ste9~b`"5Y@SCo)9
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 10 d9 23 01 e0 15 82 b8 6c 40 1e 18 05 b1 38 2d 5e 80 cc cc 55 33 a6 4c 6a 30 33 99 11 26 4d 68 0d ac 18 0c 3a 3b 00 74 0c f2 63 60 25 bd 83 dc 42 65 02 00 f1 9d 10 59 31 3a 7c 0e c9 fb 18 a1 1e fb d3 4c 3c 94 c3 2c 98 ff 1c 86 e9 58 f3 0f 58 05 3a b5 5f d6 2a 49 6f 5a 75 59 e9 e4 ba e7 02 91 3a c4 8c 2c 46 ef dc 34 5e 6a e8 16 23 e5 63 4b a1 5d 92 1f b0 b1 94 c6 57 56 43 a4 52 21 f2 cd f8 49 a4 a3 b0 c3 51 78 b6 75 80 84 3c 75 62 f3 dd 27 09 ca 16 ba be 93 78 8f a3 9f d7 42 9c 8f cd 2d 42 b2 31 db 49 1c 0e 6f 07 c9 71 01 2f b5 86 ac 9f 50 9a 84 90 dc e5 f7 de c0 cd 41 0a 81 31 40 f6 00 a8 5a 47 98 80 9a 89 87 92 fa 7b b3 7f fc 0d 44 3c ca ac 4d 85 4e 1b c2 e4 42 f5 99 91 35 5c 3b 55 60 14 02 cb 52 cb 4a ca 93 9a 5b 8c 94 58 3f 30 aa b7 76 e4 22 ef 7e 7e Data Ascii: #l@8-^U3Lj03&Mh:;tc`%BeY1:\|L<,XX:_*IoZuY:,F4^j#cK]WVCR!IQxu<ub'xB-B1Ioq/PA1@ZG{D<MNB5\;U`RJ[X?0v"~~
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: ab dc 3e b0 b0 2c 9b 3c 2e f5 78 94 1a 24 51 69 1d 6e 11 72 f1 f2 5b ed 78 f3 72 6a b9 a0 1f 80 82 31 cf e2 1e 21 e6 2a fd 96 b0 1f 8a 41 9f 39 54 65 48 9c 2b 17 a5 d6 e6 6f 97 56 2a 57 f7 ec 4d 51 21 98 a1 fa dc f9 86 49 b7 55 28 43 6e 8c b2 c3 86 da b1 7f f8 c3 30 3b a6 9f 99 1a ed 91 c0 1d 7f 70 21 90 2e be bf 4e 40 ce 81 b5 34 98 f7 16 ef 2f 34 de 6f 29 b7 7a a4 50 c7 3f bc ec f5 82 3a 46 38 45 6b c2 48 6f 8b 2d 44 f7 6b ea ef fe 7a 51 fd 1d e6 74 9b d2 da 94 ea a8 aa bd a7 bc cd 16 3c 65 39 c5 59 5d 6c ff af 96 a6 1f 26 5f 02 f2 3e 6d ce cf d4 f4 70 9d a2 fb c9 cd 2f f8 ff eb 03 f4 f6 7a 95 46 a6 cc 6d b7 15 4f fc f3 18 87 af 63 7f c2 10 c4 cc d6 bb 52 38 60 1f 49 5f eb 9d 67 6d 37 0a f3 17 be e8 da ef f2 f6 3a fc ef 56 00 b7 13 36 93 f3 1f 46 29 4e Data Ascii: >,<.x$Qinr[xrj1!A9TeH+oVWMQ!IU(Cn0;p!.N@4/4o)zP?:F8EkHo-DkzQt<e9Y]l&_>mp/zFmOcR8`I_gm7:V6F)N
2024-04-19 14:07:11 UTC	1105	IN	Data Raw: 0c 00 e8 67 06 53 a6 66 1e 2e 43 45 a6 75 5a 17 33 16 a0 04 d5 57 9b a9 2e 3d eb 06 68 2c 16 63 3c b3 f8 ac 1f e2 bc fd af c4 b6 d4 9a d6 14 9b 0c 48 7c 4d bb bb d7 c2 c3 ff 02 6a 36 42 d2 80 85 5b e7 16 69 9d 7d ce 7c cd cb 00 6d d5 4c ca d8 0c df ea 1d 80 06 8b b2 a7 45 20 f2 44 c4 25 65 d9 4e f0 2e dd eb 63 87 ce 42 e1 88 d2 78 59 0c d0 db 0a 23 13 5c 5e 82 cc 6f e8 6f 05 21 d4 4d 8b 86 a4 99 6f 50 6b 51 83 f0 5d 00 0e 39 ad f0 64 18 4a ce 7a ad 26 b2 8c 9a 52 85 6d 1a 0b 3c 31 d9 16 a2 bf a4 9a 50 1b 35 0b 52 15 3e 3e d2 9a c5 c9 36 1e 50 33 c4 e6 53 69 08 ac 2e d4 47 40 32 d6 e2 37 99 fa 09 c6 f4 86 00 1b 59 19 c3 d3 0a 4e 24 90 6d b8 a0 4e cf 33 99 80 87 52 54 79 de 0c f5 c5 72 80 15 b1 2b e9 65 84 c3 22 ed b3 41 90 69 2d c7 74 c0 ae fb db a1 88 66 Data Ascii: gSf.CEuZ3W.=h,c<H\|Mj6B[i}\|mLE D%eN.cBxY#\^oo!MoPkQ]9dJz&Rm<1P5R>>6P3Si.G@27YN$mN3RTyr+e"Ai-tf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50267	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1109	OUT	GET /ZvOdCQjZm7PU-1Qrdn_m9ksg7RAAbXL4iW6QSCoYmkHcl4lopAjeOMYiESyXCQFfRjN5f1mRb1un=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 414 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:35:48 GMT Expires: Sat, 20 Apr 2024 11:35:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 9083 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	414	IN	Data Raw: 52 49 46 46 96 01 00 00 57 45 42 50 56 50 38 4c 89 01 00 00 2f 13 c0 04 10 4f c2 a0 91 24 45 bd e7 5f 2c e3 43 db 70 d8 b6 91 23 f1 ae ff 66 f3 7d 1c 39 6c 23 49 91 ac cb 3f 56 e6 7b 28 b7 b6 6d 9b d5 41 6c a3 73 9f ff ff 13 f6 19 e9 8c c7 00 00 11 10 44 20 90 00 01 9f ad f0 f9 41 11 8d 1c b1 c8 27 50 bf 30 9c 0c d1 45 2b 12 ab 5f e2 0a 7e 81 96 e0 88 fd 30 b1 52 df cf af 7e 7f 0f ac cf f7 45 fe 75 1b 9b fd 1c f3 fd fe 52 fd 15 0b bf 8c f3 5c a8 df 67 66 21 13 3d ff f7 b3 ee 33 fd 81 bc 4d 96 d3 e7 fd 7e f4 6f 7e 70 3f 8f 75 de 8f a3 fe 16 51 bf f3 79 0d fa 0b 06 ff f9 6b 0a bf ff 5f 45 28 2f 2a b4 00 0e f9 12 00 0d fd 81 80 d1 db 88 69 19 16 38 8c 24 db b4 e6 db b6 6d db f7 7c 3e e4 1f 92 7e 0a 11 fd 9f 00 9c bd 5e fe f6 8f ef f7 b1 df 5d 76 a9 c9 f5 2a Data Ascii: RIFFWEBPVP8L/O$E_,Cp#f}9l#I?V{(mAlsD A'P0E+_~0R~EuR\gf!=3M~o~p?uQyk_E(/i8$m\|>~^]v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50268	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1092	OUT	GET /a-/ALV-UjXkGwFtGTUp7J-chzmsBuXw50nlfEPLzblqnxyaMBHTyJKBxPsC=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v3c07" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 466 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	466	IN	Data Raw: 52 49 46 46 ca 01 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 1f 00 00 1f 00 00 56 50 38 20 82 01 00 00 b0 07 00 9d 01 2a 20 00 20 00 3e 75 32 94 47 a4 a2 a2 21 28 0a a8 90 0e 89 68 00 9d 2f 6c d6 01 52 87 68 16 17 a6 75 e3 bb 50 04 af fd 46 b4 f7 da 15 96 bb 3a b6 c6 d1 c6 73 e8 4d 62 eb 90 31 91 8b 89 ea 7f e0 00 fe f9 74 f1 eb 4d df c1 78 41 7f c7 9d 67 b3 01 3f 8f ee da bd ff 1b f3 b6 cf 8a b2 1a 5f 68 8e 74 f9 12 f1 4f bb 5e c1 62 2e 2c 06 74 5d 8b ef 6f 95 1f 5e 9b a9 fd 1f 6b f2 b0 86 12 23 74 4f 1d f6 58 68 91 ab 6c df 6c 3b 5e ac 1f f5 c8 dd bd 5c 4e 7c 6e a1 ca a4 a0 f2 f6 01 f2 e9 d9 6b 22 87 fb 9b b0 7c 57 fa ff bd 0f 09 de e8 56 09 55 fc 96 95 60 3a 28 f8 96 a1 ac 28 d6 94 f7 fb 3e f5 45 3f fa b3 a9 28 7f ed c7 5f d1 cc d3 ee 37 fa Data Ascii: RIFFWEBPVP8XVP8 * >u2G!(h/lRhuPF:sMb1tMxAg?_htO^b.,t]o^k#tOXhll;^\N\|nk"\|WVU`:((>E?(_7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50269	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1100	OUT	GET /DHBlQKvUNbopIS-VjQb3fUKQ_QH0Em-Q66AwG6LwD1Sach3lUvEWDb6hh8xNvKGmctU=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1782 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:47:16 GMT Expires: Sat, 20 Apr 2024 10:47:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 11995 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	721	IN	Data Raw: 52 49 46 46 ee 06 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c a6 06 00 00 2f 3f c0 0f 00 09 33 6d db 28 6d bf 8d 3f e1 75 1c 22 fa 3f 01 bc 6e 51 d3 3c ca b1 94 24 a0 94 dd d0 17 6c 22 db aa b3 7c 2a 74 50 e3 5f 0f 83 02 2a 48 d2 11 3c 28 6e db 36 e2 08 79 26 6d f7 9f f1 2e 18 47 92 d4 a6 f1 3c 09 81 22 ff 98 8c a4 38 54 d5 ff 09 10 13 ff 86 fc c7 31 ac 92 30 95 a3 ab c8 b8 0f 97 0b 7c 7c 22 d1 05 ee 9a 4f f5 35 3b 5f b8 66 40 a7 d3 99 3c d1 8f ab 87 8e b4 6d 8a 24 27 ff ec 21 31 33 33 33 eb 10 6c 2a e4 eb 14 7c 03 3c 81 fc b5 c5 60 6e c8 94 c7 4c b3 38 3c d3 9d 99 46 55 75 f7 e6 78 6b bd 9e 14 99 b3 51 96 a8 44 1e 33 ab 22 e4 d5 8a 59 25 b2 99 7b e4 a1 23 87 d6 b6 43 92 de b7 ea 6f 63 b4 b6 6d db b6 37 b2 6d db ca Data Ascii: RIFFWEBPVP8X??VP8L/?3m(m?u"?nQ<$l"\|tP_H<(n6y&m.G<"8T10\|\|"O5;_f@<m$'!1333l*\|<`nL8<FUuxkQD3"Y%{#Cocm7m
2024-04-19 14:07:11 UTC	1061	IN	Data Raw: 31 13 f0 a4 b8 95 a5 88 20 b7 28 3c a7 6e d1 f5 79 61 dd 14 7a f8 ec c0 88 70 6e 68 d0 32 3c 5e 67 09 78 fc 2c 63 ce 12 29 18 74 38 be df 46 ce 0c f7 14 4f 65 0d 28 2e 30 1b ee 14 d6 46 c0 fb 41 b0 08 9c 1f eb 1a 50 ca ba 2a 98 5c d1 ed c5 58 db 3d a3 fe e3 7d 40 a3 49 a3 5e 50 ea 17 83 fa c7 0b f8 61 e1 a9 cb 59 d7 af 5e b0 49 53 74 45 9c 99 fd 7d 64 e4 db e5 cd 1f 0d 7b cf 0c 6b ab 1a 40 b3 42 a3 45 a3 42 c1 bc 99 b1 9f df a8 66 f9 f1 4b 9f 2e 39 df 9d a5 91 9a ce a9 10 5d 5d 28 61 89 29 5d e0 b6 93 46 17 7d 1a 69 fb 6c 71 ca f5 db d5 4a 4b b4 a0 d1 ad 59 2d 28 f0 c0 f1 ff a4 e3 f2 3e cf 8f 1c da 71 46 42 51 90 65 11 9c c8 29 7a 8a 46 21 11 49 48 62 20 15 3e b1 fe cd f2 2e 0f 97 66 dc bc c3 b6 75 0c 49 1f d1 68 fe 5e 50 b2 62 8c fe ba 91 6c 3e e2 ca fe Data Ascii: 1 (<nyazpnh2<^gx,c)t8FOe(.0FAP*\X=}@I^PaY^IStE}d{k@BEBfK.9]](a)]F}ilqJKY-(>qFBQe)zF!IHb >.fuIh^Pbl>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50270	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1100	OUT	GET /GCsSBgR93cedwf2weP7s6VPsBitwir9ioOO0DYjLydIjdCkfQEv0GQzK34ky96L6XMc=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1400 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:47:16 GMT Expires: Sat, 20 Apr 2024 10:47:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 11995 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	721	IN	Data Raw: 52 49 46 46 70 05 00 00 57 45 42 50 56 50 38 4c 63 05 00 00 2f 3f c0 0f 00 22 ba da ff 99 b6 bb 53 25 55 52 a6 ca 3d a4 b5 6d db e6 2d d8 3a b6 55 c6 c9 f6 3e 88 6d db b6 cd bd 67 26 7b d6 ea 52 5a 95 cd d6 66 69 db 5d 2e c0 ec dc e6 49 9d 67 9d 54 4e 4a 9b 57 60 6b 3f 67 c2 bf 8d f2 c8 a1 6d db d8 ab 93 54 b6 6d d7 aa 6c db b6 d3 ab 4b aa fc 55 6c db 56 6b e3 d9 aa de ff f9 1b 71 72 3e c0 a1 b6 ed 78 f3 24 e9 c6 c9 76 bb d9 f6 e8 d5 b6 dd a9 b3 6d db dc da d1 8e 71 ba da 6e df 38 e9 bf 03 b7 91 14 c9 59 e6 3d f8 44 2b 59 db ce b3 54 0f 5b 32 4a b8 24 7d 22 b1 f5 89 ee 96 f2 bf 08 9a cb 2a 1a cd 77 4e 7a 3b 25 3d ec 93 ae 76 08 23 db 04 e6 c7 e2 9a 0b be 88 e8 e3 82 f4 01 b2 4b 3a d9 24 e0 9e 0a c9 f5 cc a6 0d 94 13 d2 cd 3a 81 08 4c 4e 6d f1 8b 26 88 f6 Data Ascii: RIFFpWEBPVP8Lc/?"S%UR=m-:U>mg&{RZfi].IgTNJW`k?gmTmlKUlVkqr>x$vmqn8Y=D+YT[2J$}"*wNz;%=v#K:$:LNm&
2024-04-19 14:07:11 UTC	679	IN	Data Raw: d3 af 22 82 2c a2 ab 20 94 26 1f fa ed 05 e8 5e 59 25 e2 94 f4 70 4d fa e1 38 fe 04 74 fa 32 1a 7b ea 7e 29 28 2c 08 0f ce 02 fe 3b 38 d8 6d 5a 9d 12 b5 5e a5 06 48 23 47 5d fc 5a 8b 96 fd e0 d3 13 88 02 a9 49 80 02 c3 b5 f7 e2 fd 29 f3 45 b1 1e b6 25 53 5c 5c 61 21 38 08 a9 94 27 43 b5 16 09 01 b2 da 00 8a 05 28 74 b0 8f 56 f1 92 2d 88 4b 31 cd 2b 00 32 c9 c8 c9 a1 e8 c7 39 7f b7 09 32 4c 50 87 61 cc 64 68 37 fb c8 42 98 9c 4d 28 50 3c 70 4d 3f b5 82 56 78 7d 8f 13 5f c2 cf ae 01 e2 26 97 e7 e8 9d c5 61 8a 10 22 c4 8c 26 dc 12 42 18 48 d6 30 50 c9 33 16 4d 98 5f cf cb a8 02 71 e2 4b 0a ad ed e2 c8 2a 94 8a 99 4a 48 7c e2 94 00 c2 40 56 b1 40 b7 d0 e1 09 4a f9 4b 1e 3b 2c 7f 13 88 1d 51 50 f1 9d 08 47 11 71 86 8f 10 31 11 98 7c 5e 2f 3e 84 43 e4 2c 43 62 Data Ascii: ", &^Y%pM8t2{~)(,;8mZ^H#G]ZI)E%S\\a!8'C(tV-K1+292LPadh7BM(P<pM?Vx}_&a"&BH0P3M_qK*JH\|@V@JK;,QPGq1\|^/>C,Cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50271	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /p23hsdqcrm5D0cLJxdVpLWPkNeNNY5NToUhMea5rNk1CL8xF8lsKo7xVZ1piykfztZE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8280 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	725	IN	Data Raw: 52 49 46 46 50 20 00 00 57 45 42 50 56 50 38 4c 43 20 00 00 2f b8 c0 49 00 f5 06 e3 b6 8d 1c 89 fd 97 bd e1 f2 bd 23 62 02 7a a8 79 1e d8 c1 1d 27 75 e8 54 c7 50 41 65 a7 82 36 61 56 6d 7d ac d3 7e a3 71 70 64 f3 29 f6 e8 d6 dc ed f3 9d c5 1f fe ff ab 9c 56 db b6 4f 3f eb b8 d5 bd c5 eb 5e dc 43 dd dd dd dd 15 a8 20 75 dc 2d b8 b3 dd b5 ee ee ee ee 2e 3f fb ae c8 fa fd 7b b2 23 d3 10 08 0d 1d ca 40 48 c3 cc 19 c2 60 29 9b 86 10 24 d8 da 29 4d d3 34 27 a4 d9 1d 98 b0 90 cc 31 b0 73 26 a1 30 90 76 85 26 20 37 92 24 49 72 bc f0 08 b0 14 04 39 1e 3f b4 ff a1 02 78 70 33 bb db d3 55 49 cb b6 b5 b7 6d b3 af 44 14 02 74 37 c0 65 d2 76 32 95 5e 9f fb d8 ea d8 f2 e8 cc a0 e1 f6 5f 16 24 c9 75 db cc 19 0b ed 09 80 cf af 02 48 39 ce 3f 35 6c db 8e c9 cd d4 8e 6d 1b Data Ascii: RIFFP WEBPVP8LC /I#bzy'uTPAe6aVm}~qpd)VO?^C u-.?{#@H`)$)M4'1s&0v& 7$Ir9?xp3UImDt7ev2^_$uH9?5lm
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: af c8 c1 66 45 28 d6 31 5c 30 e7 5f 1a 49 5c 36 01 38 a0 88 87 49 56 c9 c8 e6 57 18 3c 60 8b 6e 39 02 b8 a3 90 5f 97 2e 08 68 1c 6f 44 d6 ca f7 11 6f 0c 66 0a 50 87 fc 29 c8 50 e5 25 00 62 72 f0 1a 14 67 8c 1b 65 65 b3 b2 9c be fb 5f 5e ba 6c 17 00 ad 74 f1 a4 32 b8 21 f0 57 aa ea 01 9c b7 bb 39 7d 75 1f bd 65 80 fc 82 8e f1 60 a1 99 71 90 ec 78 75 a0 6c d9 b2 65 fe 94 f1 b2 95 08 fb 7d b1 14 68 14 8f 13 4a dc 31 ec 22 0a 76 22 c9 1a 2c 14 21 ad 1a 1a 10 38 b4 2d 7d c3 96 2d 03 b4 09 68 40 ae 4e 00 98 28 15 12 c1 bf ae da 6b be 61 08 17 ec 8e b0 53 d1 46 c5 07 52 02 c0 16 80 0e f1 50 a1 6b a8 01 37 08 fa 69 ed 02 00 0e 60 ef 3f 44 98 ef 0b 76 2c 80 a6 54 52 5c 88 fb be 42 fa dd 9b 28 00 b6 0a 6a 90 b3 93 30 47 00 2e ab a2 04 e0 97 0a 77 54 ed 30 81 9b 8b Data Ascii: fE(1\0_I\68IVW<`n9_.hoDofP)P%brgee_^lt2!W9}ue`qxule}hJ1"v",!8-}-h@N(kaSFRPk7i`?Dv,TR\B(j0G.wT0
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 0a 00 f8 fe 97 84 37 e3 b9 30 1a 8d c6 27 11 17 13 c0 47 00 56 7d 73 18 70 00 5b 00 8c 4f 11 61 14 7d a4 de c3 3c 5c 4f 27 2e 25 92 b8 be f6 22 6e 9a ab db 6d c0 46 cd f4 ee d2 a5 4b 52 0f ea ea 2f c9 bb 7d 52 7b 2a bc a9 71 de 40 74 b1 07 e1 4d e4 d9 61 8b 34 a0 b0 59 9a a4 55 c6 7c b4 34 85 6c 7f f4 d1 d2 66 71 f3 ce 99 5d f4 7a fd 8b e2 2a 8c 37 9a 11 69 7b 8a 3a 76 b1 e6 2e f6 9c 63 af 5d 9c 39 47 9b fb 68 63 17 6d ee a2 ce fd 8a b4 7b 73 fa de 9c b9 57 67 d4 fa f4 bd 4e b3 b7 df 47 19 fb 28 73 ff dd ba 8f bd 5d bb 75 9e d7 af bf 5e f7 b9 7f dd 6e ed e7 75 c8 3a 8f eb d7 ed e6 af f3 d8 87 ac fd b8 22 67 5e eb 71 0d d9 23 32 f6 a2 f3 b0 47 64 1e 36 88 8e 43 94 b5 2d 5a b5 a2 4b 97 22 90 4a 46 61 a2 92 90 46 15 02 bf 83 cf 71 a0 79 05 f1 45 ae 00 38 f2 Data Ascii: 70'GV}sp[Oa}<\O'.%"nmFKR/}R{q@tMa4YU\|4lfq]z7i{:v.c]9Ghcm{sWgNG(s]u^nu:"g^q#2Gd6C-ZK"JFaFqyE8
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: ea 12 f8 32 aa 6b 30 36 42 92 5a 10 e6 4e 93 73 66 48 96 50 27 d2 93 5c cf 3f ae e5 cf 88 1f b7 5f 61 6c 89 f4 2a c6 da 90 6c 4a 5f 3c 52 28 f3 50 50 34 40 6f 71 43 4d f4 6f b2 9b 7a 60 2b f4 ea 9f 41 43 4c db 58 73 ce 19 30 df 2f 5e 65 c2 95 d0 eb 51 5e c2 b8 53 d2 2f d7 9c d9 08 ae dd f7 7f 65 c2 9f 20 71 20 58 95 1c 9a 6b 66 40 fc a4 65 a8 52 2c 08 bf e8 4b 12 fe 79 ee 99 a1 f4 34 7e 92 03 2d 70 46 f2 5b 95 a3 e4 28 5a dd 1b 30 f1 d3 2d 7d 95 13 c8 b2 8d 71 08 cf a9 eb f5 f9 88 9e 8d 4c fc 74 fd 52 00 4d 55 8c 28 95 a9 8b 4c 55 50 1f ba 00 e4 68 3c b1 44 65 eb b5 4e 06 23 5b d2 29 8c 72 21 6a 11 3e ae 41 19 39 1d f2 83 55 4a 72 14 81 32 81 95 ec 2c 45 3d 94 47 66 2f 94 93 ac bd 36 cc 09 90 01 4e f3 00 e4 3d e3 22 ca 85 08 a9 40 2d 4a a0 90 15 1c 2d 27 Data Ascii: 2k06BZNsfHP'\?_al*lJ_<R(PP4@oqCMoz`+ACLXs0/^eQ^S/e q Xkf@eR,Ky4~-pF[(Z0-}qLtRMU(LUPh<DeN#[)r!j>A9UJr2,E=Gf/6N="@-J-'
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 86 e7 21 67 4f 82 0d 7b 9a d2 1c 5f 5f 85 1b d3 3a 93 92 85 9e c0 90 2c 6b 0b e3 df 75 80 63 67 dc bb b8 8c cf ab 31 b6 22 b2 a2 28 32 3f 40 0d 93 17 9b a2 b7 d4 13 d4 e6 8e 2d c6 19 b4 61 dc 51 53 ab 25 49 16 31 cb 11 47 4a 3e 85 48 bd 17 10 4b 5d 19 24 4b ca e9 a8 65 b7 b3 84 38 dc 25 4e 08 b4 e6 24 4e 8d 06 e2 ab 93 45 0c 6e 99 40 40 1b 5f aa 5e 53 2a 74 b8 33 8c ab 2a b2 a4 44 2a b2 e5 1c 51 24 49 29 4e 4b 82 66 0c 3c 97 13 e2 f0 d8 33 0e 89 3a c8 22 c6 45 10 49 a9 7b 15 40 35 b0 34 53 4a cc df 44 bd 5f 8a 0a 4c 2c 46 69 4a 86 5e c4 e2 12 e7 e2 ed ed 3d 3e 1f 10 73 69 fe 1b f6 19 c9 3c ba 18 63 c7 91 69 45 51 64 45 ad 28 92 24 66 c1 64 65 62 0c 68 f8 37 2d d4 85 24 3f 90 a0 21 26 de ed 1f a1 a8 61 f2 2b 74 ad fb 77 01 86 b8 f2 52 ab d5 0a 2f d8 1c 9a Data Ascii: !gO{__:,kucg1"(2?@-aQS%I1GJ>HK]$Ke8%N$NEn@@_^St3D*Q$I)NKf<3:"EI{@54SJD_L,FiJ^=>si<ciEQdE($fdebh7-$?!&a+twR/
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 8c 3d 1e 9d 6d 4a 47 98 89 67 d3 98 74 f2 02 24 43 8f f3 58 62 e0 d1 10 b6 7c 06 10 6e ee fe 4a a1 b4 e1 97 64 a2 77 10 c1 96 0a 20 b0 37 de bb a5 70 84 cd a3 0d 43 5a e1 c3 22 24 89 e0 36 7e c5 1b 88 9a 49 38 0d 20 54 2b 6f 3d fd 95 99 a6 89 7c 95 81 bf e2 4f fc 82 d0 d6 fc 99 71 aa 5f f2 53 ba 87 76 ff 35 15 f1 fa 23 d2 cb 88 04 87 63 18 21 0c 2c 79 66 62 23 bc d6 5b 93 57 69 c3 c4 e7 41 2a 33 46 7a 8a bb f9 f2 5a fa fe 81 37 29 c3 4b d4 a3 06 57 11 69 ec ee 7f 2f 46 b1 bc 19 05 80 5a c2 a4 fe 5b 02 48 c4 b9 f3 de 35 b9 b2 86 30 b8 86 db 31 4e 4f fa f8 fb 5b 79 80 d1 8f d3 c3 23 34 e9 0e ee 47 6f 1c 3d 40 c4 e9 d5 c0 24 ac cd 56 0a 10 71 5d da 1a 0f 88 8d 86 70 80 bc 33 02 69 6f d5 92 55 17 83 75 46 a2 a7 bd 8e f8 63 88 2b 75 b8 63 b2 25 79 67 62 23 bc Data Ascii: =mJGgt$CXb\|nJdw 7pCZ"$6~I8 T+o=\|Oq_Sv5#c!,yfb#[WiA*3FzZ7)KWi/FZ[H501NO[y#4Go=@$Vq]p3ioUuFc+uc%ygb#
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: e2 c1 f2 b7 df 2b 79 eb e3 61 6f ae fe 5f e1 f6 bb 1d 9e 3d fe eb f7 5f c0 92 40 f8 b1 ce f1 c0 90 ac 6b 13 9b a9 c5 db 0c b3 e6 6c 46 8d 6a 88 f1 64 7e c1 79 00 30 df de e8 fc fc 91 36 4f 9f be e0 97 1f 6b df 7f a9 f0 8d 4f 2e ff ed ab ab 7f ff ac e1 a3 67 1a 3c 7c f6 37 ef 3f 17 22 1e 24 85 32 01 86 5a c8 24 96 a3 c6 b7 03 27 3b dc cc e3 3c c6 43 fc 86 d1 ee 0f 02 99 2e cf 1f 2e 7d eb c3 b6 4f 9f aa 76 ef f5 ae cf 1f aa f7 f0 f9 81 af ef 94 bb fd 5e b7 17 0f 76 11 84 3f 41 a1 8c 42 ae 03 50 33 91 af 68 8b 7a c8 d0 37 d7 37 32 df de 18 fa f6 fa cc a9 33 dd 04 32 76 ac f3 76 05 48 67 7d be f6 62 2f 24 4e c4 ef fc f2 d4 e0 b7 d7 b9 e9 27 5f be 79 f2 f6 81 45 27 8a f8 09 80 24 db 2b 99 16 f3 ad 3f 83 6b 7f 8c 7e f2 e9 d8 47 df 71 d1 a5 2f 7f 5e fa f2 eb eb Data Ascii: +yao_=_@klFjd~y06OkO.g<\|7?"$2Z$';<C..}Ov^v?ABP3hz77232vvHg}b/$N'_yE'$+?k~Gq/^
2024-04-19 14:07:11 UTC	25	IN	Data Raw: 1a 32 9d 87 03 b4 e8 0c c0 dd 05 0f 35 f1 10 f2 0e 5a fb 03 94 dc 3f 00 00 Data Ascii: 25Z?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50272	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /mhjx0LuEJrAw4rY3p9ymDfFJIh9PkyKxJAlx6lFy4FWaRFP3TyAZYFMrLuIDz6l1jqg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9730 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	725	IN	Data Raw: 52 49 46 46 fa 25 00 00 57 45 42 50 56 50 38 4c ed 25 00 00 2f b8 c0 49 00 35 87 e2 b6 6d 1c 7b ff b5 d3 db dd 33 22 26 00 4d b9 23 04 fc 50 86 d9 69 b6 7d 7b e2 9f fe 6f dd d5 46 4f 3c c1 e1 28 1c c5 e3 86 bb c6 15 8d bb 3b 71 77 f7 a4 ee ee ee 2e 3f ad fc bc ff 51 bf df fb 7b df 0f 1c b8 7f ad 13 26 93 30 73 d6 98 39 9c e9 84 d9 c8 34 46 2a 4f 77 e2 d4 4f d6 a1 6e 49 e5 59 e1 54 19 ea de 9e e9 67 ce 26 d4 dd 8d 5d 4a a4 02 54 62 2b 84 21 32 64 be b5 50 66 c2 2c 13 36 4c 59 23 93 9e dd 61 ba 21 a7 ee c6 44 86 54 21 67 2b a7 9a 39 6b d9 e4 5e 81 09 7b 92 32 b1 7a 0f 4d 4e 3b d4 db 54 d8 c9 cc d9 81 59 92 32 55 98 a7 06 13 03 a6 4e 8d ed 19 1a 98 ad bb 50 22 13 58 68 67 b7 6e ec 10 29 54 60 72 2a 8b 84 36 92 04 49 72 a3 38 0a cf 9f dd 6f 4f 67 f8 96 24 c9 Data Ascii: RIFF%WEBPVP8L%/I5m{3"&M#Pi}{oFO<(;qw.?Q{&0s94FOwOnIYTg&]JTb+!2dPf,6LY#a!DT!g+9k^{2zMN;TY2UNP"Xhgn)T`r6Ir8oOg$
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 82 12 52 b8 ee f4 a1 6a af e4 21 a0 e0 2e 5b 30 57 5e ed 39 86 56 9a 56 fc 10 2d 1d 71 6d 4b ca c2 b8 ab df 7a 7e 2f ff 2e 07 5f 5d 5d 4e e4 29 ba 5b 1e a1 84 60 63 fe 37 b2 73 6d 9f 17 6d 2e 7b 06 50 40 ca 97 da 2f d7 24 c4 9e a1 6a 37 af 54 82 7a f8 39 49 8f 80 dd 0a 12 61 cf b8 35 b3 92 3e 5c 17 75 8d c2 3e 4b 99 ad 30 1c 7d 80 ce 81 90 9e 9a 00 22 2c 49 59 96 82 da 7b bf 68 c3 f1 07 68 63 a9 25 4f 01 cd 34 73 21 48 ca 97 1f e2 b9 e9 94 be ae 2b 3f a7 a9 a8 ad 47 c0 b9 6f fa 57 f6 7c b1 40 b0 b1 b0 30 0d b5 ca 11 85 c2 52 52 1b 60 70 d3 0c d7 01 4d 0c 3b 19 76 46 98 13 07 00 34 35 ac 0c dc 94 43 68 1a 02 17 30 16 bd 5d c0 5b 0d 81 73 49 7a 66 52 af a6 8e df 17 c4 d9 02 6d 1d 15 5a 1a ba 70 67 79 be ef 8b 62 5a 5a 66 91 98 dd 0c fc fa fc fb d2 eb 13 61 Data Ascii: Rj!.[0W^9VV-qmKz~/._]]N)[`c7smm.{P@/$j7Tz9Ia5>\u>K0}",IY{hhc%O4s!H+?GoW\|@0RR`pM;vF45Ch0][sIzfRmZpgybZZfa
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 40 60 35 7f 20 53 e3 39 da 0b 88 be 84 95 c7 75 d7 02 18 b8 20 01 f6 72 fc 49 4a dd 10 75 8d 00 59 85 6e 35 4b ad 64 8f 00 28 b0 cb fe 02 4e f4 d7 57 c1 4d 3d ca 26 b4 9b af 97 84 b5 91 96 38 7c 2a 34 bc 34 1d 5c 55 e3 75 5b 41 5a 62 c9 27 14 13 72 ee e9 40 73 cb d8 51 36 99 d8 76 f9 77 b9 52 a5 cf eb 16 86 01 fc 7f 32 f7 bd 04 d4 57 3c de aa 7a 9f 40 94 35 7a b3 a7 a6 f7 f7 49 b0 40 55 12 cf 8f 2c 42 bf f4 a7 59 f5 14 b8 09 5e d9 dc 14 58 64 64 c6 75 b5 01 be ad 5f 40 06 1d f3 82 67 8a 9f 22 60 c4 b5 6d 33 bf eb b0 58 0f b4 87 50 ea 12 0c b4 07 aa 27 ee e0 df 7f e5 e8 fe f1 44 12 ec 22 05 b1 0f d6 fb 73 1d 14 6b 20 0d b5 76 f4 44 98 d5 c5 03 3f 9d 58 ed 3e 69 04 1c 4c 46 af ba 06 a0 9d a5 fc d4 2f 20 cb df 17 9a 3e 08 8f 4d b7 5f 40 36 d0 dc 7a 00 b6 b2 Data Ascii: @`5 S9u rIJuYn5Kd(NWM=&8\|*44\Uu[AZb'r@sQ6vwR2W<z@5zI@U,BY^Xddu_@g"`m3XP'D"sk vD?X>iLF/ >M_@6z
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: be ba 3b eb eb 23 84 db 02 b9 d4 5e 6f 7e c2 89 57 d0 7e 35 b4 47 5a f2 e4 08 91 ea 87 1f a4 f4 71 5f 2c 7e ef eb f6 9d f5 f5 31 e7 61 f5 30 62 38 9b 3a 2c 7e 0b c3 01 e9 d1 5e d0 84 bd e0 7a 24 8e cf fa df 9e 0f 8b bf df 13 51 fb 20 20 5c 95 13 be ed 72 bd f9 ca c9 d1 05 c9 e5 72 8c c7 57 23 d7 39 2f 9c 45 70 1e 97 23 c0 b6 cf fb e2 d1 dd cf 72 18 1c 04 e1 4c 3b 3d 70 75 f2 0b 5f 78 b9 0b 5f 18 fd 95 0b 77 e1 ec 20 77 ae e5 82 30 97 af cf ad 43 b0 22 29 56 80 59 9d 40 5c 69 c2 e8 d5 34 f4 67 48 3d 22 69 3e 5b ca d7 ef c1 e2 ff f7 b8 7d 47 eb b4 20 ed e0 e0 8a e1 20 94 e2 97 94 32 41 82 3f e4 c6 f1 33 91 62 7a e1 4c e1 32 a6 e7 43 39 94 53 99 f7 55 49 15 be 42 35 bf a7 c6 5f 53 0f 75 ba 4e d7 fc 27 37 d4 08 8d d4 8c b7 ac a4 49 ed d0 a6 16 75 f8 e1 8b ba Data Ascii: ;#^o~W~5GZq_,~1a0b8:,~^z$Q \rrW#9/Ep#rL;=pu_x_w w0C")VY@\i4gH="i>[}G 2A?3bzL2C9SUIB5_SuN'7Iu
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 99 e7 2d ca be 42 71 a4 19 a5 c2 53 c4 4d 13 17 61 bc c0 5b 04 83 e3 da b4 c2 23 85 32 47 a0 2d 3c be ef 4b 49 72 71 34 84 29 08 ef cb 1f 4c eb 1d a5 d3 fa 42 e8 65 38 8f a4 4d 8e 49 90 ef d1 5a 7c df e7 78 b4 a4 2c c7 d1 8f 49 80 7e c3 8e 92 46 28 01 b7 09 a2 b9 43 4f 13 2d 10 02 6e 13 44 eb 6d fa 95 c4 15 4c 14 ef 3b 24 d1 7c 07 23 e9 a8 b7 7f 2c 42 f8 17 6d 5f f7 fd 06 c9 88 c0 36 13 19 13 79 2d c3 8f 63 22 cf 9c 99 dc ac 80 31 26 a2 2b 31 d5 2e 45 86 59 92 88 a8 a9 0c 59 c7 b3 98 88 3c 40 e5 ca 22 13 ed d0 45 a1 4b d4 28 eb 79 0b 7d 3a 1a 95 29 63 8c d5 74 b5 51 c7 b6 19 63 06 4c b0 a8 cd 90 c5 0b 96 89 2c 06 8b a7 03 97 46 e5 98 78 fe 09 63 d2 21 ad 12 40 ed db a2 44 aa ae ca 38 d9 04 88 0e 05 ae 0b 20 71 c4 ba b6 00 42 b2 65 36 4b 23 10 c1 c9 9b 06 Data Ascii: -BqSMa[#2G-<KIrq4)LBe8MIZ\|x,I~F(CO-nDmL;$\|#,Bm_6y-c"1&+1.EYY<@"EK(y}:)ctQcL,Fxc!@D8 qBe6K#
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: b2 b8 04 ed 27 80 44 c4 10 9d 6e 2e 65 07 d9 20 0f d4 bb 0d 97 3b fe eb ea 79 bb 1d c2 42 6e cb ff ae 2e e1 45 00 0a c3 42 2c fc 0a b7 4b f4 16 a9 6c d9 86 41 92 dc 9a 6f 4f 83 2f 59 e5 ff df fb d6 98 cf eb 07 3d f2 b6 33 6d 9d a3 79 2a 8c ba c6 bb 8b f7 09 9b 8f 44 76 5f 58 6d 1f f9 9e f7 da 98 ed f3 dd ed b2 c6 b3 65 cb fe 7f f7 f1 d2 0a c3 f1 e6 2e 9b 79 7a 66 f4 14 37 cd 3a ea b9 7b 65 85 20 62 80 d8 16 ab 75 8f db 5a c2 46 36 7f b0 72 f6 6d 32 78 6e 0d 33 85 6f 87 a7 40 ae 70 8c 57 6a 76 3c 1a 3b 04 81 1a 31 37 75 be b5 fb 28 b2 2b d8 6c 23 82 a5 e5 63 06 61 64 a3 c1 e2 26 d1 b3 f6 8c 37 9d a2 c8 35 76 86 4d 23 6f 3a d3 46 79 3b 41 fd e5 3b cf 60 14 7d a8 a8 bd ff 54 80 d7 16 1a 06 b7 3e 16 ec 90 3b 8f be e3 fc 90 61 99 a1 c5 e7 6d 8a 40 8d 9d d2 28 Data Ascii: 'Dn.e ;yBn.EB,KlAoO/Y=3my*Dv_Xme.yzf7:{e buZF6rm2xn3o@pWjv<;17u(+l#cad&75vM#o:Fy;A;`}T>;am@(
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 14 c9 5a 15 c5 3b cc 85 42 c6 3c de 44 a9 d3 35 9d a1 a9 58 a6 5f 2c ed bf 38 d9 d8 29 f2 b4 9c cf f5 22 e7 da e4 66 9d a7 fe fc b3 1c 7a f5 a7 1f 3a ee ea 8b e7 5b a8 31 99 fc 5a a7 6b 5e f4 c1 7a b7 a5 31 f5 13 91 86 11 af 31 34 83 e7 7b fb 3d 84 7b 24 82 61 a5 99 fa 92 e5 b4 6f ac a8 77 4b b3 ac e7 2d 53 13 53 a5 95 f2 06 73 5d 39 dd d4 2e 27 d2 2d d5 1a 86 e2 9c 49 cc 62 1f c5 73 21 67 39 0b db cf 3d 51 69 d1 f5 ca b0 e6 a2 cc ac ce b7 dd 95 25 6b 32 43 51 7d 55 da b0 b0 56 69 c8 52 9d 52 74 57 9c 2e b6 e9 19 4f 5d da d0 d4 90 39 d9 32 35 c9 59 fa e9 86 86 f2 39 af 3b 2d 33 34 b4 2d 57 da ac 74 e9 a7 27 b0 d6 5a 1a 32 17 9b 26 86 16 93 d4 bb 65 cd 2a 8f 26 96 8b 91 49 9e cd de 70 ce 37 32 59 92 39 0d 0d 4d 98 94 c4 43 68 56 7f 56 8a 89 04 82 d9 6b 4c Data Ascii: Z;B<D5X_,8)"fz:[1Zk^z114{={$aowK-SSs]9.'-Ibs!g9=Qi%k2CQ}UViRRtW.O]925Y9;-34-Wt'Z2&e*&Ip72Y9MChVVkL
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: d7 7d 35 de 76 ea 2b 94 62 f4 22 7f 15 1e a2 f1 73 3f 6e de 71 e2 4b 41 90 de 1b 7c 62 8d a0 2d ac 48 0e fe de 5f 96 35 1d 68 97 6e 8c 08 33 cf 5c 6b e5 54 55 b1 f8 ff 7e dd bc 1f c7 e7 eb 20 18 96 8e 7e 34 b5 79 29 ac f1 f3 fb 64 71 7c 1a 45 41 2f 13 9f f7 3c 9b 12 f0 79 1f 37 3b 8e 4e 0b 0c b5 d0 5d c6 af 82 f4 96 b5 36 c5 1b 48 74 65 19 da 28 96 8e df e4 a1 4a 2c 84 f7 11 24 d1 af 39 f2 c5 40 2d e1 7b 94 13 49 85 82 62 cc 83 7a 8e a6 b6 aa 4a 2b c5 68 46 2c 4b 4b 4b 5f 08 a5 09 c6 f7 ef c9 42 3f 89 8f 5e f1 01 63 92 ac e5 7a 87 7e d2 44 20 9e 23 14 be 43 12 01 0a 6a 6d 7c 3a 55 e6 58 b1 f8 c6 d1 f4 26 01 9c fc 3c f5 08 75 68 7a ab 2a 6d 41 ae 17 ad e5 1b a1 d1 74 4b 6a 49 47 31 2c 51 a6 28 20 65 89 82 5a d2 04 bd 69 9e 5a b5 52 86 3e 10 d2 6b b9 7e 87 Data Ascii: }5v+b"s?nqKA\|b-H_5hn3\kTU~ ~4y)dq\|EA/<y7;N]6Hte(J,$9@-{IbzJ+hF,KKK_B?^cz~D #Cjm\|:UX&<uhz*mAtKjIG1,Q( eZiZR>k~
2024-04-19 14:07:11 UTC	220	IN	Data Raw: 2b a4 44 68 3a 3e 14 f6 f2 fb 47 da 3f 30 77 a5 08 9f 86 8d 16 f4 2a f5 0e d1 43 19 92 7e 8b 26 84 17 11 40 2c e7 2b 9d 6d 46 f4 5a 3c 29 b0 d0 aa e4 4f d2 6f a0 10 f5 0e f5 aa 8d fc a6 19 06 54 48 ef e7 f0 b7 d3 38 49 d5 43 2e fb b0 e1 c3 4c 64 7a 77 98 6a 55 da a5 4c ab 94 cb 98 5c 2e 53 30 d1 41 14 99 de a1 b4 d1 6d b4 1f d6 88 11 d2 09 08 ef a0 cd 47 be 47 4a 15 b5 f6 1d 89 10 19 1d 42 69 c3 9a 11 a4 53 5d f8 a3 52 08 b5 6e ee 48 74 8a c2 2b 91 6e ee e8 47 06 fe e0 e8 0c 24 b9 2f fd c4 37 85 d2 99 2e fc d1 da 34 21 8d 79 5f 9e 7a 74 ae 09 92 7b 5d 44 14 fc c6 47 bd 74 e7 90 66 c7 a6 9e a0 e9 20 e8 52 d7 9c 37 1b 5d 49 69 82 be 4a 1f 8f 83 17 00 00 Data Ascii: +Dh:>G?0w*C~&@,+mFZ<)OoTH8IC.LdzwjUL\.S0AmGGJBiS]RnHt+nG$/7.4!y_zt{]DGtf R7]IiJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50273	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /IbuKSWXQKCu1b4KABVBvEtr-L2MZfPyxXrL3AmkEY7CA-ffl2FkXVFmRRYdf_lEdfH8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 15926 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	724	IN	Data Raw: 52 49 46 46 2e 3e 00 00 57 45 42 50 56 50 38 4c 22 3e 00 00 2f 27 c1 49 00 35 71 a3 b6 ed d9 a4 36 56 09 ba 9b a6 e9 44 e7 dc 5d 9d 03 dd 4d 77 93 73 ce a9 c9 20 32 4d ce 99 26 e7 d0 e4 9c 73 ce 39 e7 20 a2 72 ce 39 47 94 b3 f4 e3 7b bf 58 45 7f 93 e7 53 2a 07 d6 a8 8d 13 7c 80 5f 45 a6 31 4b cd 4c 77 4b c2 6a a7 32 cc aa c9 03 6a 0c d6 eb c9 b8 49 f3 69 a6 5d 23 26 e1 24 d0 c7 cd 52 21 64 f7 d4 42 ab b4 ac 55 1a b0 d0 0c ab 14 a6 95 01 ab 94 1e cb 78 6c 56 92 a8 1e b4 3e 67 bb a6 67 81 e7 93 40 62 f7 cc 66 97 c3 ea 36 d3 8a d3 76 2f d7 42 8b 25 2b 18 e4 f2 88 79 b7 d9 1a 09 25 f0 14 0a af 84 bc 71 6f 05 6f 15 30 86 dd 4e fd 58 6b da a9 dd 84 d6 08 7d 0e bd 10 83 3c 66 0a f0 76 69 c9 0a 6d b0 31 a5 e0 07 63 8f 5c 0b 79 35 33 c5 96 91 dc 4e b5 d1 2a 79 69 Data Ascii: RIFF.>WEBPVP8L">/'I5q6VD]Mws 2M&s9 r9G{XES\|_E1KLwKj2jIi]#&$R!dBUxlV>gg@bf6v/B%+y%qoo0NXk}<fvim1c\y53Nyi
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 02 e0 ed 1f 30 1e 00 00 0a 82 d6 60 24 a0 a8 1f 30 fe 9b d0 00 60 d3 c6 81 c2 15 1f 06 a4 3f 4b 9c 09 28 33 63 7c 14 00 68 0f 30 6e 1b 78 46 01 8c 63 00 84 87 09 f0 21 81 e7 ab 31 5e 4f ea eb 1d 30 ee 04 a8 be da d4 ba 39 00 b0 99 1a 9b f6 03 31 a1 0e 38 1c 60 6c 09 00 c3 02 c6 6f 53 38 84 85 9f 8f 87 f7 8f 04 d2 5e c3 80 f1 1c 20 64 63 80 a9 cf 02 8e 00 00 c7 02 4c e9 72 20 48 fd c3 40 42 47 61 a0 78 48 b2 10 c6 f7 1d 1e a2 03 50 2e fd 3a 8c 1f 76 91 52 00 7e 0b 60 4c 00 11 7e d5 64 f5 40 e9 00 fc 8b 85 b9 e7 af 04 e0 77 61 34 f4 fb 57 f4 fb 53 d3 e7 77 53 9f 9f 2d 7f 7e 8a 7d fe 9b bd ed 27 4b 79 b5 fc fd 1e e4 f3 fd f0 9f 6f a7 fa f7 3a dd bf d7 59 fe bd ce f9 79 9d 9b 97 d8 17 34 1f e7 bc 8f 58 ee 93 a4 b6 58 7f bf fb fb fc 38 d9 bf 6f e7 7a ff 9d fd Data Ascii: 0`$0`?K(3c\|h0nxFc!1^O0918`loS8^ dcLr H@BGaxHP.:vR~`L~d@wa4WSwS-~}'Kyo:Yy4XX8oz
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 4d 1b 27 9f 76 57 bd e6 35 74 4b 64 a4 69 22 05 d3 f4 6b 6f fd 93 7a c9 13 84 4d 12 bd 12 a9 f9 4f 12 db f4 7a 65 d7 e4 26 34 91 aa 69 93 e4 bb ea 89 a0 85 d0 44 ea a6 49 46 c9 f3 12 11 92 26 52 39 cd 7c aa 84 8d 1f 35 69 22 a5 d3 aa f1 25 2a 48 31 21 52 bc c9 bc 12 14 2a 69 22 d5 d3 6e 12 93 dc 84 48 f9 26 c9 25 24 74 9a 10 a9 df c4 50 22 42 14 13 f2 5b 00 4d a6 92 80 40 84 fc 16 c2 1f 16 9b 17 c2 45 2f bf 65 60 0f 6e 19 71 45 4e 9a fc 16 42 da 40 4c c1 8b 09 f9 2d 86 26 fb 88 65 19 9a fc 16 44 7a 19 71 d8 8a 82 0e 59 01 40 87 cf 08 4a f3 44 43 5d 1b dc 86 56 bd 14 59 21 1f 3f 8c 25 27 5c cd b8 8f 4a 10 3f 1b 84 d1 d1 25 5b 31 f8 21 31 0c 11 3e a2 42 3d e4 01 23 c2 88 d1 2b 94 5f 80 23 84 f8 b7 5f 9d bb 41 12 d4 ea 1d a6 90 3a 30 f9 7f 42 3b 95 a4 84 aa Data Ascii: M'vW5tKdi"kozMOze&4iDIF&R9\|5i"%H1!Ri"nH&%$tP"B[M@E/e`nqENB@L-&eDzqY@JDC]VY!?%'\J?%[1!1>B=#+_#_A:0B;
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 74 14 9a 00 dd 10 17 8c 5d c4 c3 01 c6 ae 61 11 a0 3a b4 fe c2 f6 62 b5 22 b3 5a 5c 67 21 7c 74 a8 34 ab 2b 55 a4 01 d1 e7 e9 47 89 c2 50 34 e4 e3 2b 7d 8e 1a 67 01 8c f1 39 c8 51 a0 dc dc 94 aa 4f 02 06 2b 40 5f 04 e3 4e 41 87 45 ca 92 8b 35 1e 8d 14 93 e3 aa 54 7f ba 34 a2 c4 d6 f5 94 31 79 4e 48 4a 21 3e 37 55 e4 0a 4d 06 c6 d7 00 1e d3 87 42 94 54 05 74 3a f4 04 80 f1 c6 c1 ab 40 87 22 b0 bb 0a 5a 20 18 bf 02 bc df f3 6c 8c 0f 1f 30 e6 0a 37 81 0b 4a 84 23 e4 b7 8f 9d 83 d8 aa 89 aa 40 47 54 bf 50 1c d9 1f 1f f1 05 42 da 70 95 e8 7b 86 a2 70 22 22 0e ab f0 4d 3d 86 03 c6 38 e1 4d 58 1e 6b 8f f7 ff 59 42 a6 5e fc 9c 04 f7 46 c0 e7 ee 0d 18 f7 42 60 0f 42 68 f8 8f 18 5f 13 78 fe 23 d0 84 10 38 12 60 97 b2 31 e8 1a 0b ac b1 23 70 84 90 07 ff 3d 8c b7 d3 Data Ascii: t]a:b"Z\g!\|t4+UGP4+}g9QO+@_NAE5T41yNHJ!>7UMBTt:@"Z l07J#@GTPBp{p""M=8MXkYB^FB`Bh_x#8`1#p=
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 08 c5 9f 82 9e c0 6a ff 93 90 e1 a1 36 a2 03 1c 21 0b 6f fc f6 03 c2 fb 3f 89 78 db f3 86 81 79 f7 05 a5 92 28 49 88 71 11 65 20 de db b5 03 de 3d 42 38 d8 b9 e3 f8 b7 c3 40 df 50 63 81 24 e7 86 4c fc c8 4f 7e e1 23 a6 a1 7e 44 d7 e0 79 1f aa 89 fb 80 ed da 27 c1 2d a1 2f 71 be 77 f9 f0 cd ef 3b 4f 4f 10 b4 05 6f 84 10 12 d8 95 81 fd 91 51 e1 79 5d 90 09 39 7d 2f 8b a4 10 32 89 e7 fb 00 00 18 97 25 84 10 5a 87 07 bc dc 07 4d 08 21 df ae 43 40 b7 12 5e 03 0f f7 01 00 90 fd f5 84 cf 73 f3 dd 07 00 c0 25 0c 08 d5 8c 30 03 00 c0 98 84 77 4c 00 73 42 88 df 0d 3e 7b 12 42 08 89 52 01 56 db 8c 68 a0 91 a8 85 00 80 0e fd 5b f0 30 6c 25 00 f1 e7 80 bf 2f 8f 10 95 87 fb 84 14 84 10 32 27 f0 ce 30 09 a1 9c 13 00 7c ec 38 12 f7 40 08 e1 38 22 56 8e 23 94 14 b5 e3 a6 Data Ascii: j6!o?xy(Iqe =B8@Pc$LO~#~Dy'-/qw;OOoQy]9}/2%ZM!C@^s%0wLsB>{BRVh[0l%/2'0\|8@8"V#
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: ed 5e 15 09 13 ba 2a d5 0f 2d a1 ce c6 87 83 cf 1a f1 1e 87 51 ee 96 48 a8 56 d7 b5 6e 44 38 d4 cb ed bc 7f 35 61 c2 84 ea b5 8b 99 91 8b 00 08 c0 e3 f3 6e fc 54 e9 a6 98 72 76 a0 29 d2 55 34 eb b3 a5 55 63 c2 8e ff d0 6d 46 fe dd a7 25 74 55 2b 9f c2 f0 c8 da df 46 bd c7 35 a1 83 dc a1 bb 1d d0 c6 e3 28 52 ed a9 76 4d e8 fa 60 87 2d bf 59 45 08 74 72 73 55 5f 63 9b 51 7e a7 4c 38 57 7e 48 88 e6 4b b7 52 2b cf fb 95 09 f3 7e 96 c3 1f 02 da a0 90 ec 73 e7 ba cd 12 4b 9c 57 6d 5f 95 5a 08 12 be 00 78 4f 95 84 cd 27 9c 8f c2 89 c8 27 3e 4e 6d 57 a1 f5 9b cd ac ce ce d5 d8 08 85 a7 b3 9b dc 5e d9 cd ae 66 ad 5c af 2c 73 56 54 51 19 e3 e2 74 a0 9d bd 7c a8 df da d8 2a ae b5 d9 ee 6e c3 df c9 7b df 1d 44 a8 de 7c 1d f5 9b e8 44 fe ca 33 06 bc c9 07 db 95 59 0d Data Ascii: ^-QHVnD85anTrv)U4UcmF%tU+F5(RvM`-YEtrsU_cQ~L8W~HKR+~sKWm_ZxO''>NmW^f\,sVTQt\|n{D\|D3Y
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 0c 4a d2 6b 2b 9d d5 6f 5c 85 50 1b 14 ab 5b 29 bf 0f 68 0a 55 11 59 4a 16 9e d1 0a 31 ac d3 ca 1c e4 43 ef 52 29 1d 52 51 0d f3 db bb 1a 13 42 9c 9e 30 fc cd e1 23 16 b8 82 c2 be 41 97 85 10 a2 5a ff a2 ea f9 0d 0d 0a d3 3e 6f 6a 87 54 a9 9c 5d 9d e5 5d ec 00 ba bb 3d 7f ef bd 78 ee f2 fe 3c bd de c9 b7 ea 7f f7 9b bc 5b ce b0 67 81 c8 e7 b5 26 0a a5 b3 c3 4a 93 13 09 a6 ff ad 28 3c 11 95 28 0c eb b3 f6 02 e6 28 45 0d 78 fa ba 1b 8f c7 3f ee a6 b4 2c 24 9d 76 df 4f 7d 81 57 11 42 b8 0b 65 50 bf 91 c2 f3 67 2e 73 a9 fb dd 15 93 85 99 89 27 9e b8 08 53 b0 f9 a2 f5 55 84 44 48 78 ed 65 d6 59 49 21 cf f1 2a 8e 8a d8 56 58 af b8 77 fb 57 64 cc 87 9b bc cf 3b 79 8e 3b 70 14 ab 9c ef 82 1b c7 9c 4c 89 74 bf 29 b7 ac 7b ad 58 af ba ce 86 72 aa 61 ee f9 fd 2c 21 Data Ascii: Jk+o\P[)hUYJ1CR)RQB0#AZ>ojT]]=x<[g&J(<((Ex?,$vO}WBePg.s'SUDHxeYI!*VXwWd;y;pLt){Xra,!
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: b3 cd 18 ca e1 77 5d 7b 6e 1c 89 94 ef 74 6d b5 da 5e ee 3a 7f 9a 51 ee 2e 0b 74 f6 f8 8d ba bc 72 a5 d2 b2 5e bb 92 f2 f3 81 36 5e a1 8b 4d a9 76 18 e1 77 0e ea 8f 2a be 3a 11 e1 9d c6 b2 53 a7 aa c2 66 7c b1 83 fa 2b 26 1a 3f ce f6 69 7f f5 b9 b6 22 a2 bf 5f 54 de 81 08 75 a9 36 b6 3b c7 76 b6 84 32 6a ae ff 63 77 6e 72 8d 0f d7 51 5f 74 e5 c6 d6 9e 76 49 5e dd a6 2b 21 57 21 14 71 b6 18 79 e7 8d fb df d3 fd 6d aa 20 fa cd 84 b8 34 b6 7d 4d 73 57 43 42 b8 02 b1 66 db e9 ae df 5b ff 77 3b fe c0 d5 b5 84 90 a8 e9 09 6b d7 03 37 be 4f cf b7 0b 14 9b 6b 10 71 86 cb bd 1a da 16 db f8 86 1b 6c b8 66 01 4f 63 42 08 c9 58 5d eb 66 97 e6 97 df a7 7c 7d d7 3b 5f fa fd 8d 9d 9e 78 e5 1f f3 f1 56 bd 7d 63 9a cb ae 54 9d 7a 43 42 54 31 6a 6b 8e 8e 69 3f 79 c3 8d 6f Data Ascii: w]{ntm^:Q.tr^6^Mvw*:Sf\|+&?i"_Tu6;v2jcwnrQ_tvI^+!W!qym 4}MsWCBf[w;k7OkqlfOcBX]f\|};_xV}cTzCBT1jki?yo
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: d6 10 69 39 5a 84 59 66 99 a5 a9 a8 aa d8 04 ab 7a 25 54 8d 59 5a 89 e6 49 51 45 ab d7 d8 6f 95 38 af c8 20 21 c3 24 7d 54 38 0e f0 1e 0b 8e 08 bd c2 23 6d c4 03 03 91 e3 81 ac 55 52 c0 9d 5e 60 7c fa 0c 0b 56 c7 06 99 4c 66 77 24 e8 17 4a 28 2e 7a e4 db 9a e5 7d 02 38 3a 54 88 21 ab 5e 43 8c 81 a4 ed c3 0a 93 ba 60 cc 7c 0c 38 5a 1c 89 1c 99 fc 55 d9 71 41 71 08 00 46 3c 03 90 e3 83 55 4b c4 87 d3 13 de ef 19 12 ec 8e c1 3b 43 86 a3 81 e2 78 bc 65 79 20 b5 1e 79 96 e3 91 a1 02 d4 7b ec 3e 12 96 cf 23 62 41 22 b0 6b 1f 00 00 7a 84 63 82 e3 87 5f 82 c2 22 84 da 84 ad 02 30 86 c9 6c 34 3c 4f 0a 39 ff 46 ee 2d 19 84 18 06 21 db 10 d5 46 23 80 ed c2 0b a7 16 97 ac 5f 02 00 d0 61 e4 55 f4 16 de f7 30 08 21 db 35 17 b6 98 8d 82 61 18 c4 6c bb a6 85 00 9a 47 ac Data Ascii: i9ZYfz%TYZIQEo8 !$}T8#mUR^`\|VLfw$J(.z}8:T!^C`\|8ZUqAqF<UK;Cxey y{>#bA"kzc_"0l4<O9F-!F#_aU0!5alG
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 7c 64 5e c7 1a 49 a0 4a 65 51 5d a9 8b bc d5 5b bd d5 5b 7d 52 e5 98 4c 80 63 41 e6 49 97 fc b0 55 2d 1d f3 98 6c 8b 2e 51 31 16 63 c0 f3 3d 33 40 8b 21 4b 13 b3 b8 c1 5a 96 79 1f 0f 07 40 0d 24 89 a2 65 e2 61 4f 08 ad 28 1c 1d bb 0b f0 eb b6 80 4a c8 2b be 78 01 8d 5b f0 8c 45 00 f2 f3 81 d7 3e cf aa 43 d8 97 a7 14 d2 08 66 70 7c 45 44 7a ff 88 f9 f7 ab 8a 24 c7 82 96 7b 83 0e 97 9f 1f f0 17 e6 50 34 4e 0a d8 c1 73 64 93 66 cf 1e c0 7a bf 55 13 d9 1f 81 24 90 0d 86 12 94 0f 58 20 91 24 75 3c 1e c8 2c 2d 8f 4a ba 87 70 75 5b 04 57 93 4d 58 7b 69 a0 dc ef 7e f5 47 ec 48 9a 74 3a 2f f7 bc c3 1c b2 37 00 8b 90 d6 d3 3e 21 50 43 cb f3 53 d4 1d 2f 64 11 2a d0 fb a4 a4 96 f5 f7 86 ae 40 31 47 ed d1 40 dc ef 7e 9f d9 50 cc 68 35 99 0e a5 60 bc dd f3 1a 67 2b 2b Data Ascii: \|d^IJeQ][[}RLcAIU-l.Q1c=3@!KZy@$eaO(J+x[E>Cfp\|EDz${P4NsdfzU$X $u<,-Jpu[WMX{i~GHt:/7>!PCS/d*@1G@~Ph5`g++

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50274	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /ZJFuUMqXnSgiDGoJfAXuycSmFFXpkPf_ywUswZAtbhK2MYEOg5_7CR3FYcTHulkv09s=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 7464 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	733	IN	Data Raw: 52 49 46 46 20 1d 00 00 57 45 42 50 56 50 38 4c 13 1d 00 00 2f 27 c1 49 00 35 87 da b6 6d 18 f9 ff cf 9d 9e 29 22 08 04 28 0a 0b ac 20 46 e5 d1 39 ac 4d 29 96 94 af e4 cb 05 1f f5 ff e7 25 c9 a9 ed 51 73 dc d3 1e db 58 8c 6d db b6 6d db b6 6d f5 d8 66 db 9c b6 dd 3d 3d cd aa 9e ee 3a a7 ea de 5b bf 7b fb ee b9 bf 8d 66 e2 c9 da 88 b5 f6 7e 62 63 10 a3 b7 82 5a db b6 bd ef e8 06 bf 98 df b5 6d bb 93 73 17 1d db b6 d6 de bd 71 be e1 20 5e db ee 99 53 c9 f4 c6 b6 6d 3b 15 7c b3 a7 d7 36 63 f7 e0 9f 9a 39 bf b5 ed dd 9a a0 f7 af d8 c9 3d 3d cb ca 39 bd 13 2d ce 81 d8 b6 8d 20 c9 96 9c c5 f7 5f ef e3 c6 61 24 a9 61 23 c9 49 ff c5 ea ff 01 21 41 ff 25 41 92 24 b7 4d 15 74 40 04 e1 59 de 00 16 3b e3 2f d5 6c db d6 7f 5d 27 b9 43 73 49 ee ee ee 92 dc dd dd dd dd Data Ascii: RIFF WEBPVP8L/'I5m)"( F9M)%QsXmmmf==:[{f~bcZmsq ^Sm;\|6c9==9- _a$a#I!A%A$Mt@Y;/l]'CsI
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 1b 00 e8 44 95 de fd 0f c5 af da ca 37 10 65 73 d5 71 f2 7a 4d 33 92 ff 54 bf c8 fb f3 ed 41 03 90 6b cc 44 0f d6 05 71 08 69 d6 f7 1c 72 0f 0d 53 f3 f9 cf 7c fe f3 78 86 a8 d2 aa b3 b7 45 b2 63 4e f7 44 cf 39 3d bf 63 22 bc f8 7f 7e de 4a 07 fe 41 23 a4 44 aa fa f7 86 5d 4c 7b 16 79 4a 2a 53 8e e9 8f 59 3f e4 e8 76 0c 4d 86 9e de 0f bb f9 61 17 ba f7 e7 dc e8 00 c6 c4 40 8b 30 5a 9a c1 31 e6 98 3d af 70 38 d8 df ce 7a 60 59 0e 26 45 c6 f2 08 35 f7 ed 0f ff c2 bb 37 12 fa 31 c2 4b 07 a9 0a 46 26 4c 26 d4 c5 3f ed c0 39 9d f2 5b 23 e9 89 20 cb 36 64 bd 4d 26 cf 6d 28 ec e9 96 33 e7 54 86 d1 93 49 d5 fe 03 99 48 dd d4 b3 9c 3d e7 d1 65 32 ce e4 18 d8 1f c8 84 ca ad bb f9 c2 9c 43 e5 7d 33 cc 98 20 13 ab 60 b7 5b 31 27 d0 66 6f 02 e9 c9 c8 e4 ca 3c df 60 ed Data Ascii: D7esqzM3TAkDqirS\|xEcND9=c"~JA#D]L{yJ*SY?vMa@0Z1=p8z`Y&E571KF&L&?9[# 6dM&m(3TIH=e2C}3 `[1'fo<`
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 4c 32 4a 70 cd c7 6f bd 6a 9b 5e cd c7 ac 3a b1 d6 90 af 6b ce c8 b8 cd fe 43 9c 23 d0 17 31 ad 06 54 40 27 1b 19 ff d0 01 0d 00 c0 7d 96 f6 20 22 11 ee d4 78 2f 00 a0 d9 66 c4 49 21 25 ec 84 32 79 85 72 95 d7 f6 b7 85 e9 66 0a 39 0c 49 c6 56 49 00 40 ad 7d e1 27 45 47 63 ba 5e a2 2a 5e a4 a9 71 2e 00 74 49 a6 1d 98 f3 de e0 d9 66 0d 70 01 00 dd 7a 12 1d 05 29 21 14 ca b4 0a e5 2a b7 7d 4b cc 3c 53 68 83 09 c7 96 b9 00 80 7a 7b 23 8e 8a d1 fc 38 b6 d8 68 ba d0 17 96 6d db 25 a5 a3 f6 e4 79 32 cc a8 a9 5a 5b 10 e9 8e 16 1b 89 b8 47 14 ac b7 f7 3e 40 e5 d4 0e 79 86 a1 6b 0f 4a eb 28 83 ae 21 55 75 5e 71 9d 5b c6 1c 93 20 1e 1b a2 d4 0e df fd 55 9b 57 67 de 8f 07 cb 08 d2 51 19 b5 21 e6 44 d0 8e 2a 5a b9 0a db e5 87 e9 34 85 a7 18 0a 07 c8 f0 9f 51 b0 c6 57 Data Ascii: L2Jpoj^:kC#1T@'} "x/fI!%2yrf9IVI@}'EGc^^q.tIfpz)!}K<Shz{#8hm%y2Z[G>@ykJ(!Uu^q[ UWgQ!D*Z4QW
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 12 1f 55 e1 11 45 15 c9 77 6d 2d 8a ef 1c 46 57 89 44 24 05 3f 6f 8d ac 5b 55 55 b5 a4 13 c2 ea 4d ba 88 30 6a c3 d5 e1 f0 e2 59 98 64 6e 25 62 4a cb e4 61 11 43 38 31 67 0d be b2 46 d4 2d 44 62 17 f0 9b 35 86 ee 18 6a 85 cc c8 38 b8 e7 32 62 bb f4 d2 77 26 fd 61 3c 6c 22 4c cb 09 b0 30 93 c3 41 2f c8 dc 1a f9 5b e5 a7 ea f2 45 55 59 47 ce d3 83 61 0c 54 d6 7e 99 c8 27 21 b4 b9 3a b5 c5 59 10 21 ce 14 45 99 7b ec 84 d3 22 77 08 9d 78 ca 01 05 1b ca 75 8c 33 9e a3 7b 02 6c 55 fd 34 bf 85 ab e1 2c 6d 72 1c 60 d6 21 e3 36 4f 0e aa a6 7e 3c 18 23 fe a8 28 6a c2 63 8d be 8e c8 29 66 5e 12 51 42 29 54 94 da 5c 92 71 5e b7 10 d3 cf 50 71 ab f4 d4 b7 30 12 21 6b 58 6f 3b 9e 79 25 2d cb 4f 59 25 55 61 aa 74 c6 85 14 45 8d 37 d6 c8 eb c8 9c fa 8c 8c 04 af 5d 8a b5 Data Ascii: UEwm-FWD$?o[UUM0jYdn%bJaC81gF-Db5j82bw&a<l"L0A/[EUYGaT~'!:Y!E{"wxu3{lU4,mr`!6O~<#(jc)f^QB)T\q^Pq0!kXo;y%-OY%UatE7]
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 99 c8 05 98 4d dd d6 ef 21 a7 5a 5e de 78 5a 8a a3 d5 f4 ed e3 61 8a 35 c5 71 27 af 87 9c 6e 0d bc be 1b 61 4f 69 07 55 e5 26 eb 22 c6 55 f5 ec 8b fd c9 8e 60 1c d6 ca bd fc cc 28 e9 90 65 db a2 66 1b b2 6d 0b 9e f5 03 33 19 7a 73 e1 aa a8 96 83 dc f7 29 2f ff a2 30 2a 6b ea eb 84 78 e3 59 63 73 54 2f b0 f2 19 d2 1e 4d 86 67 58 f9 05 de ff 35 df f8 6b 56 81 91 5a 54 bb 8c bc 67 30 19 ae e3 a9 f1 78 a4 94 57 8b c8 aa 15 c9 a9 cf b7 72 6a 7b 49 4e 6d 7f cb a8 fd 39 32 6a ff a0 9c da df 2c a3 8e 5f c8 a8 e3 61 32 ea f8 aa 8c 3a 5e 2f a3 fa 7f c8 a8 fe 44 32 aa 7f 9a 7c ea ef 28 a3 fa cf ca a8 fe d8 f2 a9 7f bf 8c 3a 5f 44 46 9d 7f 24 9f ce 67 93 4f e7 47 ca a8 f3 6d e5 d3 f9 db 72 6f 3c 80 a5 15 b9 81 b2 b4 44 0a ba 31 b9 01 73 2b 68 d8 f1 6f 9c 87 14 36 d5 Data Ascii: M!Z^xZa5q'naOiU&"U`(efm3zs)/0*kxYcsT/MgX5kVZTg0xWrj{INm92j,_a2:^/D2\|(:_DF$gOGmro<D1s+ho6
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 6d a1 39 94 3e 20 11 69 12 62 ec 39 7e ab 45 6f 48 b5 a1 48 f2 bf 16 c0 d8 9a 70 91 6e 38 db bb 76 14 29 88 f5 cc d9 58 e1 e5 92 0d 17 ba 3e 30 38 a1 88 29 e6 1b f8 b9 8a 5b 41 d2 3d 99 1b e8 97 c8 70 30 52 94 33 1b 32 7f c5 7b a0 e2 f6 6e f0 1e 3c 47 31 9c 0e 29 ce fe 28 24 10 98 b1 c6 52 19 b1 a0 8b f9 2b 2a 4f dd e4 e0 36 9b 3b f1 0e cd 77 47 54 e9 18 9a 6d a2 5b ce f6 f0 4f 5c 7c f7 90 f5 ee c8 4c 47 b3 70 cc 0e 53 a1 84 8c 5e 3d 8e 81 46 9e 8f 2f 1a 4e b7 2a 9c a5 14 b5 f0 b6 5c 65 ea 9f f2 99 ad 69 41 6d be bf 6f 89 dc 1a 93 04 cb 30 b4 e6 2d 33 fd 15 c9 a1 d5 ec 15 6a 8a 7c 4a 7a 5c 9c b8 63 bc 8f 9c 3b 21 e6 98 a3 10 c6 fa 67 f5 df 0d 99 0f 65 ae 10 c7 3a 16 ee c2 6d cb e1 1e fe 33 5c f2 1e 92 b6 03 d4 52 b6 d6 58 3a 1d 1b ba c8 ba 1a e1 a6 1b 18 Data Ascii: m9> ib9~EoHHpn8v)X>08)[A=p0R32{n<G1)($R+O6;wGTm[O\\|LGpS^=F/N\eiAmo0-3j\|Jz\c;!ge:m3\RX:
2024-04-19 14:07:11 UTC	456	IN	Data Raw: 13 7e 39 43 e6 e3 f5 4e 2a fc db 01 3b 6c 1e bb f2 ce 51 0c 85 43 8a b3 3d 09 92 64 76 f6 ee c2 9c 8d 33 3f c1 ee 27 9b c7 92 9e 82 88 d8 2d 63 a8 98 2a ce 44 9a 3e c4 31 3b e2 34 9e 3e e2 7c 54 6d c6 59 1a 61 23 22 52 32 1c 5e ed e2 cb 4d 37 9b 67 3b ab f8 8c fc b1 26 a1 11 47 86 21 e4 f4 e6 7b 3d 3b 23 52 68 dd 63 ea 23 ea 4a 08 a5 73 11 76 c5 cb 5e 36 cd 81 11 c5 93 f9 f3 bf 33 23 62 b6 78 e3 64 b3 8b 8f a4 4d aa dd 5b 2b dd af ed d8 af 36 f5 2c f2 64 b4 f9 78 0d 9a df 39 66 e8 fc f9 f6 5b b8 6d f7 58 57 5e 17 c5 9c 4f 92 f7 37 0b 55 55 3d b8 ae cc 1b ba 9e 14 aa 59 55 98 f6 5e 69 d5 ac b0 ab eb 08 8b 09 45 30 ed 80 54 97 f2 a7 72 ce 74 ad 89 88 7b a8 66 0f ae 23 2a 57 45 18 6d 7e 67 43 e6 0b 67 a9 c6 06 bd c0 7e d7 cf 2c 13 68 4d 78 5b 26 5d b6 61 6f Data Ascii: ~9CN;lQC=dv3?'-cD>1;4>\|TmYa#"R2^M7g;&G!{=;#Rhc#Jsv^63#bxdM[+6,dx9f[mXW^O7UU=YU^iE0Trt{f#*WEm~gCg~,hMx[&]ao

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50275	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /XOXJBp4fVtiRE1acOVPBNTcHkSkJl0ly6RTdKvmEPj7EhoR1ZNOalw7n_lGjFy_f_2o=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5732 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	725	IN	Data Raw: 52 49 46 46 5c 16 00 00 57 45 42 50 56 50 38 4c 4f 16 00 00 2f 27 c1 49 00 f5 86 e2 b6 6d 1c 69 ff b1 73 bd df 2f 22 26 80 b1 ad c6 71 a9 ae 82 36 69 05 50 8e d0 11 c9 76 6a 48 cf 4e 82 01 72 73 b3 53 c1 a0 08 0a 4e 4b 76 90 a4 f2 af 55 33 da c8 41 a1 8c 56 9d 69 c1 ff 6f da 6e ee e4 31 b5 6d db b6 6d db 76 df fa 64 db 4f b6 ed f6 c9 b6 6d b7 d7 48 72 19 9e fe d7 da 67 ce 3f be 88 93 55 c7 39 37 33 ff de dd ac e2 de 60 cf c4 3a 5d b1 ad 9d 39 27 e6 8e ed 20 68 db 36 69 d3 9d 3f e3 3b 8c 24 35 6c 2e 93 fe ab e5 5f 08 81 a5 fe 4f 80 37 6a db 96 3b cd b6 8d ba bb bb bb bb bb bb bb b7 d4 dd dd 05 ea 6e d4 a0 ee ee ee ee ee ee ee 9a f6 96 e3 38 67 26 a1 cc f0 eb be 93 a6 58 14 9b 4d 8a cc b2 91 59 48 02 09 c1 09 94 9c 85 a4 0d 24 c4 48 48 c9 86 04 e6 45 a0 69 Data Ascii: RIFF\WEBPVP8LO/'Imis/"&q6iPvjHNrsSNKvU3AVion1mmvdOmHrg?U973`:]9' h6i?;$5l._O7j;n8g&XMYH$HHEi
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 4a b2 d4 a3 4f 18 49 1e 08 e0 23 92 7c d5 52 84 e4 67 eb 01 ab 07 90 64 a8 eb 9b 24 b3 05 07 b2 26 80 6b 49 b2 b1 6b 1d 92 55 00 b4 23 69 95 e0 fa 3c 49 3e 3b a0 d6 6e 26 6f 03 10 48 c6 1d 16 fe 20 55 ef 85 71 4d d4 fb 64 40 62 72 e7 51 1c 01 74 aa a3 92 a4 c3 05 1a 1c 01 2c f9 15 f9 3b 80 70 92 55 67 03 b6 2e 45 be 32 a4 ac d7 e0 c0 69 46 b2 b9 cc 10 0f 4c 7a 15 c9 ba d6 a9 3e 03 70 23 49 00 f7 90 56 9b 02 38 5d b5 01 23 bf 42 1e 92 03 38 65 47 00 4d 70 3e 59 04 7d 3a c3 41 ac e6 4a f1 26 85 12 00 d0 9a b4 00 e8 4a d6 81 18 49 aa 3b 48 6e 87 78 19 19 20 fb 05 e2 e3 e4 93 d6 19 15 c0 52 b1 e4 4c e8 37 89 8c 86 18 68 03 50 8c f4 c8 0b e5 f3 04 9d f2 4c 33 c9 43 65 07 08 6d c9 0c 00 8d c9 68 09 9e 25 ff 96 ac 25 99 9d 34 2f 2e d4 fa 53 72 24 69 b2 c6 eb 00 Data Ascii: JOI#\|Rgd$&kIkU#i<I>;n&oH UqMd@brQt,;pUg.E2iFLz>p#IV8]#B8eGMp>Y}:AJ&JI;Hnx RL7hPL3Cemh%%4/.Sr$i
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 9b e3 5a f2 36 60 4e 5f be 58 7f f6 e6 d0 75 ed c0 f7 0c b6 f7 f3 6b b6 ca 2b fc 43 e6 ab e0 c4 04 a1 96 42 47 86 f6 26 fb 2d 96 1a 16 03 10 94 44 b2 4d ab 03 6c 3b 4d a9 5c 4a d6 46 61 7b 3e 29 98 14 36 e1 b3 03 28 c5 5e 78 be bc d7 fe 10 eb a7 3f 97 44 96 b1 dd a4 f2 93 07 5b 49 63 59 49 f2 91 c2 c9 ec 2c 18 14 f4 ec 0a 99 39 29 a0 06 ac 3d f0 3c 79 0c cc 87 9a 3b 79 0d e4 9e 6c 20 a8 5f 75 91 d5 63 0f c0 c5 ca e8 22 bb 83 97 28 20 91 fb c8 16 9d 00 c0 30 3d 17 80 d8 83 ae 98 99 db c4 4a 0a 21 f4 90 30 41 b2 99 91 15 05 96 91 ac e3 48 07 a5 3f f8 b2 2c c2 63 2d a0 17 5b 49 ec f8 38 66 dc 98 06 c5 b9 de 65 3b c1 8a cd 2b 55 6c 73 4c 04 7f 86 e0 c8 7a 1b 54 6c e3 e6 c1 12 50 c2 9b 4c ec 38 fd 2c a5 43 f9 04 80 d2 46 5e be c4 e8 ff 1e 60 e2 61 98 79 8e 49 Data Ascii: Z6`N_Xuk+CBG&-DMl;M\JFa{>)6(^x?D[IcYI,9)=<y;yl _uc"( 0=J!0AH?,c-[I8fe;+UlsLzTlPL8,CF^`ayI
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: f0 cd 84 a2 35 03 d9 86 67 e7 00 86 49 23 df 7c 22 80 2d a3 be b6 d6 f8 00 4e 23 b3 0e ab 80 6c 76 cd 21 56 a5 a1 c1 77 b3 a1 cf 37 e8 fc 9f 1b 86 14 da e9 76 08 2b 4b e9 53 ff 40 12 d2 95 62 e0 d4 00 b0 a0 2f c5 72 57 f1 42 88 bf 96 32 5a b5 39 2d 47 15 c9 cb dc 49 b2 04 df 9f 14 00 ea 7e 49 f1 1e 48 c7 2c 4b 32 14 d8 3a 89 cc 1e 04 50 f9 6f c1 ed 6d 30 cd 3b 00 ae 33 1f 68 be 63 db 56 0f b6 8d 1c 02 b2 bd d1 a0 83 eb d5 4e df 43 3a 67 f1 3b 83 9b 34 82 5b fa d2 12 34 6e 54 74 5a 20 db 71 03 00 41 e9 33 48 c6 28 d9 b1 96 80 9e 89 0f b4 6a 1b 09 c5 29 d2 f3 84 03 c0 3f e1 c7 fa 01 d8 29 75 9a 82 5b 5e d3 cc fd 3c c4 43 3e 03 a6 69 6e 07 9c 58 d3 c2 70 e4 c7 be 2b 41 5a c3 31 7b 09 e8 dc 95 4c 86 6d c9 de 0c e3 cc fd 25 a5 e9 0d dd 7b 49 68 0f 17 0c 23 ec Data Ascii: 5gI#\|"-N#lv!Vw7v+KS@b/rWB2Z9-GI~IH,K2:Pom0;3hcVNC:g;4[4nTtZ qA3H(j)?)u[^<C>inXp+AZ1{Lm%{Ih#
2024-04-19 14:07:11 UTC	1242	IN	Data Raw: af b5 f7 1c 32 59 2e e6 56 c9 aa 75 6b b7 fb ad 23 a1 7e f9 7c 5b b5 0f b7 4f 68 9d f1 ab d5 e9 1c a6 ad 5a 15 1b 5a a8 00 45 fb 3f bb e1 27 5e 13 26 05 56 73 41 a9 19 81 c1 14 95 95 a6 1b 01 0d 33 2c ba f0 34 da d9 f8 12 58 04 58 6d 0f 97 42 29 06 db 1d a3 30 ff 71 fb 62 61 cb 84 bc 27 1c dd 51 3b 47 e6 3f 7d 7e c9 54 98 37 33 0b c0 70 13 f5 a1 f3 ad 57 6e 9b a9 66 dc a5 ee ea df 5e f2 0d bb 4c a6 fb cc 0e b6 8c a8 95 e3 f7 01 80 03 0f d6 ce f8 df 22 eb e4 1b 43 e7 69 9f b4 24 28 05 cf 37 a1 16 06 f5 5b 4c d8 d3 47 83 49 36 ca 5d 72 bd 71 85 f8 51 96 d9 2d 57 d0 98 92 e9 fd dc 1b e7 74 94 8c bd e6 5e 21 9b 95 d5 60 e1 a2 e5 81 81 72 ee 91 e5 37 bb 6c 85 5d dd 83 86 de 4a 69 90 55 e7 44 ff 2b 55 0e 5b 77 8d a9 01 cc b7 bd fb ce 3e c2 2c fe a8 97 cb c9 01 Data Ascii: 2Y.Vuk#~\|[OhZZE?'^&VsA3,4XXmB)0qba'Q;G?}~T73pWnf^L"Ci$(7[LGI6]rqQ-Wt^!`r7l]JiUD+U[w>,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50276	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /BdoYxc0T4Tdh6w-MHTPk9qGpoLKuYIa5x11xysND-TYlQohJgIITN6bYrlgIYYd96E4=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4318 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	725	IN	Data Raw: 52 49 46 46 d6 10 00 00 57 45 42 50 56 50 38 4c c9 10 00 00 2f 27 c1 49 00 d5 86 e2 b6 6d 1c 6b ff b5 af a6 de fd 22 62 02 e4 98 db a3 eb d8 b0 c9 ed 91 4f b6 7d 70 28 73 59 10 26 8d 18 54 5d f9 93 b2 20 f2 d4 15 6f d8 ff af 6f da ff 1f ef f7 c7 dd ed ed ee ee 3a 77 77 77 77 f7 e1 ee 3e 77 77 f7 0d 77 77 77 77 a7 2e c9 85 e7 33 af a4 65 47 c3 b5 d1 0f 3e 5a 7a a7 38 a4 a4 d8 bb 10 b8 31 a4 23 ed ca bb 63 dc 46 92 22 1f e4 9f e6 f2 1e e3 cb 71 24 db aa d2 81 ff 8f c3 da dd 72 70 77 4d 80 28 d8 bb f5 7f 02 e8 5f ff 7f b8 95 ee bd 6b db b6 6d ef fe 6e db b6 6d db b6 6d db b6 6d 46 d5 d9 7f 80 17 9f 99 24 f3 99 65 92 cd 37 68 9b ec fd e4 9b ba 27 fd 9e 4e b6 98 9e 99 bd f5 f7 d4 10 1b 49 52 24 75 41 8e ff 86 ee ce ee 3d f3 43 ac 6d b7 6d e3 32 b8 9d 19 dc 6b Data Ascii: RIFFWEBPVP8L/'Imk"bO}p(sY&T] oo:wwww>wwwwww.3eG>Zz81#cF"q$rpwM(_kmnmmmF$e7h'NIR$uA=Cmm2k
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 69 63 2a f6 77 91 df df 98 d1 ec f4 46 7b 33 37 02 37 4c a2 19 3f 43 e6 fe 34 65 03 c4 30 90 65 9a 0e 78 2c f2 e1 f1 cc bf 9a 83 91 e7 f9 6b af 67 fb ff a0 0f fc ff b7 8d 4f e1 4a 4e e3 bf 78 bf f8 21 79 39 d3 d0 75 5c 43 4a e7 4d 36 04 dd 90 fa 06 9f c7 32 96 e1 6c 9a 33 2d ed cb 44 88 e3 56 92 51 3d 46 b1 a5 3e 4e 5a 00 a1 14 cd d7 c8 c3 3e 8c c5 06 04 3f 9e 96 1e 03 58 94 8c 66 41 37 1c ec 47 26 e0 83 f3 b9 93 ba 94 26 a5 b0 14 98 ca 04 d2 80 0e d8 12 b8 85 69 a9 32 40 23 92 d1 66 e8 8a 83 2f b3 12 02 3e 78 15 d8 92 42 f8 3e c0 ea ff 46 ff 48 3b 60 34 3f e6 7d 40 6f 51 d8 85 6f 31 ad a8 0c 63 d8 72 2b 3e 78 09 37 cc 4c 21 fc 06 58 99 25 49 a9 97 22 13 e2 b9 19 e9 77 1c 84 17 47 b1 17 de ec c5 21 78 73 18 7f c0 93 b7 c7 e0 ec 68 7e 44 52 39 5e 76 38 9e Data Ascii: ic*wF{377L?C4e0ex,kgOJNx!y9u\CJM62l3-DVQ=F>NZ>?XfA7G&&i2@#f/>xB>FH;`4?}@oQo1cr+>x7L!X%I"wG!xsh~DR9^v8
2024-04-19 14:07:11 UTC	1255	IN	Data Raw: 17 c4 91 b6 46 d6 cf 91 9d 96 9b db 83 6f a2 0d a4 f3 a9 4c 51 8a 90 a4 e7 52 95 79 5f 47 f6 34 37 94 45 2a a8 c8 81 c8 ba 2b 40 68 97 7e 46 61 19 be 8c 92 e9 6b b8 a1 15 4e e0 7f 4f 79 aa b1 5a 4e bf 84 52 e2 36 87 c6 05 28 19 5e c3 02 c6 61 1c 4f 14 70 07 c9 c1 2f 9c 56 5e 01 d8 f2 28 55 59 1b 0d e4 ca 7f 9a e7 68 46 72 f9 4b 3e c4 73 05 fc a5 0c 58 ef 68 b5 0b 82 17 93 1c f4 0d ea 11 b4 8c a5 3c f2 97 37 9e c7 ee 1f e2 e8 4b 6c 9c b1 71 7d b2 90 7e 49 5d de a3 39 2f 71 23 fa c0 ff 01 ff eb f7 97 5c e7 e9 25 f5 b7 8e bb 44 aa df 23 7d a4 de d2 59 ef 4e e1 fa c3 5e fe f4 90 77 7a c7 bd c4 dc 21 58 d5 a9 95 48 07 6d d8 9a ee 3d b1 d5 dd 62 ad 7b 4d 3a e8 53 d7 fb c7 e3 60 fd 78 1e 9e db 4f d2 41 9f ba 3f 59 eb c7 7d 7c 7e 3f 49 07 7d fc e9 b7 df 8a be be Data Ascii: FoLQRy_G47E*+@h~FakNOyZNR6(^aOp/V^(UYhFrK>sXh<7Klq}~I]9/q#\%D#}YN^wz!XHm=b{M:S`xOA?Y}\|~?I}
2024-04-19 14:07:11 UTC	1083	IN	Data Raw: 7e 88 65 e7 9a b0 21 9d c1 0b ac 68 46 0d fe 03 59 cf e5 46 f4 81 ff 03 fe 0f f8 3f e0 ff bf 90 9c 41 6b 31 f5 4a aa 55 54 0a 77 66 22 3a c0 41 8e 6b ea 4f 55 5f c3 3e 42 bf 2a 5f 83 c2 bd 61 b3 3c 5d 8d ba d3 3b 5e a9 e6 21 f9 90 8b b8 c1 05 4e 50 21 17 41 23 99 09 21 6d 8e e9 6b e3 5f a0 c2 8d 38 40 d5 15 22 7d 6d 7c 8e 69 84 1d 97 f1 61 c9 41 9c e0 00 d5 b3 d6 0f 8b 40 d7 a3 35 4f e1 d2 2b 79 b8 1a 57 6b b9 3f 29 9e 85 f4 da 32 ab 12 51 3b 39 3f 41 3d 20 bd d8 ce 24 d0 b4 89 eb b3 e2 06 e9 d5 22 56 81 a4 c5 d5 9f 81 90 5e 2e 5a 9a 70 f4 5a f1 20 12 d2 09 39 90 8f 18 a0 d5 dd 0c 42 d6 35 a3 e8 9a b8 2d 21 f9 37 70 6b fd 50 8f 43 1c a0 bd 89 10 87 90 b6 89 a0 2d 15 5f 17 06 e2 28 c7 24 68 9a 59 d3 6b 81 d6 51 b1 04 65 45 06 7e 9e af da 12 52 3c 55 1b 32 Data Ascii: ~e!hFYF?Ak1JUTwf":AkOU_>B*_a<];^!NP!A#!mk_8@"}m\|iaA@5O+yWk?)2Q;9?A= $"V^.ZpZ 9B5-!7pkPC-_($hYkQeE~R<U2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50277	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1101	OUT	GET /IDOtRhsZLSG3EFxWxmWREMPa42_SNQvl9-x4FBu5dn9aJMjpVtMx_GoNdnQwEIp_7gsV=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 2850 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	733	IN	Data Raw: 52 49 46 46 1a 0b 00 00 57 45 42 50 56 50 38 4c 0e 0b 00 00 2f 3f c0 0f 10 09 44 6d db 48 d9 b7 e1 4f f8 72 1c 22 fa 3f 01 f4 2c 6b ca 71 7b f2 42 43 18 df 05 db 48 92 9c 34 5a c3 99 14 d6 15 f9 07 26 c3 20 08 36 6e 1b 39 e2 86 72 2f e7 ab 06 f7 ff f7 1d b6 64 18 49 92 92 79 c3 d9 5b 1c f2 4f 90 10 fa 3f 01 e6 0c ff 0c 81 bf 1d 20 70 4b 28 ba fb 66 08 38 47 6f 78 fb 99 c6 ea e0 c3 9b 33 f1 9f ee 70 86 73 71 ab 5e f7 33 3f 31 a3 d9 6a 67 80 58 d2 51 7e df 0a 00 fe a4 1c f7 ec 4f da 01 e0 03 ec e8 71 c1 1b 0a da b6 91 62 fe b0 b7 7b 20 44 c4 04 f4 13 ca 7a 32 1a 15 3a cb 71 b6 bd 8d 9c 9f d4 e6 6d b7 f4 e9 7c 5e df c0 17 d8 da 39 48 fc 8b e1 3f b1 da ee ab f5 0f 40 67 7b 88 85 ca 81 75 80 0d 74 b6 67 83 3a 87 cd 5b 4e e5 6a 0e 60 78 00 08 91 24 29 b6 b2 1e Data Ascii: RIFFWEBPVP8L/?DmHOr"?,kq{BCH4Z& 6n9r/dIy[O? pK(f8Gox3psq^3?1jgXQ~Oqb{ Dz2:qm\|^9H?@g{utg:[Nj`x$)
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 29 61 0a 59 50 29 a8 18 68 24 45 af 99 fe 2f 11 8a 11 4e 2d 54 3d fa ae 1d 67 4f 3b 77 6b 97 1f 7f db 72 69 23 a0 a9 a4 28 4d b4 3b ec 79 3a b0 de c4 c8 e8 d1 c4 1c 69 c9 6c 69 55 ad 05 c7 9f bc 5e ff d0 f5 8b ae 3f df a0 69 d3 62 71 13 d0 7d 41 25 66 44 9a 2e e8 8c 17 0b 2a 8a a5 14 a6 33 19 92 ac 94 7e 3e 3a b5 d6 3c ad 76 a5 f2 22 bb fd fc f3 a1 5b 7b cc 27 5f af f0 c7 cf 97 3d f6 79 e5 c0 95 20 20 2a 8b 0b 3f f0 15 1b 29 69 6c 2b 65 01 c5 10 81 54 c6 27 93 db e6 49 1e c7 d1 b2 c9 ca b2 6e a8 44 5f df 5f d8 ef ab 2c b0 dc 55 17 38 06 2e 79 ec e4 c0 52 23 51 6b bc f9 e5 fe 7f fc b3 be c3 8d d6 24 47 9b f6 75 d5 ee 9c f4 c4 5d 8b 68 3e 12 da 40 f0 31 1d 18 c3 d2 89 ea aa 3f 32 25 a0 cd 7d bf 98 52 c4 93 e4 1b 2f 26 48 61 42 61 e3 8e a4 ab 77 ef b9 e7 d1 Data Ascii: )aYP)h$E/N-T=gO;wkri#(M;y:iliU^?ibq}A%fD.3~>:<v"[{'_=y ?)il+eT'InD__,U8.yR#Qk$Gu]h>@1?2%}R/&HaBaw
2024-04-19 14:07:12 UTC	862	IN	Data Raw: 1d 76 cb 05 d3 3f 8b 30 28 27 46 9e c1 31 df 4b 1d 16 39 17 a2 6a 3c c1 89 a7 0f 60 d5 87 1b 82 c1 d2 95 25 ab 55 47 96 c7 76 fa e8 be 50 3a 77 d4 5b fe ea 8a 1b ce 04 b1 95 b8 c0 aa 45 e2 45 04 14 3e c3 30 1c ca d9 07 29 e3 18 26 9f 73 54 07 56 41 64 77 35 92 30 6a 51 c4 86 c1 3c c9 87 42 c8 6d d5 6c ec 55 c7 3b af c6 be e8 f5 fe 72 b1 4d 66 84 aa 05 67 a0 bb 74 74 a4 22 21 a2 7d 45 81 28 97 60 02 08 7f cc 84 cf b0 8e 52 4b f0 f6 3b fa 45 da cf 1a b7 56 e8 fc da f3 ac f5 5a 4b cc d5 74 86 d5 85 66 b9 21 c4 3e 03 d0 a1 bb 19 90 4c 54 47 04 82 20 92 d6 e5 5f 89 83 88 3c aa 55 ea 31 43 69 a0 90 9f aa 81 85 2a 35 af b1 08 f4 70 8c 1c 45 50 43 e8 d7 74 6c 32 c3 02 8f 5c d6 10 4c a9 d1 d0 84 16 18 4e 92 e1 9f b1 3e 7e e8 e1 1a 60 e5 15 70 26 08 e1 60 58 6c a9 Data Ascii: v?0('F1K9j<`%UGvP:w[EE>0)&sTVAdw50jQ<BmlU;rMfgtt"!}E(`RK;EVZKtf!>LTG _<U1Ci*5pEPCtl2\LN>~`p&`Xl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50278	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1101	OUT	GET /QJObxznpklAxDNp0OVe3kAP5ZfUouIvRDO0kPj-V3MRjoRYKwj9RVTxOwG9yrlY-bgG3=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 774 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	734	IN	Data Raw: 52 49 46 46 fe 02 00 00 57 45 42 50 56 50 38 4c f2 02 00 00 2f 3f c0 0f 00 a7 e5 20 92 64 57 99 bd 0f 48 40 14 fe 9d e4 70 b7 4b c6 82 1b b7 8d 24 49 55 ff 7f e1 44 9b 6e 7c ef 76 b9 e4 a0 6d 24 49 4a 0f 91 e3 cf e2 d8 1c 80 77 66 b7 bb 32 ff 19 8d 42 21 a2 50 ce 70 02 04 42 88 42 c1 89 10 04 21 40 01 ac 02 10 d5 e8 84 14 22 19 51 20 12 01 53 d0 34 22 13 52 83 c2 42 9a 56 a8 59 a1 28 09 0c 42 04 65 a3 84 80 37 10 69 78 22 8e 28 54 16 54 61 47 44 37 94 21 81 40 40 20 62 74 81 08 c3 40 aa 16 ea e5 b6 6d 1a fa de 54 20 0a 08 5a 25 62 20 7a 2e 0e 3c b7 94 6a c6 ac fa bb e5 7b 49 86 6d fd dd 10 3e 23 ef 6d 45 e9 dc b2 51 02 a2 83 fb 39 36 d3 26 a3 16 b3 8d bd f1 8b 66 d0 a5 26 72 1a cf ad 1f 6f 39 2d 82 db 4f 1f 40 11 05 0a 14 28 50 04 a0 98 0d 02 f4 16 30 80 Data Ascii: RIFFWEBPVP8L/? dWH@pK$IUDn\|vm$IJwf2B!PpBB!@"Q S4"RBVY(Be7ix"(TTaGD7!@@ bt@mT Z%b z.<j{Im>#mEQ96&f&ro9-O@(P0
2024-04-19 14:07:12 UTC	40	IN	Data Raw: bf fb da b1 00 76 b6 91 8e 33 83 36 e6 1a 06 f7 fa db 49 cf 29 4f 1c d3 30 2c ff c6 74 d2 76 de ce c3 fb 2b 47 d0 50 55 Data Ascii: v36I)O0,tv+GPU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50279	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1099	OUT	GET /ZX8lWMl7wuPv8mi-Gtab8pzGKXm3GKa-k8z51K6XxGOGfR7auS6Xre3041LbVEMCCg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:12 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:12 GMT Server: fife Content-Length: 214 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	214	IN	Data Raw: 52 49 46 46 ce 00 00 00 57 45 42 50 56 50 38 4c c1 00 00 00 2f 3f c0 0f 00 cd 74 21 a2 ff b1 89 91 1f f0 fe c7 00 d8 46 b6 ad e4 7e 09 21 66 a8 c0 fa a2 48 1a b1 1a 08 5d df cf 3e ee 04 6c 23 49 72 d2 0f 36 36 45 02 3a ff 50 74 1a 5a a3 a8 91 a4 a8 76 17 10 80 3a 1c e0 ff 7d 25 14 b9 6d db 30 ab eb da 4f 84 ff 06 5b 07 a9 cd 8d fa f6 ed f2 8d fa e6 48 5e ff 93 d3 df 14 a6 9e 74 06 63 03 81 a5 c5 49 a7 72 f2 4f 62 75 90 86 0e b4 11 b5 e1 37 c0 c6 a1 00 6f 4f b0 60 0b f9 4c 4b c4 da 53 b5 19 5f eb 2b 16 5a 3c d2 5d f2 19 7d d6 67 67 80 36 cc 84 95 02 1b 87 fa 81 b7 2f 38 5b 88 d0 62 64 c4 28 d6 e7 03 b4 11 e3 b1 f5 86 f8 e1 fd 5b 00 00 Data Ascii: RIFFWEBPVP8L/?t!F~!fH]>l#Ir66E:PtZv:}%m0O[H^tcIrObu7oO`LKS_+Z<]}gg6/8[bd([

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50280	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	530	OUT	GET /I3Qvi0pFixZAlWO3NuIeaoKe0tD3lAJgxkoYh7B8-i442e2Y_DVkPgl8YnbBNTDkKcQ=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9500 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	725	IN	Data Raw: 52 49 46 46 14 25 00 00 57 45 42 50 56 50 38 4c 07 25 00 00 2f 27 c1 49 00 15 07 e3 46 92 1a 4d e5 1f 36 70 06 ff 8c 88 09 c8 f4 f5 71 2f 95 09 6a f0 0e e9 50 39 89 c4 9f 4f ce 16 33 e1 bf 90 f3 47 27 fc 97 3e f4 11 f9 57 1f fd ff cf a5 b4 d6 08 08 23 60 a1 17 e9 30 c3 c0 d0 ed bd f7 de 7b ef bd f7 de b1 f7 de 2b f6 de 35 bd 5a d2 ed 35 bd f7 9e d8 fe d8 7b 0f fb 79 9e 3d fb 39 e7 dc e6 8d ee 3b 12 21 e1 2a 71 21 4c 1a 61 31 f7 77 82 93 00 72 8b 2e 8e e5 e3 1d d7 24 46 cc 2c bc 72 c2 9d 5f da 84 a3 0b 2b 86 55 44 17 c6 e5 c8 3e 4b d0 33 ba 6d fb 52 1c 2b 17 14 33 c7 7c 43 99 ec 14 39 06 2f ae f8 9c 58 c6 c2 5d 10 eb e4 6a f0 10 76 1a 57 34 0e db b6 0d 24 ca e9 ff fe 1b 1f c5 b6 91 04 49 12 e7 f1 fe 9b fb bf 33 dd 19 ea ff 04 50 ba fe ff 90 e5 f4 d8 b6 d1 Data Ascii: RIFF%WEBPVP8L%/'IFM6pq/jP9O3G'>W#`0{+5Z5{y=9;!*q!La1wr.$F,r_+UD>K3mR+3\|C9/X]jvW4$I3P
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 40 49 01 fe 69 39 bc 32 3b 69 00 9a 9f e2 85 16 b9 b3 5e 61 c0 db 2f db a8 00 7d 93 6d 71 1e 04 1e 6d 32 23 b1 80 2d 4d 9b d7 04 70 a1 5f e1 cf e2 cc 9a 79 47 42 5d d6 2b 16 e1 18 a0 1f 9a 4f 47 22 10 8e 73 8e ad 02 e0 e0 7a 9f 6b 02 8f 19 58 89 6c 8e 06 e6 6f f6 c4 1e d7 35 ae 57 b1 1b 32 c3 6f 41 6a 7c 11 c8 b9 24 f7 94 01 66 66 55 e6 a6 3c 4a 2e 4f e0 fc b4 05 ea df 9a 0d 88 c4 15 0b c1 01 ef bc 4f 39 47 ac 40 81 ae 68 99 ac 2e c5 2f d7 9a 4b ae 0b 91 12 a7 ec fb 8d e3 ff 08 00 7b fd a4 35 e0 9d f7 3c 00 b8 3f 83 03 c0 02 64 3a 13 00 66 23 d3 d5 40 8d 5f 43 f5 0a b3 ca 97 be 7d fc f1 26 00 f3 70 eb 99 00 f0 eb d2 c9 c1 67 b3 7d 0a aa ff c5 d7 39 a0 4a de 96 00 30 32 45 ae 04 80 6f fa dd 0b 9c 12 58 1b c0 81 ab d3 10 c0 fd 7f 03 24 c6 b7 26 00 3c 7c b3 Data Ascii: @Ii92;i^a/}mqm2#-Mp_yGB]+OG"szkXlo5W2oAj\|$ffU<J.OO9G@h./K{5<?d:f#@_C}&pg}9J02EoX$&<\|
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 45 02 b6 3c c0 99 0c e7 0f 34 11 5f 19 ce 64 39 2f 23 3a fb c6 99 4c e7 f7 89 ec 20 ce 64 3b 3f 48 54 35 98 ac af 21 26 7b e3 72 8e e7 13 51 d4 32 31 59 6f aa 2c 9a 90 49 d6 b8 bc e3 ae e7 8a 25 56 e3 4c e6 f3 9b c4 62 61 b2 df 22 92 58 c5 45 f0 46 82 ce 88 ff 17 46 6b f8 af c4 51 42 04 5d e7 c9 da 4b 11 6b 18 fd af a4 6d 5a 53 42 14 11 8a 33 e1 a1 9c 66 16 ed 81 ae 3c 35 8c c6 30 7e 81 18 ec 9a 08 8e 9e 6c 47 2f 0c 07 fd e1 d3 d5 f1 f0 f9 1e a1 33 57 8b a0 45 8c 4c 70 79 1b 16 5f 18 0e 0c 63 19 b2 62 70 ce 9f f4 85 19 5b 44 b8 28 c5 84 fe 33 5e e6 18 3d 45 b0 46 47 c3 81 61 b8 16 22 40 4d d0 73 47 97 6d fa c2 8e 15 2e 41 99 84 82 35 f0 36 47 9e e3 8c 07 41 e0 ce e2 f3 60 10 46 15 e7 e9 27 6b 01 24 5a 39 15 71 17 e0 d8 24 91 74 07 40 da 8b 2e 7e 07 c4 d9 Data Ascii: E<4_d9/#:L d;?HT5!&{rQ21Yo,I%VLba"XEFFkQB]KkmZSB3f<50~lG/3WELpy_cbp[D(3^=EFGa"@MsGm.A56GA`F'k$Z9q$t@.~
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 1b 00 7e 75 7f aa 48 44 6f 86 e8 5d ec f0 a1 06 11 ef e1 38 99 68 67 b6 4a c0 a9 44 eb 04 ac dc 50 46 59 6a 13 d1 5d 62 62 16 a1 b8 40 33 93 ed 6e 73 cf 75 b9 b7 3c 51 66 56 6c 52 4b 91 6b 08 8a 60 a5 a7 8c 0b 9b 35 e6 c8 62 ef bd cc 93 96 04 a9 f5 3a d1 76 24 e8 b1 30 86 e7 42 f4 02 80 50 f7 2e 22 22 5a 54 8f 5a e0 42 0d ff 2f 90 a2 6d 09 51 01 27 ac 26 a2 02 93 04 89 57 87 0d 4f 17 95 9d 43 00 26 0f d1 9a 20 55 97 b0 db 1a a2 67 03 8c 91 53 89 b6 20 8d d0 87 bd 0b 3a 12 a9 5a 84 7b e6 15 65 19 53 f7 c7 dd 8d 2c 22 5a 45 40 7f 95 93 de 43 5f 72 ec 60 24 5a 3d 00 9e 1e 22 4a ab ca 5e 6d b5 9b e9 fa 0e 0d c0 ff 21 ea bf be 5a 6e c8 2a 4b b4 5a 10 be b7 d3 da 5f 4c 5c 28 93 08 e2 b7 8b 6a 44 d8 1e 88 fa 03 63 74 7f fa 47 b5 91 12 8e e7 43 3b d0 73 b9 61 4d Data Ascii: ~uHDo]8hgJDPFYj]bb@3nsu<QfVlRKk`5b:v$0BP.""ZTZB/mQ'&WOC& UgS :Z{eS,"ZE@C_r`$Z="J^m!Zn*KZ_L\(jDctGC;saM
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 3b 0f d1 2b d3 41 b9 5a b2 6f 83 ba ff a4 69 a7 d8 ee d4 8c c9 fd bf 19 39 4e a9 19 ab 37 51 1b b8 fe 61 17 e8 fd 79 c2 85 6a ef 00 35 88 78 0f c7 6c d9 b9 0f 65 79 17 6f e3 03 21 5a 5e 60 e5 86 32 12 1f bb 49 a8 28 11 e0 be 81 f7 96 25 16 25 36 d4 7f e6 5a 1e 96 21 16 5f 2c b1 70 b8 04 31 cf a2 2e e4 3e cd 8f 2d 44 2e bd 98 68 47 9e 26 87 15 44 34 65 7d 8c a9 a6 6a 78 25 54 74 80 4a d2 ca 0f aa 57 41 44 f4 16 fa a8 27 68 31 b5 72 3f c6 b0 a0 f2 10 51 d9 e7 30 67 76 56 81 ae cd b1 73 42 d9 28 65 61 8c b1 7a 3d 67 0b 5d 4c 44 b4 05 3d 55 fc 1d b3 38 78 bf 4e 5b 53 ce 92 ba d9 f0 52 e8 8d 49 19 35 3b 12 a9 59 22 ef 99 0f aa 3a b6 9a c5 db 8d aa b2 34 0f a1 df 8f b1 28 7b d3 7e d1 0e 1c 10 bb 97 85 7b df 3b de 08 11 d1 96 8c 1d 17 9a 4e 91 ef 65 cc e6 99 2e Data Ascii: ;+AZoi9N7Qayj5xleyo!Z^`2I(%%6Z!_,p1.>-D.hG&D4e}jx%TtJWAD'h1r?Q0gvVsB(eaz=g]LD=U8xN[SRI5;Y":4({~{;Ne.
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 12 a9 38 13 d6 72 a0 ab 66 a3 5c 61 fc 49 71 64 16 68 9f 54 eb 3e 52 7d be eb b0 af 57 bb c7 dc ea a6 8f ae 64 16 85 4b 1a c7 84 c4 b0 0c d1 40 12 11 11 73 48 c4 5b 82 2c 33 f8 53 9e b0 4b 5d c4 10 6f a5 69 82 1c 30 1e f7 0f 41 7f e0 1c ea 3f fc fb c7 ba 8b 68 fb 64 0a 8f b7 c4 e0 ca 04 85 42 d8 a7 86 db ad 8f 2d 40 0b 69 b7 05 6c 25 de 11 ab 29 48 d3 e4 09 73 15 41 6b 66 15 c8 2f 12 3f 2d 88 f5 ba 1a 7a d7 ee 80 bd ab 18 82 d0 e4 00 a9 4b 2c 9c eb 59 d6 8b 85 8b 6b 5c a0 2a a1 68 d9 ce 83 41 17 ed 93 4e 3a e9 a4 df a2 ff 6b 49 d3 74 5b 68 7c 80 1f 8a 24 00 48 de f4 2b 1e 28 5c 80 08 f2 62 80 59 db 64 19 4b 13 94 58 dd 6a a9 ba dd 62 51 49 dc f5 9a 17 b0 b6 3a aa fd f5 ab 00 e1 1a 30 dd 60 65 83 66 60 54 07 a2 67 c5 be f7 26 c6 ac d1 7b 37 ce 2e d0 ea 02 Data Ascii: 8rf\aIqdhT>R}WdK@sH[,3SK]oi0A?hdB-@il%)HsAkf/?-zK,Yk\*hAN:kIt[h\|$H+(\bYdKXjbQI:0`ef`Tg&{7.
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 5c ce 70 1e 9c 0f 3a 33 a6 b9 72 2e 57 38 77 bd 01 3a b5 15 ec 8c 99 b8 fc e0 26 f6 64 5e e8 dc 52 51 cb be 5d c3 4d 5c 3e 70 13 bf e6 be ca a5 a0 9b cf 8e a8 58 e5 60 c1 16 2b e3 7a 3f b3 5a 82 2b ff ea 33 67 43 b7 87 d1 de 11 13 bd 62 59 1c fb b2 1e ef 9b 2d c3 f7 f7 be 1d ff e6 c5 16 64 ab f0 16 41 51 2a 7a 8b 1e bd fa b1 63 1f fd a9 cb 3f 38 2f a5 3c 63 28 87 5d 99 93 4a 71 2c bd 5b 71 33 d7 cd 71 89 67 29 67 22 04 11 f9 9e 8f 92 ac 0c 8a de 6e 38 50 f1 f9 de 1e 35 74 df 6e b1 cd 3d d8 a0 e8 fd 86 60 f7 a3 76 d3 6d 55 e3 99 d9 a0 c8 44 83 f9 b7 55 75 58 6c 39 ca a0 c8 48 83 f7 89 ba 2a 9f d9 a0 c8 4c 83 39 9f 2e 0a 45 fc e6 68 8a 0c 3d e8 b6 7d 75 4e 2b 69 66 50 64 a9 a1 d9 bd 3a 26 6a 99 bd 15 99 ea 6d ae ac 53 9a 2a b2 b6 a9 0e a9 6c 90 37 86 ca 3a Data Ascii: \p:3r.W8w:&d^RQ]M\>pX`+z?Z+3gCbY-dAQzc?8/<c(]Jq,[q3qg)g"n8P5tn=`vmUDUuXl9HL9.Eh=}uN+ifPd:&jmS*l7:
2024-04-19 14:07:12 UTC	1245	IN	Data Raw: 89 d8 d5 a7 b6 a0 fe 38 41 a8 77 c0 0b f4 5a 16 00 ce 83 eb 25 52 68 a9 92 95 60 49 33 92 77 da 0c d9 9b 2a 23 fc fb 78 74 15 4a bd 98 9f a4 05 21 ef e2 ba 1f d7 9f 4e 50 29 b6 61 60 56 7c 6c 9e eb f2 ff 3d 0c 8a 7b 5b 35 46 3e f6 40 fc 3a e3 e5 04 fd 23 1c cb 80 15 08 5a 03 75 91 77 2d de 4d a5 a0 d3 3b 54 a2 85 e7 e0 5f 03 f8 8e ff 06 3a b4 2b 75 63 dd 28 75 5b 4c 41 eb 09 66 67 21 59 3d 2c 05 17 83 40 9d 75 44 ed 37 c3 ce 54 3b 36 03 af bc 2b 12 11 fb 27 eb 40 d6 f2 ed 4f f5 8b 8d a1 91 34 72 06 c9 4d c5 9e 86 9a 57 d3 08 06 a5 42 87 6b f3 6c cb e8 3c a6 28 8a 7b d4 cd 6a ce 71 86 87 ff b0 8a b2 29 de c8 14 b4 16 ea 22 dd 12 56 e7 d9 14 ff 09 84 9e cb b4 15 c3 27 66 c3 3d af f2 b1 7a 9c 7e fa e9 1e 5e fe cf 4f b8 fb 39 0f 06 17 29 b4 28 45 a0 e4 9d 73 Data Ascii: 8AwZ%Rh`I3w*#xtJ!NP)a`V\|l={[5F>@:#Zuw-M;T_:+uc(u[LAfg!Y=,@uD7T;6+'@O4rMWBkl<({jq)"V'f=z~^O9)(Es

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50281	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	531	OUT	GET /SUFtSwDL7N33qHh-o0lRr7Gy4QPeMQwWafVAKyeIyWrl7O1gTl5E5YQ8TyExGUatUbdW=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9368 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	725	IN	Data Raw: 52 49 46 46 90 24 00 00 57 45 42 50 56 50 38 4c 83 24 00 00 2f 27 c1 49 00 35 87 da b6 6d 98 f8 ff c3 4b fa 18 11 0a dc b6 51 c6 78 7c 9f 88 2f 20 9a 05 75 e4 2c ea ce 00 d4 15 a6 9f 77 d6 ce 66 be bf 26 97 98 c8 49 62 f7 df 3a 18 93 5e ff ec 3b 05 3e fa ff 8f 5b 76 b3 c7 e6 c1 78 ce 5c c5 b6 9d 5c db b6 6d db b6 6d db b6 6d c6 b6 39 13 9d f3 ec 7d f6 d9 cf 73 ce 73 52 c5 ba 8c 6d 4e 53 c6 d9 b5 db b8 76 b4 ab d8 9c ba 9d 7e aa f8 d4 0d 67 e5 a9 6d 5b a7 2b a7 b6 79 b2 74 d7 5c cc 5d 67 6e 31 75 e3 9b 5f 8d 49 57 63 db b6 67 67 56 26 75 3b c1 e4 94 9f ba c1 ac 9b 5f ad ab da 6d 30 77 65 d9 b8 88 ed 64 d6 4e fe ad 26 9a d5 53 77 56 34 f5 72 1b db b6 52 ad 94 02 3c 25 72 77 32 e8 bf a1 af 54 6b db d6 b6 27 6b ed 7d ce 79 9e af 90 f4 92 1e 12 d0 58 2c 0d c4 Data Ascii: RIFF$WEBPVP8L$/'I5mKQx\|/ u,wf&Ib:^;>[vx\\mmm9}ssRmNSv~gm[+yt\]gn1u_IWcggV&u;_m0wedN&SwV4rR<%rw2Tk'k}yX,
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 3d 45 9e 4d 45 f2 46 f8 1d f7 04 91 6e ab 98 fc a2 e1 b0 26 78 3e 61 c6 e3 84 7a e4 fe 23 e1 67 6c 08 93 d9 7f fe 96 98 6e d6 14 26 f2 8d 4f 6c 08 63 87 1d de 68 1c e5 51 8d f8 22 fd 6e e5 e9 25 7f df 6b 52 48 5c 31 70 8d 0a c0 d1 9e 30 7d f3 a5 ed 46 de 58 84 6b 43 6a 91 42 ad c6 9b 80 b8 a7 88 94 27 b5 24 77 6d ce a4 37 2d a5 18 b9 a3 09 80 15 42 37 8a e8 4a d8 c5 1f 78 2c 54 f9 a4 5c 48 eb db 76 32 f8 47 9f a9 12 2f 26 ac 95 d7 0b aa a4 3a 2a 55 60 97 aa 0b 53 d5 84 19 ce 0a dc f2 44 e8 49 51 3f 3b b1 f6 5c 3a 1e f8 4c fa 25 ae 8c 9c 7b e8 59 95 e6 0b da 34 6a 08 93 85 a9 fd e8 14 67 75 af 37 a8 81 27 4c 25 3c 44 5a 6b 17 aa c5 8e 20 81 58 f3 0f 58 15 38 66 ee de b0 21 cc da 29 f5 84 51 c4 37 18 b2 f2 0c 4f a7 3e a8 18 fa 93 5b 51 e9 ca 4e 2b 71 3c e3 Data Ascii: =EMEFn&x>az#gln&OlchQ"n%kRH\1p0}FXkCjB'$wm7-B7Jx,T\Hv2G/&:*U`SDIQ?;\:L%{Y4jgu7'L%<DZk XX8f!)Q7O>[QN+q<
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 39 ef 3a 40 9e f7 86 3f 58 3c b3 63 68 92 19 06 e1 a6 46 27 c9 57 f8 04 db cd 5e cc f6 24 57 9b 4e 16 6b bc 4b df 7c b5 c7 de 9d 25 ca af b7 f1 7e 41 2c a1 80 ad 9a 0b 91 47 62 74 42 72 42 60 62 df 59 36 cb 13 14 23 e5 0a 5a 22 b9 43 77 05 30 00 c8 97 83 8c ec 59 30 47 40 f9 04 50 0f d7 06 3a ca 45 42 9b 1d 2d 80 5c 21 e0 ce e7 9c 18 83 82 1c 1d 00 30 21 c9 66 08 8b 1c bb 4c 41 64 33 1a c8 c3 41 a2 7f 92 6b 66 5b 00 4a 97 71 40 ce 66 a2 87 8d 2b 4b 40 08 a7 a8 11 48 22 29 cc 07 d5 07 6f 9b 97 00 e8 16 64 0e 13 0c 9b 1d 18 97 b6 e7 54 c2 86 9b 43 21 27 cc 63 8f b7 05 4d a5 0e bf de b9 c7 ca 69 f6 ca f9 47 c7 cd 16 1d 81 8e fb 35 be 24 42 c7 20 27 02 5c be 53 19 91 2f 99 49 e0 30 1a c9 ae 59 29 6a 40 96 6a 50 27 72 f1 12 90 02 b8 ea e4 9d 48 23 7c eb 8b 31 Data Ascii: 9:@?X<chF'W^$WNkK\|%~A,GbtBrB`bY6#Z"Cw0Y0G@P:EB-\!0!fLAd3Akf[Jq@f+K@H")odTC!'cMiG5$B '\S/I0Y)j@jP'rH#\|1
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: b2 0e 5e 7e 0a 1f d6 ce db bc b6 c9 13 d3 23 d1 1a d3 21 db 2f 2a df 54 06 da e6 b1 7d 48 8b ac 25 10 c2 c0 5d a6 20 19 da 2d 0f 95 2d f4 6a 4f 29 84 c9 fb 9f a7 4f 4f 8e 8a 39 ed c9 15 3d 23 c4 87 47 ec 00 c1 66 fc 5f 45 bc 61 b6 63 17 c7 24 46 cc 54 b1 e4 ca 76 6c a4 56 e1 42 37 7c 57 1f 72 9d 78 a9 02 21 84 0b 6f f7 ee a4 a3 42 24 b6 02 0d 33 33 49 a6 ff 93 bb 43 d8 0c d7 d4 b6 e7 d3 0c 3f 92 ec aa 59 8f 91 9c 0c 69 5d 38 ff c1 e9 8a 55 06 da b1 94 83 5d 7f 87 be 66 86 16 1c 15 80 8a 2c 8b 05 aa 44 07 ec 1b af d8 23 9a 62 31 8a 60 21 f6 70 eb 06 d1 10 b2 24 30 42 28 53 1a b6 84 9d bd 62 b7 08 33 21 9e 55 38 71 b4 ae 78 f4 5e 58 05 f0 90 cd d6 8f 45 33 a5 11 c2 69 62 54 db 10 8f da 3c cf e3 61 85 08 46 b1 72 85 7e 78 93 4e 70 45 0b 26 5c 0b 94 8f df 6c Data Ascii: ^~#!/*T}H%] --jO)OO9=#Gf_Eac$FTvlVB7\|Wrx!oB$33IC?Yi]8U]f,D#b1`!p$0B(Sb3!U8qx^XE3ibT<aFr~xNpE&\l
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 67 62 29 f5 a3 72 f0 79 a7 d5 2e af e5 92 3a 53 8d 3a a3 56 7f 5a 0b ea 4f eb a1 94 89 a9 45 f6 67 e8 52 43 8f 3c f8 03 34 47 9e 0b eb 55 b3 a1 7d 5a 8d b1 4d a9 63 1d d3 b6 ee 2b 81 97 ee a1 d2 5d 35 94 59 d3 bb 51 bd e5 eb 68 85 48 d4 bf 2e 8f 45 c9 d6 35 82 32 54 53 20 68 31 a9 4a a1 87 da 88 06 d8 9d 14 ba c8 5e f7 a3 7e a7 0f 43 2f bb f7 6f 53 0b 7f 50 2f 53 1e 95 d9 b9 d4 d1 f0 15 8f 50 37 c7 76 61 3d bd 9d ed e0 6a 07 6b d2 51 45 9c 59 cd 73 22 84 ae ca a5 6a a9 5b 5f b9 e3 fe 54 e3 c5 84 ce ca 79 70 d5 98 41 ea 6d 92 6a ed de 8f 21 74 97 19 35 50 52 0a dc 04 df 7b 6f 6b b9 8e a2 d8 ad e5 78 7f f0 2c c9 29 99 29 d0 e8 6b ad bd 07 23 d5 09 b4 7e 46 61 ad b9 7d 21 9b 8b 6d 7d ec f4 dc bd 73 89 fe 74 65 39 7e 62 60 91 a2 22 35 12 59 00 40 b8 53 43 6f Data Ascii: gb)ry.:S:VZOEgRC<4GU}ZMc+]5YQhH.E52TS h1J^~C/oSP/SP7va=jkQEYs"j[_TypAmj!t5PR{okx,))k#~Fa}!m}ste9~b`"5Y@SCo
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 49 3c 94 d6 89 bd 01 b8 10 d9 23 01 e0 15 82 b8 6c 40 1e 18 05 b1 38 2d 5e 80 cc cc 55 33 a6 4c 6a 30 33 99 11 26 4d 68 0d ac 18 0c 3a 3b 00 74 0c f2 63 60 25 bd 83 dc 42 65 02 00 f1 9d 10 59 31 3a 7c 0e c9 fb 18 a1 1e fb d3 4c 3c 94 c3 2c 98 ff 1c 86 e9 58 f3 0f 58 05 3a b5 5f d6 2a 49 6f 5a 75 59 e9 e4 ba e7 02 91 3a c4 8c 2c 46 ef dc 34 5e 6a e8 16 23 e5 63 4b a1 5d 92 1f b0 b1 94 c6 57 56 43 a4 52 21 f2 cd f8 49 a4 a3 b0 c3 51 78 b6 75 80 84 3c 75 62 f3 dd 27 09 ca 16 ba be 93 78 8f a3 9f d7 42 9c 8f cd 2d 42 b2 31 db 49 1c 0e 6f 07 c9 71 01 2f b5 86 ac 9f 50 9a 84 90 dc e5 f7 de c0 cd 41 0a 81 31 40 f6 00 a8 5a 47 98 80 9a 89 87 92 fa 7b b3 7f fc 0d 44 3c ca ac 4d 85 4e 1b c2 e4 42 f5 99 91 35 5c 3b 55 60 14 02 cb 52 cb 4a ca 93 9a 5b 8c 94 58 3f 30 Data Ascii: I<#l@8-^U3Lj03&Mh:;tc`%BeY1:\|L<,XX:_*IoZuY:,F4^j#cK]WVCR!IQxu<ub'xB-B1Ioq/PA1@ZG{D<MNB5\;U`RJ[X?0
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 56 bf da 86 dd b0 c2 07 ab dc 3e b0 b0 2c 9b 3c 2e f5 78 94 1a 24 51 69 1d 6e 11 72 f1 f2 5b ed 78 f3 72 6a b9 a0 1f 80 82 31 cf e2 1e 21 e6 2a fd 96 b0 1f 8a 41 9f 39 54 65 48 9c 2b 17 a5 d6 e6 6f 97 56 2a 57 f7 ec 4d 51 21 98 a1 fa dc f9 86 49 b7 55 28 43 6e 8c b2 c3 86 da b1 7f f8 c3 30 3b a6 9f 99 1a ed 91 c0 1d 7f 70 21 90 2e be bf 4e 40 ce 81 b5 34 98 f7 16 ef 2f 34 de 6f 29 b7 7a a4 50 c7 3f bc ec f5 82 3a 46 38 45 6b c2 48 6f 8b 2d 44 f7 6b ea ef fe 7a 51 fd 1d e6 74 9b d2 da 94 ea a8 aa bd a7 bc cd 16 3c 65 39 c5 59 5d 6c ff af 96 a6 1f 26 5f 02 f2 3e 6d ce cf d4 f4 70 9d a2 fb c9 cd 2f f8 ff eb 03 f4 f6 7a 95 46 a6 cc 6d b7 15 4f fc f3 18 87 af 63 7f c2 10 c4 cc d6 bb 52 38 60 1f 49 5f eb 9d 67 6d 37 0a f3 17 be e8 da ef f2 f6 3a fc ef 56 00 b7 Data Ascii: V>,<.x$Qinr[xrj1!A9TeH+oVWMQ!IU(Cn0;p!.N@4/4o)zP?:F8EkHo-DkzQt<e9Y]l&_>mp/zFmOcR8`I_gm7:V
2024-04-19 14:07:12 UTC	1113	IN	Data Raw: a4 a3 96 00 80 31 0e 46 0c 00 e8 67 06 53 a6 66 1e 2e 43 45 a6 75 5a 17 33 16 a0 04 d5 57 9b a9 2e 3d eb 06 68 2c 16 63 3c b3 f8 ac 1f e2 bc fd af c4 b6 d4 9a d6 14 9b 0c 48 7c 4d bb bb d7 c2 c3 ff 02 6a 36 42 d2 80 85 5b e7 16 69 9d 7d ce 7c cd cb 00 6d d5 4c ca d8 0c df ea 1d 80 06 8b b2 a7 45 20 f2 44 c4 25 65 d9 4e f0 2e dd eb 63 87 ce 42 e1 88 d2 78 59 0c d0 db 0a 23 13 5c 5e 82 cc 6f e8 6f 05 21 d4 4d 8b 86 a4 99 6f 50 6b 51 83 f0 5d 00 0e 39 ad f0 64 18 4a ce 7a ad 26 b2 8c 9a 52 85 6d 1a 0b 3c 31 d9 16 a2 bf a4 9a 50 1b 35 0b 52 15 3e 3e d2 9a c5 c9 36 1e 50 33 c4 e6 53 69 08 ac 2e d4 47 40 32 d6 e2 37 99 fa 09 c6 f4 86 00 1b 59 19 c3 d3 0a 4e 24 90 6d b8 a0 4e cf 33 99 80 87 52 54 79 de 0c f5 c5 72 80 15 b1 2b e9 65 84 c3 22 ed b3 41 90 69 2d c7 Data Ascii: 1FgSf.CEuZ3W.=h,c<H\|Mj6B[i}\|mLE D%eN.cBxY#\^oo!MoPkQ]9dJz&Rm<1P5R>>6P3Si.G@27YN$mN3RTyr+e"Ai-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50282	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	533	OUT	GET /ZvOdCQjZm7PU-1Qrdn_m9ksg7RAAbXL4iW6QSCoYmkHcl4lopAjeOMYiESyXCQFfRjN5f1mRb1un=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 414 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:35:48 GMT Expires: Sat, 20 Apr 2024 11:35:48 GMT Cache-Control: public, max-age=86400, no-transform Age: 9084 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	414	IN	Data Raw: 52 49 46 46 96 01 00 00 57 45 42 50 56 50 38 4c 89 01 00 00 2f 13 c0 04 10 4f c2 a0 91 24 45 bd e7 5f 2c e3 43 db 70 d8 b6 91 23 f1 ae ff 66 f3 7d 1c 39 6c 23 49 91 ac cb 3f 56 e6 7b 28 b7 b6 6d 9b d5 41 6c a3 73 9f ff ff 13 f6 19 e9 8c c7 00 00 11 10 44 20 90 00 01 9f ad f0 f9 41 11 8d 1c b1 c8 27 50 bf 30 9c 0c d1 45 2b 12 ab 5f e2 0a 7e 81 96 e0 88 fd 30 b1 52 df cf af 7e 7f 0f ac cf f7 45 fe 75 1b 9b fd 1c f3 fd fe 52 fd 15 0b bf 8c f3 5c a8 df 67 66 21 13 3d ff f7 b3 ee 33 fd 81 bc 4d 96 d3 e7 fd 7e f4 6f 7e 70 3f 8f 75 de 8f a3 fe 16 51 bf f3 79 0d fa 0b 06 ff f9 6b 0a bf ff 5f 45 28 2f 2a b4 00 0e f9 12 00 0d fd 81 80 d1 db 88 69 19 16 38 8c 24 db b4 e6 db b6 6d db f7 7c 3e e4 1f 92 7e 0a 11 fd 9f 00 9c bd 5e fe f6 8f ef f7 b1 df 5d 76 a9 c9 f5 2a Data Ascii: RIFFWEBPVP8L/O$E_,Cp#f}9l#I?V{(mAlsD A'P0E+_~0R~EuR\gf!=3M~o~p?uQyk_E(/i8$m\|>~^]v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50283	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	516	OUT	GET /a-/ALV-UjXkGwFtGTUp7J-chzmsBuXw50nlfEPLzblqnxyaMBHTyJKBxPsC=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v3c07" Expires: Sat, 20 Apr 2024 14:07:12 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:12 GMT Server: fife Content-Length: 466 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	466	IN	Data Raw: 52 49 46 46 ca 01 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 1f 00 00 1f 00 00 56 50 38 20 82 01 00 00 b0 07 00 9d 01 2a 20 00 20 00 3e 75 32 94 47 a4 a2 a2 21 28 0a a8 90 0e 89 68 00 9d 2f 6c d6 01 52 87 68 16 17 a6 75 e3 bb 50 04 af fd 46 b4 f7 da 15 96 bb 3a b6 c6 d1 c6 73 e8 4d 62 eb 90 31 91 8b 89 ea 7f e0 00 fe f9 74 f1 eb 4d df c1 78 41 7f c7 9d 67 b3 01 3f 8f ee da bd ff 1b f3 b6 cf 8a b2 1a 5f 68 8e 74 f9 12 f1 4f bb 5e c1 62 2e 2c 06 74 5d 8b ef 6f 95 1f 5e 9b a9 fd 1f 6b f2 b0 86 12 23 74 4f 1d f6 58 68 91 ab 6c df 6c 3b 5e ac 1f f5 c8 dd bd 5c 4e 7c 6e a1 ca a4 a0 f2 f6 01 f2 e9 d9 6b 22 87 fb 9b b0 7c 57 fa ff bd 0f 09 de e8 56 09 55 fc 96 95 60 3a 28 f8 96 a1 ac 28 d6 94 f7 fb 3e f5 45 3f fa b3 a9 28 7f ed c7 5f d1 cc d3 ee 37 fa Data Ascii: RIFFWEBPVP8XVP8 * >u2G!(h/lRhuPF:sMb1tMxAg?_htO^b.,t]o^k#tOXhll;^\N\|nk"\|WVU`:((>E?(_7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50284	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	524	OUT	GET /DHBlQKvUNbopIS-VjQb3fUKQ_QH0Em-Q66AwG6LwD1Sach3lUvEWDb6hh8xNvKGmctU=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1782 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:47:16 GMT Expires: Sat, 20 Apr 2024 10:47:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 11996 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	721	IN	Data Raw: 52 49 46 46 ee 06 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c a6 06 00 00 2f 3f c0 0f 00 09 33 6d db 28 6d bf 8d 3f e1 75 1c 22 fa 3f 01 bc 6e 51 d3 3c ca b1 94 24 a0 94 dd d0 17 6c 22 db aa b3 7c 2a 74 50 e3 5f 0f 83 02 2a 48 d2 11 3c 28 6e db 36 e2 08 79 26 6d f7 9f f1 2e 18 47 92 d4 a6 f1 3c 09 81 22 ff 98 8c a4 38 54 d5 ff 09 10 13 ff 86 fc c7 31 ac 92 30 95 a3 ab c8 b8 0f 97 0b 7c 7c 22 d1 05 ee 9a 4f f5 35 3b 5f b8 66 40 a7 d3 99 3c d1 8f ab 87 8e b4 6d 8a 24 27 ff ec 21 31 33 33 33 eb 10 6c 2a e4 eb 14 7c 03 3c 81 fc b5 c5 60 6e c8 94 c7 4c b3 38 3c d3 9d 99 46 55 75 f7 e6 78 6b bd 9e 14 99 b3 51 96 a8 44 1e 33 ab 22 e4 d5 8a 59 25 b2 99 7b e4 a1 23 87 d6 b6 43 92 de b7 ea 6f 63 b4 b6 6d db b6 37 b2 6d db ca Data Ascii: RIFFWEBPVP8X??VP8L/?3m(m?u"?nQ<$l"\|tP_H<(n6y&m.G<"8T10\|\|"O5;_f@<m$'!1333l*\|<`nL8<FUuxkQD3"Y%{#Cocm7m
2024-04-19 14:07:12 UTC	1061	IN	Data Raw: 31 13 f0 a4 b8 95 a5 88 20 b7 28 3c a7 6e d1 f5 79 61 dd 14 7a f8 ec c0 88 70 6e 68 d0 32 3c 5e 67 09 78 fc 2c 63 ce 12 29 18 74 38 be df 46 ce 0c f7 14 4f 65 0d 28 2e 30 1b ee 14 d6 46 c0 fb 41 b0 08 9c 1f eb 1a 50 ca ba 2a 98 5c d1 ed c5 58 db 3d a3 fe e3 7d 40 a3 49 a3 5e 50 ea 17 83 fa c7 0b f8 61 e1 a9 cb 59 d7 af 5e b0 49 53 74 45 9c 99 fd 7d 64 e4 db e5 cd 1f 0d 7b cf 0c 6b ab 1a 40 b3 42 a3 45 a3 42 c1 bc 99 b1 9f df a8 66 f9 f1 4b 9f 2e 39 df 9d a5 91 9a ce a9 10 5d 5d 28 61 89 29 5d e0 b6 93 46 17 7d 1a 69 fb 6c 71 ca f5 db d5 4a 4b b4 a0 d1 ad 59 2d 28 f0 c0 f1 ff a4 e3 f2 3e cf 8f 1c da 71 46 42 51 90 65 11 9c c8 29 7a 8a 46 21 11 49 48 62 20 15 3e b1 fe cd f2 2e 0f 97 66 dc bc c3 b6 75 0c 49 1f d1 68 fe 5e 50 b2 62 8c fe ba 91 6c 3e e2 ca fe Data Ascii: 1 (<nyazpnh2<^gx,c)t8FOe(.0FAP*\X=}@I^PaY^IStE}d{k@BEBfK.9]](a)]F}ilqJKY-(>qFBQe)zF!IHb >.fuIh^Pbl>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50285	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	524	OUT	GET /GCsSBgR93cedwf2weP7s6VPsBitwir9ioOO0DYjLydIjdCkfQEv0GQzK34ky96L6XMc=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1400 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:47:16 GMT Expires: Sat, 20 Apr 2024 10:47:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 11996 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	721	IN	Data Raw: 52 49 46 46 70 05 00 00 57 45 42 50 56 50 38 4c 63 05 00 00 2f 3f c0 0f 00 22 ba da ff 99 b6 bb 53 25 55 52 a6 ca 3d a4 b5 6d db e6 2d d8 3a b6 55 c6 c9 f6 3e 88 6d db b6 cd bd 67 26 7b d6 ea 52 5a 95 cd d6 66 69 db 5d 2e c0 ec dc e6 49 9d 67 9d 54 4e 4a 9b 57 60 6b 3f 67 c2 bf 8d f2 c8 a1 6d db d8 ab 93 54 b6 6d d7 aa 6c db b6 d3 ab 4b aa fc 55 6c db 56 6b e3 d9 aa de ff f9 1b 71 72 3e c0 a1 b6 ed 78 f3 24 e9 c6 c9 76 bb d9 f6 e8 d5 b6 dd a9 b3 6d db dc da d1 8e 71 ba da 6e df 38 e9 bf 03 b7 91 14 c9 59 e6 3d f8 44 2b 59 db ce b3 54 0f 5b 32 4a b8 24 7d 22 b1 f5 89 ee 96 f2 bf 08 9a cb 2a 1a cd 77 4e 7a 3b 25 3d ec 93 ae 76 08 23 db 04 e6 c7 e2 9a 0b be 88 e8 e3 82 f4 01 b2 4b 3a d9 24 e0 9e 0a c9 f5 cc a6 0d 94 13 d2 cd 3a 81 08 4c 4e 6d f1 8b 26 88 f6 Data Ascii: RIFFpWEBPVP8Lc/?"S%UR=m-:U>mg&{RZfi].IgTNJW`k?gmTmlKUlVkqr>x$vmqn8Y=D+YT[2J$}"*wNz;%=v#K:$:LNm&
2024-04-19 14:07:12 UTC	679	IN	Data Raw: d3 af 22 82 2c a2 ab 20 94 26 1f fa ed 05 e8 5e 59 25 e2 94 f4 70 4d fa e1 38 fe 04 74 fa 32 1a 7b ea 7e 29 28 2c 08 0f ce 02 fe 3b 38 d8 6d 5a 9d 12 b5 5e a5 06 48 23 47 5d fc 5a 8b 96 fd e0 d3 13 88 02 a9 49 80 02 c3 b5 f7 e2 fd 29 f3 45 b1 1e b6 25 53 5c 5c 61 21 38 08 a9 94 27 43 b5 16 09 01 b2 da 00 8a 05 28 74 b0 8f 56 f1 92 2d 88 4b 31 cd 2b 00 32 c9 c8 c9 a1 e8 c7 39 7f b7 09 32 4c 50 87 61 cc 64 68 37 fb c8 42 98 9c 4d 28 50 3c 70 4d 3f b5 82 56 78 7d 8f 13 5f c2 cf ae 01 e2 26 97 e7 e8 9d c5 61 8a 10 22 c4 8c 26 dc 12 42 18 48 d6 30 50 c9 33 16 4d 98 5f cf cb a8 02 71 e2 4b 0a ad ed e2 c8 2a 94 8a 99 4a 48 7c e2 94 00 c2 40 56 b1 40 b7 d0 e1 09 4a f9 4b 1e 3b 2c 7f 13 88 1d 51 50 f1 9d 08 47 11 71 86 8f 10 31 11 98 7c 5e 2f 3e 84 43 e4 2c 43 62 Data Ascii: ", &^Y%pM8t2{~)(,;8mZ^H#G]ZI)E%S\\a!8'C(tV-K1+292LPadh7BM(P<pM?Vx}_&a"&BH0P3M_qK*JH\|@V@JK;,QPGq1\|^/>C,Cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50286	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	525	OUT	GET /IDOtRhsZLSG3EFxWxmWREMPa42_SNQvl9-x4FBu5dn9aJMjpVtMx_GoNdnQwEIp_7gsV=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:12 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:12 GMT Server: fife Content-Length: 2850 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	733	IN	Data Raw: 52 49 46 46 1a 0b 00 00 57 45 42 50 56 50 38 4c 0e 0b 00 00 2f 3f c0 0f 10 09 44 6d db 48 d9 b7 e1 4f f8 72 1c 22 fa 3f 01 f4 2c 6b ca 71 7b f2 42 43 18 df 05 db 48 92 9c 34 5a c3 99 14 d6 15 f9 07 26 c3 20 08 36 6e 1b 39 e2 86 72 2f e7 ab 06 f7 ff f7 1d b6 64 18 49 92 92 79 c3 d9 5b 1c f2 4f 90 10 fa 3f 01 e6 0c ff 0c 81 bf 1d 20 70 4b 28 ba fb 66 08 38 47 6f 78 fb 99 c6 ea e0 c3 9b 33 f1 9f ee 70 86 73 71 ab 5e f7 33 3f 31 a3 d9 6a 67 80 58 d2 51 7e df 0a 00 fe a4 1c f7 ec 4f da 01 e0 03 ec e8 71 c1 1b 0a da b6 91 62 fe b0 b7 7b 20 44 c4 04 f4 13 ca 7a 32 1a 15 3a cb 71 b6 bd 8d 9c 9f d4 e6 6d b7 f4 e9 7c 5e df c0 17 d8 da 39 48 fc 8b e1 3f b1 da ee ab f5 0f 40 67 7b 88 85 ca 81 75 80 0d 74 b6 67 83 3a 87 cd 5b 4e e5 6a 0e 60 78 00 08 91 24 29 b6 b2 1e Data Ascii: RIFFWEBPVP8L/?DmHOr"?,kq{BCH4Z& 6n9r/dIy[O? pK(f8Gox3psq^3?1jgXQ~Oqb{ Dz2:qm\|^9H?@g{utg:[Nj`x$)
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 29 61 0a 59 50 29 a8 18 68 24 45 af 99 fe 2f 11 8a 11 4e 2d 54 3d fa ae 1d 67 4f 3b 77 6b 97 1f 7f db 72 69 23 a0 a9 a4 28 4d b4 3b ec 79 3a b0 de c4 c8 e8 d1 c4 1c 69 c9 6c 69 55 ad 05 c7 9f bc 5e ff d0 f5 8b ae 3f df a0 69 d3 62 71 13 d0 7d 41 25 66 44 9a 2e e8 8c 17 0b 2a 8a a5 14 a6 33 19 92 ac 94 7e 3e 3a b5 d6 3c ad 76 a5 f2 22 bb fd fc f3 a1 5b 7b cc 27 5f af f0 c7 cf 97 3d f6 79 e5 c0 95 20 20 2a 8b 0b 3f f0 15 1b 29 69 6c 2b 65 01 c5 10 81 54 c6 27 93 db e6 49 1e c7 d1 b2 c9 ca b2 6e a8 44 5f df 5f d8 ef ab 2c b0 dc 55 17 38 06 2e 79 ec e4 c0 52 23 51 6b bc f9 e5 fe 7f fc b3 be c3 8d d6 24 47 9b f6 75 d5 ee 9c f4 c4 5d 8b 68 3e 12 da 40 f0 31 1d 18 c3 d2 89 ea aa 3f 32 25 a0 cd 7d bf 98 52 c4 93 e4 1b 2f 26 48 61 42 61 e3 8e a4 ab 77 ef b9 e7 d1 Data Ascii: )aYP)h$E/N-T=gO;wkri#(M;y:iliU^?ibq}A%fD.3~>:<v"[{'_=y ?)il+eT'InD__,U8.yR#Qk$Gu]h>@1?2%}R/&HaBaw
2024-04-19 14:07:12 UTC	862	IN	Data Raw: 1d 76 cb 05 d3 3f 8b 30 28 27 46 9e c1 31 df 4b 1d 16 39 17 a2 6a 3c c1 89 a7 0f 60 d5 87 1b 82 c1 d2 95 25 ab 55 47 96 c7 76 fa e8 be 50 3a 77 d4 5b fe ea 8a 1b ce 04 b1 95 b8 c0 aa 45 e2 45 04 14 3e c3 30 1c ca d9 07 29 e3 18 26 9f 73 54 07 56 41 64 77 35 92 30 6a 51 c4 86 c1 3c c9 87 42 c8 6d d5 6c ec 55 c7 3b af c6 be e8 f5 fe 72 b1 4d 66 84 aa 05 67 a0 bb 74 74 a4 22 21 a2 7d 45 81 28 97 60 02 08 7f cc 84 cf b0 8e 52 4b f0 f6 3b fa 45 da cf 1a b7 56 e8 fc da f3 ac f5 5a 4b cc d5 74 86 d5 85 66 b9 21 c4 3e 03 d0 a1 bb 19 90 4c 54 47 04 82 20 92 d6 e5 5f 89 83 88 3c aa 55 ea 31 43 69 a0 90 9f aa 81 85 2a 35 af b1 08 f4 70 8c 1c 45 50 43 e8 d7 74 6c 32 c3 02 8f 5c d6 10 4c a9 d1 d0 84 16 18 4e 92 e1 9f b1 3e 7e e8 e1 1a 60 e5 15 70 26 08 e1 60 58 6c a9 Data Ascii: v?0('F1K9j<`%UGvP:w[EE>0)&sTVAdw50jQ<BmlU;rMfgtt"!}E(`RK;EVZKtf!>LTG _<U1Ci*5pEPCtl2\LN>~`p&`Xl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50287	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	525	OUT	GET /QJObxznpklAxDNp0OVe3kAP5ZfUouIvRDO0kPj-V3MRjoRYKwj9RVTxOwG9yrlY-bgG3=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 774 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:11 GMT Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	726	IN	Data Raw: 52 49 46 46 fe 02 00 00 57 45 42 50 56 50 38 4c f2 02 00 00 2f 3f c0 0f 00 a7 e5 20 92 64 57 99 bd 0f 48 40 14 fe 9d e4 70 b7 4b c6 82 1b b7 8d 24 49 55 ff 7f e1 44 9b 6e 7c ef 76 b9 e4 a0 6d 24 49 4a 0f 91 e3 cf e2 d8 1c 80 77 66 b7 bb 32 ff 19 8d 42 21 a2 50 ce 70 02 04 42 88 42 c1 89 10 04 21 40 01 ac 02 10 d5 e8 84 14 22 19 51 20 12 01 53 d0 34 22 13 52 83 c2 42 9a 56 a8 59 a1 28 09 0c 42 04 65 a3 84 80 37 10 69 78 22 8e 28 54 16 54 61 47 44 37 94 21 81 40 40 20 62 74 81 08 c3 40 aa 16 ea e5 b6 6d 1a fa de 54 20 0a 08 5a 25 62 20 7a 2e 0e 3c b7 94 6a c6 ac fa bb e5 7b 49 86 6d fd dd 10 3e 23 ef 6d 45 e9 dc b2 51 02 a2 83 fb 39 36 d3 26 a3 16 b3 8d bd f1 8b 66 d0 a5 26 72 1a cf ad 1f 6f 39 2d 82 db 4f 1f 40 11 05 0a 14 28 50 04 a0 98 0d 02 f4 16 30 80 Data Ascii: RIFFWEBPVP8L/? dWH@pK$IUDn\|vm$IJwf2B!PpBB!@"Q S4"RBVY(Be7ix"(TTaGD7!@@ bt@mT Z%b z.<j{Im>#mEQ96&f&ro9-O@(P0
2024-04-19 14:07:12 UTC	48	IN	Data Raw: 8c c1 fe 54 0d c8 ac 46 bf fb da b1 00 76 b6 91 8e 33 83 36 e6 1a 06 f7 fa db 49 cf 29 4f 1c d3 30 2c ff c6 74 d2 76 de ce c3 fb 2b 47 d0 50 55 Data Ascii: TFv36I)O0,tv+GPU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50288	172.253.124.119	443	5676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:12 UTC	523	OUT	GET /ZX8lWMl7wuPv8mi-Gtab8pzGKXm3GKa-k8z51K6XxGOGfR7auS6Xre3041LbVEMCCg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:12 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 214 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:12 GMT Expires: Sat, 20 Apr 2024 14:07:12 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:12 UTC	214	IN	Data Raw: 52 49 46 46 ce 00 00 00 57 45 42 50 56 50 38 4c c1 00 00 00 2f 3f c0 0f 00 cd 74 21 a2 ff b1 89 91 1f f0 fe c7 00 d8 46 b6 ad e4 7e 09 21 66 a8 c0 fa a2 48 1a b1 1a 08 5d df cf 3e ee 04 6c 23 49 72 d2 0f 36 36 45 02 3a ff 50 74 1a 5a a3 a8 91 a4 a8 76 17 10 80 3a 1c e0 ff 7d 25 14 b9 6d db 30 ab eb da 4f 84 ff 06 5b 07 a9 cd 8d fa f6 ed f2 8d fa e6 48 5e ff 93 d3 df 14 a6 9e 74 06 63 03 81 a5 c5 49 a7 72 f2 4f 62 75 90 86 0e b4 11 b5 e1 37 c0 c6 a1 00 6f 4f b0 60 0b f9 4c 4b c4 da 53 b5 19 5f eb 2b 16 5a 3c d2 5d f2 19 7d d6 67 67 80 36 cc 84 95 02 1b 87 fa 81 b7 2f 38 5b 88 d0 62 64 c4 28 d6 e7 03 b4 11 e3 b1 f5 86 f8 e1 fd 5b 00 00 Data Ascii: RIFFWEBPVP8L/?t!F~!fH]>l#Ir66E:PtZv:}%m0O[H^tcIrObu7oO`LKS_+Z<]}gg6/8[bd([

Session ID	Source IP	Source Port	Destination IP	Destination Port
371	192.168.2.5	50291	52.159.127.243	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6e 63 6e 47 35 54 46 7a 58 45 71 5a 42 4a 69 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 31 66 38 35 30 33 34 61 63 39 36 61 35 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ncnG5TFzXEqZBJid.1Context: a11f85034ac96a5e
2024-04-19 14:07:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:07:16 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 6e 63 6e 47 35 54 46 7a 58 45 71 5a 42 4a 69 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 31 66 38 35 30 33 34 61 63 39 36 61 35 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: ncnG5TFzXEqZBJid.2Context: a11f85034ac96a5e<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:07:16 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6e 63 6e 47 35 54 46 7a 58 45 71 5a 42 4a 69 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 31 66 38 35 30 33 34 61 63 39 36 61 35 65 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: ncnG5TFzXEqZBJid.3Context: a11f85034ac96a5e
2024-04-19 14:07:16 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:07:16 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 51 2b 2b 6f 58 6f 4f 79 6b 4f 72 57 32 62 4d 43 39 45 2b 64 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: tQ++oXoOykOrW2bMC9E+dA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
372	192.168.2.5	50294	52.159.127.243	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:24 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4e 35 66 57 7a 79 48 2b 65 55 47 6d 34 34 5a 4b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 38 37 64 33 30 33 33 30 62 39 61 38 36 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: N5fWzyH+eUGm44ZK.1Context: a287d30330b9a868
2024-04-19 14:07:24 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:07:24 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 4e 35 66 57 7a 79 48 2b 65 55 47 6d 34 34 5a 4b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 38 37 64 33 30 33 33 30 62 39 61 38 36 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: N5fWzyH+eUGm44ZK.2Context: a287d30330b9a868<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:07:24 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4e 35 66 57 7a 79 48 2b 65 55 47 6d 34 34 5a 4b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 38 37 64 33 30 33 33 30 62 39 61 38 36 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: N5fWzyH+eUGm44ZK.3Context: a287d30330b9a868<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:07:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:07:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 62 4a 4a 41 76 4f 53 4a 6b 65 6f 46 31 6b 6f 4b 65 53 64 47 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8bJJAvOSJkeoF1koKeSdGA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
373	192.168.2.5	50299	52.159.127.243	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 5a 6a 6a 41 64 62 6d 53 30 45 69 37 6a 6b 78 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 62 32 38 33 38 38 37 36 36 33 39 64 36 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ZjjAdbmS0Ei7jkxV.1Context: 82b2838876639d6e
2024-04-19 14:07:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:07:44 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 5a 6a 6a 41 64 62 6d 53 30 45 69 37 6a 6b 78 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 62 32 38 33 38 38 37 36 36 33 39 64 36 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: ZjjAdbmS0Ei7jkxV.2Context: 82b2838876639d6e<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:07:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 5a 6a 6a 41 64 62 6d 53 30 45 69 37 6a 6b 78 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 62 32 38 33 38 38 37 36 36 33 39 64 36 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: ZjjAdbmS0Ei7jkxV.3Context: 82b2838876639d6e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:07:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:07:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 74 47 4c 62 34 49 4d 58 6b 53 61 54 4e 48 79 6e 4f 2b 57 2b 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: stGLb4IMXkSaTNHynO+W+Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
374	192.168.2.5	50300	52.159.127.243	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:48 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4d 78 51 43 70 62 62 30 50 45 57 69 65 50 31 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 65 62 62 33 36 32 33 31 35 39 36 62 62 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: MxQCpbb0PEWieP1I.1Context: 1cebb36231596bbb
2024-04-19 14:07:48 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:07:48 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 4d 78 51 43 70 62 62 30 50 45 57 69 65 50 31 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 65 62 62 33 36 32 33 31 35 39 36 62 62 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 33 45 75 7a 64 73 64 58 4d 49 76 4d 61 6f 67 5a 78 6f 2b 37 42 42 78 38 6d 65 67 39 32 65 37 30 68 2b 78 42 36 34 4a 63 78 54 6f 66 67 67 47 50 69 50 7a 57 39 76 55 52 44 71 7a 52 48 37 6d 38 32 4e 77 6e 46 55 51 6c 50 53 35 6a 2b 69 7a 61 62 35 51 7a 56 4b 50 45 72 69 42 61 78 4f 42 70 71 75 79 64 53 64 69 79 7a 6a 76 66 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: MxQCpbb0PEWieP1I.2Context: 1cebb36231596bbb<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAW3EuzdsdXMIvMaogZxo+7BBx8meg92e70h+xB64JcxTofggGPiPzW9vURDqzRH7m82NwnFUQlPS5j+izab5QzVKPEriBaxOBpquydSdiyzjvf
2024-04-19 14:07:48 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4d 78 51 43 70 62 62 30 50 45 57 69 65 50 31 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 65 62 62 33 36 32 33 31 35 39 36 62 62 62 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: MxQCpbb0PEWieP1I.3Context: 1cebb36231596bbb
2024-04-19 14:07:48 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:07:48 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 34 37 35 34 39 41 44 54 75 6b 43 31 51 6c 2b 55 52 44 58 47 2b 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 47549ADTukC1Ql+URDXG+w.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 432, Parent PID: 5636

General

Target ID:	0
Start time:	16:05:46
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5676, Parent PID: 432

General

Target ID:	2
Start time:	16:05:49
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,13674355344551972,16030558035244465753,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5516, Parent PID: 5636

General

Target ID:	3
Start time:	16:05:53
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/AAb9ysg"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://aka.ms/AAb9ysg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Windows Analysis Report
https://aka.ms/AAb9ysg